This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e332e302f32342d3234203d3e203239383032.roa File: 38392e3138352e332e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: 3ubgNCmMa+4nY4sLYZjrR+MAEUtSEJMXoexLwAZ8J7k= Subject key identifier: 98:0E:8A:EA:08:7B:DE:56:D3:76:32:9A:51:8E:15:05:59:A2:3A:3D Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 63C0B63E93CAF4179669DFBAE093F781B2D7441E Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e332e302f32342d3234203d3e203239383032.roa Signing time: Thu 12 Feb 2026 19:21:49 +0000 ROA not before: Thu 12 Feb 2026 19:16:49 +0000 ROA not after: Thu 11 Feb 2027 19:21:49 +0000 asID: 29802 IP address blocks: 89.185.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c0:b6:3e:93:ca:f4:17:96:69:df:ba:e0:93:f7:81:b2:d7:44:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 19:16:49 2026 GMT Not After : Feb 11 19:21:49 2027 GMT Subject: CN=980E8AEA087BDE56D376329A518E150559A23A3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:57:dc:d3:76:d9:de:59:32:52:58:ef:ad:de: 3c:c9:61:34:1f:05:3f:30:00:ed:0c:e4:4a:0d:86: b8:38:4e:f2:28:9f:b9:57:b1:00:ad:7f:bd:d8:9a: 2f:9d:f0:b9:97:b2:15:bf:8a:67:c2:74:ef:f2:ec: 9f:8e:42:f0:78:c7:dc:fd:46:21:b1:c6:67:56:39: 3e:80:f6:d9:63:1f:26:94:10:fc:9d:c1:04:f5:7f: 77:db:29:86:9e:91:a7:af:b3:65:0d:a3:34:fa:3c: a1:2b:a1:08:8d:a1:c9:b3:8f:63:6f:63:5b:5b:3d: e4:a6:8b:b6:e9:e4:9e:27:bc:eb:d4:56:6b:eb:f1: b9:5c:1c:eb:b3:9b:dc:f7:3c:50:2a:82:e4:7a:bb: 4f:92:f8:26:23:90:77:08:cb:03:3a:57:f7:4b:c5: f1:3e:c9:29:14:17:3d:98:db:9b:35:0f:84:b9:5c: 44:2b:91:c4:1c:2d:0d:f8:1f:65:c1:bd:a3:0f:10: 9a:91:ae:e8:52:da:54:0d:dc:f1:70:8c:37:f9:40: 3c:f2:38:56:b5:df:6a:66:41:51:f9:31:0a:f1:84: 4b:96:32:2c:f6:c7:3b:56:7e:4f:a5:b8:53:9a:7c: 64:1b:ec:f2:7b:45:a3:db:68:29:06:23:ed:e2:57: c1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0E:8A:EA:08:7B:DE:56:D3:76:32:9A:51:8E:15:05:59:A2:3A:3D X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e332e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.3.0/24 Signature Algorithm: sha256WithRSAEncryption ba:7c:d6:39:09:f1:30:7e:c0:7c:91:d7:49:0e:60:07:1b:94: f0:bb:93:e3:8c:06:53:a1:f7:36:10:82:e9:70:88:37:40:22: 7f:a7:31:88:d9:7c:48:56:59:d0:9a:85:71:07:36:2e:13:6a: 63:03:eb:c2:e0:68:68:2a:e9:75:b7:1a:0d:92:f1:6b:f0:7e: d0:6f:51:b3:fc:79:ab:ca:8c:02:73:a4:9c:94:b2:70:61:05: 65:5a:fa:8b:2c:05:63:aa:31:c7:b2:79:f0:c2:99:5e:2b:c0: 8d:49:b6:20:8e:93:fd:d2:62:70:72:b5:8b:61:8d:a8:ad:ae: 78:87:14:ef:5a:96:01:f2:bf:4c:f6:ed:e6:16:62:15:28:f5: 72:cb:4f:3d:6d:ff:de:e7:4c:66:7a:90:d5:56:d2:ef:61:3f: 2a:47:07:bb:49:b5:53:92:7f:90:c6:94:c6:39:a9:dd:d6:97: 69:cd:85:5c:f5:f9:16:50:d5:27:bd:c1:e5:a4:cc:cc:06:8c: 08:00:6d:98:0d:41:c4:4c:0a:e4:02:7b:91:50:06:de:b1:99: b3:75:74:ca:a2:f1:ea:aa:db:37:f6:2f:da:45:ec:a6:00:a5: f3:1d:1e:99:71:e6:28:4d:d5:94:a9:00:03:de:71:8e:6b:ce: 80:b0:ae:02 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUY8C2PpPK9BeWad+64JP3gbLXRB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxOTE2NDlaFw0yNzAyMTExOTIxNDlaMDMxMTAvBgNV BAMTKDk4MEU4QUVBMDg3QkRFNTZEMzc2MzI5QTUxOEUxNTA1NTlBMjNBM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgV9zTdtneWTJSWO+t3jzJYTQf BT8wAO0M5EoNhrg4TvIon7lXsQCtf73Ymi+d8LmXshW/imfCdO/y7J+OQvB4x9z9 RiGxxmdWOT6A9tljHyaUEPydwQT1f3fbKYaekaevs2UNozT6PKEroQiNocmzj2Nv Y1tbPeSmi7bp5J4nvOvUVmvr8blcHOuzm9z3PFAqguR6u0+S+CYjkHcIywM6V/dL xfE+ySkUFz2Y25s1D4S5XEQrkcQcLQ34H2XBvaMPEJqRruhS2lQN3PFwjDf5QDzy OFa132pmQVH5MQrxhEuWMiz2xztWfk+luFOafGQb7PJ7RaPbaCkGI+3iV8GlAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUmA6K6gh73lbTdjKaUY4VBVmiOj0wHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzOTJlMzEzODM1MmUzMzJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzkzODMwMzIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZuQMw DQYJKoZIhvcNAQELBQADggEBALp81jkJ8TB+wHyR10kOYAcblPC7k+OMBlOh9zYQ gulwiDdAIn+nMYjZfEhWWdCahXEHNi4TamMD68LgaGgq6XW3Gg2S8WvwftBvUbP8 eavKjAJzpJyUsnBhBWVa+ossBWOqMceyefDCmV4rwI1JtiCOk/3SYnBytYthjait rniHFO9algHyv0z27eYWYhUo9XLLTz1t/97nTGZ6kNVW0u9hPypHB7tJtVOSf5DG lMY5qd3Wl2nNhVz1+RZQ1Se9weWkzMwGjAgAbZgNQcRMCuQCe5FQBt6xmbN1dMqi 8eqq2zf2L9pF7KYApfMdHplx5ihN1ZSpAAPecY5rzoCwrgI= -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:15 2026 by rpki-client