This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32382e302f32322d3234203d3e20323032363632.roa
File: 38392e3138352e32382e302f32322d3234203d3e20323032363632.roa (raw, json)
Hash identifier: rXJ2/D9Vn6USCJX2P0XFg80ZR58WjqD7i+C6QUGHr/o=
Subject key identifier: 0B:81:FF:4D:F2:61:75:1A:20:BD:99:F7:47:CA:60:46:44:B8:B0:EC
Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Certificate serial: 7715ECF5AD8E388D59DFD3AEB0246945F85B088B
Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32382e302f32322d3234203d3e20323032363632.roa
Signing time: Thu 12 Feb 2026 19:09:29 +0000
ROA not before: Thu 12 Feb 2026 19:04:29 +0000
ROA not after: Thu 11 Feb 2027 19:09:29 +0000
asID: 202662
IP address blocks: 89.185.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft
rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 05:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:15:ec:f5:ad:8e:38:8d:59:df:d3:ae:b0:24:69:45:f8:5b:08:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3
Validity
Not Before: Feb 12 19:04:29 2026 GMT
Not After : Feb 11 19:09:29 2027 GMT
Subject: CN=0B81FF4DF261751A20BD99F747CA604644B8B0EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d8:d8:ee:61:fa:af:83:0e:70:a6:1c:99:60:
31:27:ce:0d:34:71:80:a6:13:94:13:e8:1c:2c:95:
bb:4a:2b:76:32:3a:36:04:bb:70:b5:86:6b:ac:63:
98:e7:3b:36:91:53:fe:01:fd:b0:6a:5f:9d:11:f7:
35:d6:b5:8f:31:95:8c:d2:61:08:60:fd:9b:77:35:
9e:63:dc:d0:8e:57:98:74:70:21:0c:f5:bb:0d:2f:
7b:08:ca:1c:d2:80:8d:77:14:4d:7a:25:b3:d3:c8:
c8:63:e7:b5:3c:7f:5b:16:cf:d5:b7:b3:c7:76:29:
c7:1c:ea:ea:37:f4:03:7d:7b:44:8f:8d:03:47:09:
cc:93:96:40:ea:19:97:a2:43:f0:5e:7a:5d:55:4f:
df:3a:1c:2e:4d:0a:13:6a:5e:12:6e:33:b8:6b:18:
42:83:87:2a:3f:46:b9:e9:66:ec:c8:1d:b2:41:17:
83:4f:ee:59:02:f9:db:42:f5:b7:62:6b:37:9d:68:
d9:1f:2e:10:8d:66:a1:53:39:6e:b1:eb:22:02:8e:
59:7b:b0:c5:67:f5:0b:2e:0a:59:93:ba:20:e3:bd:
97:ed:33:97:cc:c0:62:8b:13:8e:63:23:09:4e:b3:
53:ca:45:de:66:47:bb:f9:fb:0e:46:c7:01:c6:23:
1d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:81:FF:4D:F2:61:75:1A:20:BD:99:F7:47:CA:60:46:44:B8:B0:EC
X509v3 Authority Key Identifier:
keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32382e302f32322d3234203d3e20323032363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.28.0/22
Signature Algorithm: sha256WithRSAEncryption
72:28:3e:14:20:86:a3:63:65:9b:af:5f:e4:3a:a5:a2:e0:ce:
2e:1b:cc:79:35:c3:08:30:59:85:51:2a:36:1c:4d:93:c7:38:
13:b9:09:d6:07:0d:57:64:3c:a9:8f:dc:c2:d5:c9:0c:65:8d:
40:82:db:5a:0c:51:54:c3:07:af:65:72:d1:85:3e:6f:b1:a2:
c1:1a:4b:1b:40:3f:13:ee:06:7c:fd:d9:e9:40:d2:88:50:2a:
cf:0f:44:2c:14:b2:fa:58:80:45:34:6b:16:6f:2e:12:5f:14:
da:d2:d3:09:72:5b:e6:f5:01:22:b6:3d:24:83:a0:da:7d:06:
50:ae:a6:e5:66:1f:9a:2e:b1:84:51:03:3d:bd:3d:d1:47:9d:
f3:3f:79:f2:83:5b:2d:7a:3e:79:13:8c:1f:3a:8f:07:24:3d:
70:15:27:84:87:fa:11:d4:aa:1f:95:83:5e:1d:92:26:52:96:
77:d0:8d:ed:b0:b2:96:ed:a4:3e:f6:8d:2b:4d:ab:84:2d:c2:
9f:73:8b:fc:df:d2:5d:d4:f8:63:92:05:64:5e:76:f3:2b:9b:
a5:f6:53:97:aa:0e:24:02:24:8c:a5:66:39:a9:fe:75:5f:23:
a6:2e:35:6e:68:07:3e:4b:a8:4a:3a:2d:08:ec:92:90:4a:92:
a0:97:59:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 19:54:17 2026 by rpki-client