This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133332e302f32342d3234203d3e20323030303137.roa File: 38312e32322e3133332e302f32342d3234203d3e20323030303137.roa (raw, json) Hash identifier: OJGHDwcWvWZqgD0Cmttmf5ZvXPgXXcDQMVRrlqzqF4I= Subject key identifier: D6:9A:D5:82:90:76:54:9E:D0:E6:A4:AD:B0:9D:C0:28:4C:D7:4E:B0 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 0F6045B5D8429723B51C06EC1EE9DC836CDF8250 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133332e302f32342d3234203d3e20323030303137.roa Signing time: Thu 12 Feb 2026 19:03:47 +0000 ROA not before: Thu 12 Feb 2026 18:58:47 +0000 ROA not after: Thu 11 Feb 2027 19:03:47 +0000 asID: 200017 IP address blocks: 81.22.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:60:45:b5:d8:42:97:23:b5:1c:06:ec:1e:e9:dc:83:6c:df:82:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:58:47 2026 GMT Not After : Feb 11 19:03:47 2027 GMT Subject: CN=D69AD5829076549ED0E6A4ADB09DC0284CD74EB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:51:61:f3:95:12:76:1d:60:ab:46:0e:c2:3c: df:ad:e6:5b:54:b0:06:ea:bd:1f:59:bf:3a:75:f3: 97:55:fb:97:23:f7:32:91:e4:b4:a2:2f:bc:13:91: 56:18:fd:0a:0e:60:a9:47:5f:64:33:2d:82:8f:73: 09:43:29:41:f4:7e:d4:97:ec:7b:10:e2:59:06:cf: 28:cd:9b:79:39:3f:f6:f4:3e:50:f2:2c:0e:9b:9f: 34:5c:60:fd:37:25:9c:9f:5c:79:d2:02:81:11:44: 5a:d6:ed:4d:3a:8f:d5:b1:73:ee:c0:25:06:b1:e8: db:69:da:3b:37:92:3e:7d:e1:1c:69:37:01:d4:6a: 3a:7e:10:13:58:aa:7d:77:eb:fa:9d:f5:c4:d0:d2: e6:35:38:ec:7b:23:9c:d6:d5:a3:fb:d8:16:0f:fd: e7:db:f6:f7:32:7a:56:6e:ed:d8:8d:0d:af:42:44: 13:ca:cd:c1:be:93:1b:56:34:ab:e5:88:46:83:a2: ca:ff:00:17:bd:54:71:1a:b0:3f:91:3a:eb:6f:30: d5:63:7c:b8:66:83:a2:cf:83:d6:57:7f:c2:53:18: 6b:5c:c4:cc:73:fa:ce:e3:b1:d9:d4:de:a6:8a:25: 1c:c9:2e:85:86:a4:08:23:b7:e8:9b:e3:8a:01:4a: 92:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9A:D5:82:90:76:54:9E:D0:E6:A4:AD:B0:9D:C0:28:4C:D7:4E:B0 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133332e302f32342d3234203d3e20323030303137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.133.0/24 Signature Algorithm: sha256WithRSAEncryption 57:5c:c0:3c:2e:9d:55:d9:a7:77:a7:9f:c4:d3:82:a8:46:a4: ff:3b:45:ad:c8:7d:ab:63:c6:37:06:dd:ac:99:93:dd:53:5a: 53:f3:26:cf:05:1b:b2:19:39:32:88:10:7d:8f:7e:89:51:5f: 1a:46:e4:d3:a8:8d:33:e2:6f:00:b5:e8:25:ba:be:1f:1b:e8: 78:ce:3c:e4:1b:e6:86:e8:f4:50:1b:e4:a6:11:f3:13:ee:d4: d3:39:fd:13:8c:62:c2:6f:3a:7c:4d:0f:a0:95:c2:a3:7b:64: 27:18:b7:d5:9b:7a:33:1a:44:31:03:25:a5:92:ce:d6:9e:b0: 41:23:6d:1a:4f:6c:9a:f2:23:32:b8:81:9a:02:62:d9:a9:39: a6:00:8e:01:b2:47:1f:da:40:3b:1b:33:16:67:d4:01:7c:5f: e7:d5:8e:0f:af:d9:d0:e2:5c:6b:8d:4d:78:53:03:8e:ab:55: f2:e5:d9:ae:41:27:13:c4:19:8b:32:72:f6:c4:0a:32:87:c5: f0:51:d9:7b:28:bd:bf:25:e2:b3:4e:9f:e6:80:fd:74:a0:f9: df:2f:ef:10:f1:30:db:40:91:ef:1a:5f:e4:e2:1a:36:ff:af: 85:f2:0d:e6:0c:7e:76:b1:14:84:53:6a:ad:2f:46:c0:e6:f8: 18:2a:57:f8 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUD2BFtdhClyO1HAbsHuncg2zfglAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU4NDdaFw0yNzAyMTExOTAzNDdaMDMxMTAvBgNV BAMTKEQ2OUFENTgyOTA3NjU0OUVEMEU2QTRBREIwOURDMDI4NENENzRFQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUUWHzlRJ2HWCrRg7CPN+t5ltU sAbqvR9Zvzp185dV+5cj9zKR5LSiL7wTkVYY/QoOYKlHX2QzLYKPcwlDKUH0ftSX 7HsQ4lkGzyjNm3k5P/b0PlDyLA6bnzRcYP03JZyfXHnSAoERRFrW7U06j9Wxc+7A JQax6Ntp2js3kj594RxpNwHUajp+EBNYqn136/qd9cTQ0uY1OOx7I5zW1aP72BYP /efb9vcyelZu7diNDa9CRBPKzcG+kxtWNKvliEaDosr/ABe9VHEasD+ROutvMNVj fLhmg6LPg9ZXf8JTGGtcxMxz+s7jsdnU3qaKJRzJLoWGpAgjt+ib44oBSpLFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU1prVgpB2VJ7Q5qStsJ3AKEzXTrAwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzMzMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMwMzAzMTM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA URaFMA0GCSqGSIb3DQEBCwUAA4IBAQBXXMA8Lp1V2ad3p5/E04KoRqT/O0WtyH2r Y8Y3Bt2smZPdU1pT8ybPBRuyGTkyiBB9j36JUV8aRuTTqI0z4m8Ateglur4fG+h4 zjzkG+aG6PRQG+SmEfMT7tTTOf0TjGLCbzp8TQ+glcKje2QnGLfVm3ozGkQxAyWl ks7WnrBBI20aT2ya8iMyuIGaAmLZqTmmAI4Bskcf2kA7GzMWZ9QBfF/n1Y4Pr9nQ 4lxrjU14UwOOq1Xy5dmuQScTxBmLMnL2xAoyh8XwUdl7KL2/JeKzTp/mgP10oPnf L+8Q8TDbQJHvGl/k4ho2/6+F8g3mDH52sRSEU2qtL0bA5vgYKlf4 -----END CERTIFICATE-----Generated at Sat Feb 14 19:55:17 2026 by rpki-client