This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38342e302f32342d3234203d3e20313336373837.roa
File: 37372e3234332e38342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: mRtlk4oGy284fSAWk6kc/geUPWkFZNfx8zUafwCDfj4=
Subject key identifier: 11:15:5C:50:C7:D3:9A:75:32:15:08:9A:DC:04:88:E1:BC:4B:2A:D8
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 075ED78B851BF926A2B22D4F6BC10F24D4DA88D8
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 28 Nov 2025 11:49:25 +0000
ROA not before: Fri 28 Nov 2025 11:44:25 +0000
ROA not after: Fri 27 Nov 2026 11:49:25 +0000
asID: 136787
IP address blocks: 77.243.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 08:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:5e:d7:8b:85:1b:f9:26:a2:b2:2d:4f:6b:c1:0f:24:d4:da:88:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 28 11:44:25 2025 GMT
Not After : Nov 27 11:49:25 2026 GMT
Subject: CN=11155C50C7D39A753215089ADC0488E1BC4B2AD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:61:b3:b3:d3:eb:59:d4:c6:3c:bd:65:9e:
a9:3a:06:95:dc:67:df:17:94:38:db:ac:8e:90:b2:
b3:12:50:84:ac:ef:26:f7:da:da:ad:f6:44:e2:0e:
92:38:d8:34:0d:45:96:26:9f:38:b6:a5:8e:88:ae:
ad:56:54:4f:da:23:03:ba:aa:44:d5:59:79:0f:85:
3d:3a:c3:15:7c:42:8f:30:c6:33:cf:a1:31:4f:f9:
93:66:17:89:28:4b:f5:a4:d5:68:40:79:12:85:21:
60:e8:5d:8d:ec:ef:d0:5c:61:95:f6:dd:3c:cb:43:
11:21:a3:ee:ec:cf:71:84:7a:0e:6f:80:b1:8e:44:
8a:e2:39:cd:2a:09:35:37:37:e1:56:c9:e8:b3:5c:
97:14:7f:51:01:99:2b:ac:c2:d7:0d:03:1b:65:9e:
f0:63:ff:f8:49:1d:7f:25:b2:c0:49:0e:4f:c4:71:
d5:6c:b4:4d:18:b4:b4:5a:3b:04:44:0d:26:07:53:
57:73:5d:00:29:a4:77:1f:90:9f:b1:d4:fb:21:3b:
12:cf:fa:47:9d:f0:6a:6e:cc:e2:99:cd:2f:31:30:
34:f4:66:93:b3:ea:03:0f:05:c4:78:11:59:c7:b9:
1b:d1:06:bf:77:04:4b:02:ca:09:10:9f:95:94:c1:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:15:5C:50:C7:D3:9A:75:32:15:08:9A:DC:04:88:E1:BC:4B:2A:D8
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.84.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a0:ed:3c:08:e5:2b:2a:9d:df:be:ac:6b:1f:a7:24:18:20:
d1:84:c0:4b:8c:7f:a6:3d:97:b2:fb:0b:6b:31:d5:7a:bd:ed:
26:89:6e:d1:34:2e:16:f4:1f:32:17:c2:30:81:c4:5c:6f:96:
14:09:bd:60:a4:4d:26:9a:b2:fd:87:db:ad:d3:67:7f:8c:d2:
6f:bf:54:40:91:95:99:18:14:cf:e0:c6:d2:39:57:03:d4:b4:
6b:46:16:0c:9f:bf:7b:30:f4:29:b7:e5:45:78:b8:d7:be:39:
10:a1:ed:b4:b0:10:11:d2:a4:d7:78:9a:71:4e:da:2e:2e:97:
f4:8d:34:ca:cd:2d:92:43:3c:03:ac:82:c5:c2:d4:ce:b7:32:
a3:a1:86:b3:59:9e:36:fe:f6:ac:52:88:66:80:4f:d6:72:7d:
b7:57:a5:07:d9:5c:a4:e9:c0:cc:eb:97:fe:47:81:06:ed:fb:
02:7c:69:f4:f7:48:79:b1:4d:3e:7b:a5:54:9e:88:e2:33:e4:
68:74:4e:c2:00:ae:54:b0:7f:c4:d3:cd:26:f3:40:24:9c:1a:
dc:4e:ec:f5:c6:c6:15:a7:75:cc:67:48:5c:fa:e3:a5:d7:60:
74:fa:51:ae:8f:86:fe:a8:40:4e:b1:eb:11:77:04:8b:13:3e:
b8:7b:08:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:47:48 2025 by rpki-client