This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133382e302f32342d3234203d3e2037303138.roa File: 38312e32322e3133382e302f32342d3234203d3e2037303138.roa (raw, json) Hash identifier: ZjtTfgds9keVLfcQOzukPTbeue8sLpgurf559ytEhmE= Subject key identifier: 1E:4A:FA:5C:2A:39:B9:72:B9:82:3A:0A:A1:9D:33:7C:D0:81:B9:F3 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 1500D5801DA2061B1FB8C5B766219D46D8403106 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133382e302f32342d3234203d3e2037303138.roa Signing time: Thu 12 Feb 2026 19:20:28 +0000 ROA not before: Thu 12 Feb 2026 19:15:28 +0000 ROA not after: Thu 11 Feb 2027 19:20:28 +0000 asID: 7018 IP address blocks: 81.22.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:00:d5:80:1d:a2:06:1b:1f:b8:c5:b7:66:21:9d:46:d8:40:31:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:15:28 2026 GMT Not After : Feb 11 19:20:28 2027 GMT Subject: CN=1E4AFA5C2A39B972B9823A0AA19D337CD081B9F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:18:7d:d3:c6:8a:be:7d:e6:0e:5c:d7:fb:69: b7:6d:26:85:8d:a6:5c:cb:7a:d1:3e:f8:3f:47:a0: ae:50:23:f1:69:62:1a:2e:6f:45:bf:c3:66:a3:6f: e0:ba:fc:b3:ff:a8:3d:4b:08:a2:ea:5a:40:51:2f: ae:70:03:10:dd:45:b3:45:aa:fe:97:20:7c:d3:3a: 6c:e4:05:15:c4:1f:eb:61:8e:96:75:f8:3b:c9:18: 4d:dd:c8:b6:aa:89:75:ff:a6:b2:fd:b4:f6:e3:d6: 7a:e2:23:fa:1e:19:6f:ff:8c:48:9a:fb:ae:45:cf: 70:7b:4a:cd:df:86:c5:ce:83:d5:cc:77:75:3e:62: ba:69:e8:b8:70:fb:2c:96:17:62:c1:7b:8e:c4:f6: 5b:33:80:7e:37:29:8f:6f:99:66:35:97:95:c3:59: 6e:20:ec:38:53:36:5e:9f:16:0a:02:1e:fb:90:e7: 08:c6:f1:42:8c:b5:45:fc:c8:3f:ce:d6:bb:d5:52: bf:a2:b6:bf:4c:f0:e5:a2:89:59:9a:e6:eb:54:87: 78:c1:3c:36:ec:45:6d:5a:94:8e:5e:bd:93:32:ea: c5:86:43:6b:c0:07:6e:1d:20:11:52:66:2a:de:1c: 9e:ff:08:94:21:ae:77:0e:eb:55:19:a1:3f:26:44: af:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4A:FA:5C:2A:39:B9:72:B9:82:3A:0A:A1:9D:33:7C:D0:81:B9:F3 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133382e302f32342d3234203d3e2037303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.138.0/24 Signature Algorithm: sha256WithRSAEncryption a5:ba:14:b2:d0:e3:a9:99:4d:00:33:78:9d:f4:25:56:4f:67: 59:e3:22:ae:d9:57:ba:e1:30:c5:81:54:f7:80:36:a7:d4:36: 5c:a9:85:0d:4a:b6:2f:91:cb:a4:06:7d:55:e0:ac:54:b8:63: 00:58:16:e7:62:70:f0:cc:94:4f:07:18:e8:1a:7e:8f:8a:eb: 1d:b3:f4:e7:ba:a0:b8:4d:de:ff:e4:f3:13:cd:fe:56:84:b7: ab:01:7c:c6:3c:38:c3:d1:e6:ff:f5:5c:e0:b0:e2:3d:80:c4: 7c:df:31:4c:da:1f:bb:06:f0:bf:51:af:78:4d:f9:26:52:5f: 71:b8:d8:cb:30:1a:ef:db:52:cb:cf:d5:bd:4c:74:67:66:b8: 60:5e:87:d5:ba:35:32:5c:0b:ca:4e:45:37:79:ac:2d:bf:e7: 5d:3c:37:2f:34:0c:39:48:2e:86:a6:f5:e3:e0:9e:42:51:25: 41:20:02:b4:08:e0:30:b4:91:9e:83:2b:5f:52:80:cd:58:d6: d3:be:5e:5a:15:7a:22:4d:02:82:fd:70:72:00:7e:63:68:65: 8b:d3:b3:72:01:44:cc:fe:95:60:1f:5f:f1:36:a4:5d:0c:35: 5d:24:05:0f:72:1d:7c:a4:63:1b:be:cf:9b:ea:5f:41:d6:c6: e5:cd:42:9c -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUFQDVgB2iBhsfuMW3ZiGdRthAMQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTE1MjhaFw0yNzAyMTExOTIwMjhaMDMxMTAvBgNV BAMTKDFFNEFGQTVDMkEzOUI5NzJCOTgyM0EwQUExOUQzMzdDRDA4MUI5RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0GH3Txoq+feYOXNf7abdtJoWN plzLetE++D9HoK5QI/FpYhoub0W/w2ajb+C6/LP/qD1LCKLqWkBRL65wAxDdRbNF qv6XIHzTOmzkBRXEH+thjpZ1+DvJGE3dyLaqiXX/prL9tPbj1nriI/oeGW//jEia +65Fz3B7Ss3fhsXOg9XMd3U+Yrpp6Lhw+yyWF2LBe47E9lszgH43KY9vmWY1l5XD WW4g7DhTNl6fFgoCHvuQ5wjG8UKMtUX8yD/O1rvVUr+itr9M8OWiiVma5utUh3jB PDbsRW1alI5evZMy6sWGQ2vAB24dIBFSZireHJ7/CJQhrncO61UZoT8mRK//AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUHkr6XCo5uXK5gjoKoZ0zfNCBufMwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzMzM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABRFoow DQYJKoZIhvcNAQELBQADggEBAKW6FLLQ46mZTQAzeJ30JVZPZ1njIq7ZV7rhMMWB VPeANqfUNlyphQ1Kti+Ry6QGfVXgrFS4YwBYFudicPDMlE8HGOgafo+K6x2z9Oe6 oLhN3v/k8xPN/laEt6sBfMY8OMPR5v/1XOCw4j2AxHzfMUzaH7sG8L9Rr3hN+SZS X3G42MswGu/bUsvP1b1MdGdmuGBeh9W6NTJcC8pORTd5rC2/5108Ny80DDlILoam 9ePgnkJRJUEgArQI4DC0kZ6DK19SgM1Y1tO+XloVeiJNAoL9cHIAfmNoZYvTs3IB RMz+lWAfX/E2pF0MNV0kBQ9yHXykYxu+z5vqX0HWxuXNQpw= -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:42 2026 by rpki-client