This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32342e302f32342d3234203d3e203630353036.roa File: 38312e3139392e32342e302f32342d3234203d3e203630353036.roa (raw, json) Hash identifier: V81BjlNQzsv1olpZAe5508YuSSx9IR1P12H/0KVXIgw= Subject key identifier: 44:5D:64:8A:73:39:E9:F2:8D:9D:89:C6:6D:5E:ED:AA:14:38:D6:5F Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 6D591DA1363173B9B7CF03826B91083F1978422C Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32342e302f32342d3234203d3e203630353036.roa Signing time: Tue 06 Jan 2026 07:52:29 +0000 ROA not before: Tue 06 Jan 2026 07:47:29 +0000 ROA not after: Tue 05 Jan 2027 07:52:29 +0000 asID: 60506 IP address blocks: 81.199.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:59:1d:a1:36:31:73:b9:b7:cf:03:82:6b:91:08:3f:19:78:42:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Jan 6 07:47:29 2026 GMT Not After : Jan 5 07:52:29 2027 GMT Subject: CN=445D648A7339E9F28D9D89C66D5EEDAA1438D65F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:78:59:87:1e:9a:9e:2b:21:e0:3d:c7:1b:44: 27:ad:64:5b:20:14:c5:70:69:d8:17:7d:97:28:8d: d2:0d:df:94:31:0f:7f:80:91:07:72:98:70:a1:8a: 95:97:58:59:99:96:95:39:8e:75:6a:ed:20:71:85: e8:c6:ea:ae:ea:0c:1c:7b:67:d1:9d:a3:87:10:c5: 0c:7f:1e:5f:7e:a4:fd:cf:8d:4e:26:93:96:bf:56: af:a8:f4:28:32:dc:a8:86:58:5c:fe:84:c1:ba:c7: 09:89:17:2b:15:c6:e9:a1:2d:ca:6f:dc:a5:0a:9a: 96:e5:7b:cd:6a:84:73:7d:4e:af:fd:ac:e4:d8:1d: 1d:5e:5c:11:a5:22:c1:07:1e:4f:51:26:d8:92:ff: a2:2c:df:11:d3:07:d9:f5:61:93:91:56:27:2c:20: a8:ce:d6:71:49:01:4c:85:a1:f4:62:61:ab:73:28: 0f:cf:17:8c:45:0b:7d:c2:2e:2c:c4:6a:1f:76:fb: 89:ee:e6:0f:65:c6:48:5f:ba:49:51:a1:81:66:23: 4b:1a:db:76:4c:93:53:72:e2:77:37:35:0e:26:9d: f4:82:15:fe:5d:33:d8:01:59:bd:4c:30:7c:ec:11: 6e:94:92:3c:6f:d8:45:a6:9c:ae:dd:49:58:35:9d: 63:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5D:64:8A:73:39:E9:F2:8D:9D:89:C6:6D:5E:ED:AA:14:38:D6:5F X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32342e302f32342d3234203d3e203630353036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.199.24.0/24 Signature Algorithm: sha256WithRSAEncryption 74:ee:cb:7f:c9:a0:b9:24:a7:6a:1d:90:e1:ac:f8:5c:fb:3c: 52:05:9a:f0:79:b4:8a:23:9a:11:75:cd:09:ad:eb:7c:ad:25: a3:a2:be:76:fa:31:79:25:e2:49:21:1f:cf:e6:67:a5:ba:c0: e7:a9:22:c5:46:55:fa:be:75:65:c7:05:59:cc:1d:45:80:f1: 3a:ea:c0:3a:47:67:db:d1:6b:5f:e7:18:f6:a6:df:cc:af:65: 4c:a3:3e:3f:dd:94:ee:f5:4d:b8:11:6b:94:38:4f:54:2c:10: 40:b3:09:84:1f:3d:14:bc:cd:43:97:c5:5d:9a:8d:9e:5a:88: 51:19:13:4a:fd:ee:14:0b:72:55:2b:c9:53:21:9f:ba:53:8d: 97:e4:e1:70:aa:59:82:82:e3:a1:e0:d8:fd:a6:ac:0a:5b:aa: c5:f8:5c:8f:09:fa:12:21:a4:df:ea:52:60:70:8f:b3:af:be: 16:96:f9:60:ad:b7:c7:3d:52:7e:c6:23:e5:54:9e:5d:e8:73: bf:13:7e:f1:ce:23:e5:c6:72:4b:e2:9c:05:7a:ae:3e:c1:96: bf:56:65:79:19:f9:c7:91:3f:05:30:95:4a:6a:73:68:71:54: b9:4d:d1:5c:7a:88:8a:ed:ba:da:4a:da:d3:70:6b:81:47:20: 6e:dd:3b:cc -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUbVkdoTYxc7m3zwOCa5EIPxl4QiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjAxMDYwNzQ3MjlaFw0yNzAxMDUwNzUyMjlaMDMxMTAvBgNV BAMTKDQ0NUQ2NDhBNzMzOUU5RjI4RDlEODlDNjZENUVFREFBMTQzOEQ2NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDieFmHHpqeKyHgPccbRCetZFsg FMVwadgXfZcojdIN35QxD3+AkQdymHChipWXWFmZlpU5jnVq7SBxhejG6q7qDBx7 Z9Gdo4cQxQx/Hl9+pP3PjU4mk5a/Vq+o9Cgy3KiGWFz+hMG6xwmJFysVxumhLcpv 3KUKmpble81qhHN9Tq/9rOTYHR1eXBGlIsEHHk9RJtiS/6Is3xHTB9n1YZORVics IKjO1nFJAUyFofRiYatzKA/PF4xFC33CLizEah92+4nu5g9lxkhfuklRoYFmI0sa 23ZMk1Ny4nc3NQ4mnfSCFf5dM9gBWb1MMHzsEW6Ukjxv2EWmnK7dSVg1nWM9AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQURF1kinM56fKNnYnGbV7tqhQ41l8wHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTNkYWExNDIt YTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5NWE4LzAvMzgzMTJlMzEzOTM5MmUzMjM0 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMDM1MzAzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFHH GDANBgkqhkiG9w0BAQsFAAOCAQEAdO7Lf8mguSSnah2Q4az4XPs8UgWa8Hm0iiOa EXXNCa3rfK0lo6K+dvoxeSXiSSEfz+ZnpbrA56kixUZV+r51ZccFWcwdRYDxOurA Okdn29FrX+cY9qbfzK9lTKM+P92U7vVNuBFrlDhPVCwQQLMJhB89FLzNQ5fFXZqN nlqIURkTSv3uFAtyVSvJUyGfulONl+ThcKpZgoLjoeDY/aasCluqxfhcjwn6EiGk 3+pSYHCPs6++Fpb5YK23xz1SfsYj5VSeXehzvxN+8c4j5cZyS+KcBXquPsGWv1Zl eRn5x5E/BTCVSmpzaHFUuU3RXHqIiu262kra03BrgUcgbt07zA== -----END CERTIFICATE-----Generated at Sat Jan 10 00:19:16 2026 by rpki-client