This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3232392e302f32342d3234203d3e20313336373837.roa File: 37372e3233372e3232392e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: f3Uh5vvqU3gHc4Gx3Xl25aK6p9WDAU+61SNGxze3TA8= Subject key identifier: D5:DD:34:0D:36:EC:05:1C:08:D1:1F:85:60:D6:AE:41:3A:13:1E:0D Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 4FEDCBA41ED8A1E9B62305EFEC6DAC41B6732338 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3232392e302f32342d3234203d3e20313336373837.roa Signing time: Tue 02 Dec 2025 19:50:12 +0000 ROA not before: Tue 02 Dec 2025 19:45:12 +0000 ROA not after: Tue 01 Dec 2026 19:50:12 +0000 asID: 136787 IP address blocks: 77.237.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ed:cb:a4:1e:d8:a1:e9:b6:23:05:ef:ec:6d:ac:41:b6:73:23:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 2 19:45:12 2025 GMT Not After : Dec 1 19:50:12 2026 GMT Subject: CN=D5DD340D36EC051C08D11F8560D6AE413A131E0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:84:8c:fe:db:e7:c8:82:d5:a8:6b:28:25:96: f4:13:3a:c4:98:1b:fb:cd:47:a9:f8:40:b1:98:9b: 26:25:81:19:22:a9:24:10:e0:13:c1:11:49:9a:33: c2:65:af:79:b6:64:9d:0c:4b:02:25:18:57:b3:74: 6e:47:ab:3e:19:15:22:00:4b:44:15:64:42:84:d8: 55:67:21:a1:ee:10:96:c6:8f:91:94:b5:d7:26:04: 8a:fb:dd:d7:71:31:f9:b9:84:ea:8f:95:6f:01:90: 2a:5d:68:14:7b:ad:fa:ae:2d:8a:56:e4:cd:88:e8: 86:27:c9:01:e4:e0:28:d5:ef:aa:bf:cc:bc:46:91: 2a:1f:95:85:19:16:f9:8b:a7:36:e2:0d:f4:dd:42: 20:a7:ef:d3:7e:83:f0:b9:ee:31:f6:31:23:86:67: a1:3e:dc:ca:39:25:a1:fd:4b:eb:f2:f4:a1:ad:7a: cd:f7:28:1a:63:30:f1:b9:87:c6:97:3c:49:75:60: 7d:4c:e6:83:4e:a2:d7:7b:18:c2:f8:6e:ec:8f:ab: 22:1c:cc:85:3a:f4:8a:0b:a7:27:70:0f:41:c8:85: a3:43:49:cf:f7:0f:28:4f:f5:07:28:b9:73:66:f3: 5b:b3:96:61:c0:d1:32:22:57:ff:e5:36:68:2e:46: c1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DD:34:0D:36:EC:05:1C:08:D1:1F:85:60:D6:AE:41:3A:13:1E:0D X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3232392e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.237.229.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:ec:76:8d:14:ae:d2:43:9c:6e:21:ae:3a:b8:50:f3:83:fe: 71:50:6a:66:f2:01:5c:07:ae:77:c3:20:09:a7:38:0e:a3:1d: a2:c6:c5:06:2a:5f:48:00:53:53:60:6c:db:09:3a:7d:4f:da: 85:a9:15:50:65:e9:d4:1e:5e:cb:c4:6f:01:3c:ba:4e:c0:98: 61:36:f4:87:2a:53:2d:05:8b:e7:5b:f3:28:d3:46:0f:aa:15: 97:4d:1e:3e:78:9b:ef:c4:b9:31:d9:ac:3b:50:d4:5d:4e:55: 07:0b:d8:44:74:0e:4e:e4:ff:1b:04:8b:d3:e8:89:0f:4a:c4: b7:0a:79:fe:00:56:44:91:51:19:d1:77:26:d4:a1:80:32:70: 59:46:2b:fe:e1:fc:c0:59:50:9b:0a:18:3d:f3:c8:82:57:08: 45:74:f6:c3:b7:9a:1f:62:65:54:61:2e:e3:e3:c6:f6:3d:02: 95:be:a5:10:8c:c1:8d:49:c7:8a:08:82:54:58:bf:78:2c:a9: 6d:0c:90:0b:0e:f4:2f:71:6f:c7:53:de:eb:64:73:ad:3b:7e: 12:58:63:91:d7:0a:a1:79:50:1a:1d:1c:8b:de:9f:e4:27:f8: 88:09:0f:82:71:00:d1:0b:3f:c2:d3:17:65:7d:c1:d6:ef:ca: 1b:bc:ec:72 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUT+3LpB7Yoem2IwXv7G2sQbZzIzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMDIxOTQ1MTJaFw0yNjEyMDExOTUwMTJaMDMxMTAvBgNV BAMTKEQ1REQzNDBEMzZFQzA1MUMwOEQxMUY4NTYwRDZBRTQxM0ExMzFFMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCehIz+2+fIgtWoaygllvQTOsSY G/vNR6n4QLGYmyYlgRkiqSQQ4BPBEUmaM8Jlr3m2ZJ0MSwIlGFezdG5Hqz4ZFSIA S0QVZEKE2FVnIaHuEJbGj5GUtdcmBIr73ddxMfm5hOqPlW8BkCpdaBR7rfquLYpW 5M2I6IYnyQHk4CjV76q/zLxGkSoflYUZFvmLpzbiDfTdQiCn79N+g/C57jH2MSOG Z6E+3Mo5JaH9S+vy9KGtes33KBpjMPG5h8aXPEl1YH1M5oNOotd7GML4buyPqyIc zIU69IoLpydwD0HIhaNDSc/3DyhP9QcouXNm81uzlmHA0TIiV//lNmguRsFRAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU1d00DTbsBRwI0R+FYNauQToTHg0wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzczNzJlMzIzMzM3MmUzMjMy MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABN7eUwDQYJKoZIhvcNAQELBQADggEBAG/sdo0UrtJDnG4hrjq4UPOD/nFQamby AVwHrnfDIAmnOA6jHaLGxQYqX0gAU1NgbNsJOn1P2oWpFVBl6dQeXsvEbwE8uk7A mGE29IcqUy0Fi+db8yjTRg+qFZdNHj54m+/EuTHZrDtQ1F1OVQcL2ER0Dk7k/xsE i9PoiQ9KxLcKef4AVkSRURnRdybUoYAycFlGK/7h/MBZUJsKGD3zyIJXCEV09sO3 mh9iZVRhLuPjxvY9ApW+pRCMwY1Jx4oIglRYv3gsqW0MkAsO9C9xb8dT3utkc607 fhJYY5HXCqF5UBodHIven+Qn+IgJD4JxANELP8LTF2V9wdbvyhu87HI= -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:37 2025 by rpki-client