This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133312e302f32342d3234203d3e20393936.roa File: 38312e32322e3133312e302f32342d3234203d3e20393936.roa (raw, json) Hash identifier: snqCc20AbnFsXfA9vRwHjBbY4VLKZIcNkTHJXoX9qp4= Subject key identifier: 71:7C:09:CE:D4:70:41:44:C5:72:E4:28:07:E7:67:F6:7B:4D:79:D8 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 2D611F40FB60E010D867D6CD3661709F94E66039 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133312e302f32342d3234203d3e20393936.roa Signing time: Thu 12 Feb 2026 19:18:51 +0000 ROA not before: Thu 12 Feb 2026 19:13:51 +0000 ROA not after: Thu 11 Feb 2027 19:18:51 +0000 asID: 996 IP address blocks: 81.22.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:61:1f:40:fb:60:e0:10:d8:67:d6:cd:36:61:70:9f:94:e6:60:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:13:51 2026 GMT Not After : Feb 11 19:18:51 2027 GMT Subject: CN=717C09CED4704144C572E42807E767F67B4D79D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:91:c6:be:5e:3b:b2:13:cd:95:c0:9e:c1:a8: e9:83:e0:50:f4:b8:ea:6a:e0:39:9d:43:22:65:8d: a7:cb:22:2d:2b:aa:59:35:4c:c6:44:f6:44:6b:e9: 42:f9:b9:88:43:cc:f5:c8:23:e4:ce:e8:eb:a4:74: 07:5b:46:1e:e7:7a:de:95:bf:9f:27:81:85:e3:74: 15:b7:46:8b:fa:de:fd:4a:24:10:4a:38:a8:d5:ed: 74:3c:ec:23:57:76:e8:e9:85:e5:fa:af:3e:8e:9b: 80:9f:dc:0a:c4:03:1a:a8:2d:7a:8b:ed:10:f7:33: bb:05:c8:9c:4d:ae:b8:24:a2:1b:72:87:be:d3:b3: f6:36:fc:f1:cc:ff:ca:4e:46:28:77:17:09:c2:ac: 60:d2:0c:fa:c1:a5:4c:22:b1:03:f5:96:9c:ea:c5: 6e:ca:26:18:03:00:4e:4c:e2:9e:b0:43:bb:4c:02: e6:1e:74:e6:42:31:e4:d0:70:46:26:22:84:00:6c: 6a:a4:08:94:20:71:bf:99:61:49:ff:e4:2a:5a:ee: 42:53:a3:63:44:d3:b4:ad:0a:63:e7:ed:69:b6:d6: 24:ea:0b:42:fd:3c:21:40:fb:7b:89:61:be:71:06: 78:b5:e5:02:c3:fe:e5:44:ff:f7:4c:ab:c5:e7:5f: dd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7C:09:CE:D4:70:41:44:C5:72:E4:28:07:E7:67:F6:7B:4D:79:D8 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133312e302f32342d3234203d3e20393936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.131.0/24 Signature Algorithm: sha256WithRSAEncryption bb:23:ae:b0:dd:39:14:28:ec:7d:a0:28:b5:88:35:d6:5a:a2: 06:13:b2:6e:c5:d1:bc:08:24:1a:a5:42:71:56:17:50:31:3b: b4:9f:a7:cc:48:50:61:f2:62:a6:45:ab:fa:05:ab:89:96:78: f2:f6:44:89:b5:ec:a9:a2:36:34:32:5e:57:65:8b:79:8d:b1: 4c:35:b7:d7:cb:3a:eb:ca:05:13:2d:4e:94:b7:ba:03:eb:1f: f9:1d:69:d1:39:13:76:bb:31:fc:2d:90:4b:8e:a7:91:06:75: 8d:8f:e6:09:93:2a:b8:98:e1:7a:c2:9c:f0:9c:f3:b5:b2:c7: e2:f3:34:6c:e3:b0:c4:71:dc:59:51:5c:6c:fd:be:c0:73:c7: 60:73:ad:cc:4f:fb:2e:1a:3c:94:13:8d:c5:b3:5d:7c:ef:38: 9a:45:83:8d:9c:15:0b:d5:31:d5:ee:f9:dd:7d:e8:34:4b:53: 2e:cf:e7:70:5a:d0:f7:98:1c:9e:09:b6:e4:51:58:f2:82:e1: 8e:d6:d1:ce:3c:16:87:cc:3b:34:32:46:a5:1d:b7:02:63:68: 81:0d:ff:22:6c:f0:b6:ee:cf:35:68:53:43:ca:88:0f:cb:47: 96:b8:e8:17:bf:1b:8a:70:03:ab:5c:a8:a8:c4:55:17:ce:ed: 25:7d:65:f4 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIULWEfQPtg4BDYZ9bNNmFwn5TmYDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTEzNTFaFw0yNzAyMTExOTE4NTFaMDMxMTAvBgNV BAMTKDcxN0MwOUNFRDQ3MDQxNDRDNTcyRTQyODA3RTc2N0Y2N0I0RDc5RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJkca+XjuyE82VwJ7BqOmD4FD0 uOpq4DmdQyJljafLIi0rqlk1TMZE9kRr6UL5uYhDzPXII+TO6OukdAdbRh7net6V v58ngYXjdBW3Rov63v1KJBBKOKjV7XQ87CNXdujpheX6rz6Om4Cf3ArEAxqoLXqL 7RD3M7sFyJxNrrgkohtyh77Ts/Y2/PHM/8pORih3FwnCrGDSDPrBpUwisQP1lpzq xW7KJhgDAE5M4p6wQ7tMAuYedOZCMeTQcEYmIoQAbGqkCJQgcb+ZYUn/5Cpa7kJT o2NE07StCmPn7Wm21iTqC0L9PCFA+3uJYb5xBni15QLD/uVE//dMq8XnX90zAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUcXwJztRwQUTFcuQoB+dn9ntNedgwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzMzMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzOTM2LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURaDMA0G CSqGSIb3DQEBCwUAA4IBAQC7I66w3TkUKOx9oCi1iDXWWqIGE7JuxdG8CCQapUJx VhdQMTu0n6fMSFBh8mKmRav6BauJlnjy9kSJteypojY0Ml5XZYt5jbFMNbfXyzrr ygUTLU6Ut7oD6x/5HWnRORN2uzH8LZBLjqeRBnWNj+YJkyq4mOF6wpzwnPO1ssfi 8zRs47DEcdxZUVxs/b7Ac8dgc63MT/suGjyUE43Fs1187ziaRYONnBUL1THV7vnd feg0S1Muz+dwWtD3mByeCbbkUVjyguGO1tHOPBaHzDs0MkalHbcCY2iBDf8ibPC2 7s81aFNDyogPy0eWuOgXvxuKcAOrXKioxFUXzu0lfWX0 -----END CERTIFICATE-----Generated at Sat Feb 14 19:52:22 2026 by rpki-client