This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e203633313939.roa
File: 3138352e3231322e3131332e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier: eynE4L1wg0TI2w/2R34A3jnbD62PHHb0IzqFm36KQUY=
Subject key identifier: DB:20:20:D9:75:F0:56:77:C2:1B:C7:1F:B2:C1:E2:D7:2B:2A:12:A6
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 1B6A51B6CA5C923B78C89D23940F63CDE2774E43
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e203633313939.roa
Signing time: Mon 09 Feb 2026 03:50:42 +0000
ROA not before: Mon 09 Feb 2026 03:45:42 +0000
ROA not after: Mon 08 Feb 2027 03:50:42 +0000
asID: 63199
IP address blocks: 185.212.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Feb 2026 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:6a:51:b6:ca:5c:92:3b:78:c8:9d:23:94:0f:63:cd:e2:77:4e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Feb 9 03:45:42 2026 GMT
Not After : Feb 8 03:50:42 2027 GMT
Subject: CN=DB2020D975F05677C21BC71FB2C1E2D72B2A12A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:c2:fe:93:10:98:32:20:03:09:2f:5d:29:
9a:a0:23:76:c7:78:6a:76:90:fe:62:17:21:51:db:
75:65:fc:c6:01:81:51:ed:0e:c4:c5:79:89:95:b9:
0b:8e:f8:4e:ef:97:b8:84:2a:51:3d:ec:53:70:0b:
f8:bb:f4:e3:69:23:5f:7e:c2:b0:4e:4f:96:55:03:
8c:4d:4f:dd:2b:36:06:a3:cc:83:63:17:20:89:9e:
2a:b8:2b:6d:01:cc:b7:8f:ff:11:47:4f:92:73:d1:
80:27:23:4b:c0:d4:1d:e7:49:02:00:8e:6c:06:22:
aa:96:08:7d:5d:c6:67:79:63:78:60:0b:76:a6:e4:
fb:bc:84:12:1f:54:6c:04:c0:67:b2:b5:3c:69:da:
db:f4:83:2d:53:aa:0d:b8:41:a6:dd:ce:c4:c5:da:
be:19:2f:9b:0a:2b:87:24:c4:61:be:1c:5d:c6:bb:
c0:48:81:01:aa:04:d0:7b:5d:57:09:76:95:8e:72:
6b:df:14:cb:ce:5f:90:43:0c:4d:d7:21:96:59:04:
8c:d7:e3:63:97:ab:10:a4:f8:34:4b:2d:86:10:ad:
87:a8:e3:79:50:49:d8:23:54:17:3b:11:14:c9:56:
31:f5:73:21:b4:e2:d7:c0:11:80:5b:97:92:62:a4:
d0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:20:20:D9:75:F0:56:77:C2:1B:C7:1F:B2:C1:E2:D7:2B:2A:12:A6
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3138352e3231322e3131332e302f32342d3234203d3e203633313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.113.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:59:e9:8c:f7:06:59:bb:22:dc:0c:5a:24:d9:c7:e3:45:1a:
e8:ad:e3:02:6f:81:59:35:2a:35:a5:9a:e6:20:1e:99:d0:33:
32:e4:22:3f:c9:9b:1d:12:67:1a:0b:f8:2e:19:a1:a9:f8:d0:
c1:52:e4:a2:59:8d:72:f0:4a:69:67:a7:8d:51:50:a8:11:37:
a8:3c:96:c8:e3:5e:09:43:76:c0:c5:0b:48:f4:88:dd:79:6f:
21:a7:6c:2c:b5:17:d6:01:6d:6e:ec:1f:ea:0d:44:fb:07:d0:
64:75:65:55:0a:7c:1e:3f:bd:7f:79:7d:93:f0:09:dc:5e:5b:
e2:05:13:25:49:7b:75:89:fd:c2:4a:53:af:db:76:1f:6a:f0:
40:55:95:e9:2e:5f:75:3c:82:dc:23:e9:a9:6b:7e:37:a0:6f:
5e:e3:5c:5f:db:5f:99:ac:9e:bf:81:81:8a:df:44:87:f7:7b:
17:78:31:d2:c1:b1:f1:0b:c5:29:82:be:bc:bd:74:29:28:11:
ef:89:f5:e7:88:b8:05:1a:7d:d8:62:e6:11:b8:92:36:67:d9:
3e:0e:a7:02:9e:5d:38:08:ba:ef:87:3f:48:02:52:8a:32:b3:
16:f7:52:c6:84:e3:c1:dc:2f:c4:9d:2f:3b:74:28:8f:67:35:
d1:04:64:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 16:25:34 2026 by rpki-client