This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e312e302f32342d3234203d3e203239383032.roa File: 38392e3138352e312e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: OUxMSTVUugTX7zIfCgGmJaZwnvbaVA0qox2a+7YgLQc= Subject key identifier: 74:8D:24:6A:BD:8A:E9:62:F1:09:4F:E1:73:0F:6E:A6:B9:6D:1C:F9 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 40AEBA0C2CC8687FFAECE2BBABFE9DEFADB8BC03 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e312e302f32342d3234203d3e203239383032.roa Signing time: Thu 12 Feb 2026 19:21:35 +0000 ROA not before: Thu 12 Feb 2026 19:16:35 +0000 ROA not after: Thu 11 Feb 2027 19:21:35 +0000 asID: 29802 IP address blocks: 89.185.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ae:ba:0c:2c:c8:68:7f:fa:ec:e2:bb:ab:fe:9d:ef:ad:b8:bc:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:16:35 2026 GMT Not After : Feb 11 19:21:35 2027 GMT Subject: CN=748D246ABD8AE962F1094FE1730F6EA6B96D1CF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3e:ec:1f:08:3e:6b:5c:b0:68:f0:c1:54:78: e3:fb:86:c6:00:04:24:4c:ec:c0:cc:ef:09:30:94: 12:b3:6b:e3:7e:f0:42:1c:c5:f6:f1:fc:b6:e8:5b: 69:ce:f2:68:02:51:f9:83:0e:b2:df:7f:d1:36:b6: d0:44:5b:f0:44:d1:58:ef:60:95:ed:30:c7:97:fb: ac:42:14:a0:da:be:6b:db:68:c2:c4:39:bc:0f:05: b9:c8:6c:04:d1:fe:c4:41:ec:dc:67:34:91:78:9a: 80:57:85:ba:fd:ae:b3:28:09:f1:e5:a6:c2:17:59: 86:4d:97:c9:b0:3e:d3:90:fa:ba:b3:c2:c2:4f:73: ef:a8:40:17:da:95:20:f0:4e:83:03:1a:69:90:d2: bd:8b:95:16:02:8f:be:a3:c9:b9:85:3a:cb:76:04: 62:38:10:59:09:de:47:49:ac:a0:d8:1f:1a:60:ef: 3c:61:c4:47:1e:2a:90:fd:bc:63:94:d3:2f:37:6a: f5:b7:ca:f7:8c:ac:1f:cd:d0:78:90:e8:70:bf:b1: 29:70:01:aa:16:57:2e:94:50:c9:29:0a:1e:6f:05: a0:6c:81:c9:3b:d4:6d:77:18:1b:96:95:96:8a:1c: 77:90:4a:06:44:3a:15:3a:57:98:d3:32:c7:e3:5c: 5c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8D:24:6A:BD:8A:E9:62:F1:09:4F:E1:73:0F:6E:A6:B9:6D:1C:F9 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e312e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.1.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:e6:e9:91:7f:91:c8:2a:05:4b:7d:52:f3:75:f5:e6:d6:19: f2:34:33:28:e3:33:8f:53:c2:ff:d8:61:81:66:9a:90:8f:cc: 21:a6:93:87:ce:52:d2:a8:e7:e4:8a:21:5f:e2:88:36:4a:04: 07:d3:c8:e7:96:d9:9b:89:bd:0c:af:47:20:b9:13:62:ce:9b: e2:4e:8d:d6:25:85:d7:3f:ad:0b:e4:bb:77:d9:d8:9b:59:2b: 48:39:c5:76:aa:89:8a:10:6c:bc:b1:1c:48:c6:b3:2f:e1:b2: ca:60:6e:4c:10:4d:e2:91:bd:2c:9b:6f:ac:3d:75:29:7c:64: fe:5b:8b:36:39:34:0f:87:12:5d:83:06:05:6f:42:42:aa:49: 3f:9d:f6:2d:b5:b6:86:2e:19:3c:c5:c4:04:d0:fe:0d:8b:b2: 52:11:50:be:45:ab:51:01:f7:0c:18:e6:9c:dc:9f:1c:f6:90: 6e:67:60:62:ca:45:9f:64:a1:26:14:d2:95:3c:d8:fd:6c:e5: 1a:0e:51:8f:da:60:56:df:88:7e:af:af:b5:99:70:b7:cc:5f: 26:9a:1e:29:62:3f:8d:9d:60:12:04:13:74:fd:70:3a:9d:d2: 37:f9:d6:13:65:f0:e6:0a:3b:22:a9:ce:f1:3d:2f:70:6c:05: d9:30:63:7c -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUQK66DCzIaH/67OK7q/6d7624vAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTE2MzVaFw0yNzAyMTExOTIxMzVaMDMxMTAvBgNV BAMTKDc0OEQyNDZBQkQ4QUU5NjJGMTA5NEZFMTczMEY2RUE2Qjk2RDFDRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PuwfCD5rXLBo8MFUeOP7hsYA BCRM7MDM7wkwlBKza+N+8EIcxfbx/LboW2nO8mgCUfmDDrLff9E2ttBEW/BE0Vjv YJXtMMeX+6xCFKDavmvbaMLEObwPBbnIbATR/sRB7NxnNJF4moBXhbr9rrMoCfHl psIXWYZNl8mwPtOQ+rqzwsJPc++oQBfalSDwToMDGmmQ0r2LlRYCj76jybmFOst2 BGI4EFkJ3kdJrKDYHxpg7zxhxEceKpD9vGOU0y83avW3yveMrB/N0HiQ6HC/sSlw AaoWVy6UUMkpCh5vBaBsgck71G13GBuWlZaKHHeQSgZEOhU6V5jTMsfjXFynAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUdI0kar2K6WLxCU/hcw9uprltHPkwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzOTJlMzEzODM1MmUzMTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzkzODMwMzIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZuQEw DQYJKoZIhvcNAQELBQADggEBAB7m6ZF/kcgqBUt9UvN19ebWGfI0MyjjM49Twv/Y YYFmmpCPzCGmk4fOUtKo5+SKIV/iiDZKBAfTyOeW2ZuJvQyvRyC5E2LOm+JOjdYl hdc/rQvku3fZ2JtZK0g5xXaqiYoQbLyxHEjGsy/hsspgbkwQTeKRvSybb6w9dSl8 ZP5bizY5NA+HEl2DBgVvQkKqST+d9i21toYuGTzFxATQ/g2LslIRUL5Fq1EB9wwY 5pzcnxz2kG5nYGLKRZ9koSYU0pU82P1s5RoOUY/aYFbfiH6vr7WZcLfMXyaaHili P42dYBIEE3T9cDqd0jf51hNl8OYKOyKpzvE9L3BsBdkwY3w= -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:16 2026 by rpki-client