This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e332e302f32342d3234203d3e203631333137.roa File: 38392e3138352e332e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: 1DqZdBBJCe6cspAqe2VKKzonZ9pCFQ95Om2L912Zdsg= Subject key identifier: 9A:CF:77:83:82:99:AD:B8:5D:26:7B:BE:30:34:8A:F8:76:1C:A7:B0 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 7DC483E2A177C9502350EEBFA31D20AC33A966F8 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e332e302f32342d3234203d3e203631333137.roa Signing time: Thu 12 Feb 2026 19:03:47 +0000 ROA not before: Thu 12 Feb 2026 18:58:47 +0000 ROA not after: Thu 11 Feb 2027 19:03:47 +0000 asID: 61317 IP address blocks: 89.185.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:c4:83:e2:a1:77:c9:50:23:50:ee:bf:a3:1d:20:ac:33:a9:66:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:58:47 2026 GMT Not After : Feb 11 19:03:47 2027 GMT Subject: CN=9ACF77838299ADB85D267BBE30348AF8761CA7B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:06:48:f8:61:bc:3e:75:1c:07:13:f0:5a:53: 94:ed:5a:2b:31:5c:eb:fb:61:a7:d5:65:f0:55:c2: e7:15:20:80:9e:ef:82:a0:dc:18:bf:66:e4:b8:d9: ed:ae:89:46:e0:0e:fe:84:02:39:19:47:19:dd:98: 8c:e0:8e:4f:c4:f5:ce:fa:fc:17:b7:5d:0d:0d:32: fe:2f:4b:a5:19:12:70:37:c0:71:f0:43:02:96:4c: eb:72:3a:ad:60:51:72:ac:d3:20:61:8f:f4:ea:a5: 20:58:65:bb:52:7f:ff:4e:0c:71:7c:7f:fe:c9:e0: 0c:ee:95:e7:5c:4c:2d:a3:f2:e6:f2:68:cd:1b:8a: f6:34:d9:3a:da:0b:60:b1:cd:2f:7f:1e:e5:10:c0: 31:d2:0a:a0:fd:e7:ac:d9:d1:45:74:bf:a3:e7:47: 38:52:c9:25:f5:e3:5b:e1:9f:a5:5a:3c:24:df:a3: 35:6a:ff:3a:e0:b2:e5:2c:f3:1d:9c:45:fc:58:f4: 52:b9:ba:37:95:1d:c4:5a:2e:eb:2f:67:9e:fe:05: 6a:0f:b4:3b:60:f2:1a:10:2d:ba:c0:d6:f8:07:03: 44:18:1e:ac:7c:d4:ea:c5:6a:76:01:b5:c4:d1:2c: 8c:0f:fd:73:22:15:af:b8:e2:65:05:5c:73:de:ec: fc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:CF:77:83:82:99:AD:B8:5D:26:7B:BE:30:34:8A:F8:76:1C:A7:B0 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e332e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.3.0/24 Signature Algorithm: sha256WithRSAEncryption a8:21:36:56:da:60:0e:64:96:cc:10:ec:73:66:7a:b5:14:09: c8:ab:00:64:3a:f4:72:a1:b0:05:28:5c:bf:05:19:21:1b:48: 50:09:3b:af:9a:8e:14:e3:96:ab:bc:62:67:59:62:df:4a:99: fc:04:91:03:76:fd:95:29:6c:80:98:d1:4a:af:62:af:ce:84: 1d:2d:c0:dc:0a:9c:21:ac:f5:cb:35:ee:ef:84:5b:8f:e5:74: 33:33:1f:7f:6d:7e:33:3d:28:36:ab:f6:5d:5d:b9:9e:3c:78: b7:68:b4:f4:8e:2b:f6:93:7c:ac:96:05:f7:bb:c9:c5:ee:51: 21:62:2a:24:a3:98:79:d3:f2:5f:b8:41:b5:61:75:66:c3:6d: 9a:26:78:2b:8c:e5:67:00:f6:e7:3c:f7:12:5f:99:da:10:0b: 36:5a:2b:08:9f:2d:4f:d2:d1:af:d0:e6:65:82:49:5b:da:2e: ad:98:46:5e:ed:c4:a5:af:53:b4:ee:cc:ed:c0:03:07:80:5d: 8b:e4:4c:a2:42:1f:81:eb:0e:e6:42:b0:09:e1:23:42:c6:a3: 53:2d:c1:c6:dd:d0:bc:ac:25:b8:07:94:0f:2c:87:10:89:f5: 06:da:2d:51:eb:65:ae:3d:8f:6b:fb:0e:f3:b1:95:13:fa:25: 70:0a:50:7a -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUfcSD4qF3yVAjUO6/ox0grDOpZvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU4NDdaFw0yNzAyMTExOTAzNDdaMDMxMTAvBgNV BAMTKDlBQ0Y3NzgzODI5OUFEQjg1RDI2N0JCRTMwMzQ4QUY4NzYxQ0E3QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxBkj4Ybw+dRwHE/BaU5TtWisx XOv7YafVZfBVwucVIICe74Kg3Bi/ZuS42e2uiUbgDv6EAjkZRxndmIzgjk/E9c76 /Be3XQ0NMv4vS6UZEnA3wHHwQwKWTOtyOq1gUXKs0yBhj/TqpSBYZbtSf/9ODHF8 f/7J4AzuledcTC2j8ubyaM0bivY02TraC2CxzS9/HuUQwDHSCqD956zZ0UV0v6Pn RzhSySX141vhn6VaPCTfozVq/zrgsuUs8x2cRfxY9FK5ujeVHcRaLusvZ57+BWoP tDtg8hoQLbrA1vgHA0QYHqx81OrFanYBtcTRLIwP/XMiFa+44mUFXHPe7PzNAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUms93g4KZrbhdJnu+MDSK+HYcp7AwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzOTJlMzEzODM1MmUzMzJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZuQMw DQYJKoZIhvcNAQELBQADggEBAKghNlbaYA5klswQ7HNmerUUCcirAGQ69HKhsAUo XL8FGSEbSFAJO6+ajhTjlqu8YmdZYt9KmfwEkQN2/ZUpbICY0UqvYq/OhB0twNwK nCGs9cs17u+EW4/ldDMzH39tfjM9KDar9l1duZ48eLdotPSOK/aTfKyWBfe7ycXu USFiKiSjmHnT8l+4QbVhdWbDbZomeCuM5WcA9uc89xJfmdoQCzZaKwifLU/S0a/Q 5mWCSVvaLq2YRl7txKWvU7TuzO3AAweAXYvkTKJCH4HrDuZCsAnhI0LGo1Mtwcbd 0LysJbgHlA8shxCJ9QbaLVHrZa49j2v7DvOxlRP6JXAKUHo= -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:41 2026 by rpki-client