This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32342e302f32342d3234203d3e20323032363632.roa
File: 38392e3138352e32342e302f32342d3234203d3e20323032363632.roa (raw, json)
Hash identifier: AVMVekIKg9ErlHddgVTS0e8X07G5AlkvjoO2vg28sGg=
Subject key identifier: 01:64:76:0A:8C:FF:E6:07:62:2F:74:F0:7B:2D:DE:3C:21:D5:7B:78
Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial: 7EB58A07BE959BFF23128FDC7B46C4239A5950D3
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32342e302f32342d3234203d3e20323032363632.roa
Signing time: Thu 12 Feb 2026 19:03:46 +0000
ROA not before: Thu 12 Feb 2026 18:58:46 +0000
ROA not after: Thu 11 Feb 2027 19:03:46 +0000
asID: 202662
IP address blocks: 89.185.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 05:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:b5:8a:07:be:95:9b:ff:23:12:8f:dc:7b:46:c4:23:9a:59:50:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Validity
Not Before: Feb 12 18:58:46 2026 GMT
Not After : Feb 11 19:03:46 2027 GMT
Subject: CN=0164760A8CFFE607622F74F07B2DDE3C21D57B78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:7d:2a:6c:9f:33:87:bf:3d:6e:b0:ce:9e:
15:c2:02:43:28:9d:6d:ce:83:3e:8d:8b:94:d8:da:
1e:31:79:ba:1f:1d:1e:b8:58:95:86:bf:be:b9:23:
80:24:66:69:3a:de:a3:f8:7e:d2:fd:4e:f9:01:e1:
16:72:09:df:14:7f:31:d0:6a:83:fd:2b:a7:ea:29:
ea:d3:51:63:c5:24:7b:bd:59:1d:a6:e5:c0:f7:85:
fb:a9:23:37:bc:ca:bc:66:f7:84:b3:11:3b:d5:f2:
9a:e2:3b:de:4f:44:b6:92:b9:b5:06:b8:22:a0:cb:
fa:fc:9d:0e:58:82:79:9f:0a:f1:d8:f8:13:57:9d:
24:8e:86:d8:fe:71:95:ad:c5:06:2c:a7:a9:25:a6:
3b:9e:fe:a8:2f:da:6b:0a:2d:9f:8c:ae:2b:8f:23:
69:19:ac:1f:f0:2a:3a:7e:d0:8a:97:60:0d:2c:08:
45:37:ab:b2:90:f7:33:47:12:1f:33:6b:fc:57:19:
ae:2c:d9:9e:ef:6c:93:27:86:e9:a7:8e:5b:db:97:
6d:9a:fe:4d:ea:96:df:7d:e5:56:68:b6:07:a8:97:
a8:e4:72:79:da:dd:33:08:f9:5f:e0:e3:43:90:3a:
79:22:c5:7b:d1:ed:00:ad:57:db:37:7b:56:2e:5d:
59:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:64:76:0A:8C:FF:E6:07:62:2F:74:F0:7B:2D:DE:3C:21:D5:7B:78
X509v3 Authority Key Identifier:
keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32342e302f32342d3234203d3e20323032363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.24.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:75:5a:74:8b:b3:5a:83:c8:99:94:eb:e3:02:50:9b:b5:6b:
c4:db:bf:aa:51:71:7c:81:7b:5c:b3:72:55:2b:32:df:a2:fe:
48:d2:da:e7:c1:d4:ff:35:03:b4:57:a8:30:2d:e9:66:92:fd:
fe:fb:ea:28:78:c3:8b:e2:fe:07:7c:d8:a4:da:05:fc:1a:49:
ed:bd:3f:0c:19:91:13:0d:1a:22:14:5e:c2:2c:06:ce:06:63:
ee:17:f6:18:0b:85:a3:14:ed:7b:9d:27:e9:cf:ab:44:5c:10:
d3:c6:57:74:4d:27:98:74:97:12:17:4a:48:b7:27:d1:4b:3e:
ef:59:0c:29:8e:18:31:7a:22:1a:33:27:3b:e6:9a:2e:70:45:
f2:94:0e:f9:31:d6:ce:72:66:cc:76:e0:c2:d3:61:4b:65:ce:
22:61:63:24:19:21:57:81:0c:5f:c5:c5:19:b7:e3:86:e3:bc:
61:70:80:ab:2b:f5:d3:5b:cd:a8:c3:6f:e0:05:ba:c0:1c:4c:
9d:cc:39:75:f5:63:a7:f2:24:89:52:34:db:a4:82:05:b0:ee:
1c:65:97:ca:ce:22:80:33:26:ed:56:87:e9:73:a6:51:3e:1c:
24:e1:31:05:b6:be:d8:9d:54:78:4d:4f:ca:99:31:4a:98:c3:
c5:dc:b2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:52:22 2026 by rpki-client