This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3132392e302f32342d3234203d3e2037303138.roa File: 38312e32322e3132392e302f32342d3234203d3e2037303138.roa (raw, json) Hash identifier: Cgw+EHkQLJVtpqdHa8vzioqkwiLMiTBD8+yz5bJxLPI= Subject key identifier: F2:C1:AB:18:09:0B:C7:83:10:65:FD:E1:0E:7F:68:1C:C6:6F:DB:F4 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 7EEE1CBA5B89D3C9AD7EB505B28EBD479454E49E Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3132392e302f32342d3234203d3e2037303138.roa Signing time: Thu 12 Feb 2026 19:19:58 +0000 ROA not before: Thu 12 Feb 2026 19:14:58 +0000 ROA not after: Thu 11 Feb 2027 19:19:58 +0000 asID: 7018 IP address blocks: 81.22.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ee:1c:ba:5b:89:d3:c9:ad:7e:b5:05:b2:8e:bd:47:94:54:e4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:14:58 2026 GMT Not After : Feb 11 19:19:58 2027 GMT Subject: CN=F2C1AB18090BC7831065FDE10E7F681CC66FDBF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e4:f7:19:60:78:9b:d0:6b:9e:ab:30:16:32: 40:20:e2:06:7b:33:76:e8:af:f0:4b:c7:39:c4:51: c5:e1:7b:22:6b:f5:b6:0b:d4:b2:45:8e:81:43:9f: b5:f0:90:98:ba:82:f3:a0:36:ea:db:da:f0:a5:83: 8f:d3:23:c2:31:94:b8:f6:76:5b:33:17:f5:b4:bb: 27:d5:d6:8a:18:3a:b8:19:7b:e1:53:45:91:40:3a: 93:8a:3f:ef:97:f0:25:bc:a4:a8:90:ff:75:74:13: 35:93:d9:b7:ad:6a:7a:77:32:d6:b8:b6:94:1a:2a: 6b:7c:db:46:d0:84:3a:c2:ee:d5:f7:7a:d5:90:c9: c4:19:f0:c6:26:56:5b:66:46:d0:53:70:5d:fc:fa: 02:f6:93:f8:c9:7a:b7:b0:cd:4a:f2:4b:55:a5:96: 8f:bb:c9:eb:a1:19:48:e7:a0:cb:21:7f:02:87:fe: 43:ec:6b:6e:66:1c:86:2f:3f:ab:1f:0f:b5:9d:1e: 44:21:2d:e5:12:68:a9:a4:d6:9f:19:e1:4b:8b:1f: 1d:12:7e:fe:74:94:be:61:b5:c6:8a:89:d2:62:3a: a3:f4:3c:48:83:30:75:db:ac:40:ca:15:fb:47:64: 9a:44:51:d0:bc:82:f7:ae:3a:47:e4:13:d3:a4:94: 2a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C1:AB:18:09:0B:C7:83:10:65:FD:E1:0E:7F:68:1C:C6:6F:DB:F4 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3132392e302f32342d3234203d3e2037303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.129.0/24 Signature Algorithm: sha256WithRSAEncryption c5:6e:97:0a:27:17:a0:86:4f:40:43:48:2d:b8:67:01:39:61: 15:bd:67:d8:8e:4f:fc:5b:20:40:48:75:29:71:5b:db:fe:bc: a3:95:39:fb:c1:35:15:33:46:e4:73:66:7c:2a:6c:18:6e:23: 1e:bb:38:0f:65:dc:79:47:09:61:d3:46:70:d1:fc:93:2b:a8: 30:a3:79:2d:3b:d9:17:11:fd:0f:28:2b:64:0a:58:97:88:87: 51:aa:6e:51:3b:0f:7b:71:be:59:45:e0:b9:60:62:52:19:93: 35:5e:20:a2:c2:13:72:51:e4:8f:5e:1d:d0:61:02:75:68:07: f4:a3:64:25:38:b9:aa:c5:b6:43:6b:e9:d5:1b:f4:6a:3e:0f: 75:20:2f:b3:5b:2c:08:cd:ec:5b:1e:8c:48:10:e6:e3:c9:7b: c8:6a:4f:a9:ca:ba:8f:13:fd:8a:5d:85:f9:71:74:d9:b4:46: 8e:b3:88:ef:cc:5b:2f:01:7a:ae:9b:8e:3b:66:d5:80:70:67: 04:b4:c7:1c:7a:20:87:ae:64:3d:49:0c:89:41:7c:ce:77:83: f8:39:55:5f:f0:6e:ec:98:c7:60:24:c4:4d:4b:be:72:f5:49: e9:9f:50:97:b3:e4:16:b3:f4:e4:16:c9:93:19:16:8c:ba:31: cc:59:4b:eb -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUfu4culuJ08mtfrUFso69R5RU5J4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTE0NThaFw0yNzAyMTExOTE5NThaMDMxMTAvBgNV BAMTKEYyQzFBQjE4MDkwQkM3ODMxMDY1RkRFMTBFN0Y2ODFDQzY2RkRCRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg5PcZYHib0GueqzAWMkAg4gZ7 M3bor/BLxznEUcXheyJr9bYL1LJFjoFDn7XwkJi6gvOgNurb2vClg4/TI8IxlLj2 dlszF/W0uyfV1ooYOrgZe+FTRZFAOpOKP++X8CW8pKiQ/3V0EzWT2betanp3Mta4 tpQaKmt820bQhDrC7tX3etWQycQZ8MYmVltmRtBTcF38+gL2k/jJerewzUryS1Wl lo+7yeuhGUjnoMshfwKH/kPsa25mHIYvP6sfD7WdHkQhLeUSaKmk1p8Z4UuLHx0S fv50lL5htcaKidJiOqP0PEiDMHXbrEDKFftHZJpEUdC8gveuOkfkE9OklCpRAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU8sGrGAkLx4MQZf3hDn9oHMZv2/QwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzMjM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABRFoEw DQYJKoZIhvcNAQELBQADggEBAMVulwonF6CGT0BDSC24ZwE5YRW9Z9iOT/xbIEBI dSlxW9v+vKOVOfvBNRUzRuRzZnwqbBhuIx67OA9l3HlHCWHTRnDR/JMrqDCjeS07 2RcR/Q8oK2QKWJeIh1GqblE7D3txvllF4LlgYlIZkzVeIKLCE3JR5I9eHdBhAnVo B/SjZCU4uarFtkNr6dUb9Go+D3UgL7NbLAjN7FsejEgQ5uPJe8hqT6nKuo8T/Ypd hflxdNm0Ro6ziO/MWy8Beq6bjjtm1YBwZwS0xxx6IIeuZD1JDIlBfM53g/g5VV/w buyYx2AkxE1LvnL1SemfUJez5Baz9OQWyZMZFoy6McxZS+s= -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:41 2026 by rpki-client