This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133312e302f32342d3234203d3e2037303138.roa File: 38312e32322e3133312e302f32342d3234203d3e2037303138.roa (raw, json) Hash identifier: gG1PubqgjzaZHwDjf0Ig74rLfJN4O3vThvAM3NlfiiM= Subject key identifier: 0E:CC:E4:7A:E7:E9:2C:24:8A:E0:06:3A:63:8B:74:67:7F:09:50:57 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 18813076E3D8B67368693891541DDCA966AE1250 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133312e302f32342d3234203d3e2037303138.roa Signing time: Thu 12 Feb 2026 19:20:10 +0000 ROA not before: Thu 12 Feb 2026 19:15:10 +0000 ROA not after: Thu 11 Feb 2027 19:20:10 +0000 asID: 7018 IP address blocks: 81.22.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:81:30:76:e3:d8:b6:73:68:69:38:91:54:1d:dc:a9:66:ae:12:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:15:10 2026 GMT Not After : Feb 11 19:20:10 2027 GMT Subject: CN=0ECCE47AE7E92C248AE0063A638B74677F095057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b3:ef:c0:9a:39:63:c3:27:27:06:f4:0b:39: d9:21:40:45:ac:eb:10:94:14:11:7c:c3:1c:82:48: 3a:50:12:b3:68:a1:d2:ac:d5:e0:ba:21:b6:1c:f1: cf:11:0e:cf:9d:97:4a:dc:cf:04:e8:ff:27:85:32: 2f:2d:fe:1a:63:86:dd:21:2e:5d:70:b6:24:0d:d8: 6f:9c:e0:bd:69:be:46:f2:80:27:95:8d:44:10:63: 00:d1:62:d7:9e:ca:1b:ca:1f:12:ec:ad:0c:ff:3d: b1:42:29:61:7a:b0:d0:eb:26:0f:87:99:95:c8:3b: d8:14:3e:31:d5:09:2c:cb:0b:dd:9c:28:54:1b:35: 0e:20:e0:ca:33:bb:4f:a1:c8:e3:51:32:8f:63:f5: 7e:60:92:18:be:e9:c2:07:de:b8:07:6e:6f:64:f2: 4c:5d:4f:13:67:b9:66:29:4b:e0:b3:73:f9:83:7b: 3e:d9:d4:d4:0e:10:85:b2:0e:f3:e0:ab:98:d7:3f: cd:97:d1:98:77:e2:be:5f:ec:4a:bc:40:2d:93:92: 0c:6a:b2:45:b3:8c:4c:7d:bd:1c:be:78:86:2a:ac: 70:a9:92:15:d5:0d:49:57:71:4b:e2:6f:bb:56:2b: f8:4e:7e:e8:08:26:2f:fe:53:66:b2:53:b1:71:ca: 7b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CC:E4:7A:E7:E9:2C:24:8A:E0:06:3A:63:8B:74:67:7F:09:50:57 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133312e302f32342d3234203d3e2037303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.131.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:23:8d:8f:1f:32:f2:7a:98:63:9e:8b:cf:ce:f4:61:d0:c0: 49:3a:d4:fc:b6:ec:1e:79:e8:3a:3c:47:7c:a9:b4:a0:3d:c2: c9:b1:db:8c:51:15:c4:6f:35:7c:45:75:fd:53:41:51:2c:ae: 2f:7c:a3:4e:64:3e:65:dd:78:70:21:57:20:df:8d:a3:fb:ec: e3:26:8a:41:c0:3f:5c:a1:46:52:df:ba:a5:92:63:ee:23:79: 6d:51:23:d2:db:0a:11:85:a3:3e:ae:9d:bd:b6:d8:8b:28:ea: 3f:0e:f6:9c:4b:0f:3a:15:74:ce:e4:81:21:37:00:b2:07:07: e5:2d:a5:48:8c:49:38:46:1c:f9:34:c6:23:e5:f5:a4:73:7f: e9:b9:82:64:c1:9b:fc:37:3c:85:2f:4e:67:95:63:f4:f4:86: 10:d5:ed:1d:3e:15:a4:a3:8f:31:84:72:8c:f7:5b:0f:2a:37: 1b:f0:53:20:6b:ee:7c:ef:02:68:02:a4:8f:d8:49:9e:b4:b5: f7:99:06:e0:a2:c0:33:69:ce:50:8c:85:60:f7:43:26:54:e0: b4:62:8a:36:2e:fa:8b:05:93:1e:b9:ea:de:0a:1d:d0:ab:d6: 93:7e:d7:a8:e2:d4:fb:79:aa:72:82:30:db:bb:85:25:10:88: f2:aa:7c:f4 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUGIEwduPYtnNoaTiRVB3cqWauElAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTE1MTBaFw0yNzAyMTExOTIwMTBaMDMxMTAvBgNV BAMTKDBFQ0NFNDdBRTdFOTJDMjQ4QUUwMDYzQTYzOEI3NDY3N0YwOTUwNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCes+/AmjljwycnBvQLOdkhQEWs 6xCUFBF8wxyCSDpQErNoodKs1eC6IbYc8c8RDs+dl0rczwTo/yeFMi8t/hpjht0h Ll1wtiQN2G+c4L1pvkbygCeVjUQQYwDRYteeyhvKHxLsrQz/PbFCKWF6sNDrJg+H mZXIO9gUPjHVCSzLC92cKFQbNQ4g4Mozu0+hyONRMo9j9X5gkhi+6cIH3rgHbm9k 8kxdTxNnuWYpS+Czc/mDez7Z1NQOEIWyDvPgq5jXP82X0Zh34r5f7Eq8QC2Tkgxq skWzjEx9vRy+eIYqrHCpkhXVDUlXcUvib7tWK/hOfugIJi/+U2ayU7Fxynu7AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUDszkeufpLCSK4AY6Y4t0Z38JUFcwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzMzMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABRFoMw DQYJKoZIhvcNAQELBQADggEBAD4jjY8fMvJ6mGOei8/O9GHQwEk61Py27B556Do8 R3yptKA9wsmx24xRFcRvNXxFdf1TQVEsri98o05kPmXdeHAhVyDfjaP77OMmikHA P1yhRlLfuqWSY+4jeW1RI9LbChGFoz6unb222Iso6j8O9pxLDzoVdM7kgSE3ALIH B+UtpUiMSThGHPk0xiPl9aRzf+m5gmTBm/w3PIUvTmeVY/T0hhDV7R0+FaSjjzGE coz3Ww8qNxvwUyBr7nzvAmgCpI/YSZ60tfeZBuCiwDNpzlCMhWD3QyZU4LRiijYu +osFkx656t4KHdCr1pN+16ji1Pt5qnKCMNu7hSUQiPKqfPQ= -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:15 2026 by rpki-client