This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32352e302f32342d3234203d3e203630353036.roa File: 38312e3139392e32352e302f32342d3234203d3e203630353036.roa (raw, json) Hash identifier: CSFX/8cooaaYbIuAL4Sf7HHp8K52J80b70vmIgNJGD4= Subject key identifier: D4:BC:77:4D:62:90:AF:59:F0:5B:96:1F:B7:9E:AC:04:66:2D:DE:0D Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 107311DD206870E4AC4C6BEAFC479B79E962A556 Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32352e302f32342d3234203d3e203630353036.roa Signing time: Tue 06 Jan 2026 07:52:29 +0000 ROA not before: Tue 06 Jan 2026 07:47:29 +0000 ROA not after: Tue 05 Jan 2027 07:52:29 +0000 asID: 60506 IP address blocks: 81.199.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:73:11:dd:20:68:70:e4:ac:4c:6b:ea:fc:47:9b:79:e9:62:a5:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Jan 6 07:47:29 2026 GMT Not After : Jan 5 07:52:29 2027 GMT Subject: CN=D4BC774D6290AF59F05B961FB79EAC04662DDE0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:16:13:17:fa:3f:34:ef:57:a6:f7:99:ba:1e: 0a:1f:31:b6:69:44:9b:11:92:69:41:37:5c:cf:c7: 77:df:84:4d:ca:03:ef:d3:4c:b9:fa:be:35:f2:11: ba:1b:20:aa:8c:ce:21:52:87:d5:43:db:3e:7c:94: 7d:ec:0a:b2:fd:33:07:30:09:95:bd:51:c2:fd:dc: da:d2:55:16:b4:d1:de:6d:f6:d3:a8:72:7b:45:f1: a5:27:11:73:17:3b:4a:1f:37:b7:0b:14:ef:f1:d8: 9a:9f:60:62:5f:28:5d:a3:fc:13:78:2d:9e:81:7c: 3f:1c:0e:a0:e7:48:fb:52:f8:36:4e:6b:b0:9b:8e: 37:64:0e:3f:35:1f:bc:4e:58:a0:68:49:cf:dd:20: c7:d4:5f:dc:2c:99:6a:5f:62:4e:b1:88:3b:80:e4: 0e:04:6b:2a:34:19:19:34:ba:8b:b8:42:fe:d7:dd: d9:78:ab:9c:8a:3c:90:fd:33:fa:9d:fb:8c:b4:13: 1f:a1:89:aa:ab:ff:6a:4d:78:67:c3:d2:00:f5:19: 70:78:d4:96:1c:db:f5:1b:1f:64:6b:bc:e8:9b:d8: 7f:42:d5:a2:b9:f1:1d:e4:64:36:84:ff:30:76:dc: a4:f1:4e:9f:37:78:7e:c5:7b:09:53:a2:d6:dd:a3: d4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BC:77:4D:62:90:AF:59:F0:5B:96:1F:B7:9E:AC:04:66:2D:DE:0D X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32352e302f32342d3234203d3e203630353036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.199.25.0/24 Signature Algorithm: sha256WithRSAEncryption 26:1c:03:bf:06:a7:f4:5a:55:e7:ca:9c:37:3f:aa:63:78:88: 9a:f7:2f:41:1c:27:98:a0:fe:77:78:1f:84:34:96:5f:17:ad: 7d:cd:aa:bf:e4:bb:9b:55:3f:58:f3:a9:db:fa:08:11:f4:ed: 29:d9:d5:c1:e8:0a:96:b4:b7:bb:b7:22:b0:f8:0a:0a:99:cf: 51:d2:df:40:f7:48:e4:dc:2c:d5:7e:10:3d:7c:09:34:6f:2a: 42:5c:53:13:69:3f:f9:23:c9:1b:77:72:fa:70:53:56:9d:49: 02:64:83:76:12:24:fb:8e:d2:93:0a:33:c0:82:10:81:95:8b: 50:e6:75:20:dd:2c:1e:ba:13:b7:f5:7c:69:bf:e3:c3:4d:a6: fe:be:2d:b4:0b:f5:af:c7:c7:4d:cb:6c:11:24:38:c1:e4:48: 4e:21:26:6f:f6:fb:8b:56:11:26:bd:d3:f0:19:bc:33:87:47: cc:55:7c:86:22:02:a9:6e:15:b0:1e:49:f5:4a:75:1c:a9:f5: 4d:41:80:7c:ad:30:87:be:e2:fc:e1:3e:bd:bd:44:6f:b6:eb: 8a:63:e4:28:66:aa:de:7c:cb:50:4c:d9:6a:a1:b4:29:a8:46: f3:e0:79:d8:7d:c1:d5:8f:4c:52:9c:3c:17:c8:07:dc:3b:34: ee:df:97:8d -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUEHMR3SBocOSsTGvq/EebeelipVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjAxMDYwNzQ3MjlaFw0yNzAxMDUwNzUyMjlaMDMxMTAvBgNV BAMTKEQ0QkM3NzRENjI5MEFGNTlGMDVCOTYxRkI3OUVBQzA0NjYyRERFMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKFhMX+j8071em95m6HgofMbZp RJsRkmlBN1zPx3ffhE3KA+/TTLn6vjXyEbobIKqMziFSh9VD2z58lH3sCrL9Mwcw CZW9UcL93NrSVRa00d5t9tOocntF8aUnEXMXO0ofN7cLFO/x2JqfYGJfKF2j/BN4 LZ6BfD8cDqDnSPtS+DZOa7CbjjdkDj81H7xOWKBoSc/dIMfUX9wsmWpfYk6xiDuA 5A4Eayo0GRk0uou4Qv7X3dl4q5yKPJD9M/qd+4y0Ex+hiaqr/2pNeGfD0gD1GXB4 1JYc2/UbH2RrvOib2H9C1aK58R3kZDaE/zB23KTxTp83eH7FewlTotbdo9RdAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU1Lx3TWKQr1nwW5Yft56sBGYt3g0wHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTNkYWExNDIt YTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5NWE4LzAvMzgzMTJlMzEzOTM5MmUzMjM1 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMDM1MzAzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFHH GTANBgkqhkiG9w0BAQsFAAOCAQEAJhwDvwan9FpV58qcNz+qY3iImvcvQRwnmKD+ d3gfhDSWXxetfc2qv+S7m1U/WPOp2/oIEfTtKdnVwegKlrS3u7cisPgKCpnPUdLf QPdI5Nws1X4QPXwJNG8qQlxTE2k/+SPJG3dy+nBTVp1JAmSDdhIk+47SkwozwIIQ gZWLUOZ1IN0sHroTt/V8ab/jw02m/r4ttAv1r8fHTctsESQ4weRITiEmb/b7i1YR Jr3T8Bm8M4dHzFV8hiICqW4VsB5J9Up1HKn1TUGAfK0wh77i/OE+vb1Eb7brimPk KGaq3nzLUEzZaqG0KahG8+B52H3B1Y9MUpw8F8gH3Ds07t+XjQ== -----END CERTIFICATE-----Generated at Sat Jan 10 00:19:18 2026 by rpki-client