This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e33312e302f32342d3234203d3e203239383032.roa File: 38312e3139392e33312e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: eHc8BB6N7MJM8eunbzdqcEu1QDCiG0PskZVwU0CFj1I= Subject key identifier: 85:32:79:02:E6:23:A8:1B:DD:13:F9:27:85:54:B3:98:ED:B7:E2:F5 Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 7616DB98F93C510C2D696892FFD4429ED852701F Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e33312e302f32342d3234203d3e203239383032.roa Signing time: Thu 29 Jan 2026 10:57:31 +0000 ROA not before: Thu 29 Jan 2026 10:52:31 +0000 ROA not after: Thu 28 Jan 2027 10:57:31 +0000 asID: 29802 IP address blocks: 81.199.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 11:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:16:db:98:f9:3c:51:0c:2d:69:68:92:ff:d4:42:9e:d8:52:70:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Jan 29 10:52:31 2026 GMT Not After : Jan 28 10:57:31 2027 GMT Subject: CN=85327902E623A81BDD13F9278554B398EDB7E2F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:67:2b:9c:4b:b6:ba:a2:a0:62:9d:1f:b4:38: 31:11:6c:f2:fc:bb:cf:cf:5a:fb:f4:44:ad:c3:3f: ec:ea:a7:12:97:c4:75:c2:e9:87:9c:33:24:80:73: 28:80:69:d2:07:8b:e1:db:f0:8e:36:43:8d:27:5c: 82:3b:0c:d8:58:3c:6a:72:8d:c5:a9:1b:6c:60:66: f5:02:59:08:69:44:24:8e:be:bb:7e:6f:dc:f3:19: a1:ed:23:d0:d3:70:af:42:83:6d:29:51:52:a8:01: a1:6d:a8:e7:bb:ee:b9:94:4b:9a:34:a4:a8:65:75: 36:a5:28:02:77:25:40:75:21:82:e2:2a:6c:77:7f: 98:6f:14:b7:88:85:f9:71:a9:d8:60:0d:f4:b6:6e: e2:5e:36:54:b3:c6:e0:b8:44:5d:e6:72:e6:89:38: ba:d8:e4:72:c3:6e:98:82:bc:4e:7f:63:ae:40:81: 6c:3b:4a:57:7c:2d:a4:b8:e6:04:5c:05:26:95:a4: ad:23:74:a5:09:90:33:41:15:e0:eb:e5:4f:a2:51: c4:e3:55:4d:bd:70:d9:c6:06:70:48:d9:7a:64:5a: f7:3b:40:85:20:5c:34:dd:59:df:3d:11:61:98:61: a6:56:d0:df:dc:fb:ae:de:7b:e1:ae:8b:2f:e4:05: a5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:32:79:02:E6:23:A8:1B:DD:13:F9:27:85:54:B3:98:ED:B7:E2:F5 X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e33312e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.199.31.0/24 Signature Algorithm: sha256WithRSAEncryption ac:fd:de:f0:0b:64:eb:6d:81:7f:97:69:35:ca:e3:aa:28:bf: 8c:4e:21:0b:d1:92:37:52:63:d5:f6:1c:a7:ad:c9:ba:71:d4: f7:67:48:8d:0a:13:51:61:3c:ff:7c:54:6c:c6:93:69:41:3d: 88:5d:13:ba:ca:22:ec:09:ba:31:61:06:2e:2e:71:63:98:78: 41:a1:72:d7:86:48:83:80:31:0d:be:10:ab:3b:06:a5:42:80: 04:24:0b:15:47:17:73:f3:15:f5:bf:c1:0d:85:a3:72:6f:0a: be:a8:f2:e7:bc:5c:28:b4:f9:72:4f:6e:c5:d9:9b:1a:c8:46: 5b:ef:f5:f3:cf:6e:68:1b:9e:5a:6e:b8:cd:17:af:ef:88:0f: 26:b3:0e:1a:c0:5d:8d:99:a9:a8:bf:1a:86:73:e2:30:cb:08: b7:f0:4b:64:ab:99:0b:8e:69:fc:64:ce:c4:62:90:5c:e5:0f: 93:93:a0:6a:63:65:51:9a:0e:b7:34:86:88:78:1b:d5:93:35: 49:db:ff:99:84:0c:bb:0a:7e:00:fb:fc:6f:a8:c6:90:32:0c: df:1d:ba:dc:a3:17:2e:3b:b9:c5:d2:6e:c8:59:1c:07:9b:c6: 58:8b:20:d3:bf:34:d2:5b:98:85:67:e6:88:56:22:df:0d:81: 27:da:27:65 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUdhbbmPk8UQwtaWiS/9RCnthScB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjAxMjkxMDUyMzFaFw0yNzAxMjgxMDU3MzFaMDMxMTAvBgNV BAMTKDg1MzI3OTAyRTYyM0E4MUJERDEzRjkyNzg1NTRCMzk4RURCN0UyRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjZyucS7a6oqBinR+0ODERbPL8 u8/PWvv0RK3DP+zqpxKXxHXC6YecMySAcyiAadIHi+Hb8I42Q40nXII7DNhYPGpy jcWpG2xgZvUCWQhpRCSOvrt+b9zzGaHtI9DTcK9Cg20pUVKoAaFtqOe77rmUS5o0 pKhldTalKAJ3JUB1IYLiKmx3f5hvFLeIhflxqdhgDfS2buJeNlSzxuC4RF3mcuaJ OLrY5HLDbpiCvE5/Y65AgWw7Sld8LaS45gRcBSaVpK0jdKUJkDNBFeDr5U+iUcTj VU29cNnGBnBI2XpkWvc7QIUgXDTdWd89EWGYYaZW0N/c+67ee+Guiy/kBaV/AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUhTJ5AuYjqBvdE/knhVSzmO234vUwHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTNkYWExNDIt YTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5NWE4LzAvMzgzMTJlMzEzOTM5MmUzMzMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFHH HzANBgkqhkiG9w0BAQsFAAOCAQEArP3e8Atk622Bf5dpNcrjqii/jE4hC9GSN1Jj 1fYcp63JunHU92dIjQoTUWE8/3xUbMaTaUE9iF0Tusoi7Am6MWEGLi5xY5h4QaFy 14ZIg4AxDb4QqzsGpUKABCQLFUcXc/MV9b/BDYWjcm8Kvqjy57xcKLT5ck9uxdmb GshGW+/1889uaBueWm64zRev74gPJrMOGsBdjZmpqL8ahnPiMMsIt/BLZKuZC45p /GTOxGKQXOUPk5OgamNlUZoOtzSGiHgb1ZM1Sdv/mYQMuwp+APv8b6jGkDIM3x26 3KMXLju5xdJuyFkcB5vGWIsg07800luYhWfmiFYi3w2BJ9onZQ== -----END CERTIFICATE-----Generated at Thu Jan 29 17:49:05 2026 by rpki-client