This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32382e302f32322d3234203d3e20343031343334.roa File: 38392e3138352e32382e302f32322d3234203d3e20343031343334.roa (raw, json) Hash identifier: fqNGlP0uma8YNBCTaCcTvwjoqgvJnC/SWkLLiCH+MHQ= Subject key identifier: 35:D6:9B:43:2B:C9:37:28:BE:B5:BD:AC:24:4F:50:FB:44:7B:4F:87 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 3279ABDA3A8CD907A4F6A9529655B5F2D349277E Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32382e302f32322d3234203d3e20343031343334.roa Signing time: Thu 12 Feb 2026 19:13:59 +0000 ROA not before: Thu 12 Feb 2026 19:08:59 +0000 ROA not after: Thu 11 Feb 2027 19:13:59 +0000 asID: 401434 IP address blocks: 89.185.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:79:ab:da:3a:8c:d9:07:a4:f6:a9:52:96:55:b5:f2:d3:49:27:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:08:59 2026 GMT Not After : Feb 11 19:13:59 2027 GMT Subject: CN=35D69B432BC93728BEB5BDAC244F50FB447B4F87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5b:ec:b9:4b:ae:20:54:e3:90:41:80:41:9f: 44:3a:bd:24:b5:a0:c5:5b:a3:ce:45:0a:59:6d:05: 99:59:c4:6d:77:87:bc:44:65:ac:fe:81:46:72:29: bc:0b:e5:8d:9b:d5:96:25:89:de:c3:60:c0:e7:73: 60:f3:26:b8:56:6c:af:c2:27:86:0c:ec:89:fe:a6: f9:b2:95:06:fd:32:f1:b1:61:11:bb:6e:bf:07:56: a9:35:ba:ba:12:ec:37:6b:3e:95:cb:9e:b1:c4:23: 90:b9:a2:fd:41:58:3e:a7:57:4a:8b:b5:4b:50:83: 2d:d0:96:31:e4:5d:7d:73:74:5c:c6:ea:21:d0:a6: 7c:b0:7b:ed:45:9a:98:66:f4:8c:a2:f7:f9:ff:f0: fb:18:a7:af:10:da:0a:13:11:8c:f6:4f:9b:b6:2f: b8:a9:86:4a:56:ef:1f:65:dd:3c:2c:19:8b:b7:5b: 50:a8:47:35:ac:07:44:46:dc:b3:ca:e1:ae:92:e6: a8:b7:c4:c8:4c:26:10:a1:30:c4:a2:45:02:6e:4b: de:29:21:16:32:a7:71:5e:47:62:dc:0a:71:1b:c2: 85:a6:6d:9f:05:d1:a4:b2:2d:da:17:4a:e8:cd:30: d3:6d:44:f8:f6:4c:76:fa:6e:db:ba:f6:ba:8c:eb: 81:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D6:9B:43:2B:C9:37:28:BE:B5:BD:AC:24:4F:50:FB:44:7B:4F:87 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32382e302f32322d3234203d3e20343031343334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.28.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:2d:f6:25:4a:cd:55:5c:db:cf:5e:82:95:de:c1:dc:86:68: 55:96:2b:f5:d8:41:5f:b9:de:4e:fd:a2:34:68:50:c2:f4:dd: b1:2f:8b:d3:70:e8:e7:db:9c:df:30:8b:95:a0:11:28:9c:59: 36:4b:02:f2:83:d1:60:85:d4:d5:4c:22:0d:61:61:02:b7:82: 28:8c:a3:df:52:3c:67:79:10:01:ff:5d:01:fc:5b:22:3b:2d: 7d:17:8f:ff:a6:59:99:b1:3a:d3:9c:61:0e:f5:c4:ae:2e:6c: 03:21:e5:c9:6e:83:32:5f:11:9c:54:f0:f4:3a:27:26:36:09: ad:85:f5:ef:e5:34:36:85:67:2f:27:4e:ec:ec:f9:36:a5:b8: 86:26:7a:83:09:69:b1:11:26:7a:9f:58:67:6e:ac:ce:73:22: 0f:8b:d5:1e:91:6e:82:71:09:49:b8:c5:a9:95:b9:0b:90:31: 31:d5:d6:e3:0b:61:63:fc:16:ec:86:6f:53:0b:c7:0c:b5:dd: 87:0d:79:fb:92:ca:24:54:7d:b5:9d:01:16:12:c6:a1:28:f8: ad:7e:fa:d1:78:2c:ab:a1:c4:e7:89:4a:6a:3d:95:e7:ea:fe: 90:ce:87:19:3c:04:a3:79:63:78:72:31:89:61:9f:25:a3:82: 47:46:03:b3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUMnmr2jqM2Qek9qlSllW18tNJJ34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTA4NTlaFw0yNzAyMTExOTEzNTlaMDMxMTAvBgNV BAMTKDM1RDY5QjQzMkJDOTM3MjhCRUI1QkRBQzI0NEY1MEZCNDQ3QjRGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkW+y5S64gVOOQQYBBn0Q6vSS1 oMVbo85FClltBZlZxG13h7xEZaz+gUZyKbwL5Y2b1ZYlid7DYMDnc2DzJrhWbK/C J4YM7In+pvmylQb9MvGxYRG7br8HVqk1uroS7DdrPpXLnrHEI5C5ov1BWD6nV0qL tUtQgy3QljHkXX1zdFzG6iHQpnywe+1Fmphm9Iyi9/n/8PsYp68Q2goTEYz2T5u2 L7iphkpW7x9l3TwsGYu3W1CoRzWsB0RG3LPK4a6S5qi3xMhMJhChMMSiRQJuS94p IRYyp3FeR2LcCnEbwoWmbZ8F0aSyLdoXSujNMNNtRPj2THb6btu69rqM64GLAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUNdabQyvJNyi+tb2sJE9Q+0R7T4cwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzOTJlMzEzODM1MmUzMjM4 MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzMDMxMzQzMzM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC WbkcMA0GCSqGSIb3DQEBCwUAA4IBAQCfLfYlSs1VXNvPXoKV3sHchmhVliv12EFf ud5O/aI0aFDC9N2xL4vTcOjn25zfMIuVoBEonFk2SwLyg9FghdTVTCINYWECt4Io jKPfUjxneRAB/10B/FsiOy19F4//plmZsTrTnGEO9cSuLmwDIeXJboMyXxGcVPD0 OicmNgmthfXv5TQ2hWcvJ07s7Pk2pbiGJnqDCWmxESZ6n1hnbqzOcyIPi9UekW6C cQlJuMWplbkLkDEx1dbjC2Fj/Bbshm9TC8cMtd2HDXn7ksokVH21nQEWEsahKPit fvrReCyrocTniUpqPZXn6v6QzocZPASjeWN4cjGJYZ8lo4JHRgOz -----END CERTIFICATE-----Generated at Sat Feb 14 19:54:52 2026 by rpki-client