This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235332e302f32342d3234203d3e20333938333835.roa File: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (raw, json) Hash identifier: VegTYwpyqBI8NVsfiZGa7nbuIizSi0tQDSuMW1lp9V8= Subject key identifier: 4F:C4:85:26:A5:AA:6A:98:5B:22:C0:5C:0E:B5:97:51:A2:9E:2E:7D Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Certificate serial: 3ACC4D207576A15347BB636F6C226C29CE49D5A7 Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235332e302f32342d3234203d3e20333938333835.roa Signing time: Thu 25 Dec 2025 17:55:32 +0000 ROA not before: Thu 25 Dec 2025 17:50:32 +0000 ROA not after: Thu 24 Dec 2026 17:55:32 +0000 asID: 398385 IP address blocks: 77.83.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:cc:4d:20:75:76:a1:53:47:bb:63:6f:6c:22:6c:29:ce:49:d5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Validity Not Before: Dec 25 17:50:32 2025 GMT Not After : Dec 24 17:55:32 2026 GMT Subject: CN=4FC48526A5AA6A985B22C05C0EB59751A29E2E7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:da:d5:ed:24:64:81:44:df:48:75:f6:36:5f: 08:9b:3f:ff:7a:39:d2:8a:84:7e:da:75:0b:c3:6b: fd:d8:14:f8:32:b8:2b:a0:8c:9f:48:83:af:97:2c: 92:56:1f:cc:05:f8:11:d1:ac:84:07:e5:f5:98:a1: 04:21:77:8d:53:ad:9e:96:aa:24:62:fd:95:b1:5b: 93:7b:6f:72:a6:3b:bc:71:70:8a:55:8f:18:a5:21: 1c:62:ee:e3:98:0f:06:ee:b3:c8:e5:cc:1a:ff:e2: 82:07:8d:f2:8d:1d:a6:7d:ff:94:ca:57:92:3c:7b: 3a:47:42:c6:49:4b:de:70:cf:24:c5:5b:a0:e9:c7: 36:9d:03:ec:7c:34:37:4a:53:17:0e:0c:53:7d:74: 6b:45:bb:c1:5c:d2:70:e2:32:d8:e9:2e:d2:e2:0d: 17:b1:05:8c:7f:2e:12:d9:6d:4d:a2:ab:fa:2c:28: 7b:b6:23:b2:a7:90:84:ca:42:9f:15:ca:e7:d0:9d: 1b:6b:9c:37:19:d8:a9:9e:b9:8b:55:5f:84:d8:cb: 4f:42:58:db:6a:3d:d1:8d:59:88:62:f6:06:a1:c8: 3c:bc:b1:24:6d:49:f8:e0:c6:d6:7e:61:a6:51:bc: a7:35:60:17:11:ac:02:d2:f2:98:44:04:a4:94:12: d5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C4:85:26:A5:AA:6A:98:5B:22:C0:5C:0E:B5:97:51:A2:9E:2E:7D X509v3 Authority Key Identifier: keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235332e302f32342d3234203d3e20333938333835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.253.0/24 Signature Algorithm: sha256WithRSAEncryption 07:44:aa:43:8b:84:94:d1:5b:d5:44:21:a7:59:55:0e:6a:26: d4:7e:08:22:d3:3b:6d:46:e3:cc:41:ea:3c:6c:c7:ff:27:65: 94:8b:1f:94:8a:c8:ac:78:6a:15:30:40:cc:5b:d4:be:d0:a9: a6:76:39:d7:39:11:4b:37:69:3c:f1:0f:1a:55:9b:83:69:50: 58:40:8e:f8:84:39:34:62:64:b3:5d:d3:46:95:05:47:80:48: bd:f7:3e:38:ec:ba:e2:b8:74:7b:ca:be:63:19:98:b9:81:b6: d1:e2:53:54:70:72:78:99:d7:a2:c0:d1:39:9d:66:48:67:6e: 67:8a:4d:62:e8:b1:f6:b3:8d:98:df:f2:93:51:07:56:18:bd: e0:f6:54:6b:da:cf:9b:16:57:49:95:ef:03:ba:f4:8d:fd:21: 0b:a4:8b:12:db:da:bd:0a:2d:58:df:b7:11:21:00:69:59:c5: 3c:b8:0c:8b:89:a2:12:31:0f:03:39:ed:dc:a1:87:b0:3d:e0: 3a:f1:8a:1c:99:a6:e5:4e:86:7e:65:3c:99:27:90:96:74:f3: 73:98:a4:b0:b6:b6:81:46:5b:d8:16:ae:1a:d3:a9:64:61:f0: 70:c9:c8:61:a6:38:fd:03:e8:0a:35:9a:2a:6b:56:52:68:23: 8e:43:e2:ec -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOsxNIHV2oVNHu2NvbCJsKc5J1acwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy NjllYjNkNjAeFw0yNTEyMjUxNzUwMzJaFw0yNjEyMjQxNzU1MzJaMDMxMTAvBgNV BAMTKDRGQzQ4NTI2QTVBQTZBOTg1QjIyQzA1QzBFQjU5NzUxQTI5RTJFN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf2tXtJGSBRN9IdfY2XwibP/96 OdKKhH7adQvDa/3YFPgyuCugjJ9Ig6+XLJJWH8wF+BHRrIQH5fWYoQQhd41TrZ6W qiRi/ZWxW5N7b3KmO7xxcIpVjxilIRxi7uOYDwbus8jlzBr/4oIHjfKNHaZ9/5TK V5I8ezpHQsZJS95wzyTFW6DpxzadA+x8NDdKUxcODFN9dGtFu8Fc0nDiMtjpLtLi DRexBYx/LhLZbU2iq/osKHu2I7KnkITKQp8VyufQnRtrnDcZ2KmeuYtVX4TYy09C WNtqPdGNWYhi9gahyDy8sSRtSfjgxtZ+YaZRvKc1YBcRrALS8phEBKSUEtUNAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUT8SFJqWqaphbIsBcDrWXUaKeLn0wHwYDVR0j BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0 MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh ZXM5WS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUt NTExMC00MjU3LTk0ZWYtNGQyYjQzODg0MDQwLzAvMzczNzJlMzgzMzJlMzIzNTMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM4MzMzODM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA TVP9MA0GCSqGSIb3DQEBCwUAA4IBAQAHRKpDi4SU0VvVRCGnWVUOaibUfggi0ztt RuPMQeo8bMf/J2WUix+UisiseGoVMEDMW9S+0KmmdjnXORFLN2k88Q8aVZuDaVBY QI74hDk0YmSzXdNGlQVHgEi99z447LriuHR7yr5jGZi5gbbR4lNUcHJ4mdeiwNE5 nWZIZ25nik1i6LH2s42Y3/KTUQdWGL3g9lRr2s+bFldJle8DuvSN/SELpIsS29q9 Ci1Y37cRIQBpWcU8uAyLiaISMQ8DOe3coYewPeA68YocmablToZ+ZTyZJ5CWdPNz mKSwtraBRlvYFq4a06lkYfBwychhpjj9A+gKNZoqa1ZSaCOOQ+Ls -----END CERTIFICATE-----Generated at Sun Jan 25 17:29:46 2026 by rpki-client