This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3233302e302f32332d3233203d3e20323031333431.roa File: 37372e3233372e3233302e302f32332d3233203d3e20323031333431.roa (raw, json) Hash identifier: BU1Bau3s8T1W8oQ9oz2WVRDljXuQx5tVAUexSabsTU4= Subject key identifier: F9:83:FB:DE:A7:B0:9D:85:69:FC:37:38:0A:D3:57:78:72:65:96:E4 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 4F045ED558D540D261329070121AE47EE3515498 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3233302e302f32332d3233203d3e20323031333431.roa Signing time: Mon 29 Dec 2025 09:50:47 +0000 ROA not before: Mon 29 Dec 2025 09:45:47 +0000 ROA not after: Mon 28 Dec 2026 09:50:47 +0000 asID: 201341 IP address blocks: 77.237.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:04:5e:d5:58:d5:40:d2:61:32:90:70:12:1a:e4:7e:e3:51:54:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:47 2025 GMT Not After : Dec 28 09:50:47 2026 GMT Subject: CN=F983FBDEA7B09D8569FC37380AD35778726596E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:03:00:83:b4:ac:a2:d4:05:4e:4a:a7:48:39: 4b:7c:c7:3e:71:1f:1d:82:50:71:a1:cf:ae:8e:2c: 1c:32:07:1a:bc:59:4e:da:fa:37:80:6a:a4:b1:3b: 19:90:14:8d:65:6b:fa:d6:ea:b3:b8:c4:ae:9b:76: f4:8a:ac:7f:cc:1e:b8:f0:23:c9:14:8c:77:c0:69: 2c:ba:3b:43:44:ad:91:1a:f0:cc:08:c7:9d:47:26: 7a:2b:8d:69:a5:20:ec:b1:44:cd:3c:0b:47:35:8f: 46:cc:eb:ef:4a:ec:fa:58:1c:a6:31:5d:4f:d4:1f: 03:b4:44:de:87:d5:af:0c:70:46:e7:d4:5e:38:04: 7c:a2:7f:9a:fb:a2:2a:a0:b7:3f:dc:c4:f0:38:d3: 3a:ad:a0:73:cf:f3:50:cb:b2:6f:ce:97:0a:92:4c: 8a:18:98:6f:ca:67:37:67:33:60:5c:3f:d4:54:21: 0e:74:09:a7:78:b2:f5:21:fd:be:a6:2c:16:fb:40: 76:ae:e2:35:10:5f:36:15:4f:7e:f9:fd:d8:e1:b6: bf:a4:65:3a:1a:21:28:1a:6e:d0:85:43:f8:89:f5: 1e:b2:57:50:d7:dd:b1:ef:61:e9:3c:38:b4:69:af: 76:c6:c9:7e:88:e2:2d:59:5a:b4:c9:28:a8:6d:d7: fe:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:83:FB:DE:A7:B0:9D:85:69:FC:37:38:0A:D3:57:78:72:65:96:E4 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3233302e302f32332d3233203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.237.230.0/23 Signature Algorithm: sha256WithRSAEncryption 46:37:3e:ab:df:d0:8d:67:fa:02:e3:6e:c1:74:64:10:d6:98: 50:a2:03:99:bb:40:94:cd:85:fc:c5:8a:74:40:20:10:a9:53: 32:67:d8:47:7b:9a:4c:9d:f8:49:54:d3:eb:f6:78:1f:15:a8: 72:27:ec:3b:2d:8d:57:73:29:5e:9a:a2:ea:f2:9b:b7:be:84: 3c:cf:61:40:06:29:d6:10:60:4f:67:36:ae:28:35:72:37:6f: e5:d5:27:ec:db:eb:a0:07:50:bf:bc:4a:75:4a:93:80:12:c4: 95:be:08:5d:9d:67:53:44:b1:0a:d0:7a:c7:79:58:4e:23:04: 37:2e:4d:3c:01:de:da:84:b8:98:ad:de:0b:8f:2d:9a:cf:3f: ae:8b:27:fd:d6:94:ea:9f:b2:75:65:ee:a0:ff:80:04:85:bb: 2d:64:ff:a5:9b:61:c7:ca:88:a3:15:77:c2:b9:f4:0f:bd:3a: 2c:42:fa:bb:bd:72:ed:e1:e9:34:d9:fa:aa:82:bc:c1:80:a0: 8a:18:71:02:de:00:06:6f:d4:a8:d0:6f:e8:46:ab:2d:8c:2d: 5e:79:49:3d:19:06:f0:05:f6:82:5e:93:1b:da:1b:76:e1:7c: 4f:48:49:ef:e2:06:61:0d:47:10:63:0a:80:1e:82:71:72:2b: 69:0d:e7:a8 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUTwRe1VjVQNJhMpBwEhrkfuNRVJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDdaFw0yNjEyMjgwOTUwNDdaMDMxMTAvBgNV BAMTKEY5ODNGQkRFQTdCMDlEODU2OUZDMzczODBBRDM1Nzc4NzI2NTk2RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMAwCDtKyi1AVOSqdIOUt8xz5x Hx2CUHGhz66OLBwyBxq8WU7a+jeAaqSxOxmQFI1la/rW6rO4xK6bdvSKrH/MHrjw I8kUjHfAaSy6O0NErZEa8MwIx51HJnorjWmlIOyxRM08C0c1j0bM6+9K7PpYHKYx XU/UHwO0RN6H1a8McEbn1F44BHyif5r7oiqgtz/cxPA40zqtoHPP81DLsm/OlwqS TIoYmG/KZzdnM2BcP9RUIQ50Cad4svUh/b6mLBb7QHau4jUQXzYVT375/djhtr+k ZToaISgabtCFQ/iJ9R6yV1DX3bHvYek8OLRpr3bGyX6I4i1ZWrTJKKht1/5BAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU+YP73qewnYVp/Dc4CtNXeHJlluQwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzczNzJlMzIzMzM3MmUzMjMz MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjMwMzEzMzM0MzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFN7eYwDQYJKoZIhvcNAQELBQADggEBAEY3Pqvf0I1n+gLjbsF0ZBDWmFCiA5m7 QJTNhfzFinRAIBCpUzJn2Ed7mkyd+ElU0+v2eB8VqHIn7DstjVdzKV6aourym7e+ hDzPYUAGKdYQYE9nNq4oNXI3b+XVJ+zb66AHUL+8SnVKk4ASxJW+CF2dZ1NEsQrQ esd5WE4jBDcuTTwB3tqEuJit3guPLZrPP66LJ/3WlOqfsnVl7qD/gASFuy1k/6Wb YcfKiKMVd8K59A+9OixC+ru9cu3h6TTZ+qqCvMGAoIoYcQLeAAZv1KjQb+hGqy2M LV55ST0ZBvAF9oJekxvaG3bhfE9ISe/iBmENRxBjCoAegnFyK2kN56g= -----END CERTIFICATE-----Generated at Sun Jan 25 08:56:55 2026 by rpki-client