This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133312e302f32342d3234203d3e2037303239.roa File: 38312e32322e3133312e302f32342d3234203d3e2037303239.roa (raw, json) Hash identifier: O/dclDp5JXSlloRpQ/k63flIN+g6U4xU4JRaflVZ9Lw= Subject key identifier: F3:F5:57:6E:9A:16:8A:5A:73:68:04:64:F9:2E:B7:49:44:71:8B:65 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 5BF729C7BBACDC2B714D7DC24D5B1D01AFFC51D2 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133312e302f32342d3234203d3e2037303239.roa Signing time: Thu 12 Feb 2026 19:05:46 +0000 ROA not before: Thu 12 Feb 2026 19:00:46 +0000 ROA not after: Thu 11 Feb 2027 19:05:46 +0000 asID: 7029 IP address blocks: 81.22.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f7:29:c7:bb:ac:dc:2b:71:4d:7d:c2:4d:5b:1d:01:af:fc:51:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:00:46 2026 GMT Not After : Feb 11 19:05:46 2027 GMT Subject: CN=F3F5576E9A168A5A73680464F92EB74944718B65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:44:6b:7c:a9:f0:bd:af:5d:e0:4c:c0:58: 59:da:29:25:0b:28:e7:b1:59:6a:7e:d1:23:74:39: 7f:a6:60:99:7e:4f:1a:cc:51:37:82:bd:52:39:73: 23:35:89:bf:06:80:b5:a6:1a:e9:6d:2f:99:2e:8d: 07:67:0d:fd:3f:dd:27:45:95:6b:89:f3:c8:72:a5: 37:7f:ae:bd:c5:1e:2b:55:6b:d7:84:9a:3e:14:a5: 83:67:a2:95:12:7f:bb:af:6f:3c:20:78:77:5d:4d: 6a:6d:5e:8c:af:b9:a1:92:7e:6e:3f:00:1c:5d:48: a4:62:d6:be:8c:2b:ba:37:3d:68:09:c3:ff:f1:a6: a8:f8:5b:48:75:4a:09:03:d8:48:5b:e8:76:c8:d9: 7d:c8:25:f9:28:98:ce:2a:5b:aa:97:21:f2:c8:dc: 7e:65:51:fe:a0:f7:7c:98:39:d2:e4:aa:10:58:3f: df:fb:28:a4:05:8e:a1:4e:ba:60:fe:45:4d:6a:1b: b1:f2:0d:7f:4a:57:96:1a:9c:8d:07:c1:ba:09:0a: 25:6d:54:43:26:42:8d:86:eb:9d:d2:d5:19:52:41: 54:f9:31:d1:2e:14:84:51:36:41:ed:15:5c:bc:4a: 09:9a:a3:02:67:73:f0:82:92:ce:2c:ad:ae:a9:9a: 9b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F5:57:6E:9A:16:8A:5A:73:68:04:64:F9:2E:B7:49:44:71:8B:65 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133312e302f32342d3234203d3e2037303239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.131.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:45:5a:e9:df:df:75:c3:37:77:15:bd:65:2e:70:06:19:8c: 22:0a:8d:c4:b8:70:23:55:b4:4f:0f:98:cf:d9:13:a0:24:8a: 91:ec:1d:59:a0:4e:dc:40:3f:5b:26:4f:c7:3d:7e:de:77:4d: 77:2e:4f:ea:ec:4c:eb:aa:73:48:66:26:30:33:55:0e:32:0e: 0b:5c:8e:b7:8a:1e:b4:2e:ca:47:bf:92:a1:a2:db:dd:1e:1f: 6d:2b:2f:23:61:f8:f3:61:db:4f:95:45:f3:0c:aa:77:07:24: 4d:71:a5:2b:89:75:43:7b:4d:d9:55:ab:e0:74:91:37:98:bb: 2f:4c:58:5d:14:7c:36:9e:b4:ab:c0:e3:22:be:6a:a7:93:df: 5b:cc:4d:72:60:8e:3b:8f:bd:df:46:29:65:f6:9e:45:f1:82: 0e:d7:8f:e0:bd:67:17:42:2c:7a:d9:a3:8e:b2:ac:dd:18:2d: d6:35:f4:2e:56:e1:ee:f8:0f:14:35:86:7f:5a:a7:81:5c:b8: 14:6a:8c:83:02:6e:cc:b0:bc:61:0c:82:12:c5:3e:2f:3d:2c: 7f:11:2c:4f:d9:35:a7:9d:70:64:0b:a1:7c:73:c0:ff:68:75: bd:bf:40:35:61:6a:27:21:97:da:a4:0e:a2:88:81:6b:e6:e4: 20:a2:db:27 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUW/cpx7us3CtxTX3CTVsdAa/8UdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTAwNDZaFw0yNzAyMTExOTA1NDZaMDMxMTAvBgNV BAMTKEYzRjU1NzZFOUExNjhBNUE3MzY4MDQ2NEY5MkVCNzQ5NDQ3MThCNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8q0RrfKnwva9d4EzAWFnaKSUL KOexWWp+0SN0OX+mYJl+TxrMUTeCvVI5cyM1ib8GgLWmGultL5kujQdnDf0/3SdF lWuJ88hypTd/rr3FHitVa9eEmj4UpYNnopUSf7uvbzwgeHddTWptXoyvuaGSfm4/ ABxdSKRi1r6MK7o3PWgJw//xpqj4W0h1SgkD2Ehb6HbI2X3IJfkomM4qW6qXIfLI 3H5lUf6g93yYOdLkqhBYP9/7KKQFjqFOumD+RU1qG7HyDX9KV5YanI0HwboJCiVt VEMmQo2G653S1RlSQVT5MdEuFIRRNkHtFVy8SgmaowJnc/CCks4sra6pmps5AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU8/VXbpoWilpzaARk+S63SURxi2UwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzMzMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczMDMyMzkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABRFoMw DQYJKoZIhvcNAQELBQADggEBAD9FWunf33XDN3cVvWUucAYZjCIKjcS4cCNVtE8P mM/ZE6AkipHsHVmgTtxAP1smT8c9ft53TXcuT+rsTOuqc0hmJjAzVQ4yDgtcjreK HrQuyke/kqGi290eH20rLyNh+PNh20+VRfMMqncHJE1xpSuJdUN7TdlVq+B0kTeY uy9MWF0UfDaetKvA4yK+aqeT31vMTXJgjjuPvd9GKWX2nkXxgg7Xj+C9ZxdCLHrZ o46yrN0YLdY19C5W4e74DxQ1hn9ap4FcuBRqjIMCbsywvGEMghLFPi89LH8RLE/Z NaedcGQLoXxzwP9odb2/QDVhaichl9qkDqKIgWvm5CCi2yc= -----END CERTIFICATE-----Generated at Sat Feb 14 19:52:19 2026 by rpki-client