This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3138352e33302e3230332e302f32342d3234203d3e203630383630.roa
File: 3138352e33302e3230332e302f32342d3234203d3e203630383630.roa (raw, json)
Hash identifier: +hLj8/wzU4ALLxe4Xdt3WSnzJEJQWXiNiu+hY32JK2w=
Subject key identifier: 04:F8:EE:85:4B:37:66:05:78:E2:D5:4B:EE:A7:E0:CA:79:55:FC:5F
Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial: 31E94B8603BE5E931A0342486EE2EA3DDE8EE7A8
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3138352e33302e3230332e302f32342d3234203d3e203630383630.roa
Signing time: Thu 12 Feb 2026 19:01:45 +0000
ROA not before: Thu 12 Feb 2026 18:56:45 +0000
ROA not after: Thu 11 Feb 2027 19:01:45 +0000
asID: 60860
IP address blocks: 185.30.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 05:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e9:4b:86:03:be:5e:93:1a:03:42:48:6e:e2:ea:3d:de:8e:e7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Validity
Not Before: Feb 12 18:56:45 2026 GMT
Not After : Feb 11 19:01:45 2027 GMT
Subject: CN=04F8EE854B37660578E2D54BEEA7E0CA7955FC5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:0f:cc:bb:13:c3:48:c3:78:5e:36:1d:64:
74:4e:f9:fe:07:6c:3d:f9:65:cf:c5:a5:6f:d4:3c:
69:39:a9:a8:7a:10:51:36:74:65:23:d1:3f:f5:2c:
63:e2:76:8d:02:c8:41:26:80:61:76:09:a8:43:2a:
ed:5a:7c:01:a1:96:0c:12:64:68:bc:d8:87:4c:98:
8f:c7:63:ae:f7:60:27:c9:fd:11:4b:f0:a9:83:75:
e4:c1:70:3f:a5:ea:ff:71:ba:0f:c0:b7:ce:06:03:
c3:24:fb:0f:d0:e5:6d:42:68:cf:2a:31:90:d2:07:
a4:b5:33:aa:67:f6:13:83:94:7a:79:a7:e9:5c:bd:
ac:f9:4d:d6:76:a5:a7:87:2f:25:a1:5b:f9:59:2a:
11:0d:44:67:b6:af:11:e8:d9:c9:6a:be:bd:39:55:
a1:f2:82:f5:4c:a3:59:fb:e0:e8:0d:7d:40:29:61:
9c:a9:bf:93:f5:25:00:79:39:00:6e:18:de:11:b6:
5e:11:d1:31:e0:39:d7:da:db:a7:42:d5:20:ba:22:
66:db:a4:02:3b:3c:1c:74:d6:db:8b:0f:d0:d9:85:
a7:c2:46:c3:e2:f4:6e:b7:04:b1:b0:0b:86:d2:01:
d6:cb:f3:75:20:aa:1b:3d:73:ad:86:77:10:aa:98:
57:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F8:EE:85:4B:37:66:05:78:E2:D5:4B:EE:A7:E0:CA:79:55:FC:5F
X509v3 Authority Key Identifier:
keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/3138352e33302e3230332e302f32342d3234203d3e203630383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.203.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:f7:c9:fc:f4:6d:40:67:c0:c3:09:ce:4c:7c:83:93:53:7c:
eb:15:4a:30:6e:b5:aa:1e:51:4c:9d:67:cd:54:9a:ee:11:aa:
c7:64:90:12:5e:f5:7a:17:b0:b0:68:01:57:45:87:8b:37:b6:
e3:2e:a9:40:7a:b4:9e:94:e3:45:0e:0e:03:75:2d:9a:13:57:
e9:90:7e:f5:5b:23:1e:f5:32:23:5f:b6:7a:ed:15:35:3d:e8:
c3:ef:d7:23:ee:03:da:85:a1:74:8e:f4:92:68:fe:30:02:9a:
3e:3b:7f:83:2b:65:3a:31:ae:3f:85:b4:e3:38:47:6d:40:19:
f6:25:59:cd:98:20:fa:f8:4c:8e:f4:ab:af:41:b9:14:b2:8a:
7e:fc:a9:00:e2:c3:d5:d7:56:d5:f9:77:e1:5a:e8:de:76:6b:
38:71:9e:3b:37:f6:db:d8:24:33:c5:6d:33:87:4b:9e:52:ca:
b5:a1:fb:46:cf:9e:2c:0e:1a:71:d4:3d:1d:5a:89:eb:56:ad:
8b:db:3a:6e:81:34:61:eb:25:4b:4a:5e:52:16:28:e7:7e:01:
92:44:e2:a5:2e:8c:c2:4d:ad:67:b3:3c:ca:2d:fe:94:75:5e:
93:01:d9:49:f4:a3:33:42:a1:69:f0:c2:c9:cf:70:b8:13:0c:
9e:f7:a0:c3
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUMelLhgO+XpMaA0JIbuLqPd6O56gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4
Mzg2NTdhMzAeFw0yNjAyMTIxODU2NDVaFw0yNzAyMTExOTAxNDVaMDMxMTAvBgNV
BAMTKDA0RjhFRTg1NEIzNzY2MDU3OEUyRDU0QkVFQTdFMENBNzk1NUZDNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvXw/MuxPDSMN4XjYdZHRO+f4H
bD35Zc/FpW/UPGk5qah6EFE2dGUj0T/1LGPido0CyEEmgGF2CahDKu1afAGhlgwS
ZGi82IdMmI/HY673YCfJ/RFL8KmDdeTBcD+l6v9xug/At84GA8Mk+w/Q5W1CaM8q
MZDSB6S1M6pn9hODlHp5p+lcvaz5TdZ2paeHLyWhW/lZKhENRGe2rxHo2clqvr05
VaHygvVMo1n74OgNfUApYZypv5P1JQB5OQBuGN4Rtl4R0THgOdfa26dC1SC6Imbb
pAI7PBx01tuLD9DZhafCRsPi9G63BLGwC4bSAdbL83Ugqhs9c62GdxCqmFfpAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUBPjuhUs3ZgV44tVL7qfgynlV/F8wHwYDVR0j
BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4
NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP
R1Y2TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt
NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzEzODM1MmUzMzMwMmUzMjMw
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzgzNjMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
uR7LMA0GCSqGSIb3DQEBCwUAA4IBAQCz98n89G1AZ8DDCc5MfIOTU3zrFUowbrWq
HlFMnWfNVJruEarHZJASXvV6F7CwaAFXRYeLN7bjLqlAerSelONFDg4DdS2aE1fp
kH71WyMe9TIjX7Z67RU1PejD79cj7gPahaF0jvSSaP4wApo+O3+DK2U6Ma4/hbTj
OEdtQBn2JVnNmCD6+EyO9KuvQbkUsop+/KkA4sPV11bV+XfhWujedms4cZ47N/bb
2CQzxW0zh0ueUsq1oftGz54sDhpx1D0dWonrVq2L2zpugTRh6yVLSl5SFijnfgGS
ROKlLozCTa1nszzKLf6UdV6TAdlJ9KMzQqFp8MLJz3C4Ewye96DD
-----END CERTIFICATE-----
Generated at Sat Feb 14 19:52:19 2026 by rpki-client