This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3134322e302f32342d3234203d3e2035353131.roa File: 38312e32322e3134322e302f32342d3234203d3e2035353131.roa (raw, json) Hash identifier: qhNxQvRUyWRLKt7txIv0P9R07JrmEe57cQLN/MzpAGw= Subject key identifier: 76:F8:7D:EB:F4:11:E6:90:92:0D:FA:BA:32:BB:29:4D:06:50:69:B6 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 1691CCB97CFF78293B8D81DEFF6D2B93293B1CEA Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3134322e302f32342d3234203d3e2035353131.roa Signing time: Thu 12 Feb 2026 19:04:42 +0000 ROA not before: Thu 12 Feb 2026 18:59:42 +0000 ROA not after: Thu 11 Feb 2027 19:04:42 +0000 asID: 5511 IP address blocks: 81.22.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:91:cc:b9:7c:ff:78:29:3b:8d:81:de:ff:6d:2b:93:29:3b:1c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:59:42 2026 GMT Not After : Feb 11 19:04:42 2027 GMT Subject: CN=76F87DEBF411E690920DFABA32BB294D065069B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:48:a5:a5:38:87:16:ac:c1:e0:62:79:c4:f5: 9c:37:c8:d2:a5:25:4e:e7:6b:df:cb:db:53:a9:e2: 63:6c:19:e4:90:8a:a4:17:51:45:1a:95:23:0c:62: 70:6b:cc:2b:7d:79:e7:8e:95:39:6c:81:6b:98:1d: 34:40:7a:42:93:39:13:df:f5:7d:f5:d0:aa:ae:47: 7f:df:1f:91:aa:b1:aa:7c:b4:07:53:84:1a:ac:a6: a8:1e:0c:63:bf:93:7d:73:7a:c4:54:66:59:51:03: 7e:e7:3a:18:93:7b:88:a2:d3:66:54:05:86:7f:fd: 3c:37:7f:63:2d:c3:0e:cd:d0:22:d5:4b:17:88:04: 1a:bb:47:80:49:ef:ae:0c:8a:60:ff:63:50:36:e7: 96:ef:ba:6e:24:c8:67:28:69:17:3c:96:b5:90:f6: bd:f3:2f:6c:d7:4d:c8:30:db:89:ef:3a:e6:27:b1: db:d9:1d:4f:c5:3d:55:a5:fa:8c:5d:40:ac:2a:6a: 4a:23:7c:0d:ab:a3:26:ea:ba:f6:4f:41:1d:80:03: c5:90:12:44:d6:5c:b9:c6:c8:7b:7f:d1:54:09:d8: a0:5c:b6:9a:ad:19:92:85:fa:1a:db:0e:96:bb:54: 38:4b:4f:88:d9:e3:fe:ae:e9:cf:f2:76:6f:b5:c1: ac:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F8:7D:EB:F4:11:E6:90:92:0D:FA:BA:32:BB:29:4D:06:50:69:B6 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3134322e302f32342d3234203d3e2035353131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.142.0/24 Signature Algorithm: sha256WithRSAEncryption c6:e8:46:07:64:ad:be:4a:12:df:5c:1e:9e:e4:88:42:27:06: 59:0e:6d:1c:66:0f:7a:19:9f:13:71:f3:ee:31:cd:58:6c:87: f4:01:1c:c4:96:cf:c7:64:ed:a4:e1:6a:24:39:e7:1e:b2:24: e7:fb:75:15:b2:79:4c:2e:3d:da:8f:f7:6f:79:4b:ff:99:75: 1c:0c:b4:1b:5c:87:c8:24:34:5b:c4:73:bc:fe:05:69:d7:58: 4c:05:5b:42:ea:63:13:a0:b9:09:84:fc:1b:b3:88:94:61:3c: 99:94:ff:b6:44:54:b1:11:78:81:34:8d:12:dc:d9:0b:d9:15: 29:f9:00:90:1c:e3:1c:f5:42:60:26:ab:f4:97:c6:0e:c5:ce: 53:6d:13:ff:46:5c:3c:94:ec:79:1f:cb:a6:9d:d9:6a:62:c9: ad:77:4e:7b:43:b5:29:76:42:38:42:7f:d7:16:2c:c4:16:7e: 90:af:ce:a5:37:04:28:ac:0c:5d:ab:65:40:dd:ea:4f:c9:a9: 07:85:ae:41:75:1a:d4:ed:6e:27:44:05:8a:84:49:e6:63:d6: ff:f4:d1:ae:42:6c:b3:9c:4c:74:5a:d0:bb:16:1c:a9:90:be: ae:6d:56:2f:25:2f:33:d5:d0:fb:14:66:27:8f:5f:f7:86:c4: c1:9a:25:e3 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUFpHMuXz/eCk7jYHe/20rkyk7HOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU5NDJaFw0yNzAyMTExOTA0NDJaMDMxMTAvBgNV BAMTKDc2Rjg3REVCRjQxMUU2OTA5MjBERkFCQTMyQkIyOTREMDY1MDY5QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWSKWlOIcWrMHgYnnE9Zw3yNKl JU7na9/L21Op4mNsGeSQiqQXUUUalSMMYnBrzCt9eeeOlTlsgWuYHTRAekKTORPf 9X310KquR3/fH5Gqsap8tAdThBqspqgeDGO/k31zesRUZllRA37nOhiTe4ii02ZU BYZ//Tw3f2Mtww7N0CLVSxeIBBq7R4BJ764MimD/Y1A255bvum4kyGcoaRc8lrWQ 9r3zL2zXTcgw24nvOuYnsdvZHU/FPVWl+oxdQKwqakojfA2roybquvZPQR2AA8WQ EkTWXLnGyHt/0VQJ2KBctpqtGZKF+hrbDpa7VDhLT4jZ4/6u6c/ydm+1wayLAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUdvh96/QR5pCSDfq6MrspTQZQabYwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzNDMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTMxMzEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABRFo4w DQYJKoZIhvcNAQELBQADggEBAMboRgdkrb5KEt9cHp7kiEInBlkObRxmD3oZnxNx 8+4xzVhsh/QBHMSWz8dk7aThaiQ55x6yJOf7dRWyeUwuPdqP9295S/+ZdRwMtBtc h8gkNFvEc7z+BWnXWEwFW0LqYxOguQmE/BuziJRhPJmU/7ZEVLEReIE0jRLc2QvZ FSn5AJAc4xz1QmAmq/SXxg7FzlNtE/9GXDyU7Hkfy6ad2Wpiya13TntDtSl2QjhC f9cWLMQWfpCvzqU3BCisDF2rZUDd6k/JqQeFrkF1GtTtbidEBYqESeZj1v/00a5C bLOcTHRa0LsWHKmQvq5tVi8lLzPV0PsUZiePX/eGxMGaJeM= -----END CERTIFICATE-----Generated at Sat Feb 14 19:52:20 2026 by rpki-client