This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133382e302f32342d3234203d3e2036303739.roa File: 38312e32322e3133382e302f32342d3234203d3e2036303739.roa (raw, json) Hash identifier: MEH8xx0yRAx9vhl+mPrL//yrV/Mjfv0CPtJJXaSeoyA= Subject key identifier: C8:DE:72:53:46:FB:5C:B8:A9:84:D8:0F:70:6D:F5:35:23:51:32:B1 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 60C0E897A9EE03366C8E6B82B564634280132DE6 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133382e302f32342d3234203d3e2036303739.roa Signing time: Thu 12 Feb 2026 19:19:06 +0000 ROA not before: Thu 12 Feb 2026 19:14:06 +0000 ROA not after: Thu 11 Feb 2027 19:19:06 +0000 asID: 6079 IP address blocks: 81.22.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c0:e8:97:a9:ee:03:36:6c:8e:6b:82:b5:64:63:42:80:13:2d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:14:06 2026 GMT Not After : Feb 11 19:19:06 2027 GMT Subject: CN=C8DE725346FB5CB8A984D80F706DF535235132B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:48:b4:a7:90:a2:72:60:76:44:50:cd:d9:46: 95:a6:66:2c:32:0d:b0:7e:fd:80:05:ed:0f:7d:6b: 59:6d:fe:54:3a:04:e7:a0:f7:23:ba:a8:25:c1:a5: 54:1a:7f:18:52:38:7b:7e:5e:c8:68:44:46:b8:e0: b6:62:81:d2:80:98:7f:ee:04:3b:17:37:6a:bf:fa: cf:aa:61:74:1d:db:79:3b:95:81:ac:d9:ad:00:3d: a2:0c:41:62:5b:89:e8:ba:20:6a:00:6f:0c:c4:e6: d0:92:95:90:23:8e:5f:4b:cc:b0:65:c4:10:23:5e: cc:2e:08:97:bc:bc:e9:22:b5:72:28:25:04:27:7f: 63:f9:84:1a:ea:84:6e:90:da:95:36:0c:fa:e1:11: 0d:8b:93:c5:4f:89:41:10:0c:5f:71:94:11:48:1e: ba:e4:a3:88:55:71:28:cf:39:48:34:8a:f8:76:50: 90:4a:c7:46:2f:0e:1d:34:60:6b:22:55:72:e1:01: 50:63:97:da:af:3a:ba:62:58:23:1d:2b:df:54:bb: c6:d4:13:14:21:d9:fc:24:93:a7:a0:7f:46:9f:0a: 08:ef:d8:1d:99:cc:9e:fa:d1:56:a5:11:8f:1c:32: 18:ec:5b:d0:a6:61:2b:ec:e1:80:a9:92:d9:a3:04: 70:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:DE:72:53:46:FB:5C:B8:A9:84:D8:0F:70:6D:F5:35:23:51:32:B1 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133382e302f32342d3234203d3e2036303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.138.0/24 Signature Algorithm: sha256WithRSAEncryption 87:a2:86:61:79:ad:c8:c9:54:93:5f:b7:e4:02:73:26:11:7c: 3c:72:93:5d:30:c3:1a:0b:79:9a:0d:88:69:4b:24:b5:ca:29: fa:40:a1:f4:6e:cf:75:88:e6:cf:9a:03:2b:b6:71:f7:1a:c5: a9:8a:61:fc:75:d5:75:e0:78:15:b7:01:4f:0c:53:be:a1:a7: eb:d1:18:85:51:1e:30:e5:e6:c5:a0:ac:16:01:48:e9:d7:72: b5:3f:09:e2:97:03:f2:36:0c:4a:2f:37:1b:31:95:38:ff:43: b3:ea:44:51:fe:9c:e1:1d:69:4c:9d:48:73:94:12:79:4b:50: 61:9a:16:19:2c:77:c5:ec:9e:89:9e:16:e2:2e:23:aa:7e:50: 3f:1f:ce:4b:73:b0:44:8a:06:10:05:50:9d:27:c1:32:1c:86: 7f:99:5b:28:f7:28:78:3f:86:65:02:90:2d:d3:c9:d3:07:cc: 1d:97:b1:4e:48:7f:07:a8:25:f1:76:2e:74:ee:9d:e5:f7:0a: e4:5c:d8:6a:10:ae:5c:4b:01:cc:67:d3:91:3b:6e:54:e2:10: 4a:b7:f8:25:1e:9f:3a:1c:04:b3:87:ce:49:47:ee:eb:51:32: f7:d6:04:0e:73:6a:22:47:d6:f7:e7:7d:34:78:0d:83:37:48: b0:d0:cf:86 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUYMDol6nuAzZsjmuCtWRjQoATLeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTE0MDZaFw0yNzAyMTExOTE5MDZaMDMxMTAvBgNV BAMTKEM4REU3MjUzNDZGQjVDQjhBOTg0RDgwRjcwNkRGNTM1MjM1MTMyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClSLSnkKJyYHZEUM3ZRpWmZiwy DbB+/YAF7Q99a1lt/lQ6BOeg9yO6qCXBpVQafxhSOHt+XshoREa44LZigdKAmH/u BDsXN2q/+s+qYXQd23k7lYGs2a0APaIMQWJbiei6IGoAbwzE5tCSlZAjjl9LzLBl xBAjXswuCJe8vOkitXIoJQQnf2P5hBrqhG6Q2pU2DPrhEQ2Lk8VPiUEQDF9xlBFI Hrrko4hVcSjPOUg0ivh2UJBKx0YvDh00YGsiVXLhAVBjl9qvOrpiWCMdK99Uu8bU ExQh2fwkk6egf0afCgjv2B2ZzJ760ValEY8cMhjsW9CmYSvs4YCpktmjBHA3AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUyN5yU0b7XLiphNgPcG31NSNRMrEwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzMzM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMDM3Mzkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABRFoow DQYJKoZIhvcNAQELBQADggEBAIeihmF5rcjJVJNft+QCcyYRfDxyk10wwxoLeZoN iGlLJLXKKfpAofRuz3WI5s+aAyu2cfcaxamKYfx11XXgeBW3AU8MU76hp+vRGIVR HjDl5sWgrBYBSOnXcrU/CeKXA/I2DEovNxsxlTj/Q7PqRFH+nOEdaUydSHOUEnlL UGGaFhksd8XsnomeFuIuI6p+UD8fzktzsESKBhAFUJ0nwTIchn+ZWyj3KHg/hmUC kC3TydMHzB2XsU5IfweoJfF2LnTuneX3CuRc2GoQrlxLAcxn05E7blTiEEq3+CUe nzocBLOHzklH7utRMvfWBA5zaiJH1vfnfTR4DYM3SLDQz4Y= -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:52 2026 by rpki-client