This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3134312e302f32342d3234203d3e2037303239.roa File: 38312e32322e3134312e302f32342d3234203d3e2037303239.roa (raw, json) Hash identifier: PM7yD+AaTw3a+amSQ6MlboFz1ArOs2RAwpPoILWulLA= Subject key identifier: 66:97:C9:1D:9A:42:33:72:A5:8F:24:FD:99:A9:0F:BE:54:32:91:7F Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 232EBD7CADC143C3F43015F4CFB8EC01678D7A45 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3134312e302f32342d3234203d3e2037303239.roa Signing time: Thu 12 Feb 2026 19:05:46 +0000 ROA not before: Thu 12 Feb 2026 19:00:46 +0000 ROA not after: Thu 11 Feb 2027 19:05:46 +0000 asID: 7029 IP address blocks: 81.22.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:2e:bd:7c:ad:c1:43:c3:f4:30:15:f4:cf:b8:ec:01:67:8d:7a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:00:46 2026 GMT Not After : Feb 11 19:05:46 2027 GMT Subject: CN=6697C91D9A423372A58F24FD99A90FBE5432917F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7b:a3:19:d5:d4:9c:61:5e:34:68:90:ae:a9: d5:92:be:2a:6d:85:3a:23:e0:ca:e5:60:f4:fa:76: ef:5a:a8:bb:c1:44:37:d1:ac:51:61:23:32:ee:04: c5:dc:10:92:a1:c9:eb:04:2a:c5:7f:a6:61:69:24: 91:9c:b2:e5:60:e7:76:04:11:a8:bc:38:af:a1:e2: c6:17:72:b1:eb:68:10:18:3f:b0:bc:2f:5a:ef:76: 91:45:ca:22:53:08:43:a6:63:eb:ff:26:41:49:3d: 82:b9:2b:d1:84:c3:fe:06:b8:a7:83:12:1e:46:e6: 95:41:8d:e7:6d:69:89:95:95:3c:bb:21:df:ad:10: 42:fa:79:8b:50:15:48:5e:18:22:24:92:a9:54:20: 1b:e9:1d:b1:c6:b5:41:f6:ea:93:fe:19:45:dc:c3: 87:45:4b:57:7d:ec:3e:25:3d:15:b9:42:cc:2f:6b: 29:a7:c8:a7:f0:54:91:1e:67:c7:e8:96:18:8b:51: cb:ce:07:41:6c:3b:fa:5c:33:88:e3:33:df:e1:9b: 6a:39:ab:95:94:0d:51:59:01:f2:41:1d:a5:ee:c1: 40:9f:c7:4a:42:00:3a:02:7b:bd:be:e3:b7:6c:1d: b1:23:b0:a3:54:11:9e:33:2b:d1:8e:0e:8b:cf:7c: ef:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:97:C9:1D:9A:42:33:72:A5:8F:24:FD:99:A9:0F:BE:54:32:91:7F X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3134312e302f32342d3234203d3e2037303239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.141.0/24 Signature Algorithm: sha256WithRSAEncryption c0:34:89:30:0a:e1:d0:29:92:f6:d8:62:8b:66:11:da:22:80: 9b:a0:83:ba:08:14:c3:d1:e9:d6:47:8e:21:f1:5f:7a:56:fb: e3:7c:79:a1:83:7c:12:39:e8:f3:5f:b4:58:4d:2b:88:3d:d4: 92:66:47:5b:33:6e:09:6f:15:9b:2c:90:cf:f7:96:f1:da:40: 79:42:f8:db:d7:f9:cc:86:3b:84:9a:45:a5:c0:33:ae:9e:ce: 34:1d:4d:21:76:15:99:c8:26:87:08:c1:62:dd:8d:a2:30:dc: b7:62:e8:60:a7:82:39:56:ca:c7:17:fb:f5:c2:ce:b1:85:9b: 5f:bc:0b:c7:0d:09:c3:03:be:73:a2:4f:c2:7e:30:09:f0:aa: 90:5e:7e:f6:f6:1d:d7:de:e4:13:37:1e:1b:c7:d6:db:cb:91: e3:66:c5:76:14:0d:8f:36:9f:e9:16:b1:cf:29:c2:a9:05:61: 7e:bb:db:15:35:c0:bd:98:60:7b:cb:d7:c0:ac:17:73:14:a6: e9:12:f3:1f:de:f4:2a:0b:6c:dc:bc:db:41:5d:8c:f0:69:dc: 10:d0:b4:d4:1e:b6:92:cc:bc:2f:84:d6:0e:f1:20:e6:12:76: 82:6e:57:6d:81:50:23:ee:70:e5:3a:53:87:24:dd:59:01:13: d4:0a:6f:15 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUIy69fK3BQ8P0MBX0z7jsAWeNekUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTAwNDZaFw0yNzAyMTExOTA1NDZaMDMxMTAvBgNV BAMTKDY2OTdDOTFEOUE0MjMzNzJBNThGMjRGRDk5QTkwRkJFNTQzMjkxN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDme6MZ1dScYV40aJCuqdWSvipt hToj4MrlYPT6du9aqLvBRDfRrFFhIzLuBMXcEJKhyesEKsV/pmFpJJGcsuVg53YE Eai8OK+h4sYXcrHraBAYP7C8L1rvdpFFyiJTCEOmY+v/JkFJPYK5K9GEw/4GuKeD Eh5G5pVBjedtaYmVlTy7Id+tEEL6eYtQFUheGCIkkqlUIBvpHbHGtUH26pP+GUXc w4dFS1d97D4lPRW5QswvaymnyKfwVJEeZ8folhiLUcvOB0FsO/pcM4jjM9/hm2o5 q5WUDVFZAfJBHaXuwUCfx0pCADoCe72+47dsHbEjsKNUEZ4zK9GODovPfO9bAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUZpfJHZpCM3KljyT9makPvlQykX8wHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzNDMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczMDMyMzkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABRFo0w DQYJKoZIhvcNAQELBQADggEBAMA0iTAK4dApkvbYYotmEdoigJugg7oIFMPR6dZH jiHxX3pW++N8eaGDfBI56PNftFhNK4g91JJmR1szbglvFZsskM/3lvHaQHlC+NvX +cyGO4SaRaXAM66ezjQdTSF2FZnIJocIwWLdjaIw3Ldi6GCngjlWyscX+/XCzrGF m1+8C8cNCcMDvnOiT8J+MAnwqpBefvb2Hdfe5BM3HhvH1tvLkeNmxXYUDY82n+kW sc8pwqkFYX672xU1wL2YYHvL18CsF3MUpukS8x/e9CoLbNy820FdjPBp3BDQtNQe tpLMvC+E1g7xIOYSdoJuV22BUCPucOU6U4ck3VkBE9QKbxU= -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:17 2026 by rpki-client