This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32382e302f32342d3234203d3e20343031343334.roa File: 38392e3138352e32382e302f32342d3234203d3e20343031343334.roa (raw, json) Hash identifier: KZTVO2XV4t/Bs+KLpDN5kNhSNrip9FwfIoT/pLYBMPY= Subject key identifier: C7:A5:AC:30:92:DB:F3:94:38:71:93:13:67:F8:FE:EC:1B:18:8C:73 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 76BEF929145A27210F4E6ACA30C118B1B81EED21 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32382e302f32342d3234203d3e20343031343334.roa Signing time: Thu 12 Feb 2026 19:03:47 +0000 ROA not before: Thu 12 Feb 2026 18:58:47 +0000 ROA not after: Thu 11 Feb 2027 19:03:47 +0000 asID: 401434 IP address blocks: 89.185.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:be:f9:29:14:5a:27:21:0f:4e:6a:ca:30:c1:18:b1:b8:1e:ed:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:58:47 2026 GMT Not After : Feb 11 19:03:47 2027 GMT Subject: CN=C7A5AC3092DBF3943871931367F8FEEC1B188C73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:d9:4d:8c:e7:95:36:90:cb:80:f1:00:c5: 62:85:75:a7:d3:7a:21:ed:bb:ea:28:b8:b9:44:39: 3b:dd:2c:1f:b5:89:23:34:71:76:68:78:6b:c7:d1: af:f3:c5:d9:a8:2a:a2:dc:3b:7c:09:ad:86:84:7d: 13:ed:4e:49:7d:27:1c:a3:10:b6:e7:04:90:70:52: 1e:9a:e0:c8:7c:23:b2:9f:c4:0a:b6:6d:bd:ac:ba: e4:2d:d7:51:41:65:8d:39:af:8a:2c:b8:8f:01:ea: 15:12:9e:f4:8a:99:e5:fc:23:81:c2:21:eb:c9:76: 14:df:e8:c2:81:23:8d:b1:a9:cb:fa:fb:74:34:23: 5c:22:c3:cf:8e:e2:6b:5f:96:24:4a:e0:24:73:1a: cc:7e:ea:e0:fd:82:27:40:f6:42:42:5c:0e:d6:99: d6:9e:40:90:4a:93:79:42:c7:5a:c3:78:ec:b8:67: ec:8d:b9:75:de:d3:a2:e3:76:9a:5f:e2:d2:63:7d: 0f:8f:12:56:d8:18:3b:4a:14:f5:7a:d6:46:e1:92: 93:fb:db:04:2f:44:17:84:13:b3:ff:2c:22:97:7f: b0:1a:a7:34:6d:a4:93:1b:ff:93:c4:b0:32:f0:2e: 8d:86:22:3b:96:c5:2b:96:17:eb:2a:75:e2:5b:fe: ae:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A5:AC:30:92:DB:F3:94:38:71:93:13:67:F8:FE:EC:1B:18:8C:73 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32382e302f32342d3234203d3e20343031343334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.28.0/24 Signature Algorithm: sha256WithRSAEncryption 53:1f:4a:12:97:b1:c7:43:94:35:74:ca:8d:91:82:b5:4a:3f: 4d:c4:66:f3:b6:95:29:eb:2b:56:7b:fb:79:29:b7:66:82:23: 39:8d:85:77:3d:7e:aa:24:2c:62:89:6b:a8:aa:81:f2:c4:64: 27:64:c9:f8:0f:64:c8:59:bd:fd:3e:13:07:6c:71:d6:21:83: 9a:ae:cc:f1:a3:85:03:d2:c4:30:ee:52:67:c5:5f:da:fd:9c: fb:85:dd:43:46:7d:1b:c6:e8:69:22:30:49:bc:b5:c4:a7:ec: 3b:44:35:f6:42:66:27:61:8c:d3:d2:29:e7:ec:91:7a:08:a6: 70:b5:5d:52:29:69:76:78:02:da:eb:74:b9:18:9c:9f:fe:d0: eb:7a:8a:62:f0:18:1c:6a:68:6f:52:67:38:7b:fa:38:f0:a6: 8e:2b:dd:9e:15:78:14:66:27:50:57:af:04:2f:36:46:55:ac: c6:b7:97:37:46:4f:c9:e5:41:b1:b5:65:13:d0:fd:d1:da:a0: 7a:bd:cf:77:83:e7:99:a9:e1:15:97:05:6d:61:7c:df:e2:9c: 7b:c3:ab:33:2c:0d:d1:37:d9:18:1d:4a:1b:1e:0a:cf:ea:56: f4:55:d9:7a:28:9b:e4:34:9c:22:08:6a:ce:64:c0:12:50:93: 92:0d:38:a0 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUdr75KRRaJyEPTmrKMMEYsbge7SEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU4NDdaFw0yNzAyMTExOTAzNDdaMDMxMTAvBgNV BAMTKEM3QTVBQzMwOTJEQkYzOTQzODcxOTMxMzY3RjhGRUVDMUIxODhDNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8JNlNjOeVNpDLgPEAxWKFdafT eiHtu+oouLlEOTvdLB+1iSM0cXZoeGvH0a/zxdmoKqLcO3wJrYaEfRPtTkl9Jxyj ELbnBJBwUh6a4Mh8I7KfxAq2bb2suuQt11FBZY05r4osuI8B6hUSnvSKmeX8I4HC IevJdhTf6MKBI42xqcv6+3Q0I1wiw8+O4mtfliRK4CRzGsx+6uD9gidA9kJCXA7W mdaeQJBKk3lCx1rDeOy4Z+yNuXXe06Ljdppf4tJjfQ+PElbYGDtKFPV61kbhkpP7 2wQvRBeEE7P/LCKXf7AapzRtpJMb/5PEsDLwLo2GIjuWxSuWF+sqdeJb/q7NAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUx6WsMJLb85Q4cZMTZ/j+7BsYjHMwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzOTJlMzEzODM1MmUzMjM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMxMzQzMzM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA WbkcMA0GCSqGSIb3DQEBCwUAA4IBAQBTH0oSl7HHQ5Q1dMqNkYK1Sj9NxGbztpUp 6ytWe/t5KbdmgiM5jYV3PX6qJCxiiWuoqoHyxGQnZMn4D2TIWb39PhMHbHHWIYOa rszxo4UD0sQw7lJnxV/a/Zz7hd1DRn0bxuhpIjBJvLXEp+w7RDX2QmYnYYzT0inn 7JF6CKZwtV1SKWl2eALa63S5GJyf/tDreopi8BgcamhvUmc4e/o48KaOK92eFXgU ZidQV68ELzZGVazGt5c3Rk/J5UGxtWUT0P3R2qB6vc93g+eZqeEVlwVtYXzf4px7 w6szLA3RN9kYHUobHgrP6lb0Vdl6KJvkNJwiCGrOZMASUJOSDTig -----END CERTIFICATE-----Generated at Sat Feb 14 19:54:53 2026 by rpki-client