This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e382e302f32342d3234203d3e203630383630.roa File: 38392e3138352e382e302f32342d3234203d3e203630383630.roa (raw, json) Hash identifier: uuMWj0BWrTugTcot2BIIjLN4CmKo0TjrBWjA0TJKmTM= Subject key identifier: 1D:AA:64:6A:14:CA:31:6D:EF:28:82:C6:BA:86:23:90:7F:6E:15:7D Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 3B3188223A3A5BCD2D031A1500432B0E9A88D3E9 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e382e302f32342d3234203d3e203630383630.roa Signing time: Thu 12 Feb 2026 19:01:45 +0000 ROA not before: Thu 12 Feb 2026 18:56:45 +0000 ROA not after: Thu 11 Feb 2027 19:01:45 +0000 asID: 60860 IP address blocks: 89.185.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:31:88:22:3a:3a:5b:cd:2d:03:1a:15:00:43:2b:0e:9a:88:d3:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:56:45 2026 GMT Not After : Feb 11 19:01:45 2027 GMT Subject: CN=1DAA646A14CA316DEF2882C6BA8623907F6E157D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9b:3e:b5:0f:b7:ae:cf:16:e3:bd:16:10:7f: cc:e5:be:93:23:df:e6:20:a4:4e:93:8e:6f:2d:b8: c7:7a:c8:30:bd:26:56:01:0b:47:24:ee:d5:78:3b: 2a:19:a2:cc:b0:ba:a3:83:46:85:5e:7f:41:ca:0c: 19:56:ce:da:28:ed:f3:9b:bf:49:7e:b2:2d:39:39: 98:7a:15:1f:56:9e:4b:02:ae:f8:e4:be:75:03:33: a2:f6:ee:b1:dd:d2:fa:29:53:70:f7:a9:a2:f4:0f: f1:e4:67:72:05:0b:4a:a6:93:e3:c3:bb:d8:7c:fb: 80:c0:01:8f:9c:22:34:25:a3:a3:0f:80:a7:e9:c1: 6b:ce:9f:2f:60:e7:89:c4:09:ab:81:f9:2c:f6:e2: b9:8e:d7:9a:44:e1:07:b0:7d:6a:9f:b5:12:59:dd: aa:7b:49:25:f6:5f:46:3d:99:88:dc:1d:b8:6e:8f: dc:69:40:cc:46:d8:81:90:da:bd:39:60:54:aa:d8: 95:96:e4:a1:f2:a8:dc:6a:a3:2f:1b:30:49:a2:99: cc:70:65:d3:23:22:1e:f3:5d:b8:41:ed:f9:07:50: e7:0c:bf:de:f6:f0:51:8f:73:2e:a7:13:65:b8:0e: dd:4c:5b:2e:71:24:61:3d:df:a8:23:d5:18:39:5f: 82:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AA:64:6A:14:CA:31:6D:EF:28:82:C6:BA:86:23:90:7F:6E:15:7D X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/38392e3138352e382e302f32342d3234203d3e203630383630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.8.0/24 Signature Algorithm: sha256WithRSAEncryption 90:6c:94:88:64:51:a9:18:29:ce:10:de:98:2b:62:34:93:76: 9f:1a:42:fa:69:5d:1c:b0:a8:cc:c2:fb:b3:64:f1:92:14:b8: 77:8a:47:74:19:ad:01:1d:52:47:d2:e0:2a:d0:48:09:63:6c: 73:bf:bd:5b:54:d2:a5:e0:34:53:1f:e5:a5:e7:51:bd:7a:ef: 95:03:fc:80:33:56:75:bd:40:c0:39:8b:05:2a:6a:31:cb:4d: 0d:a9:21:e1:5e:82:89:7c:99:d9:93:b1:2a:32:5b:78:30:72: 53:b2:e6:32:e0:b0:92:41:63:8e:9c:d5:62:14:96:e4:76:8a: 52:ea:6a:3a:6c:b1:46:79:a9:a1:07:6a:71:02:65:3c:dc:8d: 8f:00:c9:03:73:bb:4e:e5:06:f1:f9:1d:8a:3f:47:bb:44:cd: 1a:3d:34:3a:be:ff:11:9f:36:2a:57:87:9b:d5:4b:a8:b5:f5: 0c:f6:f9:28:0d:20:e0:11:3f:e5:ce:0b:1a:f1:60:9b:b6:91: 08:47:d2:f6:7a:76:a7:30:c4:dc:53:25:2c:6b:e6:c4:29:ce: 89:18:0f:c7:15:05:04:83:b4:25:c1:9d:de:9a:ee:de:ee:91: 2b:e7:3c:85:07:b5:a8:05:83:73:38:3c:9b:7c:a4:ad:e7:c0: 1c:34:09:82 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUOzGIIjo6W80tAxoVAEMrDpqI0+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU2NDVaFw0yNzAyMTExOTAxNDVaMDMxMTAvBgNV BAMTKDFEQUE2NDZBMTRDQTMxNkRFRjI4ODJDNkJBODYyMzkwN0Y2RTE1N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfmz61D7euzxbjvRYQf8zlvpMj 3+YgpE6Tjm8tuMd6yDC9JlYBC0ck7tV4OyoZosywuqODRoVef0HKDBlWztoo7fOb v0l+si05OZh6FR9WnksCrvjkvnUDM6L27rHd0vopU3D3qaL0D/HkZ3IFC0qmk+PD u9h8+4DAAY+cIjQlo6MPgKfpwWvOny9g54nECauB+Sz24rmO15pE4QewfWqftRJZ 3ap7SSX2X0Y9mYjcHbhuj9xpQMxG2IGQ2r05YFSq2JWW5KHyqNxqoy8bMEmimcxw ZdMjIh7zXbhB7fkHUOcMv9728FGPcy6nE2W4Dt1MWy5xJGE936gj1Rg5X4LJAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUHapkahTKMW3vKILGuoYjkH9uFX0wHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzgzOTJlMzEzODM1MmUzODJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzAzODM2MzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZuQgw DQYJKoZIhvcNAQELBQADggEBAJBslIhkUakYKc4Q3pgrYjSTdp8aQvppXRywqMzC +7Nk8ZIUuHeKR3QZrQEdUkfS4CrQSAljbHO/vVtU0qXgNFMf5aXnUb1675UD/IAz VnW9QMA5iwUqajHLTQ2pIeFegol8mdmTsSoyW3gwclOy5jLgsJJBY46c1WIUluR2 ilLqajpssUZ5qaEHanECZTzcjY8AyQNzu07lBvH5HYo/R7tEzRo9NDq+/xGfNipX h5vVS6i19Qz2+SgNIOARP+XOCxrxYJu2kQhH0vZ6dqcwxNxTJSxr5sQpzokYD8cV BQSDtCXBnd6a7t7ukSvnPIUHtagFg3M4PJt8pK3nwBw0CYI= -----END CERTIFICATE-----Generated at Sat Feb 14 19:53:43 2026 by rpki-client