This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS59711.roa File: AS59711.roa (raw, json) Hash identifier: RivjhqlCd9z7nE6ya5eQ1MOG7ki7qpzSaAzbm4vRXPw= Subject key identifier: EB:52:F1:2E:8B:AC:E7:2E:B6:C1:9C:3B:AB:B8:66:F3:5E:61:B7:13 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 35F8FDCD05110C72BBE047E2892A00529CACDBA4 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS59711.roa Signing time: Fri 19 Dec 2025 14:55:32 +0000 ROA not before: Fri 19 Dec 2025 14:50:32 +0000 ROA not after: Fri 18 Dec 2026 14:55:32 +0000 asID: 59711 IP address blocks: 148.135.147.0/24 maxlen: 24 148.135.150.0/24 maxlen: 24 148.135.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f8:fd:cd:05:11:0c:72:bb:e0:47:e2:89:2a:00:52:9c:ac:db:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 19 14:50:32 2025 GMT Not After : Dec 18 14:55:32 2026 GMT Subject: CN=EB52F12E8BACE72EB6C19C3BABB866F35E61B713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:da:47:dd:1d:03:7d:2e:97:b4:96:34:83:9d: 21:86:1d:90:cd:48:29:b8:83:32:88:f0:cf:dd:26: 56:39:87:87:b8:af:b5:71:81:4d:9e:a4:66:9c:f9: 3f:a6:c0:43:be:0f:c7:9e:88:69:cc:48:7b:7b:71: 2a:cd:6f:39:cc:a8:61:33:9c:9a:04:33:35:02:06: 48:ec:cf:8c:17:31:9b:80:5f:dd:a5:be:11:c2:8b: 6a:04:5d:95:c3:84:3b:37:57:c5:1e:b5:29:22:77: ce:75:ed:6f:0f:c7:25:1e:89:6a:51:bd:44:b7:53: 16:71:61:b4:da:ef:2c:b3:c6:8d:20:b0:3c:92:d0: 22:3c:23:df:2a:01:73:2f:bd:fd:6f:ff:43:5f:3d: a7:c1:55:4d:7f:43:b8:7d:9e:94:71:8c:ec:25:dc: d2:43:14:63:a8:3a:f1:ea:dd:99:92:bc:a9:5d:cc: 50:de:0d:fa:c2:d0:61:5d:98:8f:5a:08:b7:45:56: 0f:bf:a4:7c:1f:23:8d:73:e3:0d:3e:02:9a:67:54: 8b:2e:2e:d4:b5:c8:07:dc:02:40:8a:04:33:f0:12: da:4a:26:1b:8d:99:3a:60:63:35:86:7d:8e:f8:4a: 0c:16:10:18:83:73:9e:f4:8f:24:fb:fa:df:0a:84: c7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:52:F1:2E:8B:AC:E7:2E:B6:C1:9C:3B:AB:B8:66:F3:5E:61:B7:13 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS59711.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.135.147.0/24 148.135.150.0/24 148.135.159.0/24 Signature Algorithm: sha256WithRSAEncryption 41:58:77:b2:ea:f0:7a:1f:75:36:a3:50:dd:ca:27:1c:0c:de: f1:61:fb:d6:af:04:76:df:4c:67:d5:e0:73:63:7b:81:6f:5d: 3f:6e:2a:8d:75:d6:d5:a3:1b:96:82:ef:6a:ed:92:3a:d8:8a: f0:80:31:09:ff:6c:23:10:82:74:c3:1f:7a:b9:76:fa:0b:29: 05:70:ba:57:d3:47:27:15:f6:95:3d:61:1e:76:87:4a:47:cf: 64:50:01:8e:ae:ff:8a:d6:47:13:65:6f:8c:de:79:bc:b8:01: ed:c4:60:0a:c9:af:a1:51:d4:02:2c:30:c9:36:1f:b6:39:03: 0c:f4:45:27:e7:39:37:a7:cf:67:3a:2c:71:ea:eb:e2:e8:25: 5d:8a:4d:1a:b3:12:16:15:12:05:f8:fe:e2:51:80:14:97:ae: 65:69:7b:5f:f0:84:6b:da:9a:13:ec:26:17:aa:2b:91:4f:31: 0b:e4:55:35:44:bb:5b:35:55:cb:de:17:af:c6:6d:c7:37:9e: a2:b6:bd:68:2a:f4:20:0a:7c:f1:4e:1f:8e:54:2c:e9:65:56: 15:6d:bf:3b:32:2c:b0:49:0f:12:53:60:a2:73:66:95:bb:56: 29:a5:e3:76:42:ae:75:9c:21:81:d7:b1:97:ae:fa:a9:dc:11: 75:5a:f0:6e -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUNfj9zQURDHK74EfiiSoAUpys26QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMTkxNDUwMzJaFw0yNjEyMTgxNDU1MzJaMDMxMTAvBgNV BAMTKEVCNTJGMTJFOEJBQ0U3MkVCNkMxOUMzQkFCQjg2NkYzNUU2MUI3MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2kfdHQN9Lpe0ljSDnSGGHZDN SCm4gzKI8M/dJlY5h4e4r7VxgU2epGac+T+mwEO+D8eeiGnMSHt7cSrNbznMqGEz nJoEMzUCBkjsz4wXMZuAX92lvhHCi2oEXZXDhDs3V8UetSkid8517W8PxyUeiWpR vUS3UxZxYbTa7yyzxo0gsDyS0CI8I98qAXMvvf1v/0NfPafBVU1/Q7h9npRxjOwl 3NJDFGOoOvHq3ZmSvKldzFDeDfrC0GFdmI9aCLdFVg+/pHwfI41z4w0+AppnVIsu LtS1yAfcAkCKBDPwEtpKJhuNmTpgYzWGfY74SgwWEBiDc570jyT7+t8KhMfRAgMB AAGjggIVMIICETAdBgNVHQ4EFgQU61LxLous5y62wZw7q7hm815htxMwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNTk3MTEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACUh5MD BACUh5YDBACUh58wDQYJKoZIhvcNAQELBQADggEBAEFYd7Lq8HofdTajUN3KJxwM 3vFh+9avBHbfTGfV4HNje4FvXT9uKo111tWjG5aC72rtkjrYivCAMQn/bCMQgnTD H3q5dvoLKQVwulfTRycV9pU9YR52h0pHz2RQAY6u/4rWRxNlb4zeeby4Ae3EYArJ r6FR1AIsMMk2H7Y5Awz0RSfnOTenz2c6LHHq6+LoJV2KTRqzEhYVEgX4/uJRgBSX rmVpe1/whGvamhPsJheqK5FPMQvkVTVEu1s1VcveF6/Gbcc3nqK2vWgq9CAKfPFO H45ULOllVhVtvzsyLLBJDxJTYKJzZpW7Viml43ZCrnWcIYHXsZeu+qncEXVa8G4= -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:25 2026 by rpki-client