This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32342e302f32322d3234203d3e20323032363632.roa File: 38392e3138352e32342e302f32322d3234203d3e20323032363632.roa (raw, json) Hash identifier: gvqe55PnrkBIEugbqH3rrW/x0okLJ4n4FVk8OreKxls= Subject key identifier: 0C:8F:1A:E5:7B:4E:1E:60:A4:C0:50:13:E3:17:63:1E:BF:79:70:CF Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 132CFC151FB37E05616FC0A75D704C4EC7595033 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32342e302f32322d3234203d3e20323032363632.roa Signing time: Thu 12 Feb 2026 19:10:36 +0000 ROA not before: Thu 12 Feb 2026 19:05:36 +0000 ROA not after: Thu 11 Feb 2027 19:10:36 +0000 asID: 202662 IP address blocks: 89.185.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:2c:fc:15:1f:b3:7e:05:61:6f:c0:a7:5d:70:4c:4e:c7:59:50:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:05:36 2026 GMT Not After : Feb 11 19:10:36 2027 GMT Subject: CN=0C8F1AE57B4E1E60A4C05013E317631EBF7970CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:12:3a:83:9d:c3:ed:13:af:3e:eb:3c:e7:ff: 47:cc:3d:bb:22:87:c8:f4:58:aa:c7:07:17:27:ee: 3c:0d:4e:a1:5b:8b:1e:f3:cb:50:cc:59:f9:c4:6e: 03:0b:08:1a:a7:c5:46:1c:dd:8e:18:84:34:b0:e2: 93:71:a2:6d:01:dc:bf:22:7e:f1:5f:06:3e:20:4e: bc:96:fa:a4:dc:72:ab:30:28:5c:d5:77:e0:c8:f3: 66:f6:4e:1e:53:be:90:d2:d4:d8:2f:c8:61:77:25: 37:62:43:c4:99:f1:ac:77:11:5d:e3:cb:fe:8f:57: 60:fc:51:4c:84:a0:9c:c2:3d:1b:57:42:a4:bd:f7: cb:4f:3f:b0:e8:e8:00:20:e1:a3:96:e5:cd:2f:7e: dd:1d:22:9d:67:8e:97:b1:6c:0a:45:e5:40:40:46: f8:d3:90:07:92:d0:08:8c:e2:eb:0c:75:3f:27:7f: 70:7d:7e:f3:e6:23:a0:5a:d6:e8:f4:9e:97:1f:fd: 5a:0e:18:27:67:d3:1a:03:d2:71:ed:19:fe:7a:0a: 74:81:7c:3b:44:04:e2:d9:7a:8a:97:06:78:cb:66: 56:cf:c8:69:92:54:a1:39:a9:bb:26:57:f3:57:ed: 5e:48:55:b2:99:2c:45:3f:cc:7b:95:15:6c:80:4f: 00:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8F:1A:E5:7B:4E:1E:60:A4:C0:50:13:E3:17:63:1E:BF:79:70:CF X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32342e302f32322d3234203d3e20323032363632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.24.0/22 Signature Algorithm: sha256WithRSAEncryption af:90:9f:c1:83:5b:d2:1f:01:c1:55:6e:63:80:66:2a:44:e2: a3:f2:fc:7b:38:fc:4a:6d:62:64:19:a8:6c:7d:4f:e3:f4:03: bb:5d:ca:39:80:ac:03:d2:af:91:66:8c:68:22:34:aa:38:fa: a7:4e:c0:53:a1:58:65:77:f7:3a:93:c5:86:00:a1:3d:f4:2d: 8b:97:ae:04:fb:e4:04:e4:1a:12:e4:c5:15:c4:2b:8c:c2:94: e2:88:a3:3b:11:1d:67:b9:dd:92:e3:f5:61:de:8e:87:27:36: ca:4d:6f:3f:e9:f5:47:78:c7:61:d6:10:c0:c8:bf:b9:3e:b8: d2:f7:29:bb:a7:4c:af:ca:78:0b:87:08:39:36:3c:b7:97:f7: 1e:99:66:f6:33:3a:0d:89:57:25:b4:ae:d1:ae:b3:6c:53:f3: 6f:5c:f6:a8:ca:dd:c6:53:f0:fb:7e:da:3c:d2:8d:54:79:e8: f9:80:e5:cd:6f:9d:0c:71:f2:f4:c3:fb:60:a4:f4:93:8f:92: 64:13:e8:c1:19:fd:f8:ea:ce:ba:cc:83:2b:95:2b:1e:5f:e7: 2f:15:93:aa:a1:91:87:3b:02:df:c7:8a:c3:3f:65:b4:65:79: ca:6c:4a:61:2d:3a:41:44:40:8e:a9:02:80:2a:3d:5f:b5:bd: 83:eb:62:b8 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUEyz8FR+zfgVhb8CnXXBMTsdZUDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTA1MzZaFw0yNzAyMTExOTEwMzZaMDMxMTAvBgNV BAMTKDBDOEYxQUU1N0I0RTFFNjBBNEMwNTAxM0UzMTc2MzFFQkY3OTcwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZEjqDncPtE68+6zzn/0fMPbsi h8j0WKrHBxcn7jwNTqFbix7zy1DMWfnEbgMLCBqnxUYc3Y4YhDSw4pNxom0B3L8i fvFfBj4gTryW+qTccqswKFzVd+DI82b2Th5TvpDS1NgvyGF3JTdiQ8SZ8ax3EV3j y/6PV2D8UUyEoJzCPRtXQqS998tPP7Do6AAg4aOW5c0vft0dIp1njpexbApF5UBA RvjTkAeS0AiM4usMdT8nf3B9fvPmI6Ba1uj0npcf/VoOGCdn0xoD0nHtGf56CnSB fDtEBOLZeoqXBnjLZlbPyGmSVKE5qbsmV/NX7V5IVbKZLEU/zHuVFWyATwCTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUDI8a5XtOHmCkwFAT4xdjHr95cM8wHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzOTJlMzEzODM1MmUzMjM0 MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMDMyMzYzNjMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC WbkYMA0GCSqGSIb3DQEBCwUAA4IBAQCvkJ/Bg1vSHwHBVW5jgGYqROKj8vx7OPxK bWJkGahsfU/j9AO7Xco5gKwD0q+RZoxoIjSqOPqnTsBToVhld/c6k8WGAKE99C2L l64E++QE5BoS5MUVxCuMwpTiiKM7ER1nud2S4/Vh3o6HJzbKTW8/6fVHeMdh1hDA yL+5PrjS9ym7p0yvyngLhwg5Njy3l/cemWb2MzoNiVcltK7RrrNsU/NvXPaoyt3G U/D7fto80o1Ueej5gOXNb50McfL0w/tgpPSTj5JkE+jBGf346s66zIMrlSseX+cv FZOqoZGHOwLfx4rDP2W0ZXnKbEphLTpBRECOqQKAKj1ftb2D62K4 -----END CERTIFICATE-----Generated at Sat Feb 14 19:52:20 2026 by rpki-client