This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132342e302f32342d3234203d3e20323133303230.roa
File: 3130392e37322e3132342e302f32342d3234203d3e20323133303230.roa (raw, json)
Hash identifier: jw99dNfHIRjU++0kkn6s1cGa96MZVtYHLltN0kgUoJI=
Subject key identifier: 7F:DC:3B:8E:6C:70:BE:F3:61:AA:69:2A:EC:05:0C:BE:8C:C0:89:A4
Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial: 034626C21F85A41FBC51E20F78966F7C3BBEC970
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132342e302f32342d3234203d3e20323133303230.roa
Signing time: Thu 12 Feb 2026 19:24:03 +0000
ROA not before: Thu 12 Feb 2026 19:19:03 +0000
ROA not after: Thu 11 Feb 2027 19:24:03 +0000
asID: 213020
IP address blocks: 109.72.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 05:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:46:26:c2:1f:85:a4:1f:bc:51:e2:0f:78:96:6f:7c:3b:be:c9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Validity
Not Before: Feb 12 19:19:03 2026 GMT
Not After : Feb 11 19:24:03 2027 GMT
Subject: CN=7FDC3B8E6C70BEF361AA692AEC050CBE8CC089A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:31:22:42:fb:d0:ee:a8:a5:a3:b9:ea:0a:
86:f4:3c:86:ce:3d:3f:f4:02:b0:88:19:f7:e7:81:
c7:52:02:00:49:cb:8f:90:8a:73:56:db:db:57:be:
f7:e7:1e:e4:06:13:07:19:21:b0:8c:1c:af:74:b9:
62:ac:17:4c:d9:19:74:8b:4c:d6:97:1c:56:ab:66:
82:64:df:44:a0:85:f3:15:61:9f:c3:c9:c1:41:a2:
ac:9f:c9:d6:e6:32:35:22:36:3a:45:2b:24:c1:a4:
9a:93:8f:3b:3c:3c:1b:7e:da:42:4f:7b:a9:71:70:
fa:2f:fb:33:65:33:1a:e8:ab:e7:21:33:6f:b6:d6:
e6:db:1c:2b:fe:93:a4:35:bd:f6:f3:49:10:10:b1:
9e:66:12:14:ce:8f:6a:9c:5d:8a:e8:01:1e:60:e7:
bc:56:5c:fd:f8:0e:97:ff:e2:b9:0d:5c:c4:88:2d:
c1:66:9f:8c:ef:e4:c8:8f:5b:c6:ea:f9:ac:79:7a:
15:4c:c4:b6:d0:b0:98:44:9b:6c:62:80:5e:ee:b1:
21:24:30:06:f1:88:35:bd:0f:78:75:36:ef:bb:04:
36:c1:34:de:4f:42:4a:46:7b:ad:e6:66:58:ed:f0:
b0:2f:ec:ed:9e:83:27:65:5d:69:53:ba:61:75:99:
bd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DC:3B:8E:6C:70:BE:F3:61:AA:69:2A:EC:05:0C:BE:8C:C0:89:A4
X509v3 Authority Key Identifier:
keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132342e302f32342d3234203d3e20323133303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.124.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e0:67:c2:c8:aa:a4:ab:42:11:81:8a:9c:65:5b:dd:e9:ac:
28:3b:61:0e:09:f4:92:c1:44:4f:22:b9:c8:ca:1d:16:56:4c:
74:76:2c:eb:cf:90:db:db:c3:b7:55:57:c7:e0:d8:15:4e:22:
e7:f4:c1:56:0b:7a:81:14:bd:bc:94:16:33:c3:05:c3:cf:18:
16:2b:17:71:d5:8e:7b:9f:a3:d5:15:86:62:9b:d0:15:ee:09:
02:c9:67:d0:8c:cc:1b:38:50:01:b1:65:8c:26:3b:ea:bb:0f:
dc:01:54:0b:2b:f0:70:11:d4:c7:fb:0f:4d:03:b5:03:34:ed:
25:3d:35:09:b8:b5:e2:09:79:52:aa:a6:f1:94:2c:ab:b8:34:
a4:7b:90:f4:5b:29:ec:57:ac:e7:4f:ec:8c:18:22:19:40:47:
00:81:c6:ab:49:68:c1:1f:7d:2d:f9:17:a3:e3:64:81:3f:2c:
51:a7:6a:fd:be:9c:ff:86:02:8a:96:db:5d:c9:6c:cf:14:92:
77:f6:a2:5b:30:27:07:44:6f:2b:08:36:d2:9f:c8:25:a4:da:
6d:2d:a1:f8:a6:c9:57:54:48:43:9d:07:0d:1a:e8:2f:d8:b9:
bb:05:ba:cf:f3:1e:33:b6:8a:05:3a:d5:4d:c8:15:d3:8e:5f:
99:c3:94:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:53:16 2026 by rpki-client