This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3138352e33382e32372e302f32342d3234203d3e20323031303738.roa
File: 3138352e33382e32372e302f32342d3234203d3e20323031303738.roa (raw, json)
Hash identifier: ukyrW3OkENdui2e2lMLTPGtAVU5Vow3lLLqAXhAKFmY=
Subject key identifier: 20:66:28:78:D2:8A:99:8B:39:FB:08:ED:98:DA:E9:A7:C5:A2:E2:B6
Certificate issuer: /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Certificate serial: 458158412CC60778B79FA18946EF5E1A27D5ADDB
Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3138352e33382e32372e302f32342d3234203d3e20323031303738.roa
Signing time: Wed 04 Feb 2026 13:41:42 +0000
ROA not before: Wed 04 Feb 2026 13:36:42 +0000
ROA not after: Wed 03 Feb 2027 13:41:42 +0000
asID: 201078
IP address blocks: 185.38.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:81:58:41:2c:c6:07:78:b7:9f:a1:89:46:ef:5e:1a:27:d5:ad:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Validity
Not Before: Feb 4 13:36:42 2026 GMT
Not After : Feb 3 13:41:42 2027 GMT
Subject: CN=20662878D28A998B39FB08ED98DAE9A7C5A2E2B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:b4:0b:47:a4:e0:db:6d:b3:72:5f:ff:4d:
59:55:43:7b:19:25:a0:c9:c7:6a:91:ab:ce:f7:51:
13:b9:38:7f:f9:c3:fc:60:bc:92:79:27:f6:c7:53:
34:cf:4e:8d:70:85:d7:80:22:55:0c:e4:41:f6:7b:
85:44:1c:9d:8a:14:5f:87:28:f5:66:8b:a0:f8:10:
19:f9:c3:3a:67:69:8f:51:45:66:07:67:8d:4a:49:
9e:a6:31:3f:c1:03:c9:3f:3a:11:91:ce:97:f7:d5:
f2:e2:a4:a5:0e:56:14:21:10:1d:bb:26:32:43:47:
94:21:8b:fc:0a:a7:10:56:85:04:6c:3a:2e:ce:ea:
1c:43:9f:03:5f:e2:39:28:1c:ce:b2:aa:a6:14:1d:
9a:d0:f2:63:35:9e:79:cf:29:fa:df:41:ca:16:91:
0b:ac:9b:08:12:d7:44:c9:e8:35:0e:db:6f:2d:30:
4e:be:24:c4:21:99:6f:7a:7c:a4:3a:15:35:5c:60:
d4:3d:71:d4:f4:4b:07:39:fa:6a:65:60:3e:79:68:
8c:50:5b:9a:3c:c1:ef:64:59:a9:c2:35:23:ad:cc:
ee:6c:80:09:7e:c9:3b:3e:be:ac:01:34:7e:32:cf:
cd:5c:12:16:69:fd:64:c4:1e:7a:fa:bd:13:a9:ea:
49:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:66:28:78:D2:8A:99:8B:39:FB:08:ED:98:DA:E9:A7:C5:A2:E2:B6
X509v3 Authority Key Identifier:
keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/3138352e33382e32372e302f32342d3234203d3e20323031303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.27.0/24
Signature Algorithm: sha256WithRSAEncryption
44:53:2b:ee:ef:86:7c:53:2c:2d:7b:fc:25:c6:3e:46:7b:9f:
c5:b5:7f:62:03:9a:d8:08:b3:dd:d0:53:35:58:d9:ea:1b:85:
3b:58:22:74:1c:88:26:c4:fc:25:d0:99:9c:b4:72:57:c4:a4:
f0:f2:69:41:3a:fb:3c:dd:b3:67:88:5a:7f:7e:64:f9:ad:ab:
06:7a:a3:df:f4:02:b4:02:4c:10:0d:67:19:f4:7d:05:73:7f:
fd:39:53:6d:36:36:95:40:a3:46:57:14:2d:23:b3:8d:f6:04:
67:fc:c0:99:a2:55:4b:db:56:3d:bf:58:da:ad:65:ce:d5:67:
f7:54:c2:5b:86:3a:20:16:59:12:83:7d:b5:b4:64:35:c4:21:
ad:f1:79:71:84:a5:24:ab:c9:a7:e0:d2:20:cc:bd:fb:ce:19:
b5:41:7e:3d:b7:59:07:0e:3b:0e:f9:56:8b:3d:c6:cc:2f:c4:
34:09:b4:91:4c:dc:cc:05:8b:8e:93:2e:09:dc:c4:a9:b2:2f:
c5:f8:76:17:1b:76:6a:cb:99:ce:cb:c4:3c:4c:4e:72:cd:c9:
52:62:27:e3:ab:66:c4:ab:76:c0:22:aa:31:06:33:85:7f:c3:
88:bd:3e:00:df:1d:3c:a6:ed:31:5d:f9:cf:a9:dd:ab:c0:33:
b0:10:7a:78
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIURYFYQSzGB3i3n6GJRu9eGifVrdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2
REE5QkU5NjAeFw0yNjAyMDQxMzM2NDJaFw0yNzAyMDMxMzQxNDJaMDMxMTAvBgNV
BAMTKDIwNjYyODc4RDI4QTk5OEIzOUZCMDhFRDk4REFFOUE3QzVBMkUyQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtibQLR6Tg222zcl//TVlVQ3sZ
JaDJx2qRq873URO5OH/5w/xgvJJ5J/bHUzTPTo1whdeAIlUM5EH2e4VEHJ2KFF+H
KPVmi6D4EBn5wzpnaY9RRWYHZ41KSZ6mMT/BA8k/OhGRzpf31fLipKUOVhQhEB27
JjJDR5Qhi/wKpxBWhQRsOi7O6hxDnwNf4jkoHM6yqqYUHZrQ8mM1nnnPKfrfQcoW
kQusmwgS10TJ6DUO228tME6+JMQhmW96fKQ6FTVcYNQ9cdT0Swc5+mplYD55aIxQ
W5o8we9kWanCNSOtzO5sgAl+yTs+vqwBNH4yz81cEhZp/WTEHnr6vROp6kkdAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUIGYoeNKKmYs5+wjtmNrpp8Wi4rYwHwYDVR0j
BBgwFoAUri4d762B/zngKD7WG8n53G2pvpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjA3YzkzZWQtYjgxOS00NWU4LTk0NWQtNDI2MzZkNDcx
NzEwLzAvQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2REE5QkU5Ni5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1mNTM2LTQ0
NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC9BRTJFMURFRkFEODFGRjM5RTAyODNFRDYx
QkM5RjlEQzZEQTlCRTk2LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoGCCsGAQUF
BzALhoGNcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9mMDdjOTNlZC1iODE5LTQ1ZTgtOTQ1ZC00MjYzNmQ0NzE3MTAvMC8zMTM4MzUy
ZTMzMzgyZTMyMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzEzMDM3Mzgu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBAC5JhswDQYJKoZIhvcNAQELBQADggEBAERTK+7vhnxTLC17/CXG
PkZ7n8W1f2IDmtgIs93QUzVY2eobhTtYInQciCbE/CXQmZy0clfEpPDyaUE6+zzd
s2eIWn9+ZPmtqwZ6o9/0ArQCTBANZxn0fQVzf/05U202NpVAo0ZXFC0js432BGf8
wJmiVUvbVj2/WNqtZc7VZ/dUwluGOiAWWRKDfbW0ZDXEIa3xeXGEpSSryafg0iDM
vfvOGbVBfj23WQcOOw75Vos9xswvxDQJtJFM3MwFi46TLgncxKmyL8X4dhcbdmrL
mc7LxDxMTnLNyVJiJ+OrZsSrdsAiqjEGM4V/w4i9PgDfHTym7TFd+c+p3avAM7AQ
eng=
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:51:57 2026 by rpki-client