This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3134322e302f32332d3234203d3e20383334.roa
File: 38312e32322e3134322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: MynPEbyWlJVuPhoG12Gy9jXh5CocCQHcirzPdBGyScI=
Subject key identifier: 08:33:BA:84:5B:92:98:18:07:8A:64:49:64:5D:10:2A:58:38:23:AD
Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial: 402F6DD2895E49E867FD5977B64A6221B0DC8CC9
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3134322e302f32332d3234203d3e20383334.roa
Signing time: Thu 12 Feb 2026 19:17:46 +0000
ROA not before: Thu 12 Feb 2026 19:12:46 +0000
ROA not after: Thu 11 Feb 2027 19:17:46 +0000
asID: 834
IP address blocks: 81.22.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 05:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:2f:6d:d2:89:5e:49:e8:67:fd:59:77:b6:4a:62:21:b0:dc:8c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Validity
Not Before: Feb 12 19:12:46 2026 GMT
Not After : Feb 11 19:17:46 2027 GMT
Subject: CN=0833BA845B929818078A6449645D102A583823AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:2c:8a:54:8d:e2:1c:1c:99:d4:57:29:03:
f6:5e:24:63:7e:28:4a:72:d3:29:44:c9:07:66:5b:
b9:ff:6b:16:5b:51:f1:a8:8f:bb:f2:db:52:f6:c3:
83:ba:e6:64:14:e6:ad:3b:76:41:d3:e4:c4:fa:50:
e6:ea:0f:ac:a7:38:a7:11:82:10:a4:03:0f:cd:ac:
b5:56:d4:c6:54:0e:5e:e1:4e:1a:b9:49:f4:82:ca:
1c:f7:a9:aa:2b:65:e3:7e:f6:90:eb:b6:ef:a1:c5:
fd:c5:9f:f7:30:87:57:f1:c5:5e:ac:29:84:72:8e:
38:6c:72:5a:e4:1f:d5:a1:49:de:55:b8:36:f0:1c:
f1:86:04:8c:17:06:6b:e4:bb:e1:81:8e:74:13:27:
c2:a2:c4:19:1b:06:46:e4:89:63:a0:de:d1:c8:bb:
05:5b:84:b3:e7:0e:86:8f:6c:b1:81:d1:f3:14:b7:
5d:0b:9b:bb:0f:4a:34:42:fb:1f:5d:78:55:c4:0c:
92:b6:72:40:f3:c1:2b:30:48:39:b4:f5:79:cd:8e:
17:01:6c:75:dc:cb:f3:5e:4d:02:02:38:67:f7:d9:
61:2b:49:22:8b:13:3e:79:b6:6a:6e:e7:e6:f2:bc:
5a:92:e6:94:7a:4b:47:46:c1:7c:9b:15:60:69:2a:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:33:BA:84:5B:92:98:18:07:8A:64:49:64:5D:10:2A:58:38:23:AD
X509v3 Authority Key Identifier:
keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3134322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.142.0/23
Signature Algorithm: sha256WithRSAEncryption
95:49:ec:d3:a8:24:90:f0:9d:c0:13:fa:ff:b0:6f:ec:5f:d5:
32:eb:11:25:57:00:2e:db:95:60:79:2c:15:07:9c:fb:87:a4:
94:8d:85:5a:09:19:bf:64:50:ac:b0:d4:e7:49:eb:da:2c:e1:
65:58:b7:69:c2:3d:cd:c4:05:be:45:29:eb:df:ec:b0:9a:6f:
8a:ef:2b:75:27:42:b9:b2:e0:9a:ab:3d:47:8e:55:ee:a7:ac:
54:ab:56:a3:ae:94:be:46:e0:1b:3d:98:b9:01:8f:c8:67:00:
3c:66:e7:77:15:f8:c6:85:45:c3:05:8c:38:f3:60:61:6a:f2:
f0:67:56:e2:01:33:2f:71:19:37:84:b5:ad:0c:13:cd:26:96:
ca:f6:06:d2:b6:fc:76:cc:11:66:7a:0b:05:43:7c:ea:2c:91:
ba:0a:1a:15:7c:e8:74:af:78:d7:1d:94:f8:2d:bc:61:d5:af:
a4:ec:f9:9c:d6:06:38:4c:ab:bf:ed:8f:8c:a3:e5:5f:a5:e9:
04:35:23:7d:33:14:71:e1:4b:4e:05:63:2e:5a:68:ae:af:ef:
06:07:07:0d:22:3a:b1:3b:22:4a:a3:09:e8:a1:b0:97:01:b5:
da:53:45:82:9c:ed:2c:5a:8e:c1:0e:2a:69:b7:cc:08:0e:b7:
bc:4a:4b:3f
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUQC9t0oleSehn/Vl3tkpiIbDcjMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4
Mzg2NTdhMzAeFw0yNjAyMTIxOTEyNDZaFw0yNzAyMTExOTE3NDZaMDMxMTAvBgNV
BAMTKDA4MzNCQTg0NUI5Mjk4MTgwNzhBNjQ0OTY0NUQxMDJBNTgzODIzQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq/SyKVI3iHByZ1FcpA/ZeJGN+
KEpy0ylEyQdmW7n/axZbUfGoj7vy21L2w4O65mQU5q07dkHT5MT6UObqD6ynOKcR
ghCkAw/NrLVW1MZUDl7hThq5SfSCyhz3qaorZeN+9pDrtu+hxf3Fn/cwh1fxxV6s
KYRyjjhsclrkH9WhSd5VuDbwHPGGBIwXBmvku+GBjnQTJ8KixBkbBkbkiWOg3tHI
uwVbhLPnDoaPbLGB0fMUt10Lm7sPSjRC+x9deFXEDJK2ckDzwSswSDm09XnNjhcB
bHXcy/NeTQICOGf32WErSSKLEz55tmpu5+byvFqS5pR6S0dGwXybFWBpKgkzAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUCDO6hFuSmBgHimRJZF0QKlg4I60wHwYDVR0j
BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4
NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP
R1Y2TS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt
NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzNDMy
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBURaOMA0G
CSqGSIb3DQEBCwUAA4IBAQCVSezTqCSQ8J3AE/r/sG/sX9Uy6xElVwAu25VgeSwV
B5z7h6SUjYVaCRm/ZFCssNTnSevaLOFlWLdpwj3NxAW+RSnr3+ywmm+K7yt1J0K5
suCaqz1HjlXup6xUq1ajrpS+RuAbPZi5AY/IZwA8Zud3FfjGhUXDBYw482BhavLw
Z1biATMvcRk3hLWtDBPNJpbK9gbStvx2zBFmegsFQ3zqLJG6ChoVfOh0r3jXHZT4
Lbxh1a+k7Pmc1gY4TKu/7Y+Mo+VfpekENSN9MxRx4UtOBWMuWmiur+8GBwcNIjqx
OyJKownoobCXAbXaU0WCnO0sWo7BDippt8wIDre8Sks/
-----END CERTIFICATE-----
Generated at Sat Feb 14 17:23:56 2026 by rpki-client