This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20323136313939.roa
File: 352e3138322e33342e302f32342d3234203d3e20323136313939.roa (raw, json)
Hash identifier: sE45z/JemJ8w3308Jrt/GVsOjDihXqkEGeGPumyof4M=
Subject key identifier: 6B:96:A9:D4:40:50:E7:CD:15:62:F8:BE:10:25:66:54:CC:98:FD:07
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 36C8B49750436132A2573FAAC20CAE0FA265C58A
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20323136313939.roa
Signing time: Mon 17 Nov 2025 14:34:06 +0000
ROA not before: Mon 17 Nov 2025 14:29:06 +0000
ROA not after: Mon 16 Nov 2026 14:34:06 +0000
asID: 216199
IP address blocks: 5.182.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 05:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:c8:b4:97:50:43:61:32:a2:57:3f:aa:c2:0c:ae:0f:a2:65:c5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Nov 17 14:29:06 2025 GMT
Not After : Nov 16 14:34:06 2026 GMT
Subject: CN=6B96A9D44050E7CD1562F8BE10256654CC98FD07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:0e:cb:73:12:2c:27:e5:72:13:13:5a:ce:
c3:89:89:0d:af:3b:e3:65:1d:5c:d3:90:65:34:14:
20:04:46:f9:2d:3b:f7:ef:c5:60:a2:b0:fd:2c:f0:
88:90:58:1e:93:26:64:23:da:30:0a:b5:ef:60:6d:
ca:38:34:b8:36:5f:76:7a:b7:d7:7c:f8:a4:67:d1:
18:bc:2d:35:f6:94:9d:87:64:86:fe:d4:b3:d3:17:
0e:64:e6:d9:06:fb:a5:53:c4:cf:1b:fc:ff:3b:d8:
17:e3:c3:7b:16:9b:d8:56:27:1a:84:23:75:c4:93:
85:7a:0b:27:50:6e:9e:8d:b1:2d:ec:72:8b:3e:8a:
4a:17:52:4f:86:c6:ea:9f:5a:43:a9:55:85:13:c5:
3c:75:95:57:96:9b:eb:5c:c7:a5:7b:4d:31:dd:a0:
4a:c2:e8:b0:73:19:94:cd:df:36:a9:06:5c:00:ef:
ec:79:00:9e:0b:0d:a8:88:ba:2f:cc:3d:c4:51:5b:
3b:4f:2f:bf:f1:05:92:e3:76:22:be:b4:df:3e:78:
18:42:91:55:3f:df:e6:a2:06:e0:23:7c:26:3e:dd:
49:bb:cd:a7:bd:25:00:eb:1a:6c:bf:bc:52:7b:e5:
1b:e5:ed:b7:f8:43:86:9d:a5:d3:f5:8c:1c:d6:2d:
6a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:96:A9:D4:40:50:E7:CD:15:62:F8:BE:10:25:66:54:CC:98:FD:07
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20323136313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.34.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:fa:78:22:f3:9f:3f:1b:00:4f:90:2a:b3:67:a3:1c:7e:1a:
03:8f:08:28:44:35:a3:3f:1f:92:42:93:86:7c:47:14:9d:c2:
e6:dd:9d:62:31:e8:d5:ed:b4:0a:a6:f4:65:8e:f0:5d:10:fe:
5e:2d:53:19:82:64:09:80:55:70:b8:33:ed:9b:d9:2e:71:90:
3a:20:9c:a2:ac:5e:86:35:30:bb:31:2e:4e:d5:67:6e:a3:63:
98:8e:e1:25:d6:90:3d:22:e9:85:e7:f2:48:31:ac:52:d4:85:
0a:e2:37:29:f6:e7:d0:b3:08:06:22:68:5a:a2:6b:2e:91:9e:
4b:85:9e:c5:18:c7:46:67:87:af:5b:f9:34:18:d4:73:02:2a:
bd:f7:37:c6:06:05:50:c4:85:c2:78:3f:6f:40:9c:6c:7d:25:
aa:94:2c:2f:4c:31:5b:67:d7:4f:6b:80:ab:63:2f:25:94:13:
70:d6:3b:82:af:c1:26:b2:89:6c:9c:56:64:6b:94:87:d3:44:
bf:ee:cb:22:d2:00:53:85:83:11:b5:f3:1b:34:83:04:18:3f:
f0:23:a9:18:53:83:49:ac:6e:f5:35:c9:f1:23:49:bf:93:df:
29:57:b8:61:a7:e2:0c:bc:41:f2:05:13:3d:85:f8:18:7c:14:
aa:be:e5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 13:06:50 2025 by rpki-client