This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3132392e302f32342d3234203d3e20343031383338.roa File: 38312e32322e3132392e302f32342d3234203d3e20343031383338.roa (raw, json) Hash identifier: IY3+oEPnr0wJMHCGSZKMbw5CHgJFmijbFtdytjv+7Po= Subject key identifier: 54:0D:FA:D8:8B:4A:7B:F5:89:F3:39:8D:ED:33:9E:45:15:DB:E8:58 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 2A51FA71E3F2B6EAAFE9246391C62C6C19B054F8 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3132392e302f32342d3234203d3e20343031383338.roa Signing time: Thu 12 Feb 2026 19:03:46 +0000 ROA not before: Thu 12 Feb 2026 18:58:46 +0000 ROA not after: Thu 11 Feb 2027 19:03:46 +0000 asID: 401838 IP address blocks: 81.22.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:51:fa:71:e3:f2:b6:ea:af:e9:24:63:91:c6:2c:6c:19:b0:54:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:58:46 2026 GMT Not After : Feb 11 19:03:46 2027 GMT Subject: CN=540DFAD88B4A7BF589F3398DED339E4515DBE858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5b:e6:ce:2c:91:a6:6a:7e:34:bd:d3:65:b6: 54:87:90:d5:3b:80:f2:88:21:be:e7:3f:d4:a8:4a: fd:17:7a:14:2f:bb:6b:26:77:ab:ef:08:7d:de:d5: cc:d7:67:84:5a:51:c6:98:7e:a0:54:d5:1d:19:10: 36:27:a0:82:33:77:99:eb:49:90:78:ce:67:98:27: 54:f6:f8:09:be:ce:5a:6f:24:ff:4f:37:b4:25:a1: 5b:06:43:03:7f:3f:a6:94:54:46:0b:d9:5f:81:b7: c7:7b:8e:0e:32:b0:48:92:79:c3:12:6a:dd:ae:c7: cf:31:66:08:b3:ea:cd:dc:84:03:97:5d:53:6f:16: 19:11:88:3b:e1:d9:c5:71:75:4d:ed:7b:4d:bd:ec: e8:29:e0:7d:02:ba:8d:a4:25:79:79:4d:b2:ad:12: 0e:fd:4e:3d:f8:29:4c:a4:b4:f6:04:0e:65:8c:92: 85:15:5e:b2:6c:97:43:07:47:33:ce:1c:88:78:de: 1a:3a:42:4a:6b:69:7a:1e:9e:4c:a6:c6:b9:18:03: 3e:01:ab:74:1b:11:a5:63:52:53:de:d8:81:46:d0: 5f:1e:41:0a:2a:36:b3:52:c1:b1:be:e8:f1:b6:6d: 8a:3a:b8:44:77:d6:37:c1:f6:a2:b9:c5:b4:0e:2e: ab:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0D:FA:D8:8B:4A:7B:F5:89:F3:39:8D:ED:33:9E:45:15:DB:E8:58 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3132392e302f32342d3234203d3e20343031383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.129.0/24 Signature Algorithm: sha256WithRSAEncryption bc:bd:12:ac:c5:f0:cd:04:b2:10:a2:fc:b7:68:79:7a:75:87: 4e:40:41:8a:da:02:ea:ac:4b:23:e6:45:06:3f:29:04:5f:c7: 07:c9:9b:97:57:d5:14:4e:fc:61:41:e6:c2:d0:ec:dd:d4:4e: 18:0f:55:4f:7f:5b:d3:7c:5e:b9:e2:b5:12:e7:6e:71:8e:b4: af:9b:39:8c:53:ea:d0:d2:94:ca:04:cf:db:6b:b6:e1:f4:18: 8c:ea:0d:01:07:69:95:22:6e:cd:0e:fe:e8:f7:91:d1:25:9b: 33:45:2c:ce:c9:f4:53:d1:d1:3b:9f:00:9b:eb:55:15:70:bf: 1e:ae:c3:6e:65:41:54:2a:5b:db:25:d1:5b:fa:6f:04:fd:3d: fa:b7:f6:e0:b7:c7:22:c4:a7:4f:7f:4e:b1:7c:9b:dd:5d:ec: 50:68:76:68:da:f2:04:c8:a7:a9:4c:f4:90:10:d1:c9:4f:05: a8:6d:f8:26:b5:71:78:94:eb:a0:61:c7:b6:a5:67:c2:ef:a7: c5:03:11:b4:59:a6:55:a9:44:ab:d7:39:e5:55:74:c6:61:8b: 38:a7:b6:08:d5:2e:68:2b:f8:61:09:63:f2:72:23:54:cb:96: cf:1d:eb:d3:93:e3:ee:b8:9b:da:c4:dd:58:93:2f:33:46:7b: 93:25:c6:8f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUKlH6cePytuqv6SRjkcYsbBmwVPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU4NDZaFw0yNzAyMTExOTAzNDZaMDMxMTAvBgNV BAMTKDU0MERGQUQ4OEI0QTdCRjU4OUYzMzk4REVEMzM5RTQ1MTVEQkU4NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbW+bOLJGman40vdNltlSHkNU7 gPKIIb7nP9SoSv0XehQvu2smd6vvCH3e1czXZ4RaUcaYfqBU1R0ZEDYnoIIzd5nr SZB4zmeYJ1T2+Am+zlpvJP9PN7QloVsGQwN/P6aUVEYL2V+Bt8d7jg4ysEiSecMS at2ux88xZgiz6s3chAOXXVNvFhkRiDvh2cVxdU3te0297Ogp4H0Cuo2kJXl5TbKt Eg79Tj34KUyktPYEDmWMkoUVXrJsl0MHRzPOHIh43ho6QkpraXoenkymxrkYAz4B q3QbEaVjUlPe2IFG0F8eQQoqNrNSwbG+6PG2bYo6uER31jfB9qK5xbQOLqu3AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUVA362ItKe/WJ8zmN7TOeRRXb6FgwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzMjM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMxMzgzMzM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA URaBMA0GCSqGSIb3DQEBCwUAA4IBAQC8vRKsxfDNBLIQovy3aHl6dYdOQEGK2gLq rEsj5kUGPykEX8cHyZuXV9UUTvxhQebC0Ozd1E4YD1VPf1vTfF654rUS525xjrSv mzmMU+rQ0pTKBM/ba7bh9BiM6g0BB2mVIm7NDv7o95HRJZszRSzOyfRT0dE7nwCb 61UVcL8ersNuZUFUKlvbJdFb+m8E/T36t/bgt8cixKdPf06xfJvdXexQaHZo2vIE yKepTPSQENHJTwWobfgmtXF4lOugYce2pWfC76fFAxG0WaZVqUSr1znlVXTGYYs4 p7YI1S5oK/hhCWPyciNUy5bPHevTk+PuuJvaxN1Yky8zRnuTJcaP -----END CERTIFICATE-----Generated at Sat Feb 14 19:54:53 2026 by rpki-client