This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133372e302f32342d3234203d3e20333937343233.roa File: 38312e32322e3133372e302f32342d3234203d3e20333937343233.roa (raw, json) Hash identifier: 16UB0wjaIwkJNo66kC74ClX1IoLihfLAJENzNJVxqgY= Subject key identifier: DF:6C:6A:CA:51:9D:07:3F:6D:7A:04:9D:27:34:00:F1:33:A3:B3:95 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 5B906DF7D08DA619B01308187492D98AE00B59D5 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133372e302f32342d3234203d3e20333937343233.roa Signing time: Thu 12 Feb 2026 19:03:46 +0000 ROA not before: Thu 12 Feb 2026 18:58:46 +0000 ROA not after: Thu 11 Feb 2027 19:03:46 +0000 asID: 397423 IP address blocks: 81.22.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:90:6d:f7:d0:8d:a6:19:b0:13:08:18:74:92:d9:8a:e0:0b:59:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:58:46 2026 GMT Not After : Feb 11 19:03:46 2027 GMT Subject: CN=DF6C6ACA519D073F6D7A049D273400F133A3B395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:86:1b:e1:e4:cf:03:f7:c6:4e:bc:48:c8:05: 87:de:b0:67:03:49:93:5e:6d:ac:92:9e:ed:db:8c: 8d:21:a6:47:88:b0:48:a2:35:fc:44:80:93:8f:af: 84:b2:7d:19:83:f2:6c:ec:2b:a7:bd:8f:2a:ab:cf: 7e:b1:96:63:3c:30:52:d7:d8:06:83:4c:ea:75:28: 60:3d:8d:d8:27:62:66:a7:fb:b4:46:38:3e:42:89: 19:39:28:b8:86:ca:26:3e:42:10:e3:c4:d7:7c:c4: 32:56:68:7d:e2:72:db:ab:9a:b9:8a:f8:4c:7e:74: dc:21:a8:3e:3d:aa:af:04:e6:14:3a:1c:3a:38:b3: 3e:f7:62:95:c7:3b:06:31:aa:9a:9d:70:56:fd:9b: 48:be:63:8e:59:5b:5b:43:8a:d2:25:f6:bd:1f:54: 33:91:bc:94:45:cc:02:ef:7d:b6:0c:a2:3d:82:40: b2:70:93:a8:64:82:92:06:4b:ee:80:23:4e:69:d7: 7a:eb:87:a4:52:69:77:4e:d7:36:cc:02:17:b6:18: 7f:b6:3b:3e:32:1c:78:36:5f:9d:66:74:8f:08:aa: 13:5d:38:59:a2:df:e2:57:1a:67:8a:f6:09:ec:84: d1:49:f2:3d:13:ca:be:84:56:75:e6:36:8b:39:cf: f9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6C:6A:CA:51:9D:07:3F:6D:7A:04:9D:27:34:00:F1:33:A3:B3:95 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133372e302f32342d3234203d3e20333937343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.137.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:d4:3b:f1:6a:65:e7:22:f5:43:af:8f:42:aa:d3:80:e5:a5: 18:45:88:a3:ca:fb:f7:86:a2:24:0b:2a:f3:f7:7d:31:4c:a8: 14:2f:bc:56:a5:89:d6:95:4f:a9:08:bf:5e:f3:ed:2e:57:8e: dc:43:05:c2:9b:c8:ff:a7:51:94:83:fe:d0:97:45:09:e4:c3: a9:b7:d6:9b:ce:d8:de:15:0e:ab:bf:f3:3a:c5:38:81:bf:f4: 83:b3:26:fa:26:a5:7f:e8:e6:fa:b2:84:27:ba:89:b8:4d:fd: 6a:b9:16:ce:24:d8:47:18:61:57:d6:4a:f9:04:f5:bb:69:6d: f2:3a:e6:58:31:9c:6f:86:05:34:2f:fa:b8:75:aa:c5:d5:56: 7c:3b:bc:aa:df:f9:4e:0c:7c:0d:f6:c0:40:0a:e5:a3:59:46: be:d6:e1:d8:a3:dd:b9:58:e1:25:0c:a7:70:8a:d7:69:e0:f2: 35:33:e0:56:bc:13:00:50:c9:de:7a:da:6d:63:ff:4e:c7:79: 92:9c:ff:ca:8a:50:d2:a3:3c:1a:06:d5:10:4f:bd:70:5a:2f: 1c:4d:43:01:fc:3f:a9:21:cd:ff:c9:95:fb:05:be:b3:48:70: c6:6f:b5:52:a6:68:7c:97:63:e7:3d:b1:d5:37:79:88:71:81: 88:27:33:d1 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUW5Bt99CNphmwEwgYdJLZiuALWdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU4NDZaFw0yNzAyMTExOTAzNDZaMDMxMTAvBgNV BAMTKERGNkM2QUNBNTE5RDA3M0Y2RDdBMDQ5RDI3MzQwMEYxMzNBM0IzOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfhhvh5M8D98ZOvEjIBYfesGcD SZNebaySnu3bjI0hpkeIsEiiNfxEgJOPr4SyfRmD8mzsK6e9jyqrz36xlmM8MFLX 2AaDTOp1KGA9jdgnYman+7RGOD5CiRk5KLiGyiY+QhDjxNd8xDJWaH3icturmrmK +Ex+dNwhqD49qq8E5hQ6HDo4sz73YpXHOwYxqpqdcFb9m0i+Y45ZW1tDitIl9r0f VDORvJRFzALvfbYMoj2CQLJwk6hkgpIGS+6AI05p13rrh6RSaXdO1zbMAhe2GH+2 Oz4yHHg2X51mdI8IqhNdOFmi3+JXGmeK9gnshNFJ8j0Tyr6EVnXmNos5z/mhAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU32xqylGdBz9tegSdJzQA8TOjs5UwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzMzM3 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM3MzQzMjMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA URaJMA0GCSqGSIb3DQEBCwUAA4IBAQBb1DvxamXnIvVDr49CqtOA5aUYRYijyvv3 hqIkCyrz930xTKgUL7xWpYnWlU+pCL9e8+0uV47cQwXCm8j/p1GUg/7Ql0UJ5MOp t9abztjeFQ6rv/M6xTiBv/SDsyb6JqV/6Ob6soQnuom4Tf1quRbOJNhHGGFX1kr5 BPW7aW3yOuZYMZxvhgU0L/q4darF1VZ8O7yq3/lODHwN9sBACuWjWUa+1uHYo925 WOElDKdwitdp4PI1M+BWvBMAUMneetptY/9Ox3mSnP/KilDSozwaBtUQT71wWi8c TUMB/D+pIc3/yZX7Bb6zSHDGb7VSpmh8l2PnPbHVN3mIcYGIJzPR -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:53 2026 by rpki-client