This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235352e302f32342d3234203d3e20333937333733.roa File: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (raw, json) Hash identifier: FvvfrZU7Zk5wRW7V0nJVCDjddc7RhJHDxzG+f+tC0NU= Subject key identifier: 5F:5B:8B:FC:8D:95:30:15:C0:96:A7:B8:EE:E4:4A:E4:F7:F4:5D:E0 Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Certificate serial: 5BD92D248CAF1636A01B893F48F505902527A5E6 Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235352e302f32342d3234203d3e20333937333733.roa Signing time: Thu 25 Dec 2025 17:55:32 +0000 ROA not before: Thu 25 Dec 2025 17:50:32 +0000 ROA not after: Thu 24 Dec 2026 17:55:32 +0000 asID: 397373 IP address blocks: 77.83.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:d9:2d:24:8c:af:16:36:a0:1b:89:3f:48:f5:05:90:25:27:a5:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Validity Not Before: Dec 25 17:50:32 2025 GMT Not After : Dec 24 17:55:32 2026 GMT Subject: CN=5F5B8BFC8D953015C096A7B8EEE44AE4F7F45DE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5e:dc:8c:d8:a2:ce:9e:be:a5:f0:51:e9:a4: 66:95:43:ed:dd:17:be:a5:66:af:b2:b0:ef:53:c0: ab:81:b8:b7:45:29:43:1c:b6:7b:b2:a8:1d:65:3c: 0e:11:26:81:e2:e8:07:be:67:a6:ad:ca:ce:56:e9: b3:30:8d:5b:b3:15:4b:56:65:6f:01:77:4e:fb:f2: d7:d1:61:e4:89:49:99:12:97:c3:05:55:b9:a0:f6: 4c:70:13:37:54:66:e1:b1:74:a8:f1:b9:1a:89:cc: 44:dd:5d:88:2a:fe:76:22:61:80:f0:3e:9b:2e:0c: 03:27:29:85:2b:a3:0a:33:25:8b:8e:4d:29:c9:37: c8:4d:12:f4:d3:c0:6f:64:10:4f:76:ab:e8:24:51: 4a:45:6b:60:29:b1:67:2c:8e:51:73:00:27:43:38: cd:99:b9:26:5f:74:7a:20:e3:b0:e5:9f:5c:21:69: e0:36:15:29:32:08:1d:df:6a:17:81:8a:1a:51:97: d8:78:5c:7e:d6:1c:b1:c4:76:82:13:c9:9d:fc:2b: 42:1f:a9:ad:6a:bd:a3:94:26:d1:b2:70:36:3c:17: 26:fe:10:49:fa:5b:c2:90:5f:af:5a:d9:d8:87:df: 3e:2b:93:a3:4b:07:9b:fa:45:73:c2:e6:cd:0d:a5: 11:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5B:8B:FC:8D:95:30:15:C0:96:A7:B8:EE:E4:4A:E4:F7:F4:5D:E0 X509v3 Authority Key Identifier: keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235352e302f32342d3234203d3e20333937333733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.255.0/24 Signature Algorithm: sha256WithRSAEncryption 29:7e:a4:a5:6f:9e:8f:08:08:e6:7d:fd:1d:5b:f6:86:ce:14: 8a:66:52:25:27:d1:73:8b:00:8e:2c:17:b4:c2:f0:fd:e9:67: c2:0f:f4:ce:44:b2:78:ce:4f:4f:c1:fa:2c:12:db:09:43:1c: 80:10:4b:41:ce:3e:49:50:de:5c:2d:38:85:f4:43:2f:96:4f: 32:c6:62:2c:c9:c4:3b:f7:71:87:2f:56:76:52:3f:51:15:9b: 2f:b7:64:19:53:07:14:f8:36:33:6a:fa:ab:0b:b4:4a:dd:96: a5:37:03:4a:b0:e6:e6:91:2c:99:b7:62:22:a6:50:5e:ed:e7: ac:6c:a1:51:d3:30:d1:1b:97:f4:35:78:67:99:2b:8b:ef:7b: 3f:2a:70:8c:c3:9f:73:9f:0e:7d:24:2c:06:91:55:c6:1d:83: b2:60:91:85:e9:f5:43:f5:fa:4a:03:da:5b:df:6e:d3:25:19: 24:4a:d0:57:73:13:dd:81:77:31:25:74:3c:71:24:fa:16:04: e2:e3:0d:2d:d2:70:89:6f:66:b6:4a:c6:54:b0:02:62:09:2e: e6:bd:87:1b:f4:dd:a1:b4:1f:fc:24:53:06:08:04:6c:cc:72: 25:19:e4:b2:61:af:32:74:2a:b8:3d:3c:fd:65:59:b9:f6:7d: 9f:cd:2e:f5 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUW9ktJIyvFjagG4k/SPUFkCUnpeYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy NjllYjNkNjAeFw0yNTEyMjUxNzUwMzJaFw0yNjEyMjQxNzU1MzJaMDMxMTAvBgNV BAMTKDVGNUI4QkZDOEQ5NTMwMTVDMDk2QTdCOEVFRTQ0QUU0RjdGNDVERTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTXtyM2KLOnr6l8FHppGaVQ+3d F76lZq+ysO9TwKuBuLdFKUMctnuyqB1lPA4RJoHi6Ae+Z6atys5W6bMwjVuzFUtW ZW8Bd0778tfRYeSJSZkSl8MFVbmg9kxwEzdUZuGxdKjxuRqJzETdXYgq/nYiYYDw PpsuDAMnKYUrowozJYuOTSnJN8hNEvTTwG9kEE92q+gkUUpFa2ApsWcsjlFzACdD OM2ZuSZfdHog47Dln1whaeA2FSkyCB3faheBihpRl9h4XH7WHLHEdoITyZ38K0If qa1qvaOUJtGycDY8Fyb+EEn6W8KQX69a2diH3z4rk6NLB5v6RXPC5s0NpRFBAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUX1uL/I2VMBXAlqe47uRK5Pf0XeAwHwYDVR0j BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0 MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh ZXM5WS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUt NTExMC00MjU3LTk0ZWYtNGQyYjQzODg0MDQwLzAvMzczNzJlMzgzMzJlMzIzNTM1 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM3MzMzNzMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA TVP/MA0GCSqGSIb3DQEBCwUAA4IBAQApfqSlb56PCAjmff0dW/aGzhSKZlIlJ9Fz iwCOLBe0wvD96WfCD/TORLJ4zk9PwfosEtsJQxyAEEtBzj5JUN5cLTiF9EMvlk8y xmIsycQ793GHL1Z2Uj9RFZsvt2QZUwcU+DYzavqrC7RK3ZalNwNKsObmkSyZt2Ii plBe7eesbKFR0zDRG5f0NXhnmSuL73s/KnCMw59znw59JCwGkVXGHYOyYJGF6fVD 9fpKA9pb327TJRkkStBXcxPdgXcxJXQ8cST6FgTi4w0t0nCJb2a2SsZUsAJiCS7m vYcb9N2htB/8JFMGCARszHIlGeSyYa8ydCq4PTz9ZVm59n2fzS71 -----END CERTIFICATE-----Generated at Sun Jan 25 20:34:25 2026 by rpki-client