This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38352e302f32342d3234203d3e203437353833.roa File: 37372e3234332e38352e302f32342d3234203d3e203437353833.roa (raw, json) Hash identifier: HBI4ECUeEw75N2Sk10zz2oiJlf92pYUbIcMWo6hSEO0= Subject key identifier: B3:99:FB:42:17:73:1F:8D:82:5D:B1:64:5D:FA:FF:51:D5:5B:78:56 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 394D88EAD422BDAC3A8F7FA81086C8CFD07BA6A6 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38352e302f32342d3234203d3e203437353833.roa Signing time: Fri 28 Nov 2025 11:49:41 +0000 ROA not before: Fri 28 Nov 2025 11:44:41 +0000 ROA not after: Fri 27 Nov 2026 11:49:41 +0000 asID: 47583 IP address blocks: 77.243.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:4d:88:ea:d4:22:bd:ac:3a:8f:7f:a8:10:86:c8:cf:d0:7b:a6:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:41 2025 GMT Not After : Nov 27 11:49:41 2026 GMT Subject: CN=B399FB4217731F8D825DB1645DFAFF51D55B7856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ed:78:cc:64:b2:fe:d3:d3:90:d7:f1:14:64: 7d:f9:80:b9:ab:0f:59:13:0e:91:31:5a:6a:33:f2: 4a:ba:f1:75:83:e8:15:e1:3f:5d:f7:89:44:06:db: b4:10:be:3b:83:52:19:cb:57:54:33:26:98:48:41: b6:7d:47:ce:a3:70:f8:ad:9d:08:2f:4a:88:94:30: d8:fe:79:1e:03:b0:6a:0c:3e:3a:1e:ce:41:e1:fc: e8:40:1a:57:66:89:bb:18:85:da:07:70:c3:ee:8b: 7c:d6:37:d1:7e:ad:af:02:ba:27:7e:9a:f6:86:fe: a3:2e:7e:20:b1:60:3e:9b:ce:77:7c:78:1b:81:33: d9:9d:cc:5d:0d:68:0d:29:3a:4a:58:eb:9f:ba:52: c7:46:13:b0:04:c4:c2:9b:fe:70:dc:a1:7d:ee:2f: 38:58:b6:c1:f5:67:6d:c7:1c:fa:04:c8:07:82:e6: cb:c2:d0:6b:3b:af:ec:9a:c2:32:07:8a:3f:8e:97: 6b:22:20:a9:b6:d7:d8:e1:a6:1e:43:16:c3:83:02: 96:a8:ca:f2:66:6b:09:e4:34:3d:41:95:93:af:7f: 45:6d:75:0a:3a:5a:a1:89:67:54:57:4b:c4:93:90: 74:0e:cb:a5:d0:dc:6d:c8:00:bc:d1:a9:a3:cd:51: 8b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:99:FB:42:17:73:1F:8D:82:5D:B1:64:5D:FA:FF:51:D5:5B:78:56 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38352e302f32342d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.243.85.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:a8:4b:e2:78:54:0a:4b:73:62:6c:0f:2e:93:8d:94:47:f0: 03:f0:9f:29:47:25:a1:f8:24:b2:3d:dd:e0:72:19:25:f7:88: 14:1b:fb:48:59:14:48:5b:9d:6d:00:36:02:31:ee:ae:08:a4: c3:c0:30:8a:8c:df:58:79:44:0f:4d:d5:ee:b6:ca:fe:c4:79: 2b:79:e4:67:b2:e3:88:89:29:a9:5a:f5:60:13:f9:ad:f8:b6: 66:31:1f:e8:f1:fb:7f:d9:4b:77:ff:e1:71:51:34:70:f7:bf: b9:d7:db:f1:7a:5a:35:03:6b:6b:ee:83:da:dc:eb:7c:0b:f5: b7:aa:dc:a5:7a:fd:ff:d4:82:21:7d:13:af:09:0a:24:87:06: 36:13:f7:17:04:bd:e2:c2:c8:d8:8f:19:57:5d:f9:72:09:66: 1a:c8:ed:a1:cd:ea:d7:e2:60:9c:ec:bf:79:9d:df:f0:b7:db: 48:81:d3:98:0c:6b:88:89:6e:ab:15:5b:93:c9:da:9c:da:0a: 88:c9:57:2c:53:56:b4:74:a7:d9:f1:54:62:1d:eb:78:43:71: 63:30:74:b4:95:57:38:ae:32:b4:c4:dc:3f:0d:f4:ea:8f:d3: 30:49:cd:de:73:5c:d3:69:f2:80:7b:5a:c5:5d:be:65:db:70: 3a:e3:19:72 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUOU2I6tQivaw6j3+oEIbIz9B7pqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDFaFw0yNjExMjcxMTQ5NDFaMDMxMTAvBgNV BAMTKEIzOTlGQjQyMTc3MzFGOEQ4MjVEQjE2NDVERkFGRjUxRDU1Qjc4NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg7XjMZLL+09OQ1/EUZH35gLmr D1kTDpExWmoz8kq68XWD6BXhP133iUQG27QQvjuDUhnLV1QzJphIQbZ9R86jcPit nQgvSoiUMNj+eR4DsGoMPjoezkHh/OhAGldmibsYhdoHcMPui3zWN9F+ra8Cuid+ mvaG/qMufiCxYD6bznd8eBuBM9mdzF0NaA0pOkpY65+6UsdGE7AExMKb/nDcoX3u LzhYtsH1Z23HHPoEyAeC5svC0Gs7r+yawjIHij+Ol2siIKm219jhph5DFsODApao yvJmawnkND1BlZOvf0VtdQo6WqGJZ1RXS8STkHQOy6XQ3G3IALzRqaPNUYs9AgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUs5n7QhdzH42CXbFkXfr/UdVbeFYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNzM3MmUzMjM0MzMy ZTM4MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQATfNVMA0GCSqGSIb3DQEBCwUAA4IBAQBPqEvieFQKS3NibA8uk42UR/AD8J8p RyWh+CSyPd3gchkl94gUG/tIWRRIW51tADYCMe6uCKTDwDCKjN9YeUQPTdXutsr+ xHkreeRnsuOIiSmpWvVgE/mt+LZmMR/o8ft/2Ut3/+FxUTRw97+519vxelo1A2tr 7oPa3Ot8C/W3qtylev3/1IIhfROvCQokhwY2E/cXBL3iwsjYjxlXXflyCWYayO2h zerX4mCc7L95nd/wt9tIgdOYDGuIiW6rFVuTydqc2gqIyVcsU1a0dKfZ8VRiHet4 Q3FjMHS0lVc4rjK0xNw/DfTqj9MwSc3ec1zTafKAe1rFXb5l23A64xly -----END CERTIFICATE-----Generated at Fri Dec 5 18:54:42 2025 by rpki-client