This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32392e302f32342d3234203d3e20333935333734.roa File: 38312e3139392e32392e302f32342d3234203d3e20333935333734.roa (raw, json) Hash identifier: enyh8Pgkb8kCNqjK0iUrs5K7JVGsJfmEephM/1jo4no= Subject key identifier: 3F:61:A3:A5:E1:22:A9:2F:70:0C:A7:63:CB:15:75:C5:10:22:79:57 Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 418D8517F668D81D612DED5C0D6CCDF483E2C60D Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32392e302f32342d3234203d3e20333935333734.roa Signing time: Tue 06 Jan 2026 07:52:29 +0000 ROA not before: Tue 06 Jan 2026 07:47:29 +0000 ROA not after: Tue 05 Jan 2027 07:52:29 +0000 asID: 395374 IP address blocks: 81.199.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8d:85:17:f6:68:d8:1d:61:2d:ed:5c:0d:6c:cd:f4:83:e2:c6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Jan 6 07:47:29 2026 GMT Not After : Jan 5 07:52:29 2027 GMT Subject: CN=3F61A3A5E122A92F700CA763CB1575C510227957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:55:d8:45:c6:0d:54:8a:6f:fb:46:1b:9a:32: 54:13:df:4d:35:c5:f7:88:e9:3a:c7:df:95:13:fd: 17:e3:5b:e7:4e:96:cf:07:d0:65:a0:89:86:59:71: cf:21:ed:f9:cd:cb:ce:96:27:25:41:83:7b:6a:24: 79:27:07:01:30:50:e7:20:51:ae:2d:77:9e:90:be: f9:78:6b:74:3e:29:6b:3d:08:34:d5:7a:cf:58:62: ce:ef:72:95:b1:3b:82:00:24:8e:ab:5a:93:ec:b6: da:a0:f4:55:98:c8:7e:54:8d:3f:65:3d:e6:00:8b: 9e:66:29:93:92:9d:e7:48:76:93:de:49:14:85:b9: 5c:73:b7:8d:2b:f2:6d:21:16:1c:bd:22:d5:f0:65: e9:5e:8d:a1:a9:dc:23:d1:55:60:94:44:59:d4:02: 82:d2:63:76:dc:c7:61:cf:bd:3e:c1:a1:be:49:5e: ea:f7:bf:8a:ac:b2:a2:08:02:f4:3c:46:f1:e0:b5: ac:ab:ac:06:a3:09:c8:23:78:94:49:5a:a5:9e:9f: c9:cd:b8:74:6b:cb:96:4b:64:10:46:1b:05:22:62: 3e:1d:67:5c:6e:44:c5:9e:91:c7:a3:5e:88:59:ac: b3:cd:6a:53:4d:10:47:34:14:2c:58:37:65:82:f0: a8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:61:A3:A5:E1:22:A9:2F:70:0C:A7:63:CB:15:75:C5:10:22:79:57 X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e32392e302f32342d3234203d3e20333935333734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.199.29.0/24 Signature Algorithm: sha256WithRSAEncryption cb:1d:68:89:eb:b1:e9:e6:34:5f:2e:ad:fa:ee:5c:bd:a8:fe: 25:69:54:be:46:eb:2b:d1:2a:8b:e5:76:08:56:6e:4e:1e:55: 8c:4c:25:42:19:9f:e8:f8:2f:47:ee:5d:1a:d0:2a:07:9d:15: 8d:4c:c3:eb:d8:81:9f:2b:75:8b:9f:ea:7f:10:3e:bf:be:7d: 71:12:a4:24:ed:64:bc:04:36:e0:60:38:3e:1b:31:49:ed:f0: 6c:76:77:7d:a5:26:ca:bb:b0:c3:d7:36:74:a7:0c:9e:f0:eb: 44:ff:6b:64:5f:68:eb:9a:df:d0:f1:57:bb:3e:ce:34:e9:60: 0f:5a:e9:82:8e:fb:8f:72:30:1d:86:cb:ee:72:4f:99:05:4c: 1c:8b:2d:ed:85:0d:48:f1:43:bf:d4:2d:d1:79:0b:c0:c4:99: c7:99:66:9f:74:de:28:66:d0:ab:df:09:d2:49:a0:77:20:e9: 4e:8a:af:ca:ce:b1:3f:94:51:d3:a3:a1:24:30:7f:69:2c:0e: 4a:28:ae:af:3a:b2:e1:31:e1:ff:c3:33:ed:04:6a:08:30:c5: 1d:16:91:d3:ec:80:5e:0e:e6:9c:7d:04:51:bb:c5:5c:12:f8: 88:6e:56:05:f2:9a:77:ca:c1:dc:ef:4b:cf:38:bb:14:1d:27: 42:f4:25:3c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQY2FF/Zo2B1hLe1cDWzN9IPixg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjAxMDYwNzQ3MjlaFw0yNzAxMDUwNzUyMjlaMDMxMTAvBgNV BAMTKDNGNjFBM0E1RTEyMkE5MkY3MDBDQTc2M0NCMTU3NUM1MTAyMjc5NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVdhFxg1Uim/7RhuaMlQT3001 xfeI6TrH35UT/RfjW+dOls8H0GWgiYZZcc8h7fnNy86WJyVBg3tqJHknBwEwUOcg Ua4td56Qvvl4a3Q+KWs9CDTVes9YYs7vcpWxO4IAJI6rWpPsttqg9FWYyH5UjT9l PeYAi55mKZOSnedIdpPeSRSFuVxzt40r8m0hFhy9ItXwZelejaGp3CPRVWCURFnU AoLSY3bcx2HPvT7Bob5JXur3v4qssqIIAvQ8RvHgtayrrAajCcgjeJRJWqWen8nN uHRry5ZLZBBGGwUiYj4dZ1xuRMWekcejXohZrLPNalNNEEc0FCxYN2WC8KgrAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUP2GjpeEiqS9wDKdjyxV1xRAieVcwHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTNkYWExNDIt YTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5NWE4LzAvMzgzMTJlMzEzOTM5MmUzMjM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM1MzMzNzM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA UccdMA0GCSqGSIb3DQEBCwUAA4IBAQDLHWiJ67Hp5jRfLq367ly9qP4laVS+Rusr 0SqL5XYIVm5OHlWMTCVCGZ/o+C9H7l0a0CoHnRWNTMPr2IGfK3WLn+p/ED6/vn1x EqQk7WS8BDbgYDg+GzFJ7fBsdnd9pSbKu7DD1zZ0pwye8OtE/2tkX2jrmt/Q8Ve7 Ps406WAPWumCjvuPcjAdhsvuck+ZBUwciy3thQ1I8UO/1C3ReQvAxJnHmWafdN4o ZtCr3wnSSaB3IOlOiq/KzrE/lFHTo6EkMH9pLA5KKK6vOrLhMeH/wzPtBGoIMMUd FpHT7IBeDuacfQRRu8VcEviIblYF8pp3ysHc70vPOLsUHSdC9CU8 -----END CERTIFICATE-----Generated at Sat Jan 10 00:19:35 2026 by rpki-client