This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e33312e302f32342d3234203d3e203631333137.roa File: 38312e3139392e33312e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: MpGYXlIuAPT1KvI6BwV+qAOm4Q2yxx2/nHYo3lAwukI= Subject key identifier: 83:1F:A2:33:F6:9C:08:D6:BE:7B:3D:75:C6:13:3C:77:A2:B2:F5:0D Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 437A9A090A95EF8278E6E88DCAC98B6865E36D72 Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e33312e302f32342d3234203d3e203631333137.roa Signing time: Tue 06 Jan 2026 07:52:29 +0000 ROA not before: Tue 06 Jan 2026 07:47:29 +0000 ROA not after: Tue 05 Jan 2027 07:52:29 +0000 asID: 61317 IP address blocks: 81.199.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 20:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7a:9a:09:0a:95:ef:82:78:e6:e8:8d:ca:c9:8b:68:65:e3:6d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Jan 6 07:47:29 2026 GMT Not After : Jan 5 07:52:29 2027 GMT Subject: CN=831FA233F69C08D6BE7B3D75C6133C77A2B2F50D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b4:b4:1f:13:ef:71:16:a1:7a:6f:82:62:dc: 2a:a9:07:2e:22:aa:6c:eb:56:80:8d:fe:bc:bc:b3: e5:3c:dc:95:2c:99:d1:cd:74:1f:bd:64:c8:7b:cf: 8a:e1:d6:a5:5c:9d:a3:76:f2:3c:6a:bd:9c:ff:e2: ac:90:7d:7d:b2:43:35:d6:88:aa:94:69:be:18:e7: d2:28:af:2c:b3:5c:7f:44:5f:24:ee:ec:d3:3d:ad: 7e:6d:98:71:78:51:e5:f0:84:08:66:5f:6a:66:8a: 30:ba:f4:a4:31:48:26:aa:db:43:9d:69:bb:b3:e9: 60:ff:ca:7e:e2:6c:7e:55:dc:8a:82:de:57:39:b5: da:8d:f8:6f:f1:6b:86:91:c7:0c:40:f3:66:32:e7: 07:44:62:2e:ba:4a:ec:b1:9a:ed:d8:46:b7:e8:d4: 4d:14:8f:09:1a:36:d3:94:01:a2:0c:0c:47:34:93: 50:e0:71:cc:b2:8f:28:c5:90:86:85:3c:45:60:7b: e3:3d:ee:45:38:17:7c:a0:dc:99:ea:69:7f:db:f3: dd:43:cc:5e:d8:01:bb:38:4f:c3:fb:90:d8:fd:a8: 76:e9:48:56:96:4b:01:6c:88:d0:d6:f2:ca:4e:8e: 9a:43:6d:5d:1d:c7:a6:14:82:37:29:43:25:07:33: d1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1F:A2:33:F6:9C:08:D6:BE:7B:3D:75:C6:13:3C:77:A2:B2:F5:0D X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/38312e3139392e33312e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.199.31.0/24 Signature Algorithm: sha256WithRSAEncryption 15:f1:a6:13:bc:05:b1:a2:20:22:f1:38:85:9f:18:9c:3a:fe: 1a:64:3b:34:c4:e2:1c:3c:ba:e8:9e:d5:55:3c:f2:28:af:b2: 26:7b:f8:a4:01:a0:c2:75:e9:b2:e3:b4:77:a2:bc:2f:a9:2f: 66:a4:13:a5:d5:9a:0b:4c:4b:d6:de:ce:84:c5:eb:29:cb:7d: 58:ca:6b:a6:ef:d3:1d:64:66:17:d2:40:6c:75:b0:34:29:08: 6f:d4:ed:a5:30:51:0f:02:6d:6b:b4:0e:39:00:68:5b:9b:0f: 13:f4:b0:ed:eb:bb:5e:06:ed:31:21:10:2c:38:b1:bc:96:e8: 5d:8f:13:45:20:06:ca:ea:57:e5:8a:a2:bb:e8:18:6e:be:b9: cf:df:29:6a:5e:de:a2:c4:2d:71:94:36:91:a0:69:89:3a:69: 7d:77:e4:0c:11:9c:1b:21:3a:27:49:c0:a5:db:9d:45:72:71: 19:0d:04:90:a7:2b:33:51:24:49:54:e4:df:a9:fd:87:0c:91: 45:c7:cb:14:8c:34:cf:e7:ca:85:35:80:77:2f:c6:bb:c4:e9: 6b:90:22:49:0f:12:80:f1:52:bf:a8:8f:88:5b:69:46:bb:7d: f3:40:ca:0b:91:f8:d4:62:58:c4:bb:03:70:c2:cb:4b:2a:b8: ed:66:e5:05 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUQ3qaCQqV74J45uiNysmLaGXjbXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjAxMDYwNzQ3MjlaFw0yNzAxMDUwNzUyMjlaMDMxMTAvBgNV BAMTKDgzMUZBMjMzRjY5QzA4RDZCRTdCM0Q3NUM2MTMzQzc3QTJCMkY1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUtLQfE+9xFqF6b4Ji3CqpBy4i qmzrVoCN/ry8s+U83JUsmdHNdB+9ZMh7z4rh1qVcnaN28jxqvZz/4qyQfX2yQzXW iKqUab4Y59IoryyzXH9EXyTu7NM9rX5tmHF4UeXwhAhmX2pmijC69KQxSCaq20Od abuz6WD/yn7ibH5V3IqC3lc5tdqN+G/xa4aRxwxA82Yy5wdEYi66Suyxmu3YRrfo 1E0UjwkaNtOUAaIMDEc0k1DgccyyjyjFkIaFPEVge+M97kU4F3yg3JnqaX/b891D zF7YAbs4T8P7kNj9qHbpSFaWSwFsiNDW8spOjppDbV0dx6YUgjcpQyUHM9GNAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUgx+iM/acCNa+ez11xhM8d6Ky9Q0wHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTNkYWExNDIt YTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5NWE4LzAvMzgzMTJlMzEzOTM5MmUzMzMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFHH HzANBgkqhkiG9w0BAQsFAAOCAQEAFfGmE7wFsaIgIvE4hZ8YnDr+GmQ7NMTiHDy6 6J7VVTzyKK+yJnv4pAGgwnXpsuO0d6K8L6kvZqQTpdWaC0xL1t7OhMXrKct9WMpr pu/THWRmF9JAbHWwNCkIb9TtpTBRDwJta7QOOQBoW5sPE/Sw7eu7XgbtMSEQLDix vJboXY8TRSAGyupX5Yqiu+gYbr65z98pal7eosQtcZQ2kaBpiTppfXfkDBGcGyE6 J0nApdudRXJxGQ0EkKcrM1EkSVTk36n9hwyRRcfLFIw0z+fKhTWAdy/Gu8Tpa5Ai SQ8SgPFSv6iPiFtpRrt980DKC5H41GJYxLsDcMLLSyq47WblBQ== -----END CERTIFICATE-----Generated at Thu Jan 8 12:58:25 2026 by rpki-client