This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132352e302f32342d3234203d3e203530363733.roa File: 3130392e37322e3132352e302f32342d3234203d3e203530363733.roa (raw, json) Hash identifier: V1FVB13YKsZouuC8a8ordxzCHnQVK6V3vpJSYtoR3D0= Subject key identifier: CB:02:6E:09:80:31:67:DA:A9:04:61:19:F2:C1:C2:BF:58:27:00:AD Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 6F59980821AE7701A8263873B9379986B4287691 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132352e302f32342d3234203d3e203530363733.roa Signing time: Thu 12 Feb 2026 19:03:47 +0000 ROA not before: Thu 12 Feb 2026 18:58:47 +0000 ROA not after: Thu 11 Feb 2027 19:03:47 +0000 asID: 50673 IP address blocks: 109.72.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:59:98:08:21:ae:77:01:a8:26:38:73:b9:37:99:86:b4:28:76:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:58:47 2026 GMT Not After : Feb 11 19:03:47 2027 GMT Subject: CN=CB026E09803167DAA9046119F2C1C2BF582700AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7f:91:fb:04:1a:af:1a:dc:9f:a2:c2:8c:92: 72:55:b3:c4:fa:c5:91:00:34:56:6d:6d:78:68:c9: 37:22:3e:de:3f:ed:ab:4b:c6:15:77:fa:a4:8f:4f: e6:c1:a9:0b:74:0e:91:e2:e7:0f:25:86:87:fe:bd: da:ae:3d:3e:91:f4:e4:e1:98:d5:30:06:c4:7e:db: 46:c7:26:db:1d:ea:f0:8a:43:5d:76:58:80:7c:e4: 75:5c:d7:88:e4:8d:db:85:bd:e6:89:a3:73:e2:4e: 68:dc:30:4c:48:89:71:5e:81:91:1f:1c:34:af:91: d9:aa:74:3c:d6:c5:91:02:d0:4d:d5:84:04:d0:29: 72:c6:dd:8e:bc:5d:a9:c1:70:cd:5a:ea:6c:9a:bb: cd:59:36:48:06:b7:49:22:1e:48:e9:74:b5:c9:0b: e1:60:7a:85:21:31:86:10:42:a7:bc:a7:2e:e1:65: fa:3b:c1:36:1b:48:d8:89:15:33:cf:80:15:4f:1c: 0e:cd:82:9b:1c:7d:71:4d:11:8b:e8:e9:42:70:91: 85:8a:37:6e:41:ec:41:f5:0b:bb:45:1a:a1:bd:fe: e4:d6:f8:f4:09:de:0c:10:60:9e:7a:33:dc:d7:92: 61:19:1f:e6:5c:6f:47:e2:2a:4e:86:0b:85:aa:29: d8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:02:6E:09:80:31:67:DA:A9:04:61:19:F2:C1:C2:BF:58:27:00:AD X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132352e302f32342d3234203d3e203530363733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.125.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:a5:82:02:c3:3f:0d:77:a8:38:0c:d8:05:c3:38:bc:2b:43: 00:40:0a:ff:f7:9b:1a:c5:55:73:6f:61:62:6b:cb:73:d3:a3: c4:96:83:93:95:84:89:57:cc:1f:b6:08:08:46:6c:58:01:25: 47:c2:6c:b5:e1:e0:e6:61:fe:47:33:1f:3d:66:e5:3a:fe:cd: db:d0:fd:42:15:fa:b0:ca:a2:0e:ee:dd:c8:93:a3:cf:9c:63: 47:24:bf:a5:d8:8a:22:8c:2c:cc:15:ee:75:49:41:b2:b8:0e: 99:1e:a5:7d:26:9f:e6:d9:7f:a9:9c:b5:38:ec:7e:0d:94:39: 37:25:c8:0a:91:8d:de:04:ae:a7:c6:dc:ee:9d:55:a2:02:6c: 89:33:09:a9:c6:ee:18:d0:73:c7:3f:f0:8e:de:36:f1:38:33: 59:09:79:58:a9:fe:2e:76:b6:41:2c:78:b6:eb:a9:b9:f8:7c: 85:a0:79:69:0b:d8:64:ac:c1:ca:dc:d5:30:1a:86:20:5e:99: dd:98:7c:08:2d:71:72:27:3e:aa:f7:f6:69:a8:6d:60:2e:1b: c2:7e:d3:bd:bb:10:3a:01:1b:8d:3d:10:3b:f5:6c:a8:24:12: eb:fc:5c:cc:67:cc:ac:49:2f:75:24:31:ba:97:86:ad:02:48: 7c:ef:42:df -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUb1mYCCGudwGoJjhzuTeZhrQodpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU4NDdaFw0yNzAyMTExOTAzNDdaMDMxMTAvBgNV BAMTKENCMDI2RTA5ODAzMTY3REFBOTA0NjExOUYyQzFDMkJGNTgyNzAwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZf5H7BBqvGtyfosKMknJVs8T6 xZEANFZtbXhoyTciPt4/7atLxhV3+qSPT+bBqQt0DpHi5w8lhof+vdquPT6R9OTh mNUwBsR+20bHJtsd6vCKQ112WIB85HVc14jkjduFveaJo3PiTmjcMExIiXFegZEf HDSvkdmqdDzWxZEC0E3VhATQKXLG3Y68XanBcM1a6myau81ZNkgGt0kiHkjpdLXJ C+FgeoUhMYYQQqe8py7hZfo7wTYbSNiJFTPPgBVPHA7NgpscfXFNEYvo6UJwkYWK N25B7EH1C7tFGqG9/uTW+PQJ3gwQYJ56M9zXkmEZH+Zcb0fiKk6GC4WqKdj5AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUywJuCYAxZ9qpBGEZ8sHCv1gnAK0wHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzEzMDM5MmUzNzMyMmUzMTMy MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMwMzYzNzMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA bUh9MA0GCSqGSIb3DQEBCwUAA4IBAQBMpYICwz8Nd6g4DNgFwzi8K0MAQAr/95sa xVVzb2Fia8tz06PEloOTlYSJV8wftggIRmxYASVHwmy14eDmYf5HMx89ZuU6/s3b 0P1CFfqwyqIO7t3Ik6PPnGNHJL+l2IoijCzMFe51SUGyuA6ZHqV9Jp/m2X+pnLU4 7H4NlDk3JcgKkY3eBK6nxtzunVWiAmyJMwmpxu4Y0HPHP/CO3jbxODNZCXlYqf4u drZBLHi266m5+HyFoHlpC9hkrMHK3NUwGoYgXpndmHwILXFyJz6q9/ZpqG1gLhvC ftO9uxA6ARuNPRA79WyoJBLr/FzMZ8ysSS91JDG6l4atAkh870Lf -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:16 2026 by rpki-client