This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e33312e302f32342d3234203d3e20323032363632.roa File: 38392e3138352e33312e302f32342d3234203d3e20323032363632.roa (raw, json) Hash identifier: uoWL7Shg6I3BmPA6fmRgYW1i/znWN4Nvvv1ll2IjV2c= Subject key identifier: 28:4E:A5:B5:B5:82:7B:44:5A:40:E1:6C:64:FA:0E:09:FA:37:EA:69 Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 7986FCFD35546FD872E13292A1A5510EB7A4ADCA Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e33312e302f32342d3234203d3e20323032363632.roa Signing time: Thu 12 Feb 2026 19:03:46 +0000 ROA not before: Thu 12 Feb 2026 18:58:46 +0000 ROA not after: Thu 11 Feb 2027 19:03:46 +0000 asID: 202662 IP address blocks: 89.185.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:86:fc:fd:35:54:6f:d8:72:e1:32:92:a1:a5:51:0e:b7:a4:ad:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:58:46 2026 GMT Not After : Feb 11 19:03:46 2027 GMT Subject: CN=284EA5B5B5827B445A40E16C64FA0E09FA37EA69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7a:2f:ed:13:7f:73:fc:73:bc:9a:91:c4:c0: e5:c7:a0:48:1e:8f:f5:c2:6e:2d:2d:37:7e:2c:2d: f6:17:f1:6e:67:8d:a0:42:a3:2b:52:1b:e8:c0:c6: 2b:90:0f:7f:96:3e:87:91:01:27:87:e2:b4:73:b2: 50:21:a4:44:2c:80:35:a7:55:e1:cb:45:66:71:0b: 53:92:b7:a6:49:01:89:82:bd:35:58:b5:72:1c:c2: c9:b8:a0:e4:12:c9:49:be:e9:d1:e8:0d:1f:ee:a8: 27:33:92:90:62:92:37:98:9b:25:6d:57:3c:2a:57: 39:dd:e7:df:3a:a2:ac:5d:80:f2:17:1a:33:65:9f: ba:8d:d3:54:b8:0a:a4:1b:0e:f1:0a:55:03:7f:ab: ce:54:32:62:7f:2a:ed:1c:f5:4e:38:f7:03:89:a0: 4b:b3:51:6b:fe:bb:3e:32:3f:51:a0:3c:32:02:e9: a9:0f:5d:86:bb:9d:89:71:c4:a3:77:60:c4:5b:be: aa:88:3c:20:52:5e:30:bd:d6:33:f4:80:e5:b0:b4: 0d:89:f5:1b:f6:52:bc:99:6e:20:8e:82:09:65:a6: 6d:cb:bd:68:f7:f7:bf:cb:20:96:df:b4:2e:c0:30: 8c:bb:65:27:39:49:09:8d:6d:2c:58:c6:6e:99:46: 48:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4E:A5:B5:B5:82:7B:44:5A:40:E1:6C:64:FA:0E:09:FA:37:EA:69 X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e33312e302f32342d3234203d3e20323032363632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.31.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:df:00:fb:6d:0d:73:72:f1:b3:f9:52:47:b3:e3:37:c2:ff: 49:64:ec:22:8f:40:75:65:ef:27:c2:6f:56:37:17:97:6f:bf: db:19:f3:99:83:42:f2:62:e4:6d:50:86:6b:45:18:2f:c2:53: 21:61:e3:f5:73:f5:e5:7f:e3:5e:f8:f7:f5:f4:21:03:a1:fc: 9e:69:64:97:1b:ca:96:6d:75:f0:ad:b4:8a:12:4f:1e:ee:82: 0e:ed:40:de:d2:6d:d9:08:3f:34:60:21:d2:d5:3d:e1:45:24: c5:1e:4e:72:bf:40:cc:c1:7e:e6:d9:ec:df:92:68:c7:82:04: f3:90:19:86:f2:39:64:b6:0a:3f:d2:ba:92:2b:ff:10:38:2d: a1:cc:d4:6a:21:a0:11:cc:e6:dd:aa:c9:55:32:cb:89:09:16: cf:10:cb:58:a9:26:d3:54:4c:50:db:db:6e:2f:f1:b9:29:a9: cd:1e:ec:1d:ee:80:6a:b7:36:6e:4e:52:bb:d7:b0:c8:1b:98: 34:cf:85:e5:a5:01:30:f0:c7:b4:45:ba:2e:2a:be:da:67:fb: da:87:30:7a:7b:7e:ce:4f:35:77:f3:bc:7a:80:c0:69:ed:4d: 70:2e:bf:19:b8:af:01:b0:0d:41:ba:eb:33:24:4b:56:ae:b2: 8a:fb:a3:48 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUeYb8/TVUb9hy4TKSoaVRDrekrcowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU4NDZaFw0yNzAyMTExOTAzNDZaMDMxMTAvBgNV BAMTKDI4NEVBNUI1QjU4MjdCNDQ1QTQwRTE2QzY0RkEwRTA5RkEzN0VBNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmei/tE39z/HO8mpHEwOXHoEge j/XCbi0tN34sLfYX8W5njaBCoytSG+jAxiuQD3+WPoeRASeH4rRzslAhpEQsgDWn VeHLRWZxC1OSt6ZJAYmCvTVYtXIcwsm4oOQSyUm+6dHoDR/uqCczkpBikjeYmyVt VzwqVznd5986oqxdgPIXGjNln7qN01S4CqQbDvEKVQN/q85UMmJ/Ku0c9U449wOJ oEuzUWv+uz4yP1GgPDIC6akPXYa7nYlxxKN3YMRbvqqIPCBSXjC91jP0gOWwtA2J 9Rv2UryZbiCOggllpm3LvWj397/LIJbftC7AMIy7ZSc5SQmNbSxYxm6ZRkijAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUKE6ltbWCe0RaQOFsZPoOCfo36mkwHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzOTJlMzEzODM1MmUzMzMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMyMzYzNjMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA WbkfMA0GCSqGSIb3DQEBCwUAA4IBAQB73wD7bQ1zcvGz+VJHs+M3wv9JZOwij0B1 Ze8nwm9WNxeXb7/bGfOZg0LyYuRtUIZrRRgvwlMhYeP1c/Xlf+Ne+Pf19CEDofye aWSXG8qWbXXwrbSKEk8e7oIO7UDe0m3ZCD80YCHS1T3hRSTFHk5yv0DMwX7m2ezf kmjHggTzkBmG8jlktgo/0rqSK/8QOC2hzNRqIaARzObdqslVMsuJCRbPEMtYqSbT VExQ29tuL/G5KanNHuwd7oBqtzZuTlK717DIG5g0z4XlpQEw8Me0RbouKr7aZ/va hzB6e37OTzV387x6gMBp7U1wLr8ZuK8BsA1BuuszJEtWrrKK+6NI -----END CERTIFICATE-----Generated at Sat Feb 14 19:56:20 2026 by rpki-client