This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e20383334.roa
File: 3138352e3231332e3234382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: mR/wWew3FjmrV6LotuwwCDAlPdUAkYACjCVanGsnnOg=
Subject key identifier: BD:FF:DD:DB:FA:15:D1:84:4E:40:C6:64:D0:42:66:9B:EC:FF:7D:78
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 7408AC857BF28E9D6BC12910C8895333E2872FE1
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e20383334.roa
Signing time: Wed 11 Feb 2026 03:07:16 +0000
ROA not before: Wed 11 Feb 2026 03:02:16 +0000
ROA not after: Wed 10 Feb 2027 03:07:16 +0000
asID: 834
IP address blocks: 185.213.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 10:44:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:08:ac:85:7b:f2:8e:9d:6b:c1:29:10:c8:89:53:33:e2:87:2f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Feb 11 03:02:16 2026 GMT
Not After : Feb 10 03:07:16 2027 GMT
Subject: CN=BDFFDDDBFA15D1844E40C664D042669BECFF7D78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:a1:7d:1d:26:7b:f7:db:6c:c7:f7:69:ea:
2a:95:19:01:79:5a:3c:e4:d8:a5:f2:9a:c5:b6:b1:
bd:4f:d8:1e:ab:8f:e8:53:5d:99:09:09:27:6c:b0:
51:39:7e:3d:6b:08:e1:f0:da:e2:8c:ab:c2:91:7e:
27:8b:34:7b:ac:e7:84:73:54:74:47:79:77:c7:7e:
04:44:05:c2:fb:0d:d8:64:56:d9:14:16:87:58:22:
b0:0d:48:d3:69:13:fd:e8:8c:01:03:71:c0:63:b1:
0e:72:86:fb:01:45:75:8d:5d:7b:10:45:c5:98:9b:
76:65:64:07:7b:a1:e5:bc:d6:bd:ce:ef:d9:ce:2b:
30:57:0c:20:e3:ff:f2:73:9b:cf:dc:49:48:fb:f8:
c2:b5:03:b9:05:a3:19:e4:d1:c1:9d:ae:ca:02:51:
af:b6:96:fd:ac:83:69:4b:68:5b:4e:4f:8a:8b:65:
43:6c:93:d0:89:31:6a:c5:b5:ca:64:8f:e0:ec:34:
a0:b1:7e:dc:b8:63:fe:30:5f:22:7e:c7:9e:2b:1d:
95:1e:2d:ba:a4:ee:a0:ca:47:2a:f5:c2:2b:62:2b:
25:6f:c1:a9:c9:b9:3c:28:70:b6:b7:2f:5a:e0:83:
08:59:ba:95:6f:76:08:8e:85:ef:91:78:14:3d:f5:
76:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FF:DD:DB:FA:15:D1:84:4E:40:C6:64:D0:42:66:9B:EC:FF:7D:78
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3138352e3231332e3234382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f8:44:41:01:96:df:fb:6c:a8:74:66:bf:c1:dc:18:bb:47:
c8:2d:01:a4:01:e5:5f:9f:be:3c:d5:d8:c8:d7:e5:6a:5d:4a:
56:0b:e9:3c:97:ed:1b:5e:82:5e:c2:f3:7b:b4:06:41:83:8d:
22:3e:6d:e7:dc:fe:4e:d6:1a:85:14:d7:f3:b4:c5:fc:de:c6:
e9:12:b3:52:0b:d1:37:b6:ec:d2:63:37:e1:bc:dc:01:69:b7:
24:f4:70:8e:6f:a2:6d:91:2c:7b:f6:e7:2b:58:46:7d:c5:cc:
30:17:81:a1:24:32:42:14:4d:58:38:50:b9:e6:e4:2d:87:9f:
bd:33:0b:67:43:54:67:49:9b:66:8c:4a:54:84:14:16:12:de:
80:5b:fb:35:74:42:b3:a7:11:7a:49:d0:df:6b:67:96:ae:31:
03:a4:95:4b:d9:4a:3e:13:14:f7:e7:b6:7a:f8:a5:29:81:a8:
fd:ed:ac:ad:3e:3f:e9:cb:6e:9c:61:aa:91:65:93:dd:2d:a7:
45:4c:7e:02:06:61:79:ae:8b:5a:c7:73:8f:50:47:db:8d:bf:
ea:4f:5a:53:64:70:8d:47:79:d0:93:d7:0f:0b:c3:31:ef:88:
f4:f5:8a:5f:84:8f:a3:58:d1:01:c3:b5:9a:26:47:00:4f:2d:
bd:9e:ee:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:27:17 2026 by rpki-client