This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133352e302f32342d3234203d3e2037303239.roa
File: 38312e32322e3133352e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier: /BJUbvrb40HNRruL6TlxtwuU6W9S4n/37DELV2vBpxw=
Subject key identifier: 15:04:BA:88:C6:FE:2A:F1:24:39:0A:99:AF:A0:74:47:F2:6D:74:3F
Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial: 242FE3445B8ECF6DB61635116E5B3A651DB6817C
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133352e302f32342d3234203d3e2037303239.roa
Signing time: Thu 12 Feb 2026 19:05:46 +0000
ROA not before: Thu 12 Feb 2026 19:00:46 +0000
ROA not after: Thu 11 Feb 2027 19:05:46 +0000
asID: 7029
IP address blocks: 81.22.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 05:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:2f:e3:44:5b:8e:cf:6d:b6:16:35:11:6e:5b:3a:65:1d:b6:81:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Validity
Not Before: Feb 12 19:00:46 2026 GMT
Not After : Feb 11 19:05:46 2027 GMT
Subject: CN=1504BA88C6FE2AF124390A99AFA07447F26D743F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:14:f5:2e:26:a5:94:b4:4c:95:51:0b:56:5e:
57:05:b2:79:44:80:5e:9d:60:d8:29:c2:7d:d4:8e:
b5:dc:8b:a2:af:20:22:4a:cf:3a:bb:db:7b:0b:08:
5a:db:cc:cf:c3:3c:2c:ff:3a:db:f8:e3:1b:2b:ec:
cb:bf:cb:75:7d:7d:26:79:45:e5:88:22:4a:d6:f2:
3e:0f:4e:c8:8f:76:d4:39:f9:1f:72:d5:3f:5e:0b:
6a:ed:63:b7:7b:2e:0f:5e:a4:74:dd:07:52:63:e6:
e1:53:f8:66:43:07:35:c1:26:90:39:1a:89:b2:01:
ab:62:ab:f0:08:51:1f:db:72:7a:72:25:89:a4:cd:
e7:9f:5c:36:29:f3:f1:3f:67:f2:31:35:8f:fc:30:
4c:3a:01:87:99:f2:af:76:3a:ef:29:35:91:40:0f:
af:0b:83:b2:d5:59:17:b2:0c:53:fe:89:94:9c:08:
39:84:7b:b5:c1:03:e7:d6:8e:9f:ed:92:cd:f0:1a:
d3:bb:b9:95:fd:b2:4c:82:e4:1c:0c:38:15:e0:8a:
a5:b0:cd:00:29:e1:07:90:8b:92:68:d7:34:e7:7c:
9a:1c:29:57:d2:bb:d7:01:cf:66:70:9e:2f:c2:a4:
25:42:5f:33:8c:e0:b1:ca:7e:12:af:7b:62:3e:00:
47:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:04:BA:88:C6:FE:2A:F1:24:39:0A:99:AF:A0:74:47:F2:6D:74:3F
X509v3 Authority Key Identifier:
keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133352e302f32342d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.135.0/24
Signature Algorithm: sha256WithRSAEncryption
95:85:10:b9:84:27:d9:58:17:02:10:a1:91:b9:b0:5f:ed:e2:
c5:d6:9a:5a:51:61:fd:3e:30:4b:b7:70:67:2a:88:65:e7:2b:
4d:58:be:6b:33:1e:25:87:74:8c:71:02:98:dd:f0:fc:29:63:
d2:19:31:8f:23:85:fc:5d:98:c0:e0:a0:ab:38:e5:c8:d3:6c:
b3:cc:28:d0:c5:0d:f5:c6:1b:a6:27:72:db:5d:e4:88:62:71:
d4:80:14:11:3b:dc:8f:0b:4c:59:02:5a:9c:58:b6:6b:30:94:
d5:58:71:be:a9:39:e9:c6:85:90:1a:f8:55:86:62:96:68:56:
a0:58:52:a4:e8:fd:f2:0e:71:13:0d:ef:dd:05:09:df:dc:cc:
42:b5:a0:ad:d1:3f:56:62:94:45:9d:71:79:68:80:2f:e3:d2:
21:88:13:29:f2:c9:40:39:67:a3:d8:9a:8b:20:83:56:b7:e3:
36:3f:f0:35:fd:ff:18:06:7e:29:c0:97:b1:51:c2:86:93:f6:
16:5a:d7:0a:30:b1:e2:77:62:6a:e6:c3:af:91:6a:1f:e1:c2:
fb:96:19:75:57:b7:1b:dd:30:90:1d:a5:9f:49:a7:2d:13:e9:
b3:7c:95:3e:c0:73:e4:20:21:e8:a5:4a:19:23:c9:23:07:12:
d5:ef:89:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:53:43 2026 by rpki-client