This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132362e302f32342d3234203d3e20323131383236.roa File: 3130392e37322e3132362e302f32342d3234203d3e20323131383236.roa (raw, json) Hash identifier: qaQqQZZFkBzZ1UkxVC/1buYdRRW52N7lYPJu8GntmYM= Subject key identifier: 36:4D:AA:34:9A:AD:F0:92:B4:F6:01:52:84:1A:2C:4E:A6:63:92:21 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 33557D7CF54A2E8F6819BC5CC5DC8512722AFBBB Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132362e302f32342d3234203d3e20323131383236.roa Signing time: Thu 12 Feb 2026 19:23:46 +0000 ROA not before: Thu 12 Feb 2026 19:18:46 +0000 ROA not after: Thu 11 Feb 2027 19:23:46 +0000 asID: 211826 IP address blocks: 109.72.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:55:7d:7c:f5:4a:2e:8f:68:19:bc:5c:c5:dc:85:12:72:2a:fb:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:18:46 2026 GMT Not After : Feb 11 19:23:46 2027 GMT Subject: CN=364DAA349AADF092B4F60152841A2C4EA6639221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ca:14:0e:59:4e:16:bd:c8:95:eb:e4:3e:cb: 92:c2:41:0a:6d:60:58:51:e0:3d:22:3e:5f:33:97: b8:f3:f0:ac:27:0f:74:16:43:6b:c0:97:f0:fa:e0: de:d1:dc:31:42:b0:70:85:1d:0b:bf:de:7c:cd:70: 50:4b:03:08:94:e9:9d:58:7a:40:64:14:49:17:e2: f0:50:87:47:14:55:92:4d:ab:e3:5e:fb:30:70:cc: 3b:ed:06:21:77:05:2e:00:95:ed:49:53:89:e9:bc: e3:b3:0e:65:57:aa:06:31:8c:d4:f0:2d:ac:b7:30: 8b:7f:0e:57:6c:3a:95:21:a3:e9:be:28:44:a4:f1: 29:7f:bb:ad:27:0c:5c:f0:87:e5:20:20:7e:83:67: 3c:96:14:f6:53:1d:b2:d9:d0:e3:2a:4c:40:ce:e5: f4:db:ae:b1:2d:fe:a7:fd:91:dc:74:d0:35:de:06: 01:9f:ac:1d:1b:02:49:18:32:49:79:8e:cc:64:fa: 5c:60:a4:37:b3:27:b7:9d:1f:07:86:e8:f6:45:83: 41:aa:d2:21:db:b7:9e:d0:14:74:5c:2d:9c:47:2d: 99:b4:27:7f:3f:6e:1c:66:07:0a:d4:2b:6c:91:ad: d4:33:e0:28:8b:f4:cb:59:9b:b5:f2:67:c9:dd:1c: 48:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4D:AA:34:9A:AD:F0:92:B4:F6:01:52:84:1A:2C:4E:A6:63:92:21 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132362e302f32342d3234203d3e20323131383236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.72.126.0/24 Signature Algorithm: sha256WithRSAEncryption a4:42:87:28:da:e6:d7:95:fd:53:e7:74:4a:7c:65:88:4d:81: 18:e4:f5:31:84:98:80:03:45:a9:6d:b6:df:45:d8:22:4d:16: 89:6f:11:d3:bc:5d:c6:13:b7:11:88:25:f9:d9:3e:f5:c3:54: ee:c0:70:ed:e9:f1:98:c0:1d:97:7e:02:5a:5e:75:b5:c4:af: 28:8e:ba:6b:86:ee:72:ee:c1:49:6c:41:c9:96:aa:4f:69:26: e2:89:35:e8:a4:9d:3c:37:57:39:7e:33:6e:11:7c:6d:07:17: 31:52:2b:90:5b:13:24:73:b1:48:b3:3d:23:44:8c:1d:e3:a6: b6:95:40:fa:54:7f:86:d2:bd:c6:29:ec:b2:82:2a:7f:d1:9d: 37:b0:de:3c:51:a2:5a:d7:12:05:a9:55:a8:31:b7:35:eb:3d: d3:cf:ac:43:99:8a:25:80:62:67:80:d4:ef:a2:cb:3f:9a:64: 0e:9b:b7:2a:8e:33:dc:f9:95:5c:84:6b:73:64:0d:2b:08:45: 30:31:03:e7:ad:dc:50:53:57:4f:fb:9a:c9:5c:98:81:10:ea: e3:0a:d9:7b:f7:81:78:95:f2:fa:23:2d:49:f5:ad:cd:ad:37: 41:e9:1c:7c:1a:6e:9d:1f:1e:32:3b:76:a6:8d:72:35:4e:02: a7:ea:77:3b -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUM1V9fPVKLo9oGbxcxdyFEnIq+7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTE4NDZaFw0yNzAyMTExOTIzNDZaMDMxMTAvBgNV BAMTKDM2NERBQTM0OUFBREYwOTJCNEY2MDE1Mjg0MUEyQzRFQTY2MzkyMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvyhQOWU4WvciV6+Q+y5LCQQpt YFhR4D0iPl8zl7jz8KwnD3QWQ2vAl/D64N7R3DFCsHCFHQu/3nzNcFBLAwiU6Z1Y ekBkFEkX4vBQh0cUVZJNq+Ne+zBwzDvtBiF3BS4Ale1JU4npvOOzDmVXqgYxjNTw Lay3MIt/DldsOpUho+m+KESk8Sl/u60nDFzwh+UgIH6DZzyWFPZTHbLZ0OMqTEDO 5fTbrrEt/qf9kdx00DXeBgGfrB0bAkkYMkl5jsxk+lxgpDezJ7edHweG6PZFg0Gq 0iHbt57QFHRcLZxHLZm0J38/bhxmBwrUK2yRrdQz4CiL9MtZm7XyZ8ndHEj3AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUNk2qNJqt8JK09gFShBosTqZjkiEwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzEzMDM5MmUzNzMyMmUzMTMy MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzEzODMyMzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABtSH4wDQYJKoZIhvcNAQELBQADggEBAKRChyja5teV/VPndEp8ZYhNgRjk9TGE mIADRalttt9F2CJNFolvEdO8XcYTtxGIJfnZPvXDVO7AcO3p8ZjAHZd+AlpedbXE ryiOumuG7nLuwUlsQcmWqk9pJuKJNeiknTw3Vzl+M24RfG0HFzFSK5BbEyRzsUiz PSNEjB3jpraVQPpUf4bSvcYp7LKCKn/RnTew3jxRolrXEgWpVagxtzXrPdPPrEOZ iiWAYmeA1O+iyz+aZA6btyqOM9z5lVyEa3NkDSsIRTAxA+et3FBTV0/7mslcmIEQ 6uMK2Xv3gXiV8vojLUn1rc2tN0HpHHwabp0fHjI7dqaNcjVOAqfqdzs= -----END CERTIFICATE-----Generated at Sat Feb 14 19:54:52 2026 by rpki-client