This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133342e302f32342d3234203d3e203439393831.roa File: 38312e32322e3133342e302f32342d3234203d3e203439393831.roa (raw, json) Hash identifier: 4Vur4jYeOlHIJitVprV43YkGKklmNJPnNYDEqVYqkzw= Subject key identifier: 8A:D7:3F:2A:95:F7:2A:01:20:F1:D8:93:F0:F3:8F:99:C7:B2:AB:B5 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 3AD9B7B3372E033EC9BCFF7DC3F434ADDDD59F85 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133342e302f32342d3234203d3e203439393831.roa Signing time: Thu 12 Feb 2026 19:23:30 +0000 ROA not before: Thu 12 Feb 2026 19:18:30 +0000 ROA not after: Thu 11 Feb 2027 19:23:30 +0000 asID: 49981 IP address blocks: 81.22.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d9:b7:b3:37:2e:03:3e:c9:bc:ff:7d:c3:f4:34:ad:dd:d5:9f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:18:30 2026 GMT Not After : Feb 11 19:23:30 2027 GMT Subject: CN=8AD73F2A95F72A0120F1D893F0F38F99C7B2ABB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:78:6c:01:26:c4:e0:19:bd:bd:d0:05:65:3d: 7e:93:f6:76:ac:35:5c:1b:a2:6d:18:89:83:fa:d5: b8:4a:3d:a2:9d:e5:93:99:52:1e:59:cd:ad:14:6a: 20:79:d6:54:8a:e7:0e:08:0e:bd:f2:5f:2a:28:cd: af:04:1f:e6:e4:f9:b0:8a:8f:0a:be:f8:34:e2:5c: 23:10:f6:78:af:7a:62:fc:2c:cb:b4:c1:30:8c:2a: 12:9a:df:88:d7:26:b9:04:1b:25:70:f8:9c:b1:dc: c3:6c:12:86:6c:59:77:d6:df:37:f1:b4:3b:ab:35: ff:ae:5a:50:80:88:c9:17:aa:5d:19:ba:16:9d:a6: f1:52:84:a8:b4:8c:62:1e:e0:08:95:32:dc:93:b8: 17:0f:3e:fa:2e:43:a8:4d:28:a8:df:3f:59:2c:06: db:fa:48:55:fc:ec:23:bd:95:a3:8d:ff:c7:6b:1b: 14:d0:d1:c0:14:19:7d:c3:81:a3:5f:10:50:c2:28: e8:80:49:e6:ea:4e:ff:97:24:4a:37:65:86:e0:d3: 3d:d7:cf:c2:c6:6a:6d:a1:3b:d6:3f:cf:6f:cd:0b: 30:7e:4d:4e:10:cd:54:21:10:1e:01:77:4c:74:ae: 7b:20:54:15:d5:0a:8d:a6:5f:97:20:9f:8f:31:69: c0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D7:3F:2A:95:F7:2A:01:20:F1:D8:93:F0:F3:8F:99:C7:B2:AB:B5 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133342e302f32342d3234203d3e203439393831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.134.0/24 Signature Algorithm: sha256WithRSAEncryption 08:d0:8f:63:e5:fa:97:55:c9:e9:df:b2:9a:d1:ef:b1:ad:12: 6f:85:78:15:16:fa:3b:65:cd:22:fc:32:23:ca:18:35:fd:7c: 66:3f:6a:cd:a2:22:73:09:63:5b:88:79:2e:46:a4:5e:20:53: a2:bc:2e:57:2b:dc:b6:31:8d:2a:20:a3:27:d7:25:7f:50:df: 1a:b7:2e:b9:3d:16:1f:73:34:7e:4a:f1:96:1a:fb:d1:ca:c6: 31:44:27:ea:30:e2:a9:c2:d0:c6:da:00:67:23:1b:82:de:f6: 97:96:18:4f:03:b7:ef:20:52:ab:02:32:55:ac:8d:10:76:47: c2:fc:d4:4a:09:06:06:f2:1d:01:68:d1:98:95:a5:a7:1b:58: 51:99:5a:3b:e8:43:b5:5d:2b:9d:27:01:de:4d:f4:ff:24:fb: b9:aa:5d:c1:b1:ff:64:0b:87:9f:b2:e9:d1:8c:7c:91:7e:22: 32:a0:17:eb:f0:28:b7:7d:20:2c:ea:a8:78:c7:05:4d:ca:96: 4f:25:95:8a:d1:d9:3e:de:13:c6:f6:7e:52:53:22:b6:df:6d: fb:1a:b6:b3:2f:4d:f5:51:04:23:64:b7:0c:25:8b:16:14:1d: 79:d3:04:98:9a:fe:39:37:d3:3e:c7:da:9b:85:f5:54:1c:0a: 45:65:6b:39 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUOtm3szcuAz7JvP99w/Q0rd3Vn4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTE4MzBaFw0yNzAyMTExOTIzMzBaMDMxMTAvBgNV BAMTKDhBRDczRjJBOTVGNzJBMDEyMEYxRDg5M0YwRjM4Rjk5QzdCMkFCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfeGwBJsTgGb290AVlPX6T9nas NVwbom0YiYP61bhKPaKd5ZOZUh5Zza0UaiB51lSK5w4IDr3yXyooza8EH+bk+bCK jwq++DTiXCMQ9nivemL8LMu0wTCMKhKa34jXJrkEGyVw+Jyx3MNsEoZsWXfW3zfx tDurNf+uWlCAiMkXql0ZuhadpvFShKi0jGIe4AiVMtyTuBcPPvouQ6hNKKjfP1ks Btv6SFX87CO9laON/8drGxTQ0cAUGX3DgaNfEFDCKOiASebqTv+XJEo3ZYbg0z3X z8LGam2hO9Y/z2/NCzB+TU4QzVQhEB4Bd0x0rnsgVBXVCo2mX5cgn48xacAzAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUitc/KpX3KgEg8diT8POPmceyq7UwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzMzM0 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzOTM5MzgzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFEW hjANBgkqhkiG9w0BAQsFAAOCAQEACNCPY+X6l1XJ6d+ymtHvsa0Sb4V4FRb6O2XN IvwyI8oYNf18Zj9qzaIicwljW4h5LkakXiBTorwuVyvctjGNKiCjJ9clf1DfGrcu uT0WH3M0fkrxlhr70crGMUQn6jDiqcLQxtoAZyMbgt72l5YYTwO37yBSqwIyVayN EHZHwvzUSgkGBvIdAWjRmJWlpxtYUZlaO+hDtV0rnScB3k30/yT7uapdwbH/ZAuH n7Lp0Yx8kX4iMqAX6/Aot30gLOqoeMcFTcqWTyWVitHZPt4TxvZ+UlMitt9t+xq2 sy9N9VEEI2S3DCWLFhQdedMEmJr+OTfTPsfam4X1VBwKRWVrOQ== -----END CERTIFICATE-----Generated at Sat Feb 14 19:52:22 2026 by rpki-client