This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e302e302f32342d3234203d3e2037303138.roa File: 38392e3138352e302e302f32342d3234203d3e2037303138.roa (raw, json) Hash identifier: 8c5R/Yy4ZWva8db0VOYs+1OA1DU5/lzg66kXjqOGkLY= Subject key identifier: 68:B8:07:57:A2:F3:7C:D3:67:AE:C5:C4:AD:56:7D:04:39:B9:6B:53 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 07B3ADD0053A645919EBB2AB7805C9B4D119E216 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e302e302f32342d3234203d3e2037303138.roa Signing time: Thu 12 Feb 2026 19:20:40 +0000 ROA not before: Thu 12 Feb 2026 19:15:40 +0000 ROA not after: Thu 11 Feb 2027 19:20:40 +0000 asID: 7018 IP address blocks: 89.185.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:b3:ad:d0:05:3a:64:59:19:eb:b2:ab:78:05:c9:b4:d1:19:e2:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:15:40 2026 GMT Not After : Feb 11 19:20:40 2027 GMT Subject: CN=68B80757A2F37CD367AEC5C4AD567D0439B96B53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:62:e7:49:ac:77:e1:cd:b1:34:38:a0:f0:40: 91:71:f9:ee:b3:af:49:7f:e7:68:a5:b9:7f:48:43: 4d:4e:24:ad:3a:b8:a8:7a:d3:7e:56:eb:55:22:00: b3:e6:5a:6f:a3:a2:21:85:12:64:1e:47:18:0b:aa: 50:5a:2a:16:3b:8d:12:4d:7d:24:c0:2b:63:0f:cd: e3:d1:36:23:6d:b1:bb:67:f9:d3:fe:4c:7a:34:0b: 12:13:cb:d3:5d:55:a6:a2:08:bc:82:78:48:40:22: e6:0e:f3:db:9d:c0:68:5e:a0:ae:b7:7b:8c:8c:58: f3:e8:9e:07:69:b9:9f:37:af:5e:8a:65:5b:4b:21: 79:96:f0:4c:c7:b7:72:43:2c:82:3e:dd:bf:5d:0c: cb:fb:54:1e:64:ac:f9:1c:4d:f9:ca:96:71:84:0d: 4a:9a:eb:1e:95:a8:23:7e:4b:16:9c:ee:29:bb:33: 89:41:ff:cd:e0:02:f6:b3:7a:91:09:ed:4b:47:22: b9:d3:54:06:84:1c:48:5e:82:18:19:3c:6a:54:ab: 32:13:b9:59:ce:64:fc:24:12:65:0a:5c:c9:11:f5: cb:eb:88:80:35:0e:93:0b:37:2d:43:2b:15:3f:b7: 96:a8:5f:5e:c7:ca:94:70:47:27:ae:bf:e3:7a:f4: 4c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B8:07:57:A2:F3:7C:D3:67:AE:C5:C4:AD:56:7D:04:39:B9:6B:53 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e302e302f32342d3234203d3e2037303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.0.0/24 Signature Algorithm: sha256WithRSAEncryption 31:ca:e9:70:53:e7:5e:3f:80:ca:52:1e:4b:cb:ed:67:db:60: 66:71:98:5a:a1:fd:85:42:0d:a8:db:cd:3f:e8:8e:a2:ee:53: 1c:b1:49:ec:a7:7b:9f:9b:aa:45:5c:1d:f2:d2:f1:88:f8:08: 57:ab:e2:13:49:41:ad:7f:0d:8f:07:03:c1:cc:9e:33:eb:a9: 70:31:e6:4a:1f:f3:ff:82:f7:90:4c:a2:71:61:3b:50:44:d6: e3:86:78:23:65:77:c3:de:65:9b:75:b7:63:95:14:f3:0c:6e: ee:18:55:da:85:1e:86:50:f4:2b:62:6d:09:25:dd:45:79:d1: 80:a6:e0:d8:b4:81:9e:88:b9:7a:76:50:b1:ef:23:c6:9c:30: ee:90:7b:a8:d7:70:c9:5e:09:00:f7:80:31:2f:8f:36:25:d3: ec:6f:19:18:b4:ce:9c:01:66:1d:f5:85:8d:be:3b:01:cf:63: 8a:85:75:69:35:9a:9d:bd:de:7c:94:8a:ab:d0:69:fa:71:0e: 5f:70:84:2b:67:27:bb:16:88:35:85:a9:71:34:17:b8:2a:2f: 55:e1:32:f0:68:cd:9d:86:98:2a:c2:84:19:17:14:f5:ec:47: 02:2e:50:e0:27:e2:9c:9f:70:da:e3:82:1d:d7:54:d7:95:e5: a8:fd:7e:0b -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUB7Ot0AU6ZFkZ67KreAXJtNEZ4hYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTE1NDBaFw0yNzAyMTExOTIwNDBaMDMxMTAvBgNV BAMTKDY4QjgwNzU3QTJGMzdDRDM2N0FFQzVDNEFENTY3RDA0MzlCOTZCNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqYudJrHfhzbE0OKDwQJFx+e6z r0l/52iluX9IQ01OJK06uKh6035W61UiALPmWm+joiGFEmQeRxgLqlBaKhY7jRJN fSTAK2MPzePRNiNtsbtn+dP+THo0CxITy9NdVaaiCLyCeEhAIuYO89udwGheoK63 e4yMWPPongdpuZ83r16KZVtLIXmW8EzHt3JDLII+3b9dDMv7VB5krPkcTfnKlnGE DUqa6x6VqCN+Sxac7im7M4lB/83gAvazepEJ7UtHIrnTVAaEHEheghgZPGpUqzIT uVnOZPwkEmUKXMkR9cvriIA1DpMLNy1DKxU/t5aoX17HypRwRyeuv+N69EyNAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUaLgHV6LzfNNnrsXErVZ9BDm5a1MwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzOTJlMzEzODM1MmUzMDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM3MzAzMTM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbkAMA0G CSqGSIb3DQEBCwUAA4IBAQAxyulwU+deP4DKUh5Ly+1n22BmcZhaof2FQg2o280/ 6I6i7lMcsUnsp3ufm6pFXB3y0vGI+AhXq+ITSUGtfw2PBwPBzJ4z66lwMeZKH/P/ gveQTKJxYTtQRNbjhngjZXfD3mWbdbdjlRTzDG7uGFXahR6GUPQrYm0JJd1FedGA puDYtIGeiLl6dlCx7yPGnDDukHuo13DJXgkA94AxL482JdPsbxkYtM6cAWYd9YWN vjsBz2OKhXVpNZqdvd58lIqr0Gn6cQ5fcIQrZye7Fog1halxNBe4Ki9V4TLwaM2d hpgqwoQZFxT17EcCLlDgJ+Kcn3Da44Id11TXleWo/X4L -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:15 2026 by rpki-client