This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32382e302f32342d3234203d3e2039333034.roa File: 38312e3139392e32382e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: pA97BdM8AYYfQvgbqaA4wcFOZhq7+7h5RQ+DqjvYYXY= Subject key identifier: 9F:5B:56:05:97:69:82:BE:4D:B7:8C:91:19:FF:F3:78:5C:63:9E:AF Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 074ECC279761F5AF05628F547B64DADFE9248461 Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32382e302f32342d3234203d3e2039333034.roa Signing time: Tue 06 Jan 2026 07:52:29 +0000 ROA not before: Tue 06 Jan 2026 07:47:29 +0000 ROA not after: Tue 05 Jan 2027 07:52:29 +0000 asID: 9304 IP address blocks: 81.199.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:4e:cc:27:97:61:f5:af:05:62:8f:54:7b:64:da:df:e9:24:84:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Jan 6 07:47:29 2026 GMT Not After : Jan 5 07:52:29 2027 GMT Subject: CN=9F5B5605976982BE4DB78C9119FFF3785C639EAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ca:4f:11:3d:b2:29:72:1a:db:22:bb:12:44: 4c:fb:92:38:6f:7a:5a:e3:87:c9:9f:7c:0e:4b:a5: d2:bf:48:64:01:dd:e2:29:64:fb:18:29:1d:a0:64: 8e:ff:3f:67:71:59:60:e2:d7:9d:62:09:85:1f:51: fb:69:d7:0b:1d:dd:c4:0e:cb:17:1a:93:8c:eb:b5: 44:70:58:45:20:c6:93:b9:d3:b2:e2:65:1b:96:9b: 4c:ff:af:fd:45:4e:4d:33:07:75:5c:39:f1:7e:3a: 98:3e:a3:98:5c:4d:cb:e0:f4:0e:51:2e:75:7f:c1: 4c:f7:2f:3b:e6:b5:ea:74:52:61:48:98:12:a2:02: 71:54:db:01:8f:1b:74:6d:3b:e6:05:af:bc:09:2e: 8e:d5:f7:b2:f3:13:24:26:72:f6:5b:df:55:76:dc: bc:db:b2:97:d7:76:c0:aa:9f:06:9a:77:0b:48:d3: 1b:49:7f:86:6a:17:8f:b7:76:da:d2:bb:af:36:0f: 76:cf:8c:c6:b9:2f:19:c1:2f:6d:bf:d3:e5:01:7a: 49:1f:2e:a6:71:d2:84:15:e2:51:67:18:82:a8:6e: d7:7b:dc:03:9f:d2:7e:07:41:f4:58:be:ce:bb:e8: 17:41:40:0c:fe:e9:6f:96:17:18:55:e3:51:a3:91: 50:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5B:56:05:97:69:82:BE:4D:B7:8C:91:19:FF:F3:78:5C:63:9E:AF X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32382e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.199.28.0/24 Signature Algorithm: sha256WithRSAEncryption 09:41:12:5d:31:70:20:86:9c:87:bd:da:d4:c9:05:8d:4f:3f: 97:a9:ec:71:d1:de:3e:dd:42:21:56:18:7d:8f:c5:31:22:2e: 66:39:03:f7:b8:e1:c2:5b:55:2d:d3:e6:4e:19:98:be:3e:70: 8f:dc:c1:c4:e1:ea:97:0e:66:3b:f6:11:94:a7:69:e8:42:d6: 03:5b:97:3f:c6:b0:89:53:8c:5a:65:86:79:0e:5b:7b:c1:62: 59:e7:2a:eb:1c:e8:87:e0:89:5b:08:8d:ec:0f:84:e2:7b:df: 5b:ac:a7:4d:01:8a:29:dd:82:3b:c7:d1:cc:50:06:56:48:b3: 8f:18:a3:ff:8b:73:dc:9e:8b:59:a2:12:f6:3e:ec:e9:3b:ef: 76:e6:af:17:6b:d0:8a:62:5f:21:a5:f9:13:88:41:d9:ac:b9: 98:ba:96:a2:a0:ef:e5:08:ba:8e:2b:b1:38:bc:d7:d5:c7:2c: 55:22:4c:e4:63:4b:30:fa:7f:19:0b:c9:69:73:de:80:47:c3: 8f:6a:1e:5d:65:97:ef:bf:8c:6f:01:ec:8d:47:40:98:7e:55: 76:65:a5:68:25:98:2c:68:57:6d:5d:ce:82:83:59:21:e6:c0: d2:18:97:01:a6:d6:13:c0:f8:23:5d:d5:03:53:d6:a8:ce:7f: 05:50:08:41 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUB07MJ5dh9a8FYo9Ue2Ta3+kkhGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjAxMDYwNzQ3MjlaFw0yNzAxMDUwNzUyMjlaMDMxMTAvBgNV BAMTKDlGNUI1NjA1OTc2OTgyQkU0REI3OEM5MTE5RkZGMzc4NUM2MzlFQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1yk8RPbIpchrbIrsSREz7kjhv elrjh8mffA5LpdK/SGQB3eIpZPsYKR2gZI7/P2dxWWDi151iCYUfUftp1wsd3cQO yxcak4zrtURwWEUgxpO507LiZRuWm0z/r/1FTk0zB3VcOfF+Opg+o5hcTcvg9A5R LnV/wUz3Lzvmtep0UmFImBKiAnFU2wGPG3RtO+YFr7wJLo7V97LzEyQmcvZb31V2 3LzbspfXdsCqnwaadwtI0xtJf4ZqF4+3dtrSu682D3bPjMa5LxnBL22/0+UBekkf LqZx0oQV4lFnGIKobtd73AOf0n4HQfRYvs676BdBQAz+6W+WFxhV41GjkVB9AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUn1tWBZdpgr5Nt4yRGf/zeFxjnq8wHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTNkYWExNDIt YTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5NWE4LzAvMzgzMTJlMzEzOTM5MmUzMjM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABRxxww DQYJKoZIhvcNAQELBQADggEBAAlBEl0xcCCGnIe92tTJBY1PP5ep7HHR3j7dQiFW GH2PxTEiLmY5A/e44cJbVS3T5k4ZmL4+cI/cwcTh6pcOZjv2EZSnaehC1gNblz/G sIlTjFplhnkOW3vBYlnnKusc6IfgiVsIjewPhOJ731usp00BiindgjvH0cxQBlZI s48Yo/+Lc9yei1miEvY+7Ok773bmrxdr0IpiXyGl+ROIQdmsuZi6lqKg7+UIuo4r sTi819XHLFUiTORjSzD6fxkLyWlz3oBHw49qHl1ll++/jG8B7I1HQJh+VXZlpWgl mCxoV21dzoKDWSHmwNIYlwGm1hPA+CNd1QNT1qjOfwVQCEE= -----END CERTIFICATE-----Generated at Sat Jan 10 00:19:20 2026 by rpki-client