This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3134302e302f32342d3234203d3e20323135323234.roa File: 38312e32322e3134302e302f32342d3234203d3e20323135323234.roa (raw, json) Hash identifier: zz5UzBQoD+AQRKwJZkpamr2M+uqxFIbsq//dmepBg1E= Subject key identifier: 96:A8:29:5C:03:16:D7:1C:91:49:3D:74:43:EF:C0:25:1C:9C:1C:15 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 0DFF9A3501042DA08DA40F9A03DEE78879AE4F7E Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3134302e302f32342d3234203d3e20323135323234.roa Signing time: Thu 12 Feb 2026 19:24:20 +0000 ROA not before: Thu 12 Feb 2026 19:19:20 +0000 ROA not after: Thu 11 Feb 2027 19:24:20 +0000 asID: 215224 IP address blocks: 81.22.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ff:9a:35:01:04:2d:a0:8d:a4:0f:9a:03:de:e7:88:79:ae:4f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:19:20 2026 GMT Not After : Feb 11 19:24:20 2027 GMT Subject: CN=96A8295C0316D71C91493D7443EFC0251C9C1C15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:32:20:41:cd:19:d4:35:76:b4:fa:ca:b7: f3:1b:4b:7e:48:ca:fc:36:20:70:60:56:3a:2b:c0: 01:49:34:fd:05:b0:94:0e:5e:8f:f0:e2:fb:52:86: 96:7f:f4:88:6b:5d:16:99:30:52:99:a6:ca:32:a9: 02:8a:ff:8e:35:d1:d3:80:25:ea:b1:94:27:ce:5b: 63:6c:f9:ab:33:14:a2:0e:ed:59:9a:d8:59:02:97: 54:13:6d:78:33:a3:1e:a5:3d:b9:78:74:27:d0:00: 12:69:8c:ce:e0:c6:eb:76:45:05:97:02:80:ef:25: a7:51:65:8d:74:08:d7:6d:02:bd:f0:11:f7:b6:0b: 16:11:c9:d0:b7:f4:e8:ba:8b:3b:b1:09:60:91:4c: 9d:53:ff:27:85:80:c6:41:50:c2:b3:77:b0:53:73: db:19:8d:c8:9a:38:94:10:a1:4c:dd:08:73:fe:1f: ca:8f:28:60:37:f1:99:1a:dc:7b:a0:90:dc:9f:fc: c2:6d:5e:60:28:77:5c:bf:74:a2:ff:90:f8:78:d7: 2c:3f:5a:62:c5:c4:3c:e6:53:ae:f6:e1:78:8c:9f: 60:22:12:24:24:26:82:94:70:9d:6e:4a:4f:25:ca: 53:5a:a9:a4:ff:83:e1:20:3c:63:88:5a:a1:96:92: 36:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A8:29:5C:03:16:D7:1C:91:49:3D:74:43:EF:C0:25:1C:9C:1C:15 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3134302e302f32342d3234203d3e20323135323234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.140.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:53:0e:d6:4f:ef:8d:13:5c:fa:14:26:e2:bf:b5:62:86:77: 8e:86:88:1a:f7:2a:13:54:f4:26:dd:4a:12:e8:e8:2e:87:b3: c7:91:72:21:30:38:b3:35:66:9e:81:5c:f4:34:b2:ba:9a:7c: a2:39:1e:e2:bf:c1:f2:af:fc:39:e4:76:23:d8:1f:02:74:f9: df:77:0a:26:88:11:46:24:ae:48:d0:54:92:c1:eb:7c:eb:1b: f1:60:21:26:fd:92:4b:53:97:7f:65:d3:a2:eb:35:38:4f:39: 3e:4f:f5:95:8e:0d:01:ae:d0:df:54:22:13:de:ef:23:3e:43: 42:35:bf:dc:70:cd:a2:3f:c2:68:0a:ec:28:f2:b3:2f:0b:3b: 5b:43:f9:0c:b8:15:e7:98:44:35:d6:75:89:b4:00:4f:86:e6: 48:03:21:61:8d:e7:0a:70:de:77:14:e6:d0:33:0c:8f:1a:f6: cb:f0:35:f4:56:3e:69:73:70:aa:68:49:4a:47:5d:16:b7:76: 1d:97:6e:a4:1d:28:96:01:03:f6:30:b3:1b:be:a1:d4:13:bb: 71:10:56:88:eb:af:97:b7:45:61:df:4d:cd:26:d9:38:5b:a5: ef:a0:51:19:e0:0f:ab:65:e7:34:5c:b9:d9:6f:93:5d:6d:92: ae:61:e1:21 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUDf+aNQEELaCNpA+aA97niHmuT34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTE5MjBaFw0yNzAyMTExOTI0MjBaMDMxMTAvBgNV BAMTKDk2QTgyOTVDMDMxNkQ3MUM5MTQ5M0Q3NDQzRUZDMDI1MUM5QzFDMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/zIgQc0Z1DV2tPrKt/MbS35I yvw2IHBgVjorwAFJNP0FsJQOXo/w4vtShpZ/9IhrXRaZMFKZpsoyqQKK/4410dOA JeqxlCfOW2Ns+aszFKIO7Vma2FkCl1QTbXgzox6lPbl4dCfQABJpjM7gxut2RQWX AoDvJadRZY10CNdtAr3wEfe2CxYRydC39Oi6izuxCWCRTJ1T/yeFgMZBUMKzd7BT c9sZjciaOJQQoUzdCHP+H8qPKGA38Zka3HugkNyf/MJtXmAod1y/dKL/kPh41yw/ WmLFxDzmU6724XiMn2AiEiQkJoKUcJ1uSk8lylNaqaT/g+EgPGOIWqGWkjZDAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUlqgpXAMW1xyRST10Q+/AJRycHBUwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzNDMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM1MzIzMjM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA URaMMA0GCSqGSIb3DQEBCwUAA4IBAQB+Uw7WT++NE1z6FCbiv7VihneOhoga9yoT VPQm3UoS6Oguh7PHkXIhMDizNWaegVz0NLK6mnyiOR7iv8Hyr/w55HYj2B8CdPnf dwomiBFGJK5I0FSSwet86xvxYCEm/ZJLU5d/ZdOi6zU4Tzk+T/WVjg0BrtDfVCIT 3u8jPkNCNb/ccM2iP8JoCuwo8rMvCztbQ/kMuBXnmEQ11nWJtABPhuZIAyFhjecK cN53FObQMwyPGvbL8DX0Vj5pc3CqaElKR10Wt3Ydl26kHSiWAQP2MLMbvqHUE7tx EFaI66+Xt0Vh303NJtk4W6XvoFEZ4A+rZec0XLnZb5NdbZKuYeEh -----END CERTIFICATE-----Generated at Sat Feb 14 19:55:18 2026 by rpki-client