This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/37372e37332e3131372e302f32342d3234203d3e20323030323432.roa File: 37372e37332e3131372e302f32342d3234203d3e20323030323432.roa (raw, json) Hash identifier: eQCFDDvBb9p3KuzX9nQDyWev7idoWrZ4UxFS/r5wLgI= Subject key identifier: 0F:F7:69:54:7A:6B:5B:1E:2B:E7:BF:B3:B1:62:68:FF:26:C9:E6:92 Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Certificate serial: 72A54623ED3E35F12A5B3D8EAA2152A2C618655F Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/37372e37332e3131372e302f32342d3234203d3e20323030323432.roa Signing time: Mon 19 Jan 2026 14:05:44 +0000 ROA not before: Mon 19 Jan 2026 14:00:44 +0000 ROA not after: Mon 18 Jan 2027 14:05:44 +0000 asID: 200242 IP address blocks: 77.73.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 00:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a5:46:23:ed:3e:35:f1:2a:5b:3d:8e:aa:21:52:a2:c6:18:65:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Validity Not Before: Jan 19 14:00:44 2026 GMT Not After : Jan 18 14:05:44 2027 GMT Subject: CN=0FF769547A6B5B1E2BE7BFB3B16268FF26C9E692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bd:f2:b6:15:ec:16:bc:d4:bb:4e:0e:ca:e8: c5:f2:38:ad:89:7a:40:f9:87:5b:b6:4c:da:58:25: 2e:6e:41:78:c1:38:52:66:cb:10:e7:67:79:a7:c4: de:00:8b:6e:77:44:4e:31:97:64:84:2f:6b:a1:7f: 75:f0:99:3c:f9:29:7d:7a:a2:be:5e:12:c6:80:b7: 39:58:b6:d6:f8:e0:4a:78:8f:02:0f:20:fe:44:62: 47:d8:de:f5:ac:b2:1e:50:71:e4:cf:1b:e5:6e:71: b0:64:7f:40:8b:0a:c6:ad:9a:70:47:5d:ff:6f:ff: 66:b3:24:ac:3c:70:46:ca:d2:d3:47:df:96:e4:b8: 63:40:c1:b4:aa:e8:cf:9a:1f:7a:8f:cc:60:d2:24: d7:59:ea:35:3a:41:f3:33:2e:e4:73:32:63:5d:66: f3:78:e0:07:6c:14:30:22:90:68:77:af:9f:b7:df: f1:ed:3a:70:15:9b:78:0f:6d:84:23:af:84:2d:7c: 53:05:92:4f:34:6b:97:16:76:fa:08:75:39:d1:e1: ab:23:87:70:06:ce:7e:c0:b9:a9:a8:ab:2b:10:d2: 4c:4c:9e:6e:5f:d5:ca:f2:86:6b:e6:8c:30:66:16: 2f:39:4e:f4:ed:53:3b:e0:cb:c5:bb:fa:87:7a:4a: 79:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F7:69:54:7A:6B:5B:1E:2B:E7:BF:B3:B1:62:68:FF:26:C9:E6:92 X509v3 Authority Key Identifier: keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/37372e37332e3131372e302f32342d3234203d3e20323030323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.73.117.0/24 Signature Algorithm: sha256WithRSAEncryption a6:8e:1b:c7:74:82:07:ff:fd:77:3c:fc:bb:ba:68:e2:fa:37: 5c:95:77:36:aa:29:56:cc:99:2b:eb:7e:8e:ca:8d:ca:46:fb: 1c:46:3a:42:99:5e:ba:b0:f3:8a:5a:c3:b5:70:aa:43:6c:4c: 04:b6:ef:ba:ec:6e:c6:60:e1:f0:7d:fd:ce:95:07:52:fa:0a: c8:18:16:8a:41:c3:03:25:32:5c:28:af:4e:94:ec:cf:42:ed: a6:77:21:d6:5f:7c:56:55:d5:2b:1f:41:d5:32:99:26:5e:5c: 5d:b0:69:c8:ef:9c:66:eb:67:1f:b8:a1:ae:01:4d:50:8f:6a: 41:b5:5f:d3:b9:5b:3b:0a:48:d0:3c:22:f9:d0:22:15:c1:8f: 09:3b:8d:72:c2:13:58:4a:9a:c9:ca:97:5a:37:8f:bc:07:41: 54:42:23:81:ff:8b:1a:da:1f:62:8f:c6:a7:00:33:70:35:4c: 10:14:3f:d4:e5:e3:e9:11:1b:37:c4:60:17:bf:f1:1e:ca:21: 14:c7:a1:ee:c9:4a:03:9d:3d:d8:15:e3:c6:c5:14:b6:8f:f6: f7:5b:c8:6a:60:6e:14:dc:f5:d1:16:5e:a5:9e:d9:5a:03:57: bc:a9:24:f5:0f:9b:02:04:3f:7d:d2:de:fd:ac:76:aa:83:64: a0:a7:f1:fb -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUcqVGI+0+NfEqWz2OqiFSosYYZV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi YjJhYzMyZTAeFw0yNjAxMTkxNDAwNDRaFw0yNzAxMTgxNDA1NDRaMDMxMTAvBgNV BAMTKDBGRjc2OTU0N0E2QjVCMUUyQkU3QkZCM0IxNjI2OEZGMjZDOUU2OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5vfK2FewWvNS7Tg7K6MXyOK2J ekD5h1u2TNpYJS5uQXjBOFJmyxDnZ3mnxN4Ai253RE4xl2SEL2uhf3XwmTz5KX16 or5eEsaAtzlYttb44Ep4jwIPIP5EYkfY3vWssh5QceTPG+VucbBkf0CLCsatmnBH Xf9v/2azJKw8cEbK0tNH35bkuGNAwbSq6M+aH3qPzGDSJNdZ6jU6QfMzLuRzMmNd ZvN44AdsFDAikGh3r5+33/HtOnAVm3gPbYQjr4QtfFMFkk80a5cWdvoIdTnR4asj h3AGzn7AuamoqysQ0kxMnm5f1cryhmvmjDBmFi85TvTtUzvgy8W7+od6SnlZAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUD/dpVHprWx4r57+zsWJo/ybJ5pIwHwYDVR0j BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz cXd5NC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZmN2E5ODkt ZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzQvMzczNzJlMzczMzJlMzEzMTM3 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMwMzIzNDMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA TUl1MA0GCSqGSIb3DQEBCwUAA4IBAQCmjhvHdIIH//13PPy7umji+jdclXc2qilW zJkr636Oyo3KRvscRjpCmV66sPOKWsO1cKpDbEwEtu+67G7GYOHwff3OlQdS+grI GBaKQcMDJTJcKK9OlOzPQu2mdyHWX3xWVdUrH0HVMpkmXlxdsGnI75xm62cfuKGu AU1Qj2pBtV/TuVs7CkjQPCL50CIVwY8JO41ywhNYSprJypdaN4+8B0FUQiOB/4sa 2h9ij8anADNwNUwQFD/U5ePpERs3xGAXv/EeyiEUx6HuyUoDnT3YFePGxRS2j/b3 W8hqYG4U3PXRFl6lntlaA1e8qST1D5sCBD990t79rHaqg2Sgp/H7 -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:23 2026 by rpki-client