This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133382e302f32342d3234203d3e2037303239.roa File: 38312e32322e3133382e302f32342d3234203d3e2037303239.roa (raw, json) Hash identifier: TKWRoaAfJ2/6GuDVDMlJiddzFJ45bN6ZEzCOb9ChUt0= Subject key identifier: 33:27:99:DB:D3:AE:FD:42:B2:86:0D:76:91:66:CB:99:FA:4B:97:83 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 40A575EB8C30655E840B37C2A039548077307C33 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133382e302f32342d3234203d3e2037303239.roa Signing time: Thu 12 Feb 2026 19:05:46 +0000 ROA not before: Thu 12 Feb 2026 19:00:46 +0000 ROA not after: Thu 11 Feb 2027 19:05:46 +0000 asID: 7029 IP address blocks: 81.22.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a5:75:eb:8c:30:65:5e:84:0b:37:c2:a0:39:54:80:77:30:7c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:00:46 2026 GMT Not After : Feb 11 19:05:46 2027 GMT Subject: CN=332799DBD3AEFD42B2860D769166CB99FA4B9783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a4:5b:4a:0d:14:78:0f:ac:0d:89:7c:b7:20: 41:15:c2:ba:1a:dc:ac:e0:34:e8:c0:15:77:c5:19: 4b:32:9c:3b:0a:8a:fa:5e:26:11:2a:c1:9c:f4:51: 5f:d9:41:b3:75:7a:52:58:6b:45:cf:d3:f2:14:69: de:f7:d2:a1:e1:c0:2e:ef:a6:de:2c:4c:a2:47:79: a6:bd:94:51:fc:f2:f6:9c:69:12:a1:6a:f5:83:67: 4c:bb:d3:52:a4:0d:42:64:fc:be:8c:4e:da:4f:9a: 3c:ed:4d:10:08:b8:23:12:4b:58:ca:fd:f6:92:2c: 38:f6:80:58:c5:96:a4:88:8a:1c:98:ee:25:ac:dd: 02:2c:3a:8e:65:12:f9:5c:4e:d9:54:0a:3c:5d:02: e9:2c:de:76:d9:5e:81:32:29:17:24:7b:fc:71:52: c5:50:d2:50:c5:6b:98:22:06:a8:18:34:28:69:ce: 35:cc:74:3c:50:12:3c:4c:0d:0d:16:f3:74:67:d5: fc:9f:31:9e:7f:0f:59:ee:77:66:02:0c:83:1f:c9: 76:cb:af:42:ca:fd:db:e3:09:c5:73:bc:ff:b7:15: 47:e5:b9:5c:aa:9b:ce:d5:7d:28:32:b3:dd:6b:92: b8:86:75:27:12:cc:92:17:72:7f:7d:27:a0:85:54: 44:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:27:99:DB:D3:AE:FD:42:B2:86:0D:76:91:66:CB:99:FA:4B:97:83 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133382e302f32342d3234203d3e2037303239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.138.0/24 Signature Algorithm: sha256WithRSAEncryption 50:90:8f:53:17:d8:53:7a:ae:f0:a6:99:2f:e2:e0:0e:4e:77: 75:50:5a:d1:59:23:28:9f:95:69:0d:8b:b5:32:8b:4d:d4:d9: b7:a1:5d:f1:9d:8c:92:56:8d:d0:b3:82:bc:7f:e9:43:8e:a3: ce:b8:6f:95:16:29:49:16:5a:bc:8c:94:6c:e2:62:3a:b2:77: bf:aa:1e:5a:49:f2:b6:37:d6:27:2b:2b:73:79:7c:e2:84:a9: 84:02:0d:85:4f:f5:cf:74:30:d0:d5:9a:5a:43:94:1e:69:ea: 9e:ae:8e:ab:63:7f:cb:ab:bc:d5:c2:62:b7:4d:36:a5:d7:0d: ed:29:bc:32:92:48:61:85:ed:f6:52:4e:79:68:48:f4:6a:7d: fd:41:74:48:db:8b:4c:f8:ff:6a:b7:e9:c3:97:49:f7:8f:46: fb:7a:6d:3a:a8:11:e1:bc:01:a0:80:94:3d:32:cd:54:d5:e1: 82:02:13:14:93:4a:4b:31:7a:bd:f9:1b:6a:a7:72:bd:6e:6f: 3d:d9:fc:55:a8:33:bb:4d:61:aa:e3:40:5f:0b:97:f9:39:ac: 6e:01:a4:5c:cf:77:51:9f:10:74:6e:ce:0d:4b:fa:f5:ac:e9: 07:aa:37:7a:6c:76:e5:a9:42:09:f0:af:3e:c9:6e:f6:e0:6d: b7:60:24:24 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUQKV164wwZV6ECzfCoDlUgHcwfDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTAwNDZaFw0yNzAyMTExOTA1NDZaMDMxMTAvBgNV BAMTKDMzMjc5OURCRDNBRUZENDJCMjg2MEQ3NjkxNjZDQjk5RkE0Qjk3ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSpFtKDRR4D6wNiXy3IEEVwroa 3KzgNOjAFXfFGUsynDsKivpeJhEqwZz0UV/ZQbN1elJYa0XP0/IUad730qHhwC7v pt4sTKJHeaa9lFH88vacaRKhavWDZ0y701KkDUJk/L6MTtpPmjztTRAIuCMSS1jK /faSLDj2gFjFlqSIihyY7iWs3QIsOo5lEvlcTtlUCjxdAuks3nbZXoEyKRcke/xx UsVQ0lDFa5giBqgYNChpzjXMdDxQEjxMDQ0W83Rn1fyfMZ5/D1nud2YCDIMfyXbL r0LK/dvjCcVzvP+3FUfluVyqm87VfSgys91rkriGdScSzJIXcn99J6CFVEStAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUMyeZ29Ou/UKyhg12kWbLmfpLl4MwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzMzM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczMDMyMzkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABRFoow DQYJKoZIhvcNAQELBQADggEBAFCQj1MX2FN6rvCmmS/i4A5Od3VQWtFZIyiflWkN i7Uyi03U2behXfGdjJJWjdCzgrx/6UOOo864b5UWKUkWWryMlGziYjqyd7+qHlpJ 8rY31icrK3N5fOKEqYQCDYVP9c90MNDVmlpDlB5p6p6ujqtjf8urvNXCYrdNNqXX De0pvDKSSGGF7fZSTnloSPRqff1BdEjbi0z4/2q36cOXSfePRvt6bTqoEeG8AaCA lD0yzVTV4YICExSTSksxer35G2qncr1ubz3Z/FWoM7tNYarjQF8Ll/k5rG4BpFzP d1GfEHRuzg1L+vWs6QeqN3psduWpQgnwrz7JbvbgbbdgJCQ= -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:16 2026 by rpki-client