This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e37332e32302e302f32322d3232203d3e20323033303631.roa File: 37372e37332e32302e302f32322d3232203d3e20323033303631.roa (raw, json) Hash identifier: r3bPNeWMkw8nn1NsjXgrty2MVfUct4U8xPYqgBGpdCM= Subject key identifier: 55:C5:66:8A:05:9B:E1:68:1D:39:FE:8D:17:43:19:A5:C1:30:45:B4 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 19232C30FF4C09183D9D25A0CAE76E11E263BF8A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e37332e32302e302f32322d3232203d3e20323033303631.roa Signing time: Fri 28 Nov 2025 11:49:49 +0000 ROA not before: Fri 28 Nov 2025 11:44:49 +0000 ROA not after: Fri 27 Nov 2026 11:49:49 +0000 asID: 203061 IP address blocks: 77.73.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:23:2c:30:ff:4c:09:18:3d:9d:25:a0:ca:e7:6e:11:e2:63:bf:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:49 2025 GMT Not After : Nov 27 11:49:49 2026 GMT Subject: CN=55C5668A059BE1681D39FE8D174319A5C13045B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b5:66:f6:ce:88:a6:a5:7e:8d:1a:25:be:ca: 15:5a:93:c1:49:40:e0:c5:2e:21:79:6b:43:1d:44: 17:52:37:34:c5:04:51:4c:87:44:1a:90:06:bc:41: b4:84:c4:4f:6b:d5:04:a0:55:2f:1d:1f:2f:14:4a: 16:d5:bf:1f:0c:7a:e9:e9:02:b4:9c:b5:55:eb:0d: cb:3b:0c:98:06:08:a4:4d:90:59:b2:a1:be:2a:0c: d5:bb:f0:93:5e:6d:a1:90:f1:34:a4:2e:26:a1:7a: 1d:a8:ce:fb:12:f8:9a:31:2a:76:f2:69:a0:1d:aa: 76:32:60:bc:cf:35:67:ad:c8:4e:28:cf:42:8d:01: bd:86:8f:75:52:e4:e3:d9:be:51:66:89:92:97:3a: ff:63:14:95:13:de:1a:f1:5f:f4:b5:91:bb:c5:2f: f0:02:01:45:bd:45:f2:f3:20:1f:72:37:23:9d:a5: 35:28:2d:99:be:5c:a4:68:4b:63:1d:9f:3e:48:71: b0:33:7a:c9:2a:18:72:a8:4f:fe:64:a0:be:82:e5: ba:45:e4:67:03:c8:d3:d2:08:0d:72:91:a6:5b:97: 2f:e1:4f:97:f8:27:57:37:2c:c2:1b:d5:c9:22:c9: b6:0e:a0:e9:0c:8a:ab:e2:31:08:6f:34:0c:78:82: 54:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C5:66:8A:05:9B:E1:68:1D:39:FE:8D:17:43:19:A5:C1:30:45:B4 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e37332e32302e302f32322d3232203d3e20323033303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.73.20.0/22 Signature Algorithm: sha256WithRSAEncryption 31:87:ef:02:a0:f7:1a:bb:4b:e5:ca:f0:c9:fb:8e:24:4d:11: e4:ab:5e:2d:49:d7:4b:67:e1:16:26:13:d3:33:5e:29:51:5e: c5:eb:8b:bf:98:35:e2:c5:09:23:1e:97:4d:fe:b3:87:a8:66: 07:c5:ca:93:f0:d8:3d:04:2a:b3:81:38:fc:23:99:ff:53:32: 47:6f:e1:2d:a3:1d:79:a3:18:7c:4d:14:fd:42:9a:f4:d2:bf: 2b:38:b4:86:bf:4e:44:f9:1e:0d:40:ae:c1:6a:7d:d8:1d:3f: 3f:6c:bd:7a:22:3c:51:16:23:0d:0b:de:d8:47:89:fc:9d:76: 1f:13:0b:bc:52:d3:1c:71:1b:12:e7:99:08:4f:79:50:c7:e1: 85:98:eb:3a:30:07:9a:61:ab:4c:36:ca:5f:73:a9:0d:ee:12: 68:26:9c:ef:84:b7:74:60:1d:ca:ee:00:cb:bf:39:53:12:41: ed:5e:29:58:71:a7:71:82:20:82:0e:70:05:97:f0:a5:6e:9b: 16:7d:1d:d9:92:e4:8e:ff:e3:ae:db:eb:56:19:5f:ab:6c:d6: 6f:82:63:02:3c:61:46:14:32:ff:18:33:19:02:12:3f:53:17: 96:a3:23:11:2a:97:8e:91:5b:d9:b5:f9:49:8e:2f:4d:b6:82: cc:bd:74:1c -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUGSMsMP9MCRg9nSWgyuduEeJjv4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDlaFw0yNjExMjcxMTQ5NDlaMDMxMTAvBgNV BAMTKDU1QzU2NjhBMDU5QkUxNjgxRDM5RkU4RDE3NDMxOUE1QzEzMDQ1QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZtWb2zoimpX6NGiW+yhVak8FJ QODFLiF5a0MdRBdSNzTFBFFMh0QakAa8QbSExE9r1QSgVS8dHy8UShbVvx8Meunp ArSctVXrDcs7DJgGCKRNkFmyob4qDNW78JNebaGQ8TSkLiaheh2ozvsS+JoxKnby aaAdqnYyYLzPNWetyE4oz0KNAb2Gj3VS5OPZvlFmiZKXOv9jFJUT3hrxX/S1kbvF L/ACAUW9RfLzIB9yNyOdpTUoLZm+XKRoS2Mdnz5IcbAzeskqGHKoT/5koL6C5bpF 5GcDyNPSCA1ykaZbly/hT5f4J1c3LMIb1ckiybYOoOkMiqviMQhvNAx4glSZAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUVcVmigWb4WgdOf6NF0MZpcEwRbQwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNzM3MmUzNzMzMmUz MjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMDMzMzAzNjMxLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCTUkUMA0GCSqGSIb3DQEBCwUAA4IBAQAxh+8CoPcau0vlyvDJ+44kTRHkq14t SddLZ+EWJhPTM14pUV7F64u/mDXixQkjHpdN/rOHqGYHxcqT8Ng9BCqzgTj8I5n/ UzJHb+Etox15oxh8TRT9Qpr00r8rOLSGv05E+R4NQK7Ban3YHT8/bL16IjxRFiMN C97YR4n8nXYfEwu8UtMccRsS55kIT3lQx+GFmOs6MAeaYatMNspfc6kN7hJoJpzv hLd0YB3K7gDLvzlTEkHtXilYcadxgiCCDnAFl/ClbpsWfR3ZkuSO/+Ou2+tWGV+r bNZvgmMCPGFGFDL/GDMZAhI/UxeWoyMRKpeOkVvZtflJji9NtoLMvXQc -----END CERTIFICATE-----Generated at Sat Dec 6 19:03:47 2025 by rpki-client