This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32372e302f32342d3234203d3e20313337343039.roa File: 38312e3139392e32372e302f32342d3234203d3e20313337343039.roa (raw, json) Hash identifier: u1OMxn9fmgWDHDojYdnaxRpsdwWdM9GH2itMefeBYj0= Subject key identifier: F6:DB:61:14:7F:20:13:74:7A:1F:9F:CF:90:D4:11:C2:AB:9F:F8:24 Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 2FABF808DBFFAFF4AB4057F3C4648A47411A37C5 Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32372e302f32342d3234203d3e20313337343039.roa Signing time: Tue 06 Jan 2026 07:52:28 +0000 ROA not before: Tue 06 Jan 2026 07:47:28 +0000 ROA not after: Tue 05 Jan 2027 07:52:28 +0000 asID: 137409 IP address blocks: 81.199.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ab:f8:08:db:ff:af:f4:ab:40:57:f3:c4:64:8a:47:41:1a:37:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Jan 6 07:47:28 2026 GMT Not After : Jan 5 07:52:28 2027 GMT Subject: CN=F6DB61147F2013747A1F9FCF90D411C2AB9FF824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:37:be:88:75:db:e4:78:bc:ef:d6:da:f7:99: 42:a9:aa:a6:3e:f8:a0:59:67:19:01:be:7e:39:a5: 8a:c3:ec:c2:20:85:49:39:04:6c:02:cd:cd:af:11: 59:6f:f7:9f:ae:a3:d4:31:3f:e3:c7:6b:7b:cd:e3: 5e:75:7f:2f:1f:c7:e3:6b:39:5f:a9:9d:91:d6:21: 0f:71:5d:79:44:1e:7f:a8:e8:a0:41:de:1d:f4:30: d8:42:b7:a9:76:1c:cb:19:44:ca:d4:9d:60:29:0d: 67:a3:66:6a:9f:ad:bf:af:ad:fe:ec:46:42:c8:87: 54:9d:6d:d2:31:7b:8a:bb:fb:28:d6:4b:a3:d5:ec: 67:75:96:98:88:6e:4f:e2:47:44:b5:96:af:ac:3b: 01:81:ee:89:7c:e0:fa:ae:55:2e:d9:c0:59:2e:be: db:4e:9a:89:df:80:63:e0:6e:c1:41:81:28:a6:02: a7:5c:76:8b:fc:c9:81:07:8f:d8:02:e5:51:c3:ba: 85:85:54:83:1a:5a:58:69:0c:42:3e:5e:3e:1c:16: fe:bc:79:1d:95:8e:3f:26:de:cd:bc:e6:31:dd:26: 77:d2:6e:4c:5a:77:4f:b4:ae:d9:e3:dc:c4:ac:ee: 73:1f:61:55:bd:06:8f:8f:8d:c9:3b:b2:0a:05:82: 23:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DB:61:14:7F:20:13:74:7A:1F:9F:CF:90:D4:11:C2:AB:9F:F8:24 X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32372e302f32342d3234203d3e20313337343039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.199.27.0/24 Signature Algorithm: sha256WithRSAEncryption 65:df:78:b3:6b:be:20:cb:65:84:64:eb:78:a9:d6:0c:b7:92: ed:e3:6e:9c:42:99:91:27:e2:2d:cc:20:57:f1:d8:b1:d4:f2: c5:ac:a3:48:8b:ba:7c:71:d4:d7:76:19:9c:ea:fd:8c:36:4a: 2a:f0:90:b1:ef:d4:47:93:04:2c:11:d7:f3:7f:1d:18:e4:1a: 81:97:ad:b8:5b:dd:e3:b1:11:e3:e4:94:02:d9:06:4c:ec:3e: 8b:68:c6:57:ab:0c:0e:38:b3:d9:ea:80:58:c0:b3:3c:be:33: cb:1a:c9:cf:0f:09:61:8e:83:31:04:34:a7:03:c1:09:9d:ae: 2a:ca:03:eb:e5:b2:ef:d4:b0:09:ce:4f:04:c2:df:2a:6d:59: 17:d0:fc:4e:7d:aa:4d:86:21:1d:5f:9b:8e:d6:90:49:72:aa: f2:49:47:3b:cc:5d:df:7c:c7:6a:37:bd:e4:be:7f:9e:14:5f: 89:c7:fa:ee:79:e2:b2:2d:85:80:ce:73:7c:e6:22:dc:b3:3b: 4f:37:db:1d:b9:b2:dd:13:11:8f:c5:5f:a6:81:ba:13:17:f8: 0e:f4:fd:c3:49:0d:a4:6f:64:59:ba:e2:54:fd:05:77:bd:25: d3:36:3c:6d:7f:fd:9f:b8:79:57:a9:b7:78:6f:5d:89:32:fa: ed:c9:bf:10 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUL6v4CNv/r/SrQFfzxGSKR0EaN8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjAxMDYwNzQ3MjhaFw0yNzAxMDUwNzUyMjhaMDMxMTAvBgNV BAMTKEY2REI2MTE0N0YyMDEzNzQ3QTFGOUZDRjkwRDQxMUMyQUI5RkY4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8N76IddvkeLzv1tr3mUKpqqY+ +KBZZxkBvn45pYrD7MIghUk5BGwCzc2vEVlv95+uo9QxP+PHa3vN4151fy8fx+Nr OV+pnZHWIQ9xXXlEHn+o6KBB3h30MNhCt6l2HMsZRMrUnWApDWejZmqfrb+vrf7s RkLIh1SdbdIxe4q7+yjWS6PV7Gd1lpiIbk/iR0S1lq+sOwGB7ol84PquVS7ZwFku vttOmonfgGPgbsFBgSimAqdcdov8yYEHj9gC5VHDuoWFVIMaWlhpDEI+Xj4cFv68 eR2Vjj8m3s285jHdJnfSbkxad0+0rtnj3MSs7nMfYVW9Bo+Pjck7sgoFgiOnAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU9tthFH8gE3R6H5/PkNQRwquf+CQwHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTNkYWExNDIt YTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5NWE4LzAvMzgzMTJlMzEzOTM5MmUzMjM3 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM3MzQzMDM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA UccbMA0GCSqGSIb3DQEBCwUAA4IBAQBl33iza74gy2WEZOt4qdYMt5Lt426cQpmR J+ItzCBX8dix1PLFrKNIi7p8cdTXdhmc6v2MNkoq8JCx79RHkwQsEdfzfx0Y5BqB l624W93jsRHj5JQC2QZM7D6LaMZXqwwOOLPZ6oBYwLM8vjPLGsnPDwlhjoMxBDSn A8EJna4qygPr5bLv1LAJzk8Ewt8qbVkX0PxOfapNhiEdX5uO1pBJcqrySUc7zF3f fMdqN73kvn+eFF+Jx/rueeKyLYWAznN85iLcsztPN9sdubLdExGPxV+mgboTF/gO 9P3DSQ2kb2RZuuJU/QV3vSXTNjxtf/2fuHlXqbd4b12JMvrtyb8Q -----END CERTIFICATE-----Generated at Sat Jan 10 00:19:34 2026 by rpki-client