This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32322e302f32342d3234203d3e20313335343032.roa File: 38392e3138352e32322e302f32342d3234203d3e20313335343032.roa (raw, json) Hash identifier: 25V8Ie03ZU345AyHX6S9RXW7LxsylLqKmaUOSUTLzjM= Subject key identifier: 04:3F:EC:31:43:39:D0:5E:29:6E:73:0C:3A:92:F0:81:A1:FA:75:76 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 4F911811870D247C7693D5E60E708156F13B6CD5 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32322e302f32342d3234203d3e20313335343032.roa Signing time: Thu 12 Feb 2026 19:03:46 +0000 ROA not before: Thu 12 Feb 2026 18:58:46 +0000 ROA not after: Thu 11 Feb 2027 19:03:46 +0000 asID: 135402 IP address blocks: 89.185.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:91:18:11:87:0d:24:7c:76:93:d5:e6:0e:70:81:56:f1:3b:6c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:58:46 2026 GMT Not After : Feb 11 19:03:46 2027 GMT Subject: CN=043FEC314339D05E296E730C3A92F081A1FA7576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5d:dc:16:25:e1:ed:7f:9e:89:cf:ab:1b:60: 83:f7:62:28:26:9c:f1:da:2d:28:a1:02:cc:e0:1f: 95:d5:cb:16:19:b3:ce:fc:63:8b:94:7e:38:3f:b2: 26:69:8b:c6:80:6b:12:fe:c6:aa:80:d6:15:0b:05: e7:60:ec:58:f6:41:84:9d:82:bc:17:88:30:05:6b: 65:98:e2:9f:e8:9d:91:33:32:dc:38:b2:f4:8c:e3: f0:5c:4d:6c:54:ad:bd:0d:bd:97:a8:a9:60:c6:f0: 3e:64:c6:17:01:97:2d:76:6d:a5:e1:ad:ee:fd:00: 7b:89:cc:0d:63:14:a0:f2:5d:95:4c:2d:03:c4:9d: 4c:a0:6d:50:53:5d:c9:02:57:94:8f:f2:91:fc:53: 68:30:7a:34:8e:9a:1d:a3:64:3b:df:81:cd:e2:14: 0d:5f:dd:eb:5a:2b:42:6a:70:22:00:0a:0c:3a:8c: c3:62:0c:25:fc:01:62:4b:59:5c:9a:a4:4d:c5:76: 06:d8:e9:21:d0:f1:66:ef:13:00:f2:35:5d:43:66: 5d:cb:67:7e:c6:5f:df:92:72:10:a7:4d:da:9f:2a: 92:d0:8c:75:1d:99:f1:60:f3:99:80:88:9b:cd:53: 5c:f4:fb:dc:24:71:52:81:03:f1:06:92:49:f0:e4: 6f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3F:EC:31:43:39:D0:5E:29:6E:73:0C:3A:92:F0:81:A1:FA:75:76 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32322e302f32342d3234203d3e20313335343032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.22.0/24 Signature Algorithm: sha256WithRSAEncryption 95:8a:3f:47:a6:62:fa:db:b9:31:95:93:27:bd:06:23:ff:aa: 77:46:fb:de:7b:95:19:80:26:f4:a1:5c:62:ec:90:84:f2:28: cb:e4:1f:cd:7c:ff:c6:c1:3c:cb:23:fd:45:fa:a2:00:04:ad: c5:72:9e:7c:93:c4:78:12:2f:7d:dc:aa:7e:2b:e4:99:7e:df: 9b:f8:f2:bd:0d:58:0e:06:22:f9:87:d8:53:c9:38:66:bd:55: df:80:7a:56:75:7a:75:99:1b:6a:51:c9:32:c1:b7:80:e2:54: ba:e7:65:e2:87:f1:5f:20:27:4f:ce:49:cc:8e:fa:46:23:ac: 0e:29:9a:cd:b3:ba:cd:7b:b4:3e:d7:e6:54:a7:4b:f1:af:11: eb:45:ec:69:2c:b2:c1:0f:9b:9f:04:8c:54:78:bc:5a:85:c3: 53:34:a8:d5:cb:f6:25:7a:aa:5c:f7:0e:83:2a:b4:30:91:8c: 37:47:f2:2d:14:32:67:50:dd:f8:11:00:53:fb:c4:b6:56:8f: 31:b2:f7:4e:1b:f5:04:1d:47:26:bf:1f:6e:71:b9:bc:68:df: b5:4a:ec:34:27:15:b4:56:e4:88:7f:0f:2e:3d:2c:9b:dc:bc: 67:cd:6b:74:03:9d:42:7b:ba:2b:9e:29:aa:7a:91:34:dc:f2: 58:59:0b:24 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUT5EYEYcNJHx2k9XmDnCBVvE7bNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU4NDZaFw0yNzAyMTExOTAzNDZaMDMxMTAvBgNV BAMTKDA0M0ZFQzMxNDMzOUQwNUUyOTZFNzMwQzNBOTJGMDgxQTFGQTc1NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLXdwWJeHtf56Jz6sbYIP3Yigm nPHaLSihAszgH5XVyxYZs878Y4uUfjg/siZpi8aAaxL+xqqA1hULBedg7Fj2QYSd grwXiDAFa2WY4p/onZEzMtw4svSM4/BcTWxUrb0NvZeoqWDG8D5kxhcBly12baXh re79AHuJzA1jFKDyXZVMLQPEnUygbVBTXckCV5SP8pH8U2gwejSOmh2jZDvfgc3i FA1f3etaK0JqcCIACgw6jMNiDCX8AWJLWVyapE3FdgbY6SHQ8WbvEwDyNV1DZl3L Z37GX9+SchCnTdqfKpLQjHUdmfFg85mAiJvNU1z0+9wkcVKBA/EGkknw5G9BAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUBD/sMUM50F4pbnMMOpLwgaH6dXYwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzOTJlMzEzODM1MmUzMjMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzMDMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA WbkWMA0GCSqGSIb3DQEBCwUAA4IBAQCVij9HpmL627kxlZMnvQYj/6p3Rvvee5UZ gCb0oVxi7JCE8ijL5B/NfP/GwTzLI/1F+qIABK3Fcp58k8R4Ei993Kp+K+SZft+b +PK9DVgOBiL5h9hTyThmvVXfgHpWdXp1mRtqUckywbeA4lS652Xih/FfICdPzknM jvpGI6wOKZrNs7rNe7Q+1+ZUp0vxrxHrRexpLLLBD5ufBIxUeLxahcNTNKjVy/Yl eqpc9w6DKrQwkYw3R/ItFDJnUN34EQBT+8S2Vo8xsvdOG/UEHUcmvx9ucbm8aN+1 Suw0JxW0VuSIfw8uPSyb3LxnzWt0A51Ce7ornimqepE03PJYWQsk -----END CERTIFICATE-----Generated at Sat Feb 14 19:56:19 2026 by rpki-client