This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/39332e3138352e3231342e302f32342d3234203d3e203630383630.roa File: 39332e3138352e3231342e302f32342d3234203d3e203630383630.roa (raw, json) Hash identifier: I4ydkJ2r2j2i1g1xPyPsffo9hUpPo3RLQo6MfTdRh1Q= Subject key identifier: 89:12:B4:98:BF:18:07:D0:FE:92:2D:6E:46:7F:99:5F:7C:97:B1:7A Certificate issuer: /CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Certificate serial: 0308A32C3CFC3CF1CD80119C9A98991BD22D0CB1 Authority key identifier: CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/39332e3138352e3231342e302f32342d3234203d3e203630383630.roa Signing time: Thu 12 Feb 2026 19:01:44 +0000 ROA not before: Thu 12 Feb 2026 18:56:44 +0000 ROA not after: Thu 11 Feb 2027 19:01:44 +0000 asID: 60860 IP address blocks: 93.185.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.mft rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 05:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:08:a3:2c:3c:fc:3c:f1:cd:80:11:9c:9a:98:99:1b:d2:2d:0c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0631d33a3c9dc5c45424d55c3e7663838657a3 Validity Not Before: Feb 12 18:56:44 2026 GMT Not After : Feb 11 19:01:44 2027 GMT Subject: CN=8912B498BF1807D0FE922D6E467F995F7C97B17A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fc:17:21:4e:b3:c8:54:43:dc:1f:25:03:9f: 4c:11:e3:6d:cd:b8:c5:bc:3c:c8:2b:2f:5e:d8:57: de:93:8d:81:81:d5:da:2b:57:0e:cf:3a:4f:c1:45: aa:69:d3:db:9e:06:8d:22:b0:42:ce:83:6d:de:76: 04:37:81:d5:db:2c:ba:20:35:cd:d7:93:cb:a9:61: 67:41:9d:0a:62:e0:55:31:bb:e9:ff:f8:4c:31:38: 55:4c:9b:33:52:93:1b:21:26:2f:66:74:c5:e3:01: f5:0e:ec:36:1f:ff:d3:3f:6f:cf:11:00:1f:41:01: e2:14:77:5d:38:17:22:17:1a:b0:23:f5:35:6e:19: 4c:2b:bb:f2:56:35:08:4c:b3:e8:ac:7e:a7:55:49: 0f:7f:ba:20:a9:3d:63:7f:6d:f7:ac:43:1e:6c:d2: 97:1e:d7:0d:af:b7:d5:9d:45:b9:b0:d9:d5:ad:cb: c3:82:a1:37:a6:ad:a8:33:97:06:2f:56:a3:b8:f3: a4:bd:8a:22:34:96:84:74:93:56:7b:b9:5a:81:39: 37:31:f6:94:ae:47:45:1e:97:44:9e:0f:e6:43:e0: 65:dd:1e:53:d1:56:88:65:f4:4a:21:b1:5d:38:e8: 3c:01:29:94:06:df:7e:3f:bd:10:a0:d0:46:db:70: ce:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:12:B4:98:BF:18:07:D0:FE:92:2D:6E:46:7F:99:5F:7C:97:B1:7A X509v3 Authority Key Identifier: keyid:CF:06:31:D3:3A:3C:9D:C5:C4:54:24:D5:5C:3E:76:63:83:86:57:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/CF0631D33A3C9DC5C45424D55C3E7663838657A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwYx0zo8ncXEVCTVXD52Y4OGV6M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/61708a6b-6c3a-40a0-a302-595ecc17848c/2/39332e3138352e3231342e302f32342d3234203d3e203630383630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.185.214.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:22:af:e0:6e:fb:98:cf:fa:77:7c:b8:01:52:05:50:82:42: 12:2b:88:81:d7:41:40:7d:c9:84:88:29:a4:1d:b4:d9:fd:c8: 63:cf:d0:0b:ba:53:70:7b:fd:06:31:72:33:17:b9:c9:77:b1: 56:16:90:18:48:b8:02:68:57:86:c2:89:9a:7b:45:14:b3:89: 2e:83:d9:a3:91:88:40:97:42:cc:a9:f7:86:5e:5c:f0:d8:48: 4e:9b:38:d2:16:d8:30:ef:bb:ec:64:f4:9e:f3:db:28:49:48: 4f:b2:a1:f2:04:14:c5:37:1a:34:2a:dd:e1:d0:ab:21:e6:1f: d8:e6:2e:b8:f6:17:a6:53:9c:0d:41:1c:4c:9f:67:c4:40:94: ce:69:6c:ac:81:d6:37:25:6a:48:3a:31:9d:54:b3:77:e3:f0: 88:0e:13:65:d9:bb:70:8c:ee:1c:e1:cd:c4:93:41:4f:1e:26: d0:cf:fc:2b:6e:34:ea:5f:d6:d8:50:ed:2e:e1:bb:a0:08:f1: 4a:83:47:90:8b:62:c8:bc:e1:54:ae:e1:c6:bd:88:c1:19:3b: 2a:b5:31:76:b1:ef:75:f7:46:bf:8d:1b:fd:77:5d:b2:e1:07: e5:bd:01:57:6f:ad:8b:ad:bf:8e:37:7c:23:16:f0:b0:98:9d: ef:9f:d8:d3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUAwijLDz8PPHNgBGcmpiZG9ItDLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YwNjMxZDMzYTNjOWRjNWM0NTQyNGQ1NWMzZTc2NjM4 Mzg2NTdhMzAeFw0yNjAyMTIxODU2NDRaFw0yNzAyMTExOTAxNDRaMDMxMTAvBgNV BAMTKDg5MTJCNDk4QkYxODA3RDBGRTkyMkQ2RTQ2N0Y5OTVGN0M5N0IxN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR/BchTrPIVEPcHyUDn0wR423N uMW8PMgrL17YV96TjYGB1dorVw7POk/BRapp09ueBo0isELOg23edgQ3gdXbLLog Nc3Xk8upYWdBnQpi4FUxu+n/+EwxOFVMmzNSkxshJi9mdMXjAfUO7DYf/9M/b88R AB9BAeIUd104FyIXGrAj9TVuGUwru/JWNQhMs+isfqdVSQ9/uiCpPWN/bfesQx5s 0pce1w2vt9WdRbmw2dWty8OCoTemragzlwYvVqO486S9iiI0loR0k1Z7uVqBOTcx 9pSuR0Uel0SeD+ZD4GXdHlPRVohl9EohsV046DwBKZQG334/vRCg0EbbcM6LAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUiRK0mL8YB9D+ki1uRn+ZX3yXsXowHwYDVR0j BBgwFoAUzwYx0zo8ncXEVCTVXD52Y4OGV6MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjE3MDhhNmItNmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4 NDhjLzIvQ0YwNjMxRDMzQTNDOURDNUM0NTQyNEQ1NUMzRTc2NjM4Mzg2NTdBMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p3WXgwem84bmNYRVZDVFZYRDUyWTRP R1Y2TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjE3MDhhNmIt NmMzYS00MGEwLWEzMDItNTk1ZWNjMTc4NDhjLzIvMzkzMzJlMzEzODM1MmUzMjMx MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzgzNjMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA XbnWMA0GCSqGSIb3DQEBCwUAA4IBAQAbIq/gbvuYz/p3fLgBUgVQgkISK4iB10FA fcmEiCmkHbTZ/chjz9ALulNwe/0GMXIzF7nJd7FWFpAYSLgCaFeGwomae0UUs4ku g9mjkYhAl0LMqfeGXlzw2EhOmzjSFtgw77vsZPSe89soSUhPsqHyBBTFNxo0Kt3h 0Ksh5h/Y5i649hemU5wNQRxMn2fEQJTOaWysgdY3JWpIOjGdVLN34/CIDhNl2btw jO4c4c3Ek0FPHibQz/wrbjTqX9bYUO0u4bugCPFKg0eQi2LIvOFUruHGvYjBGTsq tTF2se9190a/jRv9d12y4QflvQFXb62Lrb+ON3wjFvCwmJ3vn9jT -----END CERTIFICATE-----Generated at Sat Feb 14 19:52:22 2026 by rpki-client