This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32392e302f32342d3234203d3e20343031343334.roa File: 38392e3138352e32392e302f32342d3234203d3e20343031343334.roa (raw, json) Hash identifier: JNF3TFhQocRmYaZxIvzrUfU6/SoXoS6zYj7u74xQiMo= Subject key identifier: 63:AF:47:29:85:8C:99:FC:1A:F6:18:D2:1A:29:77:2F:DF:DB:6B:75 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 1D6802A088755CEE67907041C6A15A7BDF5798CB Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32392e302f32342d3234203d3e20343031343334.roa Signing time: Thu 12 Feb 2026 19:03:47 +0000 ROA not before: Thu 12 Feb 2026 18:58:47 +0000 ROA not after: Thu 11 Feb 2027 19:03:47 +0000 asID: 401434 IP address blocks: 89.185.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:68:02:a0:88:75:5c:ee:67:90:70:41:c6:a1:5a:7b:df:57:98:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:58:47 2026 GMT Not After : Feb 11 19:03:47 2027 GMT Subject: CN=63AF4729858C99FC1AF618D21A29772FDFDB6B75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:64:c5:bf:b2:55:12:b7:4a:6a:54:1f:b3: c0:43:d3:5c:65:b4:a1:67:1e:12:42:ec:f1:64:7c: ab:8c:08:bd:3b:38:4c:74:7e:cd:57:3d:54:44:c1: ed:6e:13:0a:fc:b9:7d:f0:c6:ca:7d:83:57:82:9f: 93:9e:e8:15:75:b9:4e:f9:99:27:4e:b8:46:df:24: 28:f2:15:62:c6:c0:d7:df:3d:58:11:4a:f6:d0:57: 70:a5:8d:c8:c1:a6:6c:db:73:a0:1f:cc:a8:8d:41: 31:7d:71:df:0e:98:95:c2:62:5b:48:49:29:b0:6b: c7:e9:ab:4e:97:95:9d:d2:4e:17:c0:67:47:81:ee: 83:0e:f6:45:b7:ec:ef:f9:3f:5c:c0:63:bc:f7:1b: 9a:7e:1b:71:0f:d6:69:35:9b:e1:ef:16:d7:64:e0: 88:2a:2e:33:cc:7d:58:49:8a:05:72:05:cc:c4:e6: f3:94:75:0a:41:86:41:9d:40:89:f1:e8:38:b5:ee: da:f7:f0:82:e5:86:c9:6d:ec:10:58:d6:43:19:42: d1:c5:4d:dc:a4:39:3e:0e:da:6b:97:3b:5d:31:e2: 49:66:22:46:3d:a4:38:2c:2a:bf:ed:16:67:99:a3: cd:ee:67:37:ed:c1:af:3b:ea:b1:be:7f:64:2f:bf: c8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AF:47:29:85:8C:99:FC:1A:F6:18:D2:1A:29:77:2F:DF:DB:6B:75 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e32392e302f32342d3234203d3e20343031343334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.29.0/24 Signature Algorithm: sha256WithRSAEncryption b9:c9:c6:9c:8d:11:18:92:b7:15:2a:27:0b:ec:20:db:ed:4e: 49:ee:1f:fb:a7:c7:e0:5d:77:58:0d:a2:b9:fc:fd:ba:01:7f: 15:e9:e9:95:63:d6:b6:52:42:87:1b:7e:12:9e:f7:bc:7d:23: 85:93:d8:be:d4:25:1c:dc:99:e9:83:aa:49:6e:21:5b:09:fb: bf:90:7b:d2:c4:7a:d3:48:69:7d:60:86:a2:b0:0b:9a:2f:3f: dc:ca:07:95:4f:01:2d:58:af:35:7a:a7:db:2a:ea:b7:16:a1: 5a:5e:a0:93:fb:2d:6a:cc:44:21:0f:c4:dd:e9:4e:c5:f6:66: a9:22:16:b6:7f:f7:8c:bc:47:44:f6:af:8e:99:36:a0:dd:36: 93:82:40:6a:a7:2d:c4:33:07:c8:67:da:cd:bd:ac:0f:b5:4a: 5a:48:c1:85:ac:66:00:92:dd:47:6f:90:f4:90:6a:af:29:67: f5:c6:33:d8:e0:df:7d:b9:4f:fd:ce:0b:0e:7d:d6:1c:d5:02: 2e:9e:e5:94:b5:04:34:23:6d:93:cd:bc:8f:ed:15:c5:f1:ff: 82:53:e3:83:77:f8:7f:ee:5e:ec:7a:1f:fa:59:f8:dd:39:ae: f8:4b:75:99:f4:16:fe:66:e7:ae:37:49:e3:8e:80:fd:11:22: eb:88:cf:9f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUHWgCoIh1XO5nkHBBxqFae99XmMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU4NDdaFw0yNzAyMTExOTAzNDdaMDMxMTAvBgNV BAMTKDYzQUY0NzI5ODU4Qzk5RkMxQUY2MThEMjFBMjk3NzJGREZEQjZCNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/mTFv7JVErdKalQfs8BD01xl tKFnHhJC7PFkfKuMCL07OEx0fs1XPVREwe1uEwr8uX3wxsp9g1eCn5Oe6BV1uU75 mSdOuEbfJCjyFWLGwNffPVgRSvbQV3CljcjBpmzbc6AfzKiNQTF9cd8OmJXCYltI SSmwa8fpq06XlZ3SThfAZ0eB7oMO9kW37O/5P1zAY7z3G5p+G3EP1mk1m+HvFtdk 4IgqLjPMfVhJigVyBczE5vOUdQpBhkGdQInx6Di17tr38ILlhslt7BBY1kMZQtHF TdykOT4O2muXO10x4klmIkY9pDgsKr/tFmeZo83uZzftwa876rG+f2Qvv8jhAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUY69HKYWMmfwa9hjSGil3L9/ba3UwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzOTJlMzEzODM1MmUzMjM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMxMzQzMzM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA WbkdMA0GCSqGSIb3DQEBCwUAA4IBAQC5ycacjREYkrcVKicL7CDb7U5J7h/7p8fg XXdYDaK5/P26AX8V6emVY9a2UkKHG34Snve8fSOFk9i+1CUc3Jnpg6pJbiFbCfu/ kHvSxHrTSGl9YIaisAuaLz/cygeVTwEtWK81eqfbKuq3FqFaXqCT+y1qzEQhD8Td 6U7F9mapIha2f/eMvEdE9q+OmTag3TaTgkBqpy3EMwfIZ9rNvawPtUpaSMGFrGYA kt1Hb5D0kGqvKWf1xjPY4N99uU/9zgsOfdYc1QIunuWUtQQ0I22TzbyP7RXF8f+C U+ODd/h/7l7seh/6WfjdOa74S3WZ9Bb+ZueuN0njjoD9ESLriM+f -----END CERTIFICATE-----Generated at Sat Feb 14 19:54:53 2026 by rpki-client