This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32372e302f32342d3234203d3e20323032363632.roa
File: 38392e3138352e32372e302f32342d3234203d3e20323032363632.roa (raw, json)
Hash identifier: L+rK990rOFo/oCz0MC6PXSYN3ySWrxudV/oZTtRVusQ=
Subject key identifier: 12:DA:14:D0:B3:13:F6:B7:40:6E:69:2D:13:C9:CA:17:C2:62:1A:E4
Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial: 297AE0DD5EE240F162A8D210E728E78AC646590A
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32372e302f32342d3234203d3e20323032363632.roa
Signing time: Thu 12 Feb 2026 19:03:46 +0000
ROA not before: Thu 12 Feb 2026 18:58:46 +0000
ROA not after: Thu 11 Feb 2027 19:03:46 +0000
asID: 202662
IP address blocks: 89.185.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 05:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:7a:e0:dd:5e:e2:40:f1:62:a8:d2:10:e7:28:e7:8a:c6:46:59:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Validity
Not Before: Feb 12 18:58:46 2026 GMT
Not After : Feb 11 19:03:46 2027 GMT
Subject: CN=12DA14D0B313F6B7406E692D13C9CA17C2621AE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f1:e4:2b:ac:b5:1d:eb:ed:8b:f3:9b:f5:f9:
d9:94:0c:30:86:1a:57:60:a9:ea:ae:fd:c2:ae:d7:
58:5c:cc:d4:ce:e7:a8:82:c8:02:f0:8f:09:ce:bf:
d3:47:6a:3a:48:38:4c:ed:03:08:f1:97:f1:9d:fb:
92:cf:20:9e:e3:c3:ee:6d:eb:bb:62:31:f7:a7:e3:
40:10:de:16:61:93:b4:95:64:be:74:0a:ad:ef:a3:
cc:2c:fe:73:42:88:ac:e3:34:86:53:de:25:74:e1:
22:62:65:c8:6a:fb:77:82:4f:96:1a:b3:e5:77:73:
a7:b1:be:f3:41:80:08:91:13:eb:54:63:fb:0a:a2:
a9:3e:f6:b5:57:7d:71:c6:bf:bd:da:79:82:85:02:
7a:f3:be:54:90:15:25:1c:6c:57:78:5f:06:ea:61:
5a:01:c5:f2:11:c2:53:2f:56:ec:b9:a5:60:d8:13:
47:8a:05:b3:f9:79:55:39:f2:24:ba:ba:d8:ad:91:
06:7c:79:12:2d:8c:b3:77:08:99:62:b6:ae:82:f2:
39:35:74:d8:76:27:5d:96:04:b3:88:50:2a:0b:fc:
f8:06:36:fb:b1:0c:b3:75:f7:eb:7e:33:12:70:00:
fc:d3:d6:c9:27:01:4e:1e:0e:a0:81:da:d7:37:b5:
11:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DA:14:D0:B3:13:F6:B7:40:6E:69:2D:13:C9:CA:17:C2:62:1A:E4
X509v3 Authority Key Identifier:
keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32372e302f32342d3234203d3e20323032363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.27.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:9c:07:7e:1d:8c:54:9b:f0:ec:ec:d3:a3:be:1e:2a:d7:c5:
df:2c:2e:ac:30:54:fa:85:1a:f8:41:40:6f:ae:a2:a4:60:fc:
a5:da:b6:c7:a0:f8:aa:53:e2:d1:f2:66:76:31:d7:d9:6d:ce:
d3:0f:fb:11:9d:46:1d:fa:a3:89:80:77:39:85:96:d3:28:75:
b9:75:5f:a8:7e:54:dd:71:15:95:31:29:e7:04:cd:53:c7:52:
15:18:ed:30:10:47:48:c1:45:b5:f9:29:dd:b0:a5:11:61:d6:
3f:6d:b5:71:c2:81:6f:cb:4f:1b:c7:71:67:ab:72:fd:ba:17:
43:b0:52:49:f5:e6:7e:ab:d1:66:e1:f4:83:e9:a0:1e:58:dd:
bc:70:02:52:d9:64:62:da:95:50:03:00:c5:b4:a0:cf:ce:54:
cf:7c:5a:fe:9a:bb:ff:9a:2a:a9:3f:d7:e5:b2:7b:cc:fb:ee:
8f:3b:b7:b8:7b:93:c7:aa:f9:1d:ac:e3:36:37:ff:20:97:14:
5e:87:42:72:0e:91:1b:58:c5:68:ca:b6:35:98:de:da:b2:e1:
cc:f6:17:28:2a:c6:15:3e:47:5d:78:48:fa:7c:55:ee:a4:83:
06:44:64:81:88:48:66:d7:45:82:e2:50:ac:a7:f2:0f:92:f7:
c6:eb:df:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:54:17 2026 by rpki-client