This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3134332e302f32342d3234203d3e2035353131.roa File: 38312e32322e3134332e302f32342d3234203d3e2035353131.roa (raw, json) Hash identifier: 6JyQNkLeVr6TDvqvDrJXApmtI7Wp5m6NqKN2Lz1ic6M= Subject key identifier: 32:86:CA:B2:90:50:09:FA:40:F9:98:7F:D2:5D:64:0A:F7:A7:A7:08 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 23CF0766ECA950155A1184D99095983362F809AF Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3134332e302f32342d3234203d3e2035353131.roa Signing time: Thu 12 Feb 2026 19:04:42 +0000 ROA not before: Thu 12 Feb 2026 18:59:42 +0000 ROA not after: Thu 11 Feb 2027 19:04:42 +0000 asID: 5511 IP address blocks: 81.22.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:cf:07:66:ec:a9:50:15:5a:11:84:d9:90:95:98:33:62:f8:09:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:59:42 2026 GMT Not After : Feb 11 19:04:42 2027 GMT Subject: CN=3286CAB2905009FA40F9987FD25D640AF7A7A708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8a:72:8e:78:64:33:b1:73:d1:55:72:31:c4: be:b0:21:9e:b0:44:59:ac:4c:fc:ec:e5:6d:a1:c0: 93:46:2f:6c:f0:33:1f:bd:25:78:36:7b:bc:3e:0e: 8f:ac:88:ac:31:70:71:75:55:7c:d5:68:91:8f:50: a5:40:d6:67:a1:0b:6f:3d:4a:2f:66:98:bf:87:6a: 7b:6b:6d:1b:e3:51:f9:8e:70:f1:5f:76:41:85:21: 12:2f:af:97:4d:2d:34:ab:6d:3f:fd:7c:92:b4:98: 9f:fb:3e:47:20:86:9b:e4:fe:52:d7:14:4b:c5:14: 61:14:6d:86:1f:d2:84:90:7a:f0:1e:0d:a1:93:23: 12:03:2c:06:74:97:e1:4e:5a:f2:d8:6c:d3:fd:3d: ce:50:57:86:44:47:72:ca:aa:cb:e8:23:fa:bb:31: 74:40:c4:eb:c3:68:6a:3e:d4:07:ce:83:df:24:ea: 97:4d:62:1e:25:b0:ee:e6:e3:4e:c5:2e:5b:c8:7c: 06:29:5d:8f:e9:88:13:49:76:6d:25:6e:66:45:27: 53:1d:60:60:bf:dd:a8:c2:eb:a6:30:d0:f7:0c:50: 51:b8:61:2b:27:df:61:e6:1d:69:39:5b:c1:2f:60: 4d:92:e7:bf:fb:2f:6e:e7:9a:2b:73:98:a8:7c:f5: a2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:86:CA:B2:90:50:09:FA:40:F9:98:7F:D2:5D:64:0A:F7:A7:A7:08 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38312e32322e3134332e302f32342d3234203d3e2035353131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.143.0/24 Signature Algorithm: sha256WithRSAEncryption 34:03:f4:0b:20:08:e4:91:aa:f0:70:8a:19:3c:9a:b1:0a:6d: dd:45:1b:94:4d:da:a8:e5:04:f3:02:69:4d:20:88:63:79:da: cf:95:86:12:a4:cc:ae:69:59:ee:d2:a3:43:ba:f6:8e:71:e7: 16:a5:02:be:7a:5b:ca:12:f9:49:a1:b8:47:d2:7b:cc:22:a3: c7:c7:ed:75:ea:24:1b:f0:eb:6a:4a:80:fd:ab:02:4b:2d:b8: c1:c7:04:30:e8:43:52:4d:a3:3b:5e:6f:f0:bb:6e:d0:55:35: f8:20:1d:be:03:0c:c7:39:03:1b:95:9b:8d:c9:79:d8:f0:99: c8:d2:45:7f:61:71:34:a9:23:84:92:56:d7:66:3b:d0:ec:67: e3:2b:d6:84:d8:c5:a4:91:1e:d5:d5:76:bd:d6:13:8b:83:07: 96:9f:94:6d:22:bb:99:3d:a1:a3:c9:26:e8:73:65:c1:89:6b: f9:68:40:aa:ab:0e:31:e3:02:e7:65:99:3f:3e:2e:cc:44:0b: a1:27:a6:89:39:36:37:19:23:2a:05:37:7c:1d:be:a7:da:a4: 92:11:5d:de:36:22:49:3b:aa:04:d3:03:2f:98:74:18:d5:56: 86:0b:bc:8d:8c:d2:61:64:3b:bf:2e:3c:08:80:38:60:25:41: 3e:be:77:8a -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUI88HZuypUBVaEYTZkJWYM2L4Ca8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU5NDJaFw0yNzAyMTExOTA0NDJaMDMxMTAvBgNV BAMTKDMyODZDQUIyOTA1MDA5RkE0MEY5OTg3RkQyNUQ2NDBBRjdBN0E3MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqinKOeGQzsXPRVXIxxL6wIZ6w RFmsTPzs5W2hwJNGL2zwMx+9JXg2e7w+Do+siKwxcHF1VXzVaJGPUKVA1mehC289 Si9mmL+HantrbRvjUfmOcPFfdkGFIRIvr5dNLTSrbT/9fJK0mJ/7Pkcghpvk/lLX FEvFFGEUbYYf0oSQevAeDaGTIxIDLAZ0l+FOWvLYbNP9Pc5QV4ZER3LKqsvoI/q7 MXRAxOvDaGo+1AfOg98k6pdNYh4lsO7m407FLlvIfAYpXY/piBNJdm0lbmZFJ1Md YGC/3ajC66Yw0PcMUFG4YSsn32HmHWk5W8EvYE2S57/7L27nmitzmKh89aJrAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUMobKspBQCfpA+Zh/0l1kCvenpwgwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzMTJlMzIzMjJlMzEzNDMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTMxMzEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABRFo8w DQYJKoZIhvcNAQELBQADggEBADQD9AsgCOSRqvBwihk8mrEKbd1FG5RN2qjlBPMC aU0giGN52s+VhhKkzK5pWe7So0O69o5x5xalAr56W8oS+UmhuEfSe8wio8fH7XXq JBvw62pKgP2rAkstuMHHBDDoQ1JNozteb/C7btBVNfggHb4DDMc5AxuVm43Jedjw mcjSRX9hcTSpI4SSVtdmO9DsZ+Mr1oTYxaSRHtXVdr3WE4uDB5aflG0iu5k9oaPJ JuhzZcGJa/loQKqrDjHjAudlmT8+LsxEC6Enpok5NjcZIyoFN3wdvqfapJIRXd42 Ikk7qgTTAy+YdBjVVoYLvI2M0mFkO78uPAiAOGAlQT6+d4o= -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:15 2026 by rpki-client