This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e312e302f32342d3234203d3e203631333137.roa File: 38392e3138352e312e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: ez1nGuijL134F6MCW+kF2aqa2Z2P56MX9Jtophd7obU= Subject key identifier: 5C:CC:2B:80:98:B9:33:4D:FC:93:27:0D:3C:3B:AE:C6:D0:BD:64:64 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 1D6DD4EEF926554C6E2743126AB6735F222BA623 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e312e302f32342d3234203d3e203631333137.roa Signing time: Thu 12 Feb 2026 19:03:45 +0000 ROA not before: Thu 12 Feb 2026 18:58:45 +0000 ROA not after: Thu 11 Feb 2027 19:03:45 +0000 asID: 61317 IP address blocks: 89.185.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:6d:d4:ee:f9:26:55:4c:6e:27:43:12:6a:b6:73:5f:22:2b:a6:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:58:45 2026 GMT Not After : Feb 11 19:03:45 2027 GMT Subject: CN=5CCC2B8098B9334DFC93270D3C3BAEC6D0BD6464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:57:07:c4:ca:96:5a:b9:83:de:8e:57:bf:e0: ed:90:e2:a1:84:5b:41:99:b5:6a:6a:41:bf:57:39: 01:e1:9f:84:dd:3f:de:8a:c1:9b:7c:10:79:af:11: cf:18:8f:20:50:91:06:7c:95:c5:d2:6b:0c:90:3c: 80:5f:9b:99:ad:75:33:6f:82:5a:ab:b9:c3:84:be: cd:2f:2b:e9:69:5e:c7:77:29:5a:ea:24:4c:e1:0c: f4:e3:15:e7:8e:2c:0a:93:39:16:3b:6c:ec:df:a9: 8b:0d:02:c3:9a:84:5e:69:33:cc:f9:75:d8:0a:55: a0:3e:89:03:eb:60:b8:68:0d:f2:68:d1:e4:11:47: af:92:ca:f1:5c:48:71:9f:7c:3e:e5:f4:3a:1d:b6: 66:3f:5d:0c:6b:00:3a:8b:ba:be:a5:6f:a2:47:2b: 5b:ea:60:ac:5c:b1:95:10:1c:e4:a0:30:d4:d4:59: d8:ae:81:34:fa:1d:2f:54:0d:4d:80:83:ad:a3:7d: ab:fa:b9:e5:ac:49:1c:62:e3:fe:aa:94:e8:de:77: 5b:1e:88:a7:a4:e2:40:5f:a6:dc:43:ac:14:3b:f8: f0:3f:16:3b:c7:dc:fb:6f:be:72:ab:79:ba:96:71: 10:f9:dd:4e:1e:70:ac:6f:03:5a:f7:5f:ca:07:16: 11:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CC:2B:80:98:B9:33:4D:FC:93:27:0D:3C:3B:AE:C6:D0:BD:64:64 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e312e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.1.0/24 Signature Algorithm: sha256WithRSAEncryption 00:f4:89:c3:3f:b4:dd:46:c9:50:e8:59:56:fe:8f:85:a4:c2: 2e:4a:d2:bd:de:25:8d:08:93:73:75:c9:1b:67:38:d2:4b:46: 9b:69:fd:83:aa:8e:ed:ad:41:c4:55:61:5c:4b:ff:36:e4:66: 35:f7:d4:98:0e:5f:2a:51:58:0e:f9:a1:11:da:ae:63:50:22: ed:a0:2d:e1:55:10:14:f7:e1:1b:3d:d7:5a:dd:62:a3:ad:70: 40:0b:0c:4f:8c:ae:93:12:a2:14:67:86:fd:99:40:e5:2f:3a: ff:27:5f:6c:06:28:04:79:bb:23:11:33:39:7e:23:ed:99:ca: 1b:f6:c7:63:28:45:94:66:96:67:c3:0a:1d:25:f2:f9:b2:ef: 91:65:c3:cd:29:ca:c5:aa:1c:96:e4:c1:b7:89:49:f7:b4:40: 90:95:7e:c9:e6:d0:bc:4c:6d:ce:c6:f6:d7:05:83:d9:7a:3a: ec:2f:bc:e7:62:9a:60:e9:02:41:d4:d3:9a:8b:19:55:13:62: 22:a8:f6:e3:c3:2b:ad:33:15:30:9e:4f:a6:42:92:bc:8a:eb: 57:95:67:50:6c:02:c7:5d:0f:7c:8c:08:bd:8f:81:8b:c1:bb: 6a:58:6b:c6:c6:41:ce:2f:4c:47:60:8a:29:11:42:93:ed:e4: 70:89:7e:71 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUHW3U7vkmVUxuJ0MSarZzXyIrpiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU4NDVaFw0yNzAyMTExOTAzNDVaMDMxMTAvBgNV BAMTKDVDQ0MyQjgwOThCOTMzNERGQzkzMjcwRDNDM0JBRUM2RDBCRDY0NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7VwfEypZauYPejle/4O2Q4qGE W0GZtWpqQb9XOQHhn4TdP96KwZt8EHmvEc8YjyBQkQZ8lcXSawyQPIBfm5mtdTNv glqrucOEvs0vK+lpXsd3KVrqJEzhDPTjFeeOLAqTORY7bOzfqYsNAsOahF5pM8z5 ddgKVaA+iQPrYLhoDfJo0eQRR6+SyvFcSHGffD7l9DodtmY/XQxrADqLur6lb6JH K1vqYKxcsZUQHOSgMNTUWdiugTT6HS9UDU2Ag62jfav6ueWsSRxi4/6qlOjed1se iKek4kBfptxDrBQ7+PA/FjvH3PtvvnKrebqWcRD53U4ecKxvA1r3X8oHFhFlAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUXMwrgJi5M038kycNPDuuxtC9ZGQwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzOTJlMzEzODM1MmUzMTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZuQEw DQYJKoZIhvcNAQELBQADggEBAAD0icM/tN1GyVDoWVb+j4Wkwi5K0r3eJY0Ik3N1 yRtnONJLRptp/YOqju2tQcRVYVxL/zbkZjX31JgOXypRWA75oRHarmNQIu2gLeFV EBT34Rs911rdYqOtcEALDE+MrpMSohRnhv2ZQOUvOv8nX2wGKAR5uyMRMzl+I+2Z yhv2x2MoRZRmlmfDCh0l8vmy75Flw80pysWqHJbkwbeJSfe0QJCVfsnm0LxMbc7G 9tcFg9l6OuwvvOdimmDpAkHU05qLGVUTYiKo9uPDK60zFTCeT6ZCkryK61eVZ1Bs AsddD3yMCL2PgYvBu2pYa8bGQc4vTEdgiikRQpPt5HCJfnE= -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:42 2026 by rpki-client