This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133392e302f32342d3234203d3e2035353131.roa File: 38312e32322e3133392e302f32342d3234203d3e2035353131.roa (raw, json) Hash identifier: pc+QBBCvxsiiP66eqGM/GlOLaOYb8VHHcxffMnZY/Vk= Subject key identifier: C1:86:B0:EB:2A:72:9A:18:C7:63:2C:CB:25:73:A2:B1:BE:D3:B2:19 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 757C3A43FBBBDEDBEC3973ACF03D084759078233 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133392e302f32342d3234203d3e2035353131.roa Signing time: Thu 12 Feb 2026 19:04:42 +0000 ROA not before: Thu 12 Feb 2026 18:59:42 +0000 ROA not after: Thu 11 Feb 2027 19:04:42 +0000 asID: 5511 IP address blocks: 81.22.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:7c:3a:43:fb:bb:de:db:ec:39:73:ac:f0:3d:08:47:59:07:82:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:59:42 2026 GMT Not After : Feb 11 19:04:42 2027 GMT Subject: CN=C186B0EB2A729A18C7632CCB2573A2B1BED3B219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5f:1c:71:4f:5a:f9:72:55:6f:11:ee:94:f7: 73:f2:1b:ab:09:9b:86:ab:9f:24:79:90:9b:e5:fe: 9e:72:92:1e:bf:8b:b0:03:94:1e:73:09:0c:70:ab: 33:af:ce:90:f6:a9:46:bb:84:d0:cb:06:bf:7b:7d: a8:3e:d1:5c:cd:e2:5a:8d:9e:eb:a3:79:0f:78:0e: e9:5d:9c:e1:ff:35:19:7a:04:0c:2c:c0:e2:0c:f9: 47:52:2b:01:a7:e1:8e:ac:9c:bb:4f:1e:03:e9:26: 5f:a2:6b:7f:39:79:5a:e1:c3:93:59:42:64:78:5b: 7b:fb:44:1f:00:bd:4a:a6:4f:5f:ee:d7:60:9a:1d: 6c:6b:ac:8d:ab:1c:5d:35:ff:e8:7a:64:57:ca:d2: c7:5f:66:a5:28:6a:fa:c3:27:81:b0:5e:f0:4b:aa: 78:42:e1:2f:80:0c:32:c1:49:9b:b2:b6:b3:1f:82: 33:a7:80:05:ae:f3:17:6c:b7:a3:19:76:e7:8c:ff: 94:fe:c9:2b:1c:55:9b:e9:cf:6a:21:01:76:55:32: e3:06:ab:a8:9d:19:02:9c:26:5c:3f:bd:43:cc:26: 91:b8:e1:b2:4d:44:aa:52:27:51:e3:c0:e8:9d:36: a3:5e:7e:6a:1b:9c:4d:1f:59:42:72:3c:57:f1:47: d4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:86:B0:EB:2A:72:9A:18:C7:63:2C:CB:25:73:A2:B1:BE:D3:B2:19 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3133392e302f32342d3234203d3e2035353131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.139.0/24 Signature Algorithm: sha256WithRSAEncryption 78:9c:06:af:ed:a7:ce:09:ef:ee:30:e8:89:be:ce:44:c7:9f: a8:44:aa:60:45:4d:a8:3f:02:da:a3:44:fd:5d:41:09:f3:d3: 76:b4:43:42:bc:14:3d:b7:07:09:30:02:62:60:91:b8:c9:f9: d5:17:69:ae:70:89:fd:b1:96:7f:cf:43:0d:04:fb:84:6a:e3: f9:4c:ff:2f:82:60:7e:07:8e:64:4a:d6:9f:47:a4:fe:10:ad: 60:90:80:95:b6:1f:40:45:fe:2b:9a:29:aa:8d:72:0c:fe:ac: 57:8b:58:fc:15:f3:5d:d3:8b:6c:a4:50:1e:c3:23:a8:d2:c6: c0:cc:2f:0f:5e:a5:0b:22:91:10:34:d1:15:f7:49:7e:c3:ee: e6:81:d9:eb:06:70:5b:9b:51:fe:07:f4:ff:9f:16:ad:b1:77: 3b:2f:5c:f9:5e:09:7d:06:ae:ba:23:ee:48:7c:4b:ad:f1:40: 76:44:04:be:b2:be:5a:9f:47:4d:34:33:af:d4:41:62:13:d2: ba:61:f4:ff:13:1c:7d:23:e8:4e:69:0c:e8:47:3c:86:60:38: 9f:16:20:6b:38:11:d5:6b:4e:23:54:7f:b7:94:91:4f:a1:aa: f9:05:60:b6:fc:0c:35:f8:e5:42:a6:05:89:4f:9e:aa:79:bd: 64:31:c8:a0 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUdXw6Q/u73tvsOXOs8D0IR1kHgjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU5NDJaFw0yNzAyMTExOTA0NDJaMDMxMTAvBgNV BAMTKEMxODZCMEVCMkE3MjlBMThDNzYzMkNDQjI1NzNBMkIxQkVEM0IyMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDXxxxT1r5clVvEe6U93PyG6sJ m4arnyR5kJvl/p5ykh6/i7ADlB5zCQxwqzOvzpD2qUa7hNDLBr97fag+0VzN4lqN nuujeQ94DuldnOH/NRl6BAwswOIM+UdSKwGn4Y6snLtPHgPpJl+ia385eVrhw5NZ QmR4W3v7RB8AvUqmT1/u12CaHWxrrI2rHF01/+h6ZFfK0sdfZqUoavrDJ4GwXvBL qnhC4S+ADDLBSZuytrMfgjOngAWu8xdst6MZdueM/5T+ySscVZvpz2ohAXZVMuMG q6idGQKcJlw/vUPMJpG44bJNRKpSJ1HjwOidNqNefmobnE0fWUJyPFfxR9S7AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUwYaw6ypymhjHYyzLJXOisb7TshkwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzMzM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTMxMzEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABRFosw DQYJKoZIhvcNAQELBQADggEBAHicBq/tp84J7+4w6Im+zkTHn6hEqmBFTag/Atqj RP1dQQnz03a0Q0K8FD23BwkwAmJgkbjJ+dUXaa5wif2xln/PQw0E+4Rq4/lM/y+C YH4HjmRK1p9HpP4QrWCQgJW2H0BF/iuaKaqNcgz+rFeLWPwV813Ti2ykUB7DI6jS xsDMLw9epQsikRA00RX3SX7D7uaB2esGcFubUf4H9P+fFq2xdzsvXPleCX0Grroj 7kh8S63xQHZEBL6yvlqfR000M6/UQWIT0rph9P8THH0j6E5pDOhHPIZgOJ8WIGs4 EdVrTiNUf7eUkU+hqvkFYLb8DDX45UKmBYlPnqp5vWQxyKA= -----END CERTIFICATE-----Generated at Sat Feb 14 19:52:20 2026 by rpki-client