This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e31322e302f32342d3234203d3e203630383630.roa File: 38392e3138352e31322e302f32342d3234203d3e203630383630.roa (raw, json) Hash identifier: KsOBm/IW9m6wYWtDKEPIq17pdU+n9YXSV9XxpyK0qLc= Subject key identifier: 62:CE:68:72:E2:F9:E8:08:01:C1:F3:51:0E:28:00:2D:AA:2C:C3:1D Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 06DFEE7DCD9D25758C1704A2E39A511FCDB0EB84 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e31322e302f32342d3234203d3e203630383630.roa Signing time: Thu 12 Feb 2026 19:01:44 +0000 ROA not before: Thu 12 Feb 2026 18:56:44 +0000 ROA not after: Thu 11 Feb 2027 19:01:44 +0000 asID: 60860 IP address blocks: 89.185.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:df:ee:7d:cd:9d:25:75:8c:17:04:a2:e3:9a:51:1f:cd:b0:eb:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:56:44 2026 GMT Not After : Feb 11 19:01:44 2027 GMT Subject: CN=62CE6872E2F9E80801C1F3510E28002DAA2CC31D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:94:69:34:cf:ef:26:8a:69:f3:e7:ca:46:93: 78:88:46:47:ad:99:6a:9c:23:20:e7:73:ee:55:11: ac:3a:bb:5b:aa:37:51:65:38:67:e0:aa:96:41:ca: 8c:8f:5a:e0:b5:c5:5d:52:40:cb:be:f5:0c:e0:02: 7d:63:2b:c0:d0:53:0c:2a:46:51:cf:1c:6f:61:ff: d7:76:b7:e6:10:da:24:bd:7c:27:84:87:3e:56:07: f6:a4:43:3f:75:a4:1f:1a:32:c3:07:e4:44:f8:87: b9:93:52:3d:e1:a3:f0:82:5d:8a:b5:0e:36:ba:4c: 9d:a8:eb:1e:c9:d5:4c:e4:e4:92:88:c6:97:9e:eb: 0d:5e:b5:14:2b:c4:94:e3:41:df:ec:3d:43:28:80: f2:f3:0f:1a:ed:83:9d:de:37:36:f5:cf:00:44:55: 03:4b:f2:7a:78:12:a2:06:64:82:dc:85:58:4e:71: 46:4b:21:c3:65:6d:1d:5c:e2:94:24:68:df:6a:0f: ea:bf:fe:c4:d9:15:a3:18:b7:3a:ad:dd:54:be:fb: 44:94:78:11:70:ff:50:40:38:d8:6c:fd:37:72:1c: 9b:6c:a3:9d:c7:98:fc:3a:35:43:53:2c:82:56:6e: 1c:db:23:75:c8:29:91:97:f2:34:61:83:84:44:aa: 19:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CE:68:72:E2:F9:E8:08:01:C1:F3:51:0E:28:00:2D:AA:2C:C3:1D X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e31322e302f32342d3234203d3e203630383630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.12.0/24 Signature Algorithm: sha256WithRSAEncryption a5:51:dc:ed:4b:75:c1:aa:fa:3e:db:66:42:23:f0:30:d7:dc: 5c:e5:1c:7f:f1:2b:2a:7d:5c:5b:11:55:09:4d:50:1e:98:18: 2c:26:aa:d7:1e:02:94:1d:3c:a4:95:74:78:84:00:f6:ff:f5: 10:a0:bd:fb:07:6d:e9:7d:bb:b3:bc:b1:2d:b0:43:83:49:0e: 34:cc:47:14:61:9b:71:ce:5c:f2:c2:86:31:a7:9f:46:8d:af: 7a:e3:0b:b7:07:2b:a8:6d:0f:95:30:b2:65:57:8c:7c:03:25: d6:c7:1b:36:4d:54:cc:b8:d2:c2:ba:e0:dc:05:5c:7c:14:d5: 91:35:c4:15:7c:89:16:c5:59:f2:9a:cf:ba:4c:99:ed:77:c5: e7:8d:a2:4f:97:f2:90:03:3b:14:4c:02:6f:74:18:5c:f3:ef: c7:5d:b7:4d:80:b8:7c:f3:a7:d7:f4:d8:c6:0a:61:f1:37:7d: d2:ef:6f:d2:15:8d:3c:eb:d1:2a:3b:24:d4:5a:db:6e:1f:d7: f7:fc:88:30:3e:e3:23:50:e7:52:6c:49:21:15:bf:f6:10:e7: 0d:67:bd:d6:b1:3b:1d:7f:8d:97:e9:cb:d2:be:ce:06:88:d3: d5:89:85:c5:ae:09:fc:61:c4:3d:c0:63:f1:a5:e2:b0:dd:9c: 15:e7:aa:5a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUBt/ufc2dJXWMFwSi45pRH82w64QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU2NDRaFw0yNzAyMTExOTAxNDRaMDMxMTAvBgNV BAMTKDYyQ0U2ODcyRTJGOUU4MDgwMUMxRjM1MTBFMjgwMDJEQUEyQ0MzMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRlGk0z+8mimnz58pGk3iIRket mWqcIyDnc+5VEaw6u1uqN1FlOGfgqpZByoyPWuC1xV1SQMu+9QzgAn1jK8DQUwwq RlHPHG9h/9d2t+YQ2iS9fCeEhz5WB/akQz91pB8aMsMH5ET4h7mTUj3ho/CCXYq1 Dja6TJ2o6x7J1Uzk5JKIxpee6w1etRQrxJTjQd/sPUMogPLzDxrtg53eNzb1zwBE VQNL8np4EqIGZILchVhOcUZLIcNlbR1c4pQkaN9qD+q//sTZFaMYtzqt3VS++0SU eBFw/1BAONhs/TdyHJtso53HmPw6NUNTLIJWbhzbI3XIKZGX8jRhg4REqhnFAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUYs5ocuL56AgBwfNRDigALaoswx0wHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzOTJlMzEzODM1MmUzMTMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMDM4MzYzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFm5 DDANBgkqhkiG9w0BAQsFAAOCAQEApVHc7Ut1war6PttmQiPwMNfcXOUcf/ErKn1c WxFVCU1QHpgYLCaq1x4ClB08pJV0eIQA9v/1EKC9+wdt6X27s7yxLbBDg0kONMxH FGGbcc5c8sKGMaefRo2veuMLtwcrqG0PlTCyZVeMfAMl1scbNk1UzLjSwrrg3AVc fBTVkTXEFXyJFsVZ8prPukyZ7XfF542iT5fykAM7FEwCb3QYXPPvx123TYC4fPOn 1/TYxgph8Td90u9v0hWNPOvRKjsk1Frbbh/X9/yIMD7jI1DnUmxJIRW/9hDnDWe9 1rE7HX+Nl+nL0r7OBojT1YmFxa4J/GHEPcBj8aXisN2cFeeqWg== -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:52 2026 by rpki-client