This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37392e302f32342d3234203d3e20313336373837.roa
File: 352e3130342e37392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Wfm8/JICVWMA0qgVJHzXpZdT0IfrrvSOVPSeeKwTVxU=
Subject key identifier: 8F:28:E7:65:92:F1:B8:0D:3E:FD:E9:02:43:3F:43:13:4C:56:63:18
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6F99AFE20C96B768A57E961E9DA2900FCE0A4F91
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 28 Nov 2025 11:49:34 +0000
ROA not before: Fri 28 Nov 2025 11:44:34 +0000
ROA not after: Fri 27 Nov 2026 11:49:34 +0000
asID: 136787
IP address blocks: 5.104.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 08:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:99:af:e2:0c:96:b7:68:a5:7e:96:1e:9d:a2:90:0f:ce:0a:4f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 28 11:44:34 2025 GMT
Not After : Nov 27 11:49:34 2026 GMT
Subject: CN=8F28E76592F1B80D3EFDE902433F43134C566318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ae:9a:46:8e:3a:df:9c:09:9e:b2:6a:25:58:
9e:cd:61:fd:1a:41:3c:f6:02:25:f1:f8:4c:6e:64:
f1:80:79:03:1a:08:34:ba:c4:7a:fa:1b:ec:6b:f1:
18:ba:9c:44:9c:59:f5:d2:d0:8f:35:22:ef:99:ad:
4a:e0:c5:6c:c7:41:84:03:1a:31:95:31:cb:50:7f:
4d:da:47:41:53:56:ec:11:21:57:3f:9e:a1:87:c8:
f5:d6:f9:f8:ca:96:ee:b5:4d:45:d9:65:d3:3d:45:
df:fe:9f:5e:7b:c1:cb:76:8b:8b:0c:67:15:a5:ab:
e6:88:d9:05:8d:e4:14:c1:ef:1b:59:43:f1:aa:f4:
c5:e2:8a:a8:96:0a:09:bb:b7:5d:fd:58:cd:6a:3c:
e3:3d:18:55:b1:77:26:87:46:d7:df:fb:8e:71:4d:
dc:45:a8:92:c1:60:9c:2d:c0:37:09:dd:50:1c:d2:
fb:80:9f:90:c5:3d:e4:28:57:80:cf:50:de:96:5f:
8e:fe:28:88:3d:f5:35:2a:6f:0b:89:b3:3b:18:7e:
b8:98:af:42:81:43:e6:a4:30:79:fe:35:00:65:28:
7f:dc:a6:ac:8d:69:b0:de:48:2f:65:29:4a:4a:06:
03:ae:bd:5d:d9:46:ca:0d:83:20:22:02:50:a7:88:
86:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:28:E7:65:92:F1:B8:0D:3E:FD:E9:02:43:3F:43:13:4C:56:63:18
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.79.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:02:98:a7:2f:07:84:f1:f7:e4:61:b4:7b:ce:b8:43:ea:4f:
bd:60:c6:dc:e6:6b:cd:50:9b:e3:18:73:c9:c9:0c:67:61:4d:
6c:44:79:4a:54:f4:21:1c:47:a9:71:16:15:9c:e9:43:3c:76:
b9:ee:93:44:e8:4b:15:8b:fc:0b:8d:63:d4:f4:1d:5e:f8:d2:
d9:ba:33:b8:58:ed:5a:2d:56:7b:db:5c:2a:5b:f5:65:dd:62:
09:65:fe:fd:9b:4b:9e:db:25:a5:93:94:e3:e0:23:93:20:41:
0a:62:6b:c4:9d:c8:ba:58:9a:ab:07:54:97:68:9e:b1:0c:d5:
d1:10:85:cb:7e:9e:a8:8f:ec:82:5c:2f:08:62:16:4a:f6:4f:
b6:30:60:f5:96:5f:d6:b2:e9:55:46:b7:50:a2:eb:fd:2d:9f:
15:3b:2b:ea:35:9a:b3:4f:6f:b4:b4:66:24:ce:02:b5:29:13:
41:77:e5:cc:49:9f:cd:66:a7:d9:e2:97:ef:6d:76:12:0b:82:
6c:0e:71:2e:68:5a:ee:b1:c1:51:e6:6c:89:a0:2e:0d:9b:0d:
0e:d1:6a:15:28:5d:eb:25:d2:ef:e9:5d:42:3e:5d:b5:94:60:
11:bc:ff:88:e7:10:16:3d:06:98:1a:2c:c3:3b:3b:a4:56:41:
44:6d:d4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:33:47 2025 by rpki-client