This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133302e302f32342d3234203d3e203631333137.roa File: 38312e32322e3133302e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: nl9CICtld+sog/S3pTwBfc/8jFvYNB+odOPu/xwLNRA= Subject key identifier: BC:6B:FD:29:DF:E4:F4:70:6B:40:70:4E:3B:A4:ED:C6:EA:BD:26:70 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 1989F31806F443C6E001C37A77A1A03276A86790 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133302e302f32342d3234203d3e203631333137.roa Signing time: Thu 12 Feb 2026 19:03:47 +0000 ROA not before: Thu 12 Feb 2026 18:58:47 +0000 ROA not after: Thu 11 Feb 2027 19:03:47 +0000 asID: 61317 IP address blocks: 81.22.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:89:f3:18:06:f4:43:c6:e0:01:c3:7a:77:a1:a0:32:76:a8:67:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:58:47 2026 GMT Not After : Feb 11 19:03:47 2027 GMT Subject: CN=BC6BFD29DFE4F4706B40704E3BA4EDC6EABD2670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:90:9f:c4:87:bd:a4:f1:22:24:28:fa:fc: a1:32:96:1b:a9:2c:42:0a:03:4e:aa:50:4b:f0:c2: 7b:08:d2:23:12:4b:d6:96:68:1c:a8:a3:67:23:8c: ba:63:34:1a:b0:eb:08:28:9d:b2:00:0c:bf:52:bf: e0:a9:47:02:c8:e5:ff:1b:22:b9:21:31:07:bc:dc: 41:dd:41:a1:00:81:5c:6b:3a:d3:1d:39:76:a9:6d: c0:b0:07:a9:75:23:bd:9d:a1:17:65:fb:35:7f:3e: 32:cf:ce:bf:65:eb:47:b5:fe:7f:b8:67:a8:1c:44: ac:9f:d3:76:73:d8:e9:54:0c:19:d9:55:1c:2f:69: 08:7a:ae:70:cf:15:69:d0:1d:69:98:01:0e:42:e2: bb:3c:93:a5:72:93:45:e0:0a:7a:30:18:9f:09:0a: fd:66:7e:f8:83:61:c1:6f:8e:ba:1c:ed:8d:73:80: f1:66:ae:7d:a3:03:48:5f:40:99:f0:d5:34:00:e8: 26:3f:f0:e6:3c:e8:53:82:c1:f5:85:f8:cd:9b:c9: 14:ad:fe:73:c0:99:ca:3c:97:af:34:e0:8d:f9:3b: 7c:5d:05:16:d8:22:7c:ae:c7:53:1d:cf:a3:c1:a9: c6:8f:41:a1:e4:ff:97:58:1f:b0:ce:b5:35:82:09: 9c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6B:FD:29:DF:E4:F4:70:6B:40:70:4E:3B:A4:ED:C6:EA:BD:26:70 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133302e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.130.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:db:09:83:62:07:b8:65:2a:41:6a:f6:41:88:58:f5:ba:12: a1:37:a9:bc:40:cb:2a:16:06:96:b3:11:4d:57:f3:5a:aa:ce: 73:2f:cd:b6:42:48:6b:ff:ef:a7:f2:b4:84:02:db:00:98:21: 9d:a9:fb:d0:17:cd:a5:0d:2e:d2:b7:7b:39:0f:1a:a1:04:bd: 9d:69:fb:17:b5:b4:0e:cd:a0:93:3e:71:36:d2:6d:26:59:99: 20:ce:85:56:40:0f:c6:7b:d3:5f:72:4f:85:e8:28:30:a9:d1: 9f:4d:79:29:ce:cc:cd:84:71:8d:d2:10:54:36:56:8f:eb:24: 64:bc:bf:b7:4a:80:8c:76:ec:e1:e7:b0:2f:1a:d8:91:59:b3: 85:b8:a7:42:ff:46:3f:3d:27:c4:1f:6c:8a:4e:77:3d:65:4d: 6e:8b:dc:05:95:c8:3d:9f:96:06:d2:9e:a9:9e:f5:13:2d:91: f0:a4:87:84:b0:39:cb:bd:1b:3f:3d:4c:f8:de:6e:e8:58:5a: 02:0b:43:0e:f2:89:76:5d:a6:42:8a:f3:03:1a:81:1c:9a:17: 37:37:48:8e:6e:6a:f9:c6:fe:f0:db:7d:78:26:59:bc:73:3c: 30:a3:57:bc:3f:e4:4b:7e:63:01:7a:31:2b:44:4e:f6:80:f8: 16:2e:3c:b2 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUGYnzGAb0Q8bgAcN6d6GgMnaoZ5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU4NDdaFw0yNzAyMTExOTAzNDdaMDMxMTAvBgNV BAMTKEJDNkJGRDI5REZFNEY0NzA2QjQwNzA0RTNCQTRFREM2RUFCRDI2NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9F5CfxIe9pPEiJCj6/KEylhup LEIKA06qUEvwwnsI0iMSS9aWaByoo2cjjLpjNBqw6wgonbIADL9Sv+CpRwLI5f8b IrkhMQe83EHdQaEAgVxrOtMdOXapbcCwB6l1I72doRdl+zV/PjLPzr9l60e1/n+4 Z6gcRKyf03Zz2OlUDBnZVRwvaQh6rnDPFWnQHWmYAQ5C4rs8k6Vyk0XgCnowGJ8J Cv1mfviDYcFvjroc7Y1zgPFmrn2jA0hfQJnw1TQA6CY/8OY86FOCwfWF+M2byRSt /nPAmco8l6804I35O3xdBRbYInyux1Mdz6PBqcaPQaHk/5dYH7DOtTWCCZyxAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUvGv9Kd/k9HBrQHBOO6Ttxuq9JnAwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzMzMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFEW gjANBgkqhkiG9w0BAQsFAAOCAQEAWtsJg2IHuGUqQWr2QYhY9boSoTepvEDLKhYG lrMRTVfzWqrOcy/NtkJIa//vp/K0hALbAJghnan70BfNpQ0u0rd7OQ8aoQS9nWn7 F7W0Ds2gkz5xNtJtJlmZIM6FVkAPxnvTX3JPhegoMKnRn015Kc7MzYRxjdIQVDZW j+skZLy/t0qAjHbs4eewLxrYkVmzhbinQv9GPz0nxB9sik53PWVNbovcBZXIPZ+W BtKeqZ71Ey2R8KSHhLA5y70bPz1M+N5u6FhaAgtDDvKJdl2mQorzAxqBHJoXNzdI jm5q+cb+8Nt9eCZZvHM8MKNXvD/kS35jAXoxK0RO9oD4Fi48sg== -----END CERTIFICATE-----Generated at Sat Feb 14 19:54:18 2026 by rpki-client