This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e302e302f32342d3234203d3e20333938343635.roa File: 38392e3138352e302e302f32342d3234203d3e20333938343635.roa (raw, json) Hash identifier: DsvUCW1bN7aFGgQeIsGcHXPxmEKA8d9nRg1HerJETuk= Subject key identifier: 91:7D:EF:6D:25:38:E7:09:D5:2A:86:4E:40:77:EA:30:C3:4B:00:27 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 22D13CA14984D83B01CF95BEF6B117A36E2487AE Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e302e302f32342d3234203d3e20333938343635.roa Signing time: Thu 12 Feb 2026 19:22:44 +0000 ROA not before: Thu 12 Feb 2026 19:17:44 +0000 ROA not after: Thu 11 Feb 2027 19:22:44 +0000 asID: 398465 IP address blocks: 89.185.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d1:3c:a1:49:84:d8:3b:01:cf:95:be:f6:b1:17:a3:6e:24:87:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:17:44 2026 GMT Not After : Feb 11 19:22:44 2027 GMT Subject: CN=917DEF6D2538E709D52A864E4077EA30C34B0027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:04:55:5c:77:97:6f:c1:ed:2b:65:08:9b:17: b5:6b:0b:d6:dc:bf:b5:46:e1:1d:fc:2d:04:22:c1: f1:4b:06:85:b2:93:f9:74:cf:6c:53:b1:80:cc:80: c2:87:c8:f5:ed:a1:f1:b2:1e:f5:4d:b0:9d:8d:ff: a0:b9:23:43:fb:a2:42:be:43:0c:8a:be:32:89:41: d5:d5:16:e0:19:06:b0:39:6f:40:5f:b1:ce:74:4f: a5:8f:a0:e0:01:79:91:e2:36:9f:48:05:ce:89:ff: 65:bf:d4:63:d7:49:35:34:ae:85:eb:02:82:66:8a: 17:cb:49:0e:bf:a1:f1:b5:4f:c9:da:d2:13:56:8f: 95:20:73:ea:00:b1:4f:1f:d9:7c:32:24:1a:c9:a8: e9:f0:7f:cb:f6:a1:0c:b3:a1:d9:0f:c0:2c:a6:ba: 64:93:f9:a9:ab:be:3e:17:01:44:2b:e5:d9:39:6c: ee:17:f9:0d:cb:ce:17:44:6e:f7:2a:bb:5a:28:57: fa:ce:eb:93:a1:fe:c3:07:1a:f9:d6:72:cf:51:8d: b6:b1:ad:46:52:9f:46:57:94:fb:52:b2:1e:65:77: 78:aa:ca:d3:7c:62:6d:17:88:49:40:5d:b7:6e:88: a7:7b:57:63:0f:ea:3a:ce:f5:92:38:08:d6:26:1e: d6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7D:EF:6D:25:38:E7:09:D5:2A:86:4E:40:77:EA:30:C3:4B:00:27 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e302e302f32342d3234203d3e20333938343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.0.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:6e:3b:3b:44:82:3c:35:4f:7c:5e:9a:fe:47:14:ca:aa:28: 1e:20:e4:79:39:9b:66:98:04:7f:0e:d8:b8:0c:ee:3d:aa:cf: ba:e5:10:52:7b:c4:fc:07:ae:de:b2:ba:6b:d3:f8:e5:7f:d6: ca:ed:ab:6a:85:7c:35:1c:6d:02:59:ee:59:79:56:b1:46:55: 9a:03:13:5e:1b:2c:dc:4e:16:c7:9e:c3:13:40:8a:0a:f3:b9: 0f:d1:10:1e:60:40:ad:1d:57:91:d9:9e:1b:c6:5d:ef:ff:d1: f9:0a:28:ef:d9:5d:7f:06:b3:8f:1f:e0:16:bb:de:12:42:09: 6e:a7:60:27:52:93:05:0f:ec:1b:f7:91:6b:b8:0f:34:12:b9: 44:e1:d2:d5:06:f4:ca:79:9f:41:57:ed:9f:0b:cc:c0:cf:63: 8e:48:b1:78:36:d2:c7:c2:41:59:d7:42:89:fb:2c:4a:b0:f3: fc:a6:ca:94:03:eb:16:89:7f:11:a5:c8:c9:88:95:36:61:fd: 47:3a:41:e8:a4:61:fa:7c:07:b2:e4:e4:4a:e3:7b:92:e9:0d: f7:80:64:3e:1c:b9:68:45:24:1a:0c:73:02:31:9e:97:62:fd: 46:43:21:17:d1:b8:d9:81:71:5b:8c:27:69:74:19:ae:1d:6e: 24:9a:b5:72 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUItE8oUmE2DsBz5W+9rEXo24kh64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTE3NDRaFw0yNzAyMTExOTIyNDRaMDMxMTAvBgNV BAMTKDkxN0RFRjZEMjUzOEU3MDlENTJBODY0RTQwNzdFQTMwQzM0QjAwMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzBFVcd5dvwe0rZQibF7VrC9bc v7VG4R38LQQiwfFLBoWyk/l0z2xTsYDMgMKHyPXtofGyHvVNsJ2N/6C5I0P7okK+ QwyKvjKJQdXVFuAZBrA5b0Bfsc50T6WPoOABeZHiNp9IBc6J/2W/1GPXSTU0roXr AoJmihfLSQ6/ofG1T8na0hNWj5Ugc+oAsU8f2XwyJBrJqOnwf8v2oQyzodkPwCym umST+amrvj4XAUQr5dk5bO4X+Q3LzhdEbvcqu1ooV/rO65Oh/sMHGvnWcs9Rjbax rUZSn0ZXlPtSsh5ld3iqytN8Ym0XiElAXbduiKd7V2MP6jrO9ZI4CNYmHtbxAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUkX3vbSU45wnVKoZOQHfqMMNLACcwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzOTJlMzEzODM1MmUzMDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzODM0MzYzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFm5 ADANBgkqhkiG9w0BAQsFAAOCAQEAmm47O0SCPDVPfF6a/kcUyqooHiDkeTmbZpgE fw7YuAzuParPuuUQUnvE/Aeu3rK6a9P45X/Wyu2raoV8NRxtAlnuWXlWsUZVmgMT Xhss3E4Wx57DE0CKCvO5D9EQHmBArR1XkdmeG8Zd7//R+Qoo79ldfwazjx/gFrve EkIJbqdgJ1KTBQ/sG/eRa7gPNBK5ROHS1Qb0ynmfQVftnwvMwM9jjkixeDbSx8JB WddCifssSrDz/KbKlAPrFol/EaXIyYiVNmH9RzpB6KRh+nwHsuTkSuN7kukN94Bk Phy5aEUkGgxzAjGel2L9RkMhF9G42YFxW4wnaXQZrh1uJJq1cg== -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:42 2026 by rpki-client