This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132372e302f32342d3234203d3e203239383032.roa
File: 3130392e37322e3132372e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: dSeV1b6cD/j/WXB+rvUp+e9/hIDjWtPGpyEg50rxZYs=
Subject key identifier: 5F:F3:52:27:78:84:23:BE:FD:E1:40:4A:BD:A6:2D:43:40:91:C3:0D
Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial: 47580E5D706AC30C38AB1BD28EB254BE51FA6155
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132372e302f32342d3234203d3e203239383032.roa
Signing time: Thu 12 Feb 2026 19:22:02 +0000
ROA not before: Thu 12 Feb 2026 19:17:02 +0000
ROA not after: Thu 11 Feb 2027 19:22:02 +0000
asID: 29802
IP address blocks: 109.72.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 05:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:58:0e:5d:70:6a:c3:0c:38:ab:1b:d2:8e:b2:54:be:51:fa:61:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Validity
Not Before: Feb 12 19:17:02 2026 GMT
Not After : Feb 11 19:22:02 2027 GMT
Subject: CN=5FF35227788423BEFDE1404ABDA62D434091C30D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:12:36:3a:7a:a5:0c:d1:65:87:bc:8a:53:
44:ee:e6:00:24:26:fa:9b:88:90:b5:75:ea:38:c8:
cb:a2:a5:94:5d:fe:19:da:34:cf:87:f4:9f:e0:43:
f8:b7:33:93:2b:34:86:2d:5c:15:dc:5e:a5:69:45:
a2:d1:4c:7a:c0:a1:b9:eb:2b:2c:26:bc:13:f2:55:
1b:56:e4:cd:ee:16:a3:aa:81:39:fc:54:97:c2:54:
39:0d:28:fa:37:39:d6:f2:77:0e:45:b4:2b:f0:e9:
c2:ff:90:65:c6:7a:47:39:02:b8:90:12:a1:39:69:
af:85:44:30:fc:e3:22:a6:cb:e8:3a:05:db:1c:63:
14:08:e2:52:ee:fe:16:9f:2d:36:48:c1:0f:0f:3b:
05:99:a7:52:ed:01:8f:dc:7d:c7:c4:f7:00:dc:24:
bc:08:4c:6f:b7:cc:23:97:c4:4b:3b:8d:55:36:3c:
50:b2:f4:d5:b7:a5:3b:27:6d:e8:24:d9:f5:4b:27:
61:c2:be:46:4c:9d:07:ec:1a:d2:af:93:de:3c:6a:
49:8c:22:69:7c:e5:c2:e8:94:09:85:a9:ff:32:8f:
25:6f:c5:1d:80:f6:93:8a:07:ee:7b:9e:b5:dd:e1:
5d:4c:d9:75:d9:97:24:a6:30:af:20:54:da:61:f5:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F3:52:27:78:84:23:BE:FD:E1:40:4A:BD:A6:2D:43:40:91:C3:0D
X509v3 Authority Key Identifier:
keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3130392e37322e3132372e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.127.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:08:69:df:46:99:94:45:cd:71:94:ae:ca:ae:ec:ac:2d:2c:
92:57:46:04:ed:b3:ce:6e:47:b2:9f:65:10:ab:71:41:01:31:
c4:94:7e:eb:0b:a0:cf:2a:c6:25:72:1a:83:d7:b2:6c:1f:f9:
e7:76:bd:9f:79:79:7a:ec:89:b0:fe:91:e9:cd:b1:a8:72:7d:
0a:fc:6e:97:d7:e4:8f:9d:96:aa:a8:2e:69:2d:fc:9e:96:b8:
56:71:6c:b7:fd:ef:b7:2c:fe:51:6f:72:7c:b5:bb:fa:8b:a2:
bd:fd:fb:b5:3a:2e:9a:c0:2d:0e:64:ef:c1:11:6f:37:b7:5f:
64:cc:c9:18:12:85:db:3a:4b:c8:31:97:56:ee:ae:e8:7c:51:
ff:a5:0d:e9:29:b6:0e:47:be:39:a3:f6:45:38:c9:50:f8:8c:
a1:ce:a3:13:e6:f6:f0:cb:0a:89:34:52:d7:5f:d1:b7:37:04:
fd:97:73:c5:d2:86:b9:9e:92:88:3b:7f:17:aa:d0:84:0f:06:
6b:39:20:29:ec:d8:02:d3:b7:43:4c:47:80:85:3f:d5:46:87:
0c:53:ee:ff:f9:bd:ef:1a:50:75:66:1d:b6:14:4e:bd:45:94:
0d:7e:fc:35:db:a3:b7:60:99:fb:a1:32:3b:52:52:dd:e3:21:
d5:c2:80:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:54:17 2026 by rpki-client