This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133382e302f32342d3234203d3e20333938343635.roa File: 38312e32322e3133382e302f32342d3234203d3e20333938343635.roa (raw, json) Hash identifier: nILegbXgkk6AFqFu0puF8SO8NJmOz5X1XbiQIkfEUq0= Subject key identifier: BB:45:09:BC:C1:68:9A:48:7F:9F:B5:53:C4:09:0E:F1:18:39:B1:9A Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 7B68034C66C2F887213BDAD0E00D4BEDC3430A9E Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133382e302f32342d3234203d3e20333938343635.roa Signing time: Thu 12 Feb 2026 19:22:31 +0000 ROA not before: Thu 12 Feb 2026 19:17:31 +0000 ROA not after: Thu 11 Feb 2027 19:22:31 +0000 asID: 398465 IP address blocks: 81.22.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:68:03:4c:66:c2:f8:87:21:3b:da:d0:e0:0d:4b:ed:c3:43:0a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:17:31 2026 GMT Not After : Feb 11 19:22:31 2027 GMT Subject: CN=BB4509BCC1689A487F9FB553C4090EF11839B19A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f0:04:7e:da:ca:1c:80:5c:ea:47:ae:81:b8: a5:ed:81:04:79:7e:d8:e3:a4:fb:4f:12:c7:5c:c4: e6:91:84:8a:f1:21:4f:81:70:60:8e:53:a3:43:ad: b6:7c:9b:d6:d6:9c:5f:2c:13:1b:43:8f:28:5c:9b: 21:40:83:2a:4c:99:6d:56:ae:c7:75:8f:05:dd:3b: ce:cb:1b:fb:63:33:88:b5:f6:f5:ec:a2:f1:ad:70: 9d:30:6a:4d:43:a7:45:6b:c5:5d:5a:29:fa:17:df: 21:7c:a2:50:fa:df:ad:6d:91:4d:b3:70:04:49:29: 43:30:fb:b9:01:e9:84:0c:53:08:31:09:6b:c6:d1: d7:15:9f:b9:10:29:85:fe:98:6b:dc:d6:26:ff:e4: a3:66:27:40:65:85:55:c1:1a:e1:27:96:48:00:bd: 20:2f:e5:61:9e:77:be:29:14:68:3c:aa:57:53:f5: dc:dd:b0:6a:97:09:b9:31:76:e7:48:c4:a5:2b:97: 14:50:e5:dd:d0:1d:c7:11:31:dc:62:5b:1c:34:77: 09:4e:f3:8d:80:b7:5e:df:c9:9b:66:ec:41:5c:fe: f7:c8:0b:2a:0d:eb:dd:11:89:df:13:0e:02:fb:38: 0d:9f:1b:7c:b4:b2:4a:dd:7a:d8:83:c3:e0:02:a8: a6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:45:09:BC:C1:68:9A:48:7F:9F:B5:53:C4:09:0E:F1:18:39:B1:9A X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133382e302f32342d3234203d3e20333938343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.138.0/24 Signature Algorithm: sha256WithRSAEncryption aa:f9:17:26:9a:d3:50:a0:9a:d3:a7:cc:a6:27:5d:08:74:4e: 56:2c:7d:07:13:05:89:d0:f8:8a:02:3e:8a:eb:a4:e1:fd:f9: c8:2b:53:c2:62:18:a2:3a:65:dd:71:91:32:db:8c:dc:ea:a5: 13:78:2e:ac:93:79:d9:c1:b0:47:9d:7a:fb:04:7d:f7:c5:ff: 04:c4:c2:5e:8a:7c:43:d7:9d:ad:2e:94:7a:75:98:26:09:24: c4:ee:2e:65:af:64:18:cb:87:ec:a2:3a:c4:39:43:ee:6b:90: 36:a4:65:36:1f:47:1e:c5:4b:92:db:40:e2:b9:08:11:2b:f1: 29:f9:f9:59:ad:b4:49:ae:7c:8a:2f:93:ef:7e:80:fd:b7:04: ba:a9:03:be:8d:1c:93:87:71:97:04:f3:02:cf:6c:22:d5:4b: 14:30:31:c3:b6:38:d6:ab:0c:fd:3e:4b:ab:e4:a1:45:1e:d0: 1e:98:59:06:d6:d4:35:24:5e:3b:d6:55:04:4a:a9:d7:2c:66: f2:dc:e5:d7:01:af:c1:44:89:05:d1:2c:5c:90:be:d7:c1:7e: da:cd:f5:32:ff:f8:6e:11:ca:a4:9c:b3:b5:da:a7:47:48:34: 7c:de:44:1f:e9:39:e3:5d:98:d4:13:b5:48:14:c8:74:ed:82: 73:4c:3e:ff -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUe2gDTGbC+IchO9rQ4A1L7cNDCp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTE3MzFaFw0yNzAyMTExOTIyMzFaMDMxMTAvBgNV BAMTKEJCNDUwOUJDQzE2ODlBNDg3RjlGQjU1M0M0MDkwRUYxMTgzOUIxOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz8AR+2socgFzqR66BuKXtgQR5 ftjjpPtPEsdcxOaRhIrxIU+BcGCOU6NDrbZ8m9bWnF8sExtDjyhcmyFAgypMmW1W rsd1jwXdO87LG/tjM4i19vXsovGtcJ0wak1Dp0VrxV1aKfoX3yF8olD6361tkU2z cARJKUMw+7kB6YQMUwgxCWvG0dcVn7kQKYX+mGvc1ib/5KNmJ0BlhVXBGuEnlkgA vSAv5WGed74pFGg8qldT9dzdsGqXCbkxdudIxKUrlxRQ5d3QHccRMdxiWxw0dwlO 842At17fyZtm7EFc/vfICyoN690Rid8TDgL7OA2fG3y0skrdetiDw+ACqKZBAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUu0UJvMFomkh/n7VTxAkO8Rg5sZowHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzMzM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM4MzQzNjM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA URaKMA0GCSqGSIb3DQEBCwUAA4IBAQCq+RcmmtNQoJrTp8ymJ10IdE5WLH0HEwWJ 0PiKAj6K66Th/fnIK1PCYhiiOmXdcZEy24zc6qUTeC6sk3nZwbBHnXr7BH33xf8E xMJeinxD152tLpR6dZgmCSTE7i5lr2QYy4fsojrEOUPua5A2pGU2H0cexUuS20Di uQgRK/Ep+flZrbRJrnyKL5PvfoD9twS6qQO+jRyTh3GXBPMCz2wi1UsUMDHDtjjW qwz9Pkur5KFFHtAemFkG1tQ1JF471lUESqnXLGby3OXXAa/BRIkF0SxckL7XwX7a zfUy//huEcqknLO12qdHSDR83kQf6TnjXZjUE7VIFMh07YJzTD7/ -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:53 2026 by rpki-client