This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132342e302f32342d3234203d3e20323036353035.roa
File: 3130392e37322e3132342e302f32342d3234203d3e20323036353035.roa (raw, json)
Hash identifier: gSL91i6VlP2IoQ/1YfinoQy1eHnUP898mB377Ke1IWA=
Subject key identifier: A8:C1:37:3D:F8:B3:FF:FF:E5:86:7B:02:07:83:A8:C0:DB:42:81:AC
Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial: 12ECC13720941C814DC2BB937C088D1F71471B85
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132342e302f32342d3234203d3e20323036353035.roa
Signing time: Thu 12 Feb 2026 19:03:48 +0000
ROA not before: Thu 12 Feb 2026 18:58:48 +0000
ROA not after: Thu 11 Feb 2027 19:03:48 +0000
asID: 206505
IP address blocks: 109.72.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 05:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ec:c1:37:20:94:1c:81:4d:c2:bb:93:7c:08:8d:1f:71:47:1b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Validity
Not Before: Feb 12 18:58:48 2026 GMT
Not After : Feb 11 19:03:48 2027 GMT
Subject: CN=A8C1373DF8B3FFFFE5867B020783A8C0DB4281AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:66:81:97:dc:88:d6:b6:30:2e:b6:9e:7c:
19:f4:db:b8:c1:12:c4:15:c7:f1:01:c7:a0:cf:d5:
66:9f:37:45:29:26:88:b4:2d:f1:c1:f0:e3:02:ee:
56:f3:f2:58:00:2d:77:62:4d:4a:ae:1f:c2:ae:e5:
7f:96:83:ce:f0:73:69:3f:a4:f8:2e:5d:68:7b:1a:
87:d2:6e:be:09:9e:98:4b:5b:b3:40:59:26:e4:52:
92:7e:0d:47:99:01:5f:78:25:12:55:a3:dd:aa:e8:
b1:bf:3a:cf:49:fb:6f:a1:3a:5f:81:28:10:2e:ce:
2f:64:b8:ce:c8:fa:36:aa:6e:d1:aa:e8:91:9a:49:
36:72:ee:56:cb:68:3c:a1:de:99:91:a7:79:c7:0a:
68:f0:78:50:3b:02:c7:cb:c7:1e:6a:bb:de:8a:23:
53:90:b3:d1:c6:0c:4a:b9:00:7c:60:02:4e:99:cf:
d0:9b:fa:f1:5e:95:c0:84:1a:43:53:f9:a8:af:44:
d9:03:2e:e2:c3:a4:7f:45:06:aa:82:92:8d:81:b4:
50:49:67:4f:ea:be:91:3d:4e:85:5a:91:c7:e9:8a:
04:dd:93:56:57:ec:34:86:dc:0b:92:15:59:2f:58:
64:89:85:da:89:f1:a5:0b:e1:cf:73:b2:77:82:90:
4d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C1:37:3D:F8:B3:FF:FF:E5:86:7B:02:07:83:A8:C0:DB:42:81:AC
X509v3 Authority Key Identifier:
keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132342e302f32342d3234203d3e20323036353035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.124.0/24
Signature Algorithm: sha256WithRSAEncryption
91:78:c5:d5:f9:d8:9b:b3:d6:0d:db:68:db:fe:cc:4a:ed:33:
8b:33:a3:84:4e:d9:d7:5d:64:ba:e9:59:92:8d:e7:2e:25:f9:
bc:68:7f:21:40:ad:2e:29:cf:c3:eb:2e:8e:fe:cc:c8:fc:ac:
af:11:45:c1:18:46:64:05:75:c9:9d:55:eb:03:b2:99:f2:f5:
01:c6:22:0e:e6:85:c5:27:01:c6:61:56:ac:fb:64:d8:ea:3c:
46:86:d0:c3:b9:68:1c:81:7b:65:99:9f:81:34:25:53:72:ad:
ea:22:f3:1a:9f:d8:58:f2:a7:bf:6a:90:3f:00:dc:df:15:29:
e1:8c:41:f0:65:91:64:ac:13:0a:7f:2f:88:db:a2:b9:a3:23:
5f:47:72:d4:d0:84:f6:57:b0:71:ec:f1:f2:cb:95:52:66:0f:
74:17:15:93:a2:b4:d5:13:b8:9b:fe:08:52:d6:29:34:ff:9a:
aa:a4:60:98:10:52:da:51:0b:f7:cf:f3:0f:93:61:b4:49:58:
4b:4a:5a:40:e9:63:0a:f6:90:2d:f0:4f:8d:b3:20:c8:a0:03:
61:2e:bb:0e:14:6b:ec:f8:e3:6b:0a:43:30:65:14:56:70:05:
fb:f7:e9:40:53:8c:c6:dd:9c:de:78:ae:df:83:87:e2:ce:a9:
6f:9d:cc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:52:22 2026 by rpki-client