This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38372e302f32342d3234203d3e20313336373837.roa
File: 37372e3234332e38372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: CZT425goEATmMTac6InRrCu8O434XidgFSMog1ilSo0=
Subject key identifier: 9D:95:22:E8:F8:E3:74:9E:28:71:FE:A6:10:87:CC:6D:46:EE:F5:80
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 176758770589C51CA0E0B593619DF6EA68945C10
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 28 Nov 2025 11:49:42 +0000
ROA not before: Fri 28 Nov 2025 11:44:42 +0000
ROA not after: Fri 27 Nov 2026 11:49:42 +0000
asID: 136787
IP address blocks: 77.243.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 08:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:67:58:77:05:89:c5:1c:a0:e0:b5:93:61:9d:f6:ea:68:94:5c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 28 11:44:42 2025 GMT
Not After : Nov 27 11:49:42 2026 GMT
Subject: CN=9D9522E8F8E3749E2871FEA61087CC6D46EEF580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:7f:0e:15:91:a9:f6:8f:e2:86:ed:80:06:
d5:9c:6b:86:6f:d2:90:00:98:af:5c:8b:76:1e:dc:
fd:43:08:a2:c9:e8:f2:14:4c:c8:e1:48:34:e7:cd:
3c:5d:42:8d:9f:d6:02:86:e6:a2:30:f0:31:97:ac:
9a:5d:a0:77:2d:94:9b:94:2a:6a:1a:17:98:74:d7:
c0:43:c4:07:56:b2:f7:2c:b8:08:3f:62:19:df:87:
0a:78:c3:96:78:aa:2b:67:9c:bb:44:48:d7:18:4e:
e4:05:a2:d2:05:4c:5b:e1:aa:e2:b7:59:61:ed:34:
6c:80:3b:72:b5:48:b9:29:b1:28:ef:9c:b2:27:0a:
0c:2a:ce:1a:9f:dd:f0:01:cf:42:0c:06:c6:63:bd:
7b:4c:59:ba:12:42:7b:be:33:30:00:d1:2b:9f:26:
49:08:8d:29:01:e2:cf:97:d3:11:4a:4a:2c:37:bf:
b6:7c:f4:37:b3:5d:35:06:70:24:24:2a:fb:04:c4:
61:3b:78:e7:7d:e0:d3:95:3b:77:64:69:01:b2:65:
56:46:60:f5:b9:20:7f:e7:7b:82:ac:e8:a2:d6:60:
16:68:71:a3:ee:29:9f:31:27:01:97:5f:d3:63:f4:
2f:4c:11:b5:f1:b4:ff:11:30:d6:af:60:ac:68:c3:
4c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:95:22:E8:F8:E3:74:9E:28:71:FE:A6:10:87:CC:6D:46:EE:F5:80
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.87.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:b0:70:25:b5:9a:a2:f9:81:d9:a7:60:bc:dc:0b:10:57:48:
87:3c:8e:2b:a2:e2:5b:26:a3:56:6d:68:48:5f:f8:06:49:18:
b5:4c:99:db:38:c9:6e:32:bb:c6:98:08:02:1e:7e:f0:85:74:
72:96:b7:91:87:7d:ce:08:a0:3b:25:70:88:5e:92:ba:4f:91:
09:77:c9:1f:53:56:a4:9e:62:ad:aa:f4:ee:11:40:0f:07:cf:
e0:fc:b2:1e:0e:1e:3b:a6:c8:a9:bb:fa:8c:4a:66:18:9d:2f:
f5:d3:81:c9:07:d2:b2:c4:5d:13:52:1d:3e:5c:c2:ff:4c:d0:
e9:3a:e5:78:88:9a:1a:b6:4f:a5:40:cb:eb:d2:99:9f:da:a6:
d2:f7:fe:f7:bc:3b:78:e2:b7:f8:3f:93:8a:fe:c8:59:b5:d7:
8c:d0:4f:d0:25:41:2f:d6:8a:c4:e4:c9:d9:06:21:0c:f4:f1:
bf:95:80:7b:e7:32:da:98:83:d3:36:8e:c4:42:e5:60:0c:60:
50:6e:bf:a4:a0:ad:56:93:bf:52:1b:72:4e:9f:78:c0:2c:c6:
23:08:b7:62:11:65:dc:81:61:01:35:86:7f:0b:25:dc:ef:5f:
e2:71:e4:5e:a2:b3:f7:f7:02:b3:20:2a:da:11:49:b8:6c:e0:
70:b2:4c:f2
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUF2dYdwWJxRyg4LWTYZ326miUXBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDJaFw0yNjExMjcxMTQ5NDJaMDMxMTAvBgNV
BAMTKDlEOTUyMkU4RjhFMzc0OUUyODcxRkVBNjEwODdDQzZENDZFRUY1ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFSn8OFZGp9o/ihu2ABtWca4Zv
0pAAmK9ci3Ye3P1DCKLJ6PIUTMjhSDTnzTxdQo2f1gKG5qIw8DGXrJpdoHctlJuU
KmoaF5h018BDxAdWsvcsuAg/Yhnfhwp4w5Z4qitnnLtESNcYTuQFotIFTFvhquK3
WWHtNGyAO3K1SLkpsSjvnLInCgwqzhqf3fABz0IMBsZjvXtMWboSQnu+MzAA0Suf
JkkIjSkB4s+X0xFKSiw3v7Z89DezXTUGcCQkKvsExGE7eOd94NOVO3dkaQGyZVZG
YPW5IH/ne4Ks6KLWYBZocaPuKZ8xJwGXX9Nj9C9MEbXxtP8RMNavYKxow0z/AgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUnZUi6PjjdJ4ocf6mEIfMbUbu9YAwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNzM3MmUzMjM0MzMy
ZTM4MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABN81cwDQYJKoZIhvcNAQELBQADggEBAOGwcCW1mqL5gdmnYLzcCxBXSIc8
jiui4lsmo1ZtaEhf+AZJGLVMmds4yW4yu8aYCAIefvCFdHKWt5GHfc4IoDslcIhe
krpPkQl3yR9TVqSeYq2q9O4RQA8Hz+D8sh4OHjumyKm7+oxKZhidL/XTgckH0rLE
XRNSHT5cwv9M0Ok65XiImhq2T6VAy+vSmZ/aptL3/ve8O3jit/g/k4r+yFm114zQ
T9AlQS/WisTkydkGIQz08b+VgHvnMtqYg9M2jsRC5WAMYFBuv6SgrVaTv1Ibck6f
eMAsxiMIt2IRZdyBYQE1hn8LJdzvX+Jx5F6is/f3ArMgKtoRSbhs4HCyTPI=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:40:07 2025 by rpki-client