This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37382e302f32342d3234203d3e20313336373837.roa
File: 352e3130342e37382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 4v1L38dRnJQw6B12/hu8KHPrsXAM/QOOjMLUBpDqURE=
Subject key identifier: 68:5D:80:57:B9:C7:85:3C:27:D0:23:ED:09:0F:E8:5F:7B:A6:BE:2D
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 57BDE4F0682BEAD8CB0C608778F1502EFF725049
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 28 Nov 2025 11:49:17 +0000
ROA not before: Fri 28 Nov 2025 11:44:17 +0000
ROA not after: Fri 27 Nov 2026 11:49:17 +0000
asID: 136787
IP address blocks: 5.104.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:bd:e4:f0:68:2b:ea:d8:cb:0c:60:87:78:f1:50:2e:ff:72:50:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 28 11:44:17 2025 GMT
Not After : Nov 27 11:49:17 2026 GMT
Subject: CN=685D8057B9C7853C27D023ED090FE85F7BA6BE2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:fb:bd:d3:5a:1d:7c:0a:f0:46:97:1c:a0:
e2:1d:74:8d:31:03:03:14:6e:81:1e:0e:40:4f:c3:
b3:5c:16:5e:57:5a:1f:50:8e:85:98:7a:81:8a:88:
f7:2a:5f:ce:47:49:11:e6:dd:57:bd:2d:b5:cf:15:
dd:06:aa:fa:04:8e:cc:ce:80:da:dc:87:13:97:84:
07:63:b1:58:b8:11:36:97:c7:c4:b4:9d:31:f0:4f:
87:16:88:5c:14:e7:11:15:3e:5f:f0:0d:c6:3a:16:
f3:dc:e5:08:59:ae:06:2a:55:a8:96:86:c8:0e:44:
36:dd:28:8f:94:70:71:55:98:51:aa:5f:52:99:35:
ca:4e:26:8a:0f:7b:42:a5:8c:40:ee:a7:8a:45:a0:
70:35:c7:0b:73:e7:4a:eb:d9:dd:fc:9c:76:9b:15:
a3:be:26:28:61:36:e3:d4:d7:84:aa:9b:35:87:10:
d6:7f:e2:ff:a2:8d:89:37:40:6d:64:e9:90:24:8f:
e1:ee:a8:e8:53:61:f5:5a:f8:7a:5c:f8:a6:a6:ee:
fe:f1:3a:92:ed:a2:92:58:db:ed:0d:9f:f7:c0:04:
e0:4a:bf:ac:39:cd:3c:77:02:fd:a8:b1:83:71:f9:
3a:44:09:6c:a1:29:5c:6a:ec:5e:e1:82:af:62:a6:
6b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5D:80:57:B9:C7:85:3C:27:D0:23:ED:09:0F:E8:5F:7B:A6:BE:2D
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.78.0/24
Signature Algorithm: sha256WithRSAEncryption
79:72:b8:c5:43:57:6e:32:38:17:aa:83:7a:2f:73:c1:33:fb:
46:43:4e:fb:7e:2f:7b:f4:72:14:8f:58:df:27:bd:e1:da:57:
0c:18:a2:09:7a:c6:e5:1a:c2:2a:b0:b7:86:a2:73:eb:e6:b0:
a7:09:0f:30:4e:b1:7a:3d:f0:d3:2d:c8:77:40:c9:45:9d:04:
35:cc:84:46:f2:80:ae:19:4e:5d:40:46:29:65:b1:1a:67:fb:
72:cd:77:a1:a3:85:60:5c:d9:06:db:2b:d3:4c:3d:07:05:81:
55:3e:36:5a:3b:d6:8c:b8:03:b9:2a:94:d6:09:8e:38:bc:1d:
31:35:cd:41:15:0f:0e:86:0c:82:09:68:b3:72:89:fc:e4:bf:
bc:68:bd:bf:d9:7f:ac:fd:98:5f:76:c2:b7:42:8d:1c:fb:a9:
4c:94:ba:cf:eb:df:0a:61:c7:a1:8c:cc:a4:f6:d9:19:e3:19:
04:c9:98:6c:a7:c1:6e:a5:33:b6:05:4c:66:f6:59:10:bb:d4:
2a:3b:9b:7d:06:f4:9d:45:4d:f7:2d:1f:07:9e:e2:64:fb:b9:
45:c9:4c:f9:df:78:2e:bd:fd:b6:bf:5b:7a:83:4d:c8:89:30:
d5:05:be:3b:2f:b9:74:9b:27:c2:4f:70:88:b8:24:fc:3c:7a:
46:56:bd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:40:05 2025 by rpki-client