This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e302e302f32342d3234203d3e2036303739.roa File: 38392e3138352e302e302f32342d3234203d3e2036303739.roa (raw, json) Hash identifier: hWF+HOG1Ve1PynmFgrnYskJ8FWZwnp6VOr6TuOEsCsY= Subject key identifier: 17:C1:E4:D3:E0:E7:D2:21:6E:B1:B2:FC:B5:75:08:52:D5:88:6D:69 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 6B522ADAEF5EB25F017508A68D703D0EDBF64926 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e302e302f32342d3234203d3e2036303739.roa Signing time: Thu 12 Feb 2026 19:19:18 +0000 ROA not before: Thu 12 Feb 2026 19:14:18 +0000 ROA not after: Thu 11 Feb 2027 19:19:18 +0000 asID: 6079 IP address blocks: 89.185.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:52:2a:da:ef:5e:b2:5f:01:75:08:a6:8d:70:3d:0e:db:f6:49:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:14:18 2026 GMT Not After : Feb 11 19:19:18 2027 GMT Subject: CN=17C1E4D3E0E7D2216EB1B2FCB5750852D5886D69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:f0:5c:ec:fc:90:34:d5:ff:54:c3:79:8c: 0a:67:f2:04:d5:1d:32:fb:db:94:8e:29:79:8f:33: f2:88:54:2b:19:e3:93:46:6d:67:c0:99:03:39:2e: 23:ed:11:fe:34:df:c1:ad:ef:5d:4b:f8:64:30:08: a2:2a:e3:70:9d:67:1d:d8:e8:62:41:c0:f5:2b:d1: 47:1b:3e:13:81:c7:08:22:27:ea:8d:3a:cd:fc:e0: 27:68:38:a9:96:f2:73:ca:2d:57:5a:39:aa:d4:9b: 9e:ac:b8:de:99:33:11:77:57:d9:61:62:0a:3f:d6: d4:c9:21:90:97:0a:0f:e9:3d:79:26:40:e2:66:5c: 96:65:33:c6:40:c9:eb:ec:95:be:b0:87:bf:be:cb: f8:26:37:4f:3a:dc:83:a1:1a:2f:01:fc:9d:d5:41: dd:25:76:d4:cf:f4:55:85:f8:b4:c1:09:b4:33:15: f8:68:61:e1:0a:bd:e3:ed:b3:d8:a6:e9:39:9a:52: e0:12:03:40:dd:57:ce:10:a5:3b:a4:72:17:5b:7a: c3:92:84:21:6a:a5:26:3a:66:5f:00:7c:f4:d9:bc: 4b:f5:3b:51:e6:a7:ed:ee:aa:c3:57:13:92:2e:d3: fa:af:8b:f6:bc:7b:fc:9b:81:7c:1b:42:1d:31:82: cc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C1:E4:D3:E0:E7:D2:21:6E:B1:B2:FC:B5:75:08:52:D5:88:6D:69 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e302e302f32342d3234203d3e2036303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.0.0/24 Signature Algorithm: sha256WithRSAEncryption 75:ca:1c:b7:92:0d:23:4e:35:f0:75:88:f8:02:92:77:60:0e: 1e:72:08:6e:21:90:35:18:a3:c7:d9:74:ea:0f:b4:c8:39:b2: 59:bf:87:ef:2d:53:b4:4e:2f:63:ee:86:92:f6:b1:07:4b:85: bc:ed:f0:57:42:52:81:3d:29:e5:ff:98:ec:42:24:7b:6e:2c: 51:08:09:9b:4e:42:3f:97:46:44:a9:92:c5:50:f2:23:9c:a9: 12:55:67:2a:04:82:91:5d:f2:b0:87:49:27:ec:56:51:75:d1: 39:bc:27:21:cc:2a:b5:5c:b2:fe:c3:41:6f:fe:c7:a6:83:83: 2d:39:35:96:43:52:bf:5b:d3:5d:6a:83:6c:f2:6d:57:91:68: 99:da:82:c3:13:9f:25:e3:b3:d3:24:86:69:a5:a7:57:97:ed: 13:21:07:d9:03:79:22:d6:3a:00:10:ed:20:63:9c:51:c4:37: b2:d3:c2:25:97:18:6f:56:6d:60:a2:82:97:85:38:fc:97:54: f0:08:c9:dc:38:80:1e:57:5e:ae:41:9e:a0:ac:2d:58:f2:12: ae:b7:3d:8b:8d:5f:7d:a1:1b:7a:ac:a8:50:57:28:41:d0:8b: 33:9a:67:b4:d2:b1:36:26:64:98:f8:1a:38:f3:61:d6:0e:1d: 1b:ab:47:70 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUa1Iq2u9esl8BdQimjXA9Dtv2SSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTE0MThaFw0yNzAyMTExOTE5MThaMDMxMTAvBgNV BAMTKDE3QzFFNEQzRTBFN0QyMjE2RUIxQjJGQ0I1NzUwODUyRDU4ODZENjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3PfBc7PyQNNX/VMN5jApn8gTV HTL725SOKXmPM/KIVCsZ45NGbWfAmQM5LiPtEf4038Gt711L+GQwCKIq43CdZx3Y 6GJBwPUr0UcbPhOBxwgiJ+qNOs384CdoOKmW8nPKLVdaOarUm56suN6ZMxF3V9lh Ygo/1tTJIZCXCg/pPXkmQOJmXJZlM8ZAyevslb6wh7++y/gmN0863IOhGi8B/J3V Qd0ldtTP9FWF+LTBCbQzFfhoYeEKvePts9im6TmaUuASA0DdV84QpTukchdbesOS hCFqpSY6Zl8AfPTZvEv1O1Hmp+3uqsNXE5Iu0/qvi/a8e/ybgXwbQh0xgswrAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUF8Hk0+Dn0iFusbL8tXUIUtWIbWkwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzOTJlMzEzODM1MmUzMDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzAzNzM5LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbkAMA0G CSqGSIb3DQEBCwUAA4IBAQB1yhy3kg0jTjXwdYj4ApJ3YA4ecghuIZA1GKPH2XTq D7TIObJZv4fvLVO0Ti9j7oaS9rEHS4W87fBXQlKBPSnl/5jsQiR7bixRCAmbTkI/ l0ZEqZLFUPIjnKkSVWcqBIKRXfKwh0kn7FZRddE5vCchzCq1XLL+w0Fv/semg4Mt OTWWQ1K/W9NdaoNs8m1XkWiZ2oLDE58l47PTJIZppadXl+0TIQfZA3ki1joAEO0g Y5xRxDey08IllxhvVm1gooKXhTj8l1TwCMncOIAeV16uQZ6grC1Y8hKutz2LjV99 oRt6rKhQVyhB0Iszmme00rE2JmSY+Bo482HWDh0bq0dw -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:42 2026 by rpki-client