This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e322e302f32342d3234203d3e20323131383236.roa File: 38392e3138352e322e302f32342d3234203d3e20323131383236.roa (raw, json) Hash identifier: S2vrfrQ0/ICsAqUf6H4RhTOIWkAJtB5C384VA6879XY= Subject key identifier: BF:62:00:59:88:66:42:74:11:49:68:59:61:EF:72:E4:A0:46:1B:9E Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 6D961B7D8BD80309E49AAC3391D52E3EB75C20E2 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e322e302f32342d3234203d3e20323131383236.roa Signing time: Thu 12 Feb 2026 19:03:47 +0000 ROA not before: Thu 12 Feb 2026 18:58:47 +0000 ROA not after: Thu 11 Feb 2027 19:03:47 +0000 asID: 211826 IP address blocks: 89.185.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:96:1b:7d:8b:d8:03:09:e4:9a:ac:33:91:d5:2e:3e:b7:5c:20:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:58:47 2026 GMT Not After : Feb 11 19:03:47 2027 GMT Subject: CN=BF620059886642741149685961EF72E4A0461B9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9e:be:27:de:88:30:00:bb:8a:42:b5:d3:2f: 50:de:1b:99:b8:cd:b2:b7:51:55:e3:96:a9:00:cb: 51:d3:be:f6:52:6c:bd:82:7e:00:84:a4:91:e7:87: 4d:a8:25:65:01:04:8d:de:ba:2d:c3:7e:f3:bb:fd: 2a:fe:f4:d5:3b:57:f5:01:45:0c:58:75:71:93:5b: 5e:86:56:a2:9e:01:ba:c0:12:21:c8:83:8b:e0:22: 90:66:77:33:40:56:e6:13:4e:5c:15:c9:0f:25:fa: 95:c6:8b:fe:a9:fb:48:6a:d7:23:9f:54:25:a1:fc: 84:33:ec:ea:e4:f6:3e:1e:be:66:44:57:29:03:dc: ce:b8:00:82:6f:c4:3d:33:14:58:65:f2:fa:ea:eb: c2:a9:12:7f:b2:53:36:ca:b1:e4:04:77:a9:82:d2: 3f:a9:10:79:5a:b9:20:da:6c:4f:4e:4d:a6:83:c4: 76:1c:4e:f3:e7:e2:de:06:ad:6c:a9:d8:1e:02:75: 56:f1:cf:49:1b:12:75:44:11:4d:9f:84:09:26:01: 17:32:8c:21:65:c5:1c:fb:cb:f6:2f:88:6a:d6:ed: 4f:e1:5c:5b:a2:d1:23:2c:40:23:a6:f7:09:95:08: b4:89:31:7d:9b:9d:8b:85:01:b6:d1:19:73:a4:a5: 54:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:62:00:59:88:66:42:74:11:49:68:59:61:EF:72:E4:A0:46:1B:9E X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e322e302f32342d3234203d3e20323131383236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.2.0/24 Signature Algorithm: sha256WithRSAEncryption c4:7a:5e:34:36:9a:14:8b:f0:8f:a0:2a:e4:be:ae:f6:1c:67: 35:26:71:70:64:b4:b7:12:b8:0a:00:2c:2d:01:10:71:a2:e7: af:81:95:ed:53:2c:35:19:18:08:f3:07:50:1d:a1:e9:8b:43: ba:ea:cf:36:6b:73:54:41:28:24:c0:5d:f0:f2:d2:ac:f9:54: 67:98:83:36:76:95:3b:4a:73:97:95:77:a0:6e:52:66:19:4d: 9e:ec:b8:fa:4d:7c:ea:8e:29:a7:70:98:9a:d7:4e:39:c9:65: 5e:a7:22:b0:86:0a:53:cc:24:93:08:e4:c4:9a:38:6a:e7:45: 42:a6:b6:72:f2:02:98:e0:24:79:a7:f4:5a:b7:33:d4:ed:ad: 6b:02:8b:fd:2a:f3:ca:fc:e9:55:f7:6f:94:36:6b:5d:aa:af: d7:ae:d7:85:df:0a:c5:ac:9e:df:ba:4d:4f:4d:4a:48:06:b0: a0:1d:b3:d4:a0:6a:dd:71:a3:dc:d8:83:3a:d5:94:e4:0f:ee: aa:84:ea:14:0d:62:04:4f:fa:1f:70:b3:22:dc:2b:4f:31:a4: e6:e6:cb:01:b0:16:28:54:c8:5f:a0:d1:6c:ed:5c:de:47:50: 9a:60:fd:74:f5:c4:6e:80:3b:ff:59:54:98:96:2b:43:94:53: 93:69:4e:53 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUbZYbfYvYAwnkmqwzkdUuPrdcIOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU4NDdaFw0yNzAyMTExOTAzNDdaMDMxMTAvBgNV BAMTKEJGNjIwMDU5ODg2NjQyNzQxMTQ5Njg1OTYxRUY3MkU0QTA0NjFCOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrnr4n3ogwALuKQrXTL1DeG5m4 zbK3UVXjlqkAy1HTvvZSbL2CfgCEpJHnh02oJWUBBI3eui3DfvO7/Sr+9NU7V/UB RQxYdXGTW16GVqKeAbrAEiHIg4vgIpBmdzNAVuYTTlwVyQ8l+pXGi/6p+0hq1yOf VCWh/IQz7Ork9j4evmZEVykD3M64AIJvxD0zFFhl8vrq68KpEn+yUzbKseQEd6mC 0j+pEHlauSDabE9OTaaDxHYcTvPn4t4GrWyp2B4CdVbxz0kbEnVEEU2fhAkmARcy jCFlxRz7y/YviGrW7U/hXFui0SMsQCOm9wmVCLSJMX2bnYuFAbbRGXOkpVRhAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUv2IAWYhmQnQRSWhZYe9y5KBGG54wHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzOTJlMzEzODM1MmUzMjJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTM4MzIzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFm5 AjANBgkqhkiG9w0BAQsFAAOCAQEAxHpeNDaaFIvwj6Aq5L6u9hxnNSZxcGS0txK4 CgAsLQEQcaLnr4GV7VMsNRkYCPMHUB2h6YtDuurPNmtzVEEoJMBd8PLSrPlUZ5iD NnaVO0pzl5V3oG5SZhlNnuy4+k186o4pp3CYmtdOOcllXqcisIYKU8wkkwjkxJo4 audFQqa2cvICmOAkeaf0Wrcz1O2tawKL/SrzyvzpVfdvlDZrXaqv167Xhd8Kxaye 37pNT01KSAawoB2z1KBq3XGj3NiDOtWU5A/uqoTqFA1iBE/6H3CzItwrTzGk5ubL AbAWKFTIX6DRbO1c3kdQmmD9dPXEboA7/1lUmJYrQ5RTk2lOUw== -----END CERTIFICATE-----Generated at Sat Feb 14 19:54:17 2026 by rpki-client