This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3132392e302f32342d3234203d3e2036303739.roa File: 38312e32322e3132392e302f32342d3234203d3e2036303739.roa (raw, json) Hash identifier: Ace1/kpFAUntS5wXzTz9F4SfjaNosxHb4gxs6ykXQpM= Subject key identifier: 46:0E:AA:EE:29:87:4B:86:41:7F:E0:3C:CD:60:02:43:81:04:86:D5 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 5C8A5249D7A1CFFDDFC52FADE77DEC8CE45B4AA4 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3132392e302f32342d3234203d3e2036303739.roa Signing time: Fri 13 Feb 2026 09:47:57 +0000 ROA not before: Fri 13 Feb 2026 09:42:57 +0000 ROA not after: Fri 12 Feb 2027 09:47:57 +0000 asID: 6079 IP address blocks: 81.22.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:8a:52:49:d7:a1:cf:fd:df:c5:2f:ad:e7:7d:ec:8c:e4:5b:4a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 13 09:42:57 2026 GMT Not After : Feb 12 09:47:57 2027 GMT Subject: CN=460EAAEE29874B86417FE03CCD600243810486D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:af:07:d3:10:80:50:0b:68:44:3f:82:3a:27: 72:3e:64:fb:2d:4e:73:77:2f:ed:47:c1:47:c9:35: d1:d0:ad:b5:45:21:41:ab:d4:8e:cb:5d:07:11:c8: 7e:49:12:16:bb:4c:94:05:22:33:f0:14:cd:3d:b0: 7c:22:fe:04:1b:02:bc:a1:ee:17:5d:79:0f:9a:20: 7f:64:34:37:6b:ce:d2:c8:bc:63:06:de:1b:d9:0c: 76:46:2e:f6:34:f2:b8:42:fb:14:e0:b4:fb:55:2d: eb:94:76:94:7c:95:2c:45:a9:52:81:99:4d:9f:c7: 56:0d:fc:a3:ca:49:e5:ed:ea:83:76:75:7b:01:8b: 13:39:aa:ca:bb:c5:9f:d1:49:08:11:2f:2e:42:7d: 3c:f6:48:dd:d5:72:70:33:75:d3:cb:89:3f:25:55: a7:7c:19:79:f4:10:d7:06:fd:ce:6c:22:eb:14:a1: 20:d9:63:ee:b4:60:d0:2b:21:f9:b3:21:44:8d:64: 81:d3:ae:dc:60:3f:86:fa:ef:22:47:6d:1c:bf:4d: e6:c5:ea:df:26:73:1e:85:c3:72:e4:12:98:49:8b: 87:5c:f0:00:c9:b6:3e:8d:24:0c:73:2f:e4:ee:a9: 83:73:0e:4f:65:56:98:56:c4:83:8e:65:c0:c1:7f: 97:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0E:AA:EE:29:87:4B:86:41:7F:E0:3C:CD:60:02:43:81:04:86:D5 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3132392e302f32342d3234203d3e2036303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.129.0/24 Signature Algorithm: sha256WithRSAEncryption cb:51:fa:8f:d8:75:81:c0:ef:a1:3c:75:0a:63:83:1e:f4:fd: 20:f3:1f:d3:ab:8b:be:a0:09:0a:23:cf:be:87:34:1c:41:d5: 66:09:f0:8f:47:ad:fb:8c:ca:c1:54:05:20:d6:3a:d3:2c:1d: 36:ae:11:dd:63:98:c7:3a:86:b6:f7:8e:e9:dc:2c:42:21:4a: 28:5b:a9:4d:0d:43:d0:d0:f2:f6:9f:5c:29:cc:0e:42:46:d4: 2a:dc:42:c6:3d:56:da:ef:0d:c8:aa:1f:39:01:fc:11:0c:ca: 05:ac:3c:ac:1a:eb:18:ea:f1:cb:2b:99:4d:b3:21:f5:fe:6c: 17:68:ec:7b:26:94:48:79:1b:17:f5:06:d2:4f:d4:dc:af:dd: 0b:30:bb:0a:91:d2:29:0e:cf:69:03:0a:5a:71:65:5f:3f:7f: e0:6e:5a:ba:73:58:b3:b5:23:f4:e8:46:c0:cf:4e:2e:c2:72: b9:cb:ea:1d:d3:b1:55:84:29:3d:1f:29:89:63:31:32:ac:6d: 07:91:3b:9f:d4:b9:8c:69:f0:eb:d5:12:de:05:71:96:e8:67: 62:4c:bd:f3:c0:3f:8e:6a:2e:d0:2e:9b:4a:46:d6:83:0a:f9: 86:b6:c3:b0:cf:88:47:10:d5:a7:90:d6:5e:17:51:05:13:1f: 59:d7:d7:6e -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUXIpSSdehz/3fxS+t533sjORbSqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTMwOTQyNTdaFw0yNzAyMTIwOTQ3NTdaMDMxMTAvBgNV BAMTKDQ2MEVBQUVFMjk4NzRCODY0MTdGRTAzQ0NENjAwMjQzODEwNDg2RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRrwfTEIBQC2hEP4I6J3I+ZPst TnN3L+1HwUfJNdHQrbVFIUGr1I7LXQcRyH5JEha7TJQFIjPwFM09sHwi/gQbAryh 7hddeQ+aIH9kNDdrztLIvGMG3hvZDHZGLvY08rhC+xTgtPtVLeuUdpR8lSxFqVKB mU2fx1YN/KPKSeXt6oN2dXsBixM5qsq7xZ/RSQgRLy5CfTz2SN3VcnAzddPLiT8l Vad8GXn0ENcG/c5sIusUoSDZY+60YNArIfmzIUSNZIHTrtxgP4b67yJHbRy/TebF 6t8mcx6Fw3LkEphJi4dc8ADJtj6NJAxzL+TuqYNzDk9lVphWxIOOZcDBf5drAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQURg6q7imHS4ZBf+A8zWACQ4EEhtUwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzMjM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMDM3Mzkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABRFoEw DQYJKoZIhvcNAQELBQADggEBAMtR+o/YdYHA76E8dQpjgx70/SDzH9Ori76gCQoj z76HNBxB1WYJ8I9HrfuMysFUBSDWOtMsHTauEd1jmMc6hrb3juncLEIhSihbqU0N Q9DQ8vafXCnMDkJG1CrcQsY9VtrvDciqHzkB/BEMygWsPKwa6xjq8csrmU2zIfX+ bBdo7HsmlEh5Gxf1BtJP1Nyv3QswuwqR0ikOz2kDClpxZV8/f+BuWrpzWLO1I/To RsDPTi7CcrnL6h3TsVWEKT0fKYljMTKsbQeRO5/UuYxp8OvVEt4FcZboZ2JMvfPA P45qLtAum0pG1oMK+Ya2w7DPiEcQ1aeQ1l4XUQUTH1nX124= -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:51 2026 by rpki-client