This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e37382e37332e302f32342d3234203d3e20313336373837.roa File: 37372e37382e37332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: nOl47fLTEr90IiKC5nCpVdnxF0cjPbYXUFPsfoI7ecI= Subject key identifier: 8E:CC:56:38:F5:C3:CF:65:DF:D5:B3:0D:F7:A3:96:40:02:FB:BE:9B Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 49D44E92F1D4F5D1D570D9449E6CBCEF43C4DB07 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e37382e37332e302f32342d3234203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:51:03 +0000 ROA not before: Mon 29 Dec 2025 09:46:03 +0000 ROA not after: Mon 28 Dec 2026 09:51:03 +0000 asID: 136787 IP address blocks: 77.78.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d4:4e:92:f1:d4:f5:d1:d5:70:d9:44:9e:6c:bc:ef:43:c4:db:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:46:03 2025 GMT Not After : Dec 28 09:51:03 2026 GMT Subject: CN=8ECC5638F5C3CF65DFD5B30DF7A3964002FBBE9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2a:79:d7:96:f2:70:0c:fc:d9:1e:0b:a2:32: 9e:94:4b:eb:4b:bd:35:c9:9d:68:de:ba:47:f7:10: 99:9e:d8:b4:07:fe:93:69:6d:9e:1a:54:06:e1:b4: f3:8b:81:6a:e3:9e:18:6a:9c:3e:09:09:86:34:32: c0:45:50:55:97:d2:7d:10:05:c3:72:b2:d3:e1:11: 80:a6:61:cd:1a:27:ac:35:3e:ed:7a:6b:0d:90:c1: 94:17:8b:3a:06:7a:57:a9:b7:3e:af:c9:ae:fe:4d: 6d:cb:06:69:97:2e:44:72:e2:60:0b:3f:ef:d3:0c: d5:19:9f:df:96:09:99:31:9c:cb:92:60:ee:db:12: 0e:f0:d3:dc:be:da:41:ab:fb:1f:5f:32:58:50:48: 3b:2a:53:7a:2d:5a:d0:6b:cb:7b:cb:87:43:74:66: 1a:bd:20:99:b7:78:d2:d5:f9:3c:a5:76:ab:82:07: cc:e7:ad:d6:8c:da:72:06:ea:eb:5d:63:14:cd:71: 57:96:f5:34:ff:de:fd:01:cd:61:71:ba:ec:50:73: 89:5a:6b:1f:90:5c:ec:08:35:eb:23:42:ab:ed:9a: cd:63:e1:71:1f:cb:20:c3:79:ff:b0:e1:32:06:42: 67:95:a3:dd:4d:b9:95:a6:70:5e:99:61:6f:f8:5a: cb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:CC:56:38:F5:C3:CF:65:DF:D5:B3:0D:F7:A3:96:40:02:FB:BE:9B X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e37382e37332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.78.73.0/24 Signature Algorithm: sha256WithRSAEncryption 83:37:f8:08:82:1c:ea:17:08:b9:1a:ec:b1:24:7a:5a:67:98: 4c:1a:8c:9d:6c:eb:c9:25:0c:2f:64:19:60:da:d4:79:05:6a: 41:96:ec:30:97:27:e6:85:c9:99:f6:85:32:f0:53:46:fe:67: 3d:5b:51:18:37:35:29:8d:da:f3:7b:8c:bb:8d:66:ca:71:29: d0:56:0e:09:e9:71:81:14:cd:7e:ba:08:00:f7:05:f3:e0:77: 7f:b7:47:7f:a0:d7:f8:0f:42:96:a4:4e:ac:d3:10:64:bd:0e: 5f:e3:76:76:2c:46:e1:fb:e8:e0:76:83:c1:25:72:3f:c9:fb: ad:ae:1a:27:e5:40:55:fc:54:5c:c9:d5:96:77:8d:9f:0e:e6: 7f:fb:4b:d6:c3:46:0c:fc:23:1a:af:e1:aa:d6:e0:68:d8:e8: ef:73:6b:8e:ca:5c:14:2f:97:06:5d:c0:93:05:2c:47:35:f1: 66:22:58:24:f7:c6:d2:3c:b1:f5:d9:3c:03:a7:28:99:41:56: c8:13:01:b0:f7:a7:e1:3a:ad:c3:11:61:c6:56:b0:58:25:c1: 3c:66:41:ec:21:89:ed:80:c3:04:fd:00:22:ac:d0:11:02:18: 87:8b:18:dd:df:c8:a7:aa:d9:5c:f7:45:9e:df:0f:e1:07:ce: 5d:fd:c6:9a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUSdROkvHU9dHVcNlEnmy870PE2wcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ2MDNaFw0yNjEyMjgwOTUxMDNaMDMxMTAvBgNV BAMTKDhFQ0M1NjM4RjVDM0NGNjVERkQ1QjMwREY3QTM5NjQwMDJGQkJFOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkKnnXlvJwDPzZHguiMp6US+tL vTXJnWjeukf3EJme2LQH/pNpbZ4aVAbhtPOLgWrjnhhqnD4JCYY0MsBFUFWX0n0Q BcNystPhEYCmYc0aJ6w1Pu16aw2QwZQXizoGeleptz6vya7+TW3LBmmXLkRy4mAL P+/TDNUZn9+WCZkxnMuSYO7bEg7w09y+2kGr+x9fMlhQSDsqU3otWtBry3vLh0N0 Zhq9IJm3eNLV+TyldquCB8znrdaM2nIG6utdYxTNcVeW9TT/3v0BzWFxuuxQc4la ax+QXOwINesjQqvtms1j4XEfyyDDef+w4TIGQmeVo91NuZWmcF6ZYW/4Wsu5AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUjsxWOPXDz2Xf1bMN96OWQAL7vpswHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzczNzJlMzczODJlMzczMzJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1O STANBgkqhkiG9w0BAQsFAAOCAQEAgzf4CIIc6hcIuRrssSR6WmeYTBqMnWzrySUM L2QZYNrUeQVqQZbsMJcn5oXJmfaFMvBTRv5nPVtRGDc1KY3a83uMu41mynEp0FYO CelxgRTNfroIAPcF8+B3f7dHf6DX+A9ClqROrNMQZL0OX+N2dixG4fvo4HaDwSVy P8n7ra4aJ+VAVfxUXMnVlneNnw7mf/tL1sNGDPwjGq/hqtbgaNjo73NrjspcFC+X Bl3AkwUsRzXxZiJYJPfG0jyx9dk8A6comUFWyBMBsPen4TqtwxFhxlawWCXBPGZB 7CGJ7YDDBP0AIqzQEQIYh4sY3d/Ip6rZXPdFnt8P4QfOXf3Gmg== -----END CERTIFICATE-----Generated at Sun Jan 25 07:18:33 2026 by rpki-client