This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e302e302f32342d3234203d3e2037303239.roa File: 38392e3138352e302e302f32342d3234203d3e2037303239.roa (raw, json) Hash identifier: a+hVQ5Pu4puWP0BMDkPqxN0OGJFjkyzl54972dKaSvo= Subject key identifier: 4F:3B:0D:34:8D:29:C5:10:4B:0F:05:10:D9:D2:7D:EB:9E:8A:E2:2A Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 4C23D29B4F6FE5E8C9CC9084B6D37655A0CCDB35 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e302e302f32342d3234203d3e2037303239.roa Signing time: Thu 12 Feb 2026 19:05:46 +0000 ROA not before: Thu 12 Feb 2026 19:00:46 +0000 ROA not after: Thu 11 Feb 2027 19:05:46 +0000 asID: 7029 IP address blocks: 89.185.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:23:d2:9b:4f:6f:e5:e8:c9:cc:90:84:b6:d3:76:55:a0:cc:db:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:00:46 2026 GMT Not After : Feb 11 19:05:46 2027 GMT Subject: CN=4F3B0D348D29C5104B0F0510D9D27DEB9E8AE22A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a1:ba:33:21:18:f6:d7:be:38:a8:65:aa:51: ec:c3:d2:93:e6:8a:fa:4b:cf:60:49:c9:a8:36:37: ab:e0:3b:a2:31:3e:21:15:43:65:94:cd:74:04:49: f9:ae:b3:35:28:8c:8b:ec:65:09:1e:bc:b9:db:ef: d1:94:7e:8b:87:52:ea:f5:aa:ef:cd:fd:16:d9:19: 7f:05:fd:75:eb:f6:f4:60:79:7e:50:21:22:64:1f: 3f:63:5e:cd:83:7e:21:ad:d2:1c:82:ea:68:23:06: ae:88:81:fd:b8:b3:d6:2f:29:7f:da:9a:63:ee:e5: bd:4e:81:32:c8:1c:db:80:ed:f9:d7:7c:a9:1f:6a: 53:dc:28:29:57:97:88:5b:25:ca:84:27:9d:5e:28: f1:7c:83:b6:22:7d:4e:2b:10:9a:56:ca:ce:68:2f: 49:05:bd:2c:35:3b:9a:f6:e0:f5:db:9a:ef:1b:9f: c9:59:af:c3:b6:97:58:ee:ed:b8:d9:09:2c:0c:0b: a7:08:03:a8:8c:7c:ca:6b:68:8a:dc:45:25:09:f4: 2f:e1:f9:e3:c8:ec:f4:2e:50:2c:bf:d9:57:c1:33: 58:5f:5a:8b:60:ec:f1:8e:1a:d0:0a:1b:17:fb:2d: 8a:3c:dd:fd:be:db:04:11:db:7d:f2:1a:93:8c:a6: 6b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3B:0D:34:8D:29:C5:10:4B:0F:05:10:D9:D2:7D:EB:9E:8A:E2:2A X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e302e302f32342d3234203d3e2037303239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.0.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:15:89:1b:7c:be:39:d0:ed:53:e9:3a:43:4c:79:20:2e:3e: 64:52:21:46:14:b6:07:0c:de:dc:2a:28:69:ce:0e:4e:10:99: 00:3a:f5:ea:b4:48:f8:3b:5b:c8:19:0d:d7:c2:0d:3d:3b:b6: af:22:9a:e9:0c:65:eb:a8:37:ea:96:30:02:5b:ab:09:e1:5a: 6c:11:0e:e3:42:1e:5a:64:18:b8:8c:b5:7e:f4:8e:a4:08:6d: c1:64:b2:44:f7:a1:87:26:31:ed:df:5e:ed:f4:6d:e6:06:5b: ae:6f:08:02:c2:d3:ca:a2:91:99:e9:95:ef:c6:23:6d:31:96: 37:d7:c1:11:cc:41:74:40:3f:f4:0f:be:79:c9:f8:8f:59:c1: 3e:c4:b9:ac:48:d2:57:f7:d9:59:8d:e4:8a:26:96:b3:fe:9f: aa:c0:a5:b6:99:0c:9c:60:72:f8:82:a0:95:fa:59:ab:d0:3c: be:b4:f9:9a:1e:6a:8c:b7:24:0b:65:8a:08:19:79:d2:a5:eb: 95:4a:14:7d:19:59:b2:2c:7e:5f:08:0b:67:ec:ad:d4:78:7b: 0e:c0:8c:f2:cc:8e:26:48:d5:7f:67:17:a0:83:a9:cc:8b:55: e6:a4:09:57:bd:f9:8d:12:89:ad:5b:8a:54:10:7b:1e:30:f9: 60:f1:9e:9f -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUTCPSm09v5ejJzJCEttN2VaDM2zUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTAwNDZaFw0yNzAyMTExOTA1NDZaMDMxMTAvBgNV BAMTKDRGM0IwRDM0OEQyOUM1MTA0QjBGMDUxMEQ5RDI3REVCOUU4QUUyMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxobozIRj21744qGWqUezD0pPm ivpLz2BJyag2N6vgO6IxPiEVQ2WUzXQESfmuszUojIvsZQkevLnb79GUfouHUur1 qu/N/RbZGX8F/XXr9vRgeX5QISJkHz9jXs2DfiGt0hyC6mgjBq6Igf24s9YvKX/a mmPu5b1OgTLIHNuA7fnXfKkfalPcKClXl4hbJcqEJ51eKPF8g7YifU4rEJpWys5o L0kFvSw1O5r24PXbmu8bn8lZr8O2l1ju7bjZCSwMC6cIA6iMfMpraIrcRSUJ9C/h +ePI7PQuUCy/2VfBM1hfWotg7PGOGtAKGxf7LYo83f2+2wQR233yGpOMpmvVAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUTzsNNI0pxRBLDwUQ2dJ9656K4iowHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzOTJlMzEzODM1MmUzMDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM3MzAzMjM5LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbkAMA0G CSqGSIb3DQEBCwUAA4IBAQCfFYkbfL450O1T6TpDTHkgLj5kUiFGFLYHDN7cKihp zg5OEJkAOvXqtEj4O1vIGQ3Xwg09O7avIprpDGXrqDfqljACW6sJ4VpsEQ7jQh5a ZBi4jLV+9I6kCG3BZLJE96GHJjHt317t9G3mBluubwgCwtPKopGZ6ZXvxiNtMZY3 18ERzEF0QD/0D755yfiPWcE+xLmsSNJX99lZjeSKJpaz/p+qwKW2mQycYHL4gqCV +lmr0Dy+tPmaHmqMtyQLZYoIGXnSpeuVShR9GVmyLH5fCAtn7K3UeHsOwIzyzI4m SNV/Zxegg6nMi1XmpAlXvfmNEomtW4pUEHseMPlg8Z6f -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:17 2026 by rpki-client