This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33342e302f32342d3234203d3e20313336373837.roa
File: 352e3138332e33342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: vBl1zmLnHEqDLdV4cmh+SrNurQqRNnLv/ZsnG5lOg1Q=
Subject key identifier: 87:D3:C0:95:05:0E:5F:52:55:C6:01:92:F5:C3:31:89:6E:10:78:F3
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6F6A885D02F9E3955ACA41BDC7685695B201C62C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 21 Nov 2025 15:49:07 +0000
ROA not before: Fri 21 Nov 2025 15:44:07 +0000
ROA not after: Fri 20 Nov 2026 15:49:07 +0000
asID: 136787
IP address blocks: 5.183.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 08:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:6a:88:5d:02:f9:e3:95:5a:ca:41:bd:c7:68:56:95:b2:01:c6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 21 15:44:07 2025 GMT
Not After : Nov 20 15:49:07 2026 GMT
Subject: CN=87D3C095050E5F5255C60192F5C331896E1078F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:f3:03:9a:9d:3f:d6:8b:28:f8:38:4a:da:
e4:fe:a5:46:67:17:3a:35:74:d3:a5:41:28:0a:f0:
78:46:1a:39:3c:38:88:3a:51:86:0b:ad:db:dd:ad:
9b:82:30:c8:e5:18:dd:46:61:51:bb:58:76:3e:0e:
4c:ba:f8:21:f3:5c:d0:57:a6:32:e8:3c:d1:00:74:
d8:77:63:7d:1c:15:b3:50:e1:50:07:b7:25:95:75:
18:b0:a6:37:b8:c4:d4:83:78:ee:d7:2f:0f:91:9c:
e1:74:40:39:78:66:2e:d8:4b:b0:d7:14:a1:c0:5e:
d6:b2:f5:4b:ee:6c:91:52:f2:1e:f2:e4:95:58:a8:
45:9c:59:d6:f9:f0:6f:89:89:4b:58:47:e5:9d:38:
b5:74:37:75:21:b6:4c:34:86:29:fb:4e:ea:0b:7b:
fb:ab:cd:7c:b4:16:34:79:54:2a:f1:98:34:13:82:
c2:2d:96:7f:88:be:ad:cf:8d:5d:1c:96:01:35:e7:
c1:c7:98:9c:2b:97:ba:4e:c4:d3:a8:2b:2e:1e:5a:
40:a2:ec:15:e7:eb:ee:f1:c2:df:b4:b1:0f:26:5b:
d8:08:8f:ac:0a:16:90:96:c3:87:a8:d9:0e:eb:06:
08:f5:ca:60:1a:cb:b3:fa:12:44:b3:89:fc:a1:31:
e8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D3:C0:95:05:0E:5F:52:55:C6:01:92:F5:C3:31:89:6E:10:78:F3
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.34.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:67:45:9a:7c:8a:4a:e2:d4:d3:01:44:a7:38:41:60:fa:24:
a9:96:13:bc:1c:bf:70:51:29:a0:aa:70:e5:d6:91:43:8c:5d:
47:a2:c8:a6:95:6f:5c:55:20:3e:21:9f:7f:02:61:ff:0c:e5:
27:a4:34:a9:42:1a:fc:24:35:b1:a8:9e:7e:91:2c:5a:e1:8f:
52:85:75:d0:67:a0:12:03:c7:be:f0:9d:0d:37:6d:7d:fc:dc:
b3:db:65:08:9f:20:be:82:61:02:2b:22:f6:77:30:0d:c6:be:
ef:c0:28:86:eb:53:91:91:eb:bc:e4:0a:da:29:75:3c:cc:f7:
0b:d9:32:ad:11:b1:38:7e:a0:b2:64:8d:1a:06:4a:6a:46:21:
42:d8:be:a7:b6:03:2a:51:e9:d8:b7:63:64:38:4c:e1:17:83:
3a:13:ad:5c:7a:58:a9:b4:ef:12:a5:0c:8b:6d:00:7b:38:00:
53:05:b5:53:e5:50:5a:01:66:84:5f:66:ad:f7:b9:cd:4d:b0:
b4:1e:59:37:f7:04:ea:f1:23:3b:ee:34:e0:c3:73:c1:45:97:
e7:06:72:98:9e:62:4e:aa:de:e4:ba:67:3f:5e:75:b3:8a:2f:
7d:ac:19:1a:ae:ff:33:7a:7f:96:73:24:6a:26:ae:5e:72:7d:
02:8c:e5:59
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUb2qIXQL545VaykG9x2hWlbIBxiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNTExMjExNTQ0MDdaFw0yNjExMjAxNTQ5MDdaMDMxMTAvBgNV
BAMTKDg3RDNDMDk1MDUwRTVGNTI1NUM2MDE5MkY1QzMzMTg5NkUxMDc4RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzifMDmp0/1oso+DhK2uT+pUZn
Fzo1dNOlQSgK8HhGGjk8OIg6UYYLrdvdrZuCMMjlGN1GYVG7WHY+Dky6+CHzXNBX
pjLoPNEAdNh3Y30cFbNQ4VAHtyWVdRiwpje4xNSDeO7XLw+RnOF0QDl4Zi7YS7DX
FKHAXtay9UvubJFS8h7y5JVYqEWcWdb58G+JiUtYR+WdOLV0N3Uhtkw0hin7TuoL
e/urzXy0FjR5VCrxmDQTgsItln+Ivq3PjV0clgE158HHmJwrl7pOxNOoKy4eWkCi
7BXn6+7xwt+0sQ8mW9gIj6wKFpCWw4eo2Q7rBgj1ymAay7P6EkSzifyhMei5AgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUh9PAlQUOX1JVxgGS9cMxiW4QePMwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzODMzMmUz
MzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQABbciMA0GCSqGSIb3DQEBCwUAA4IBAQCoZ0WafIpK4tTTAUSnOEFg+iSplhO8
HL9wUSmgqnDl1pFDjF1HosimlW9cVSA+IZ9/AmH/DOUnpDSpQhr8JDWxqJ5+kSxa
4Y9ShXXQZ6ASA8e+8J0NN219/Nyz22UInyC+gmECKyL2dzANxr7vwCiG61ORkeu8
5AraKXU8zPcL2TKtEbE4fqCyZI0aBkpqRiFC2L6ntgMqUenYt2NkOEzhF4M6E61c
eliptO8SpQyLbQB7OABTBbVT5VBaAWaEX2at97nNTbC0Hlk39wTq8SM77jTgw3PB
RZfnBnKYnmJOqt7kumc/XnWzii99rBkarv8zen+WcyRqJq5ecn0CjOVZ
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:33:45 2025 by rpki-client