This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3132382e302f32342d3234203d3e2038303735.roa File: 38312e32322e3132382e302f32342d3234203d3e2038303735.roa (raw, json) Hash identifier: wFhCAm++LXxa1RV2K9qWFsY9G2ZNHOqSGV60TyVpB8I= Subject key identifier: CC:FB:03:40:42:C2:DA:71:03:7D:1E:59:18:9D:D3:BB:91:63:A2:66 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 0677E9FF30374C96584D155E7752D993F9F9562D Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3132382e302f32342d3234203d3e2038303735.roa Signing time: Thu 12 Feb 2026 19:03:46 +0000 ROA not before: Thu 12 Feb 2026 18:58:46 +0000 ROA not after: Thu 11 Feb 2027 19:03:46 +0000 asID: 8075 IP address blocks: 81.22.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:77:e9:ff:30:37:4c:96:58:4d:15:5e:77:52:d9:93:f9:f9:56:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:58:46 2026 GMT Not After : Feb 11 19:03:46 2027 GMT Subject: CN=CCFB034042C2DA71037D1E59189DD3BB9163A266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:56:b2:6e:c4:05:c0:81:4d:bd:81:ff:9d:99: 7c:83:fc:ef:1b:b4:b0:fa:95:3c:02:79:66:d3:d8: e7:ee:14:61:6e:dc:fe:f4:83:11:a5:25:f7:7a:44: 8d:97:33:76:5b:7c:2d:f9:92:f8:81:36:61:65:d6: e8:23:79:e8:e2:9b:57:52:7b:3b:dc:81:ea:7e:48: 78:c1:d4:2a:34:09:04:50:34:0a:ba:b0:aa:83:77: d9:c0:05:e9:ef:fc:ef:df:97:49:74:98:87:45:15: ff:ca:2d:68:d8:cb:20:42:94:86:ff:3c:84:15:49: 9f:7d:db:e7:e6:48:40:c6:3b:56:7f:79:35:a2:6f: 0a:28:ff:ca:73:d8:df:97:3b:ee:84:84:c7:cd:90: 79:53:68:05:3e:4c:87:f0:c6:7f:4f:f6:1e:a9:9e: f9:8e:7f:1c:ce:6f:a9:aa:95:01:04:d5:dd:d3:fc: 4b:90:39:c6:15:1e:bb:dc:c5:3f:92:f8:b9:be:6c: cd:6b:6d:f6:cb:f2:fb:2d:8c:8a:31:f0:cf:bd:b5: be:44:7b:b7:1e:77:b7:9a:63:46:45:85:01:21:de: f9:59:7f:9d:3a:31:64:dc:74:ee:89:56:46:ac:19: 09:6e:00:51:99:2b:24:9b:66:e1:72:ce:20:fc:16: bd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FB:03:40:42:C2:DA:71:03:7D:1E:59:18:9D:D3:BB:91:63:A2:66 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3132382e302f32342d3234203d3e2038303735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.128.0/24 Signature Algorithm: sha256WithRSAEncryption 69:c6:86:ad:8c:6b:b1:58:9e:f4:f2:f3:b4:b5:9c:e9:1d:3a: e1:8b:a1:e2:d1:a9:d7:95:68:11:50:b6:bf:32:bd:23:8f:79: 2e:62:9a:7a:a6:9c:d5:48:47:4d:a3:7c:4d:54:6d:25:39:2d: 1d:ce:47:28:30:47:83:2e:9a:b1:93:c6:a9:4a:49:29:0f:33: 9b:a4:fa:f8:ae:e5:d2:55:78:db:33:c4:50:3a:41:61:41:c9: 6a:30:16:7c:6f:ce:61:59:08:f2:f6:a4:4b:17:bb:9f:f3:77: a0:62:76:47:1b:f3:51:8e:cf:6c:a0:26:4c:65:58:10:d1:0c: 4e:53:e0:04:26:45:b6:fb:49:30:06:55:6e:1e:d7:a1:92:5a: cd:76:cf:c0:6d:d3:b9:29:0c:ba:02:61:59:0f:4d:f1:d9:fd: c8:32:a4:07:2d:b0:09:d8:4e:34:42:9a:a0:5d:9e:bc:59:6e: 95:96:e3:5f:7e:1d:24:ec:9a:8c:33:b7:ff:aa:00:93:5f:f7: 66:e5:e3:c5:eb:71:5e:00:05:46:39:59:5e:ad:3f:29:f2:90: 50:9d:7e:ac:9a:91:46:77:6b:14:75:d3:e2:88:af:4d:0f:f1: 20:e1:fa:c7:24:a5:18:ed:eb:88:46:14:28:b1:52:96:51:a4: 73:70:1e:18 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUBnfp/zA3TJZYTRVed1LZk/n5Vi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU4NDZaFw0yNzAyMTExOTAzNDZaMDMxMTAvBgNV BAMTKENDRkIwMzQwNDJDMkRBNzEwMzdEMUU1OTE4OUREM0JCOTE2M0EyNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRVrJuxAXAgU29gf+dmXyD/O8b tLD6lTwCeWbT2OfuFGFu3P70gxGlJfd6RI2XM3ZbfC35kviBNmFl1ugjeejim1dS ezvcgep+SHjB1Co0CQRQNAq6sKqDd9nABenv/O/fl0l0mIdFFf/KLWjYyyBClIb/ PIQVSZ992+fmSEDGO1Z/eTWibwoo/8pz2N+XO+6EhMfNkHlTaAU+TIfwxn9P9h6p nvmOfxzOb6mqlQEE1d3T/EuQOcYVHrvcxT+S+Lm+bM1rbfbL8vstjIox8M+9tb5E e7ced7eaY0ZFhQEh3vlZf506MWTcdO6JVkasGQluAFGZKySbZuFyziD8Fr15AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUzPsDQELC2nEDfR5ZGJ3Tu5FjomYwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzMjM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMDM3MzUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABRFoAw DQYJKoZIhvcNAQELBQADggEBAGnGhq2Ma7FYnvTy87S1nOkdOuGLoeLRqdeVaBFQ tr8yvSOPeS5imnqmnNVIR02jfE1UbSU5LR3ORygwR4MumrGTxqlKSSkPM5uk+viu 5dJVeNszxFA6QWFByWowFnxvzmFZCPL2pEsXu5/zd6Bidkcb81GOz2ygJkxlWBDR DE5T4AQmRbb7STAGVW4e16GSWs12z8Bt07kpDLoCYVkPTfHZ/cgypActsAnYTjRC mqBdnrxZbpWW419+HSTsmowzt/+qAJNf92bl48XrcV4ABUY5WV6tPynykFCdfqya kUZ3axR10+KIr00P8SDh+sckpRjt64hGFCixUpZRpHNwHhg= -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:42 2026 by rpki-client