This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133342e302f32342d3234203d3e203537303433.roa
File: 38312e32322e3133342e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier: rXM1spEo1J1KzIXISM2e8+YdtKgRGNxQJ5M5HSnhnIw=
Subject key identifier: C6:B5:6C:F3:2F:AE:EB:49:E5:2C:06:E3:90:50:2F:61:22:C6:9F:15
Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial: 7CB8F62D99129DA1BAD28E6A285CF7F79157352A
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133342e302f32342d3234203d3e203537303433.roa
Signing time: Thu 12 Feb 2026 19:03:46 +0000
ROA not before: Thu 12 Feb 2026 18:58:46 +0000
ROA not after: Thu 11 Feb 2027 19:03:46 +0000
asID: 57043
IP address blocks: 81.22.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 05:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:b8:f6:2d:99:12:9d:a1:ba:d2:8e:6a:28:5c:f7:f7:91:57:35:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Validity
Not Before: Feb 12 18:58:46 2026 GMT
Not After : Feb 11 19:03:46 2027 GMT
Subject: CN=C6B56CF32FAEEB49E52C06E390502F6122C69F15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:8d:35:c4:a7:b9:8f:ab:ff:93:f3:4d:f2:
e9:bc:c8:18:19:8e:d3:6f:16:50:32:df:1f:6e:84:
ed:b4:8f:db:7b:a0:eb:a8:3b:24:2d:9b:c8:4e:66:
86:a0:bc:cb:60:95:a3:98:9e:7d:9d:97:c3:fc:9d:
c8:7a:4a:75:69:2d:35:7b:0c:b3:48:99:4e:30:83:
57:0b:e9:4b:90:be:1f:d3:2c:8f:24:d0:55:62:99:
d9:97:3d:d9:8b:da:67:ad:16:3d:4b:04:80:d6:eb:
df:40:a4:a6:2a:32:18:66:42:11:c0:d2:27:83:82:
21:aa:be:1d:8f:d0:8d:c4:9e:25:54:c7:1b:c5:be:
5d:86:52:28:51:14:50:e1:6f:11:03:d2:30:62:dc:
98:9f:05:f5:79:e9:8e:59:02:38:ec:a4:ae:37:65:
7c:d0:03:ef:f1:0c:92:c3:7c:10:9c:f4:5d:06:7a:
0a:28:b3:95:90:16:f4:d7:59:8f:6f:10:67:11:70:
13:3f:39:76:2e:8a:a5:a9:63:16:b5:40:4c:06:dc:
cd:d5:25:9f:85:3f:cb:38:bc:c2:b7:37:a5:4d:2f:
49:4d:9c:b4:47:af:f3:34:d4:63:0d:e2:42:b8:53:
21:73:5f:74:0c:83:fd:6b:c5:be:9e:01:e7:d0:78:
0a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B5:6C:F3:2F:AE:EB:49:E5:2C:06:E3:90:50:2F:61:22:C6:9F:15
X509v3 Authority Key Identifier:
keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133342e302f32342d3234203d3e203537303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.134.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:55:6d:3c:cb:a8:3a:e5:59:89:bc:73:24:d3:a3:d1:f2:86:
2f:e6:04:e1:20:cb:26:10:d2:3b:b1:a7:1a:2a:23:b7:16:9c:
18:e3:d8:ca:2a:19:c7:b1:92:89:b3:04:57:8a:a1:d7:1b:fd:
ca:ba:e6:c8:d5:91:b1:b7:86:69:96:b9:92:cd:ab:29:d7:1d:
2a:57:9f:f5:b8:1c:15:34:a0:87:ca:63:01:64:65:21:db:9a:
4b:f3:8f:a6:18:ee:46:35:3a:91:0e:59:41:d7:9b:74:26:bc:
5a:82:87:6e:9d:aa:75:7c:fb:3e:9d:39:dd:80:f2:1a:77:0c:
b1:c7:b6:9c:cb:5a:d9:50:b4:fd:4a:db:f9:28:b6:06:f8:6e:
2c:d8:04:30:67:52:dc:d4:f2:db:c2:c4:b0:77:aa:f5:35:4e:
5b:fe:dc:cc:7c:a0:64:6f:38:57:2d:9a:70:8f:7e:b4:4e:54:
7c:b7:28:1b:a3:78:37:a9:94:0d:90:88:55:b0:52:fa:0a:bc:
ae:8c:ef:95:3f:2e:28:c3:cf:0e:8b:2b:90:2b:8c:c8:6d:e0:
bf:93:e4:c6:54:a3:6c:a9:30:22:8b:c2:2b:61:de:d5:cf:5c:
f4:79:70:9b:81:c3:c2:14:40:3e:e4:92:1b:4f:23:09:f1:38:
f7:46:35:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:52:20 2026 by rpki-client