This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13287.roa File: AS13287.roa (raw, json) Hash identifier: Y31ClLSq7pMnqgYSBckNvlNeQBBfxIV0kkdck7ZwSBI= Subject key identifier: 14:B5:D3:8B:3C:F4:1B:A0:D6:05:34:4C:A7:D4:CD:A4:E8:B3:1F:E2 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 60AB19B391118FD21EC219AD8D33EF3E9483CF75 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13287.roa Signing time: Fri 23 Jan 2026 12:55:35 +0000 ROA not before: Fri 23 Jan 2026 12:50:35 +0000 ROA not after: Fri 22 Jan 2027 12:55:35 +0000 asID: 13287 IP address blocks: 191.101.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ab:19:b3:91:11:8f:d2:1e:c2:19:ad:8d:33:ef:3e:94:83:cf:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Jan 23 12:50:35 2026 GMT Not After : Jan 22 12:55:35 2027 GMT Subject: CN=14B5D38B3CF41BA0D605344CA7D4CDA4E8B31FE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:14:5b:d6:84:1e:af:d9:21:3b:96:ed:c8:45: 01:51:ec:2d:2e:dc:94:8c:5f:18:35:66:28:79:5f: b5:aa:22:c1:93:bb:6d:14:b5:46:f0:29:95:60:36: ca:2b:0c:d7:ed:a6:a9:80:09:8e:b7:d0:28:12:bd: 9d:6d:e0:a9:a8:93:96:fa:9e:a4:58:dc:03:13:e8: 0f:1b:a4:52:59:12:10:28:ee:31:9e:14:a7:78:69: 69:bd:f7:2f:ea:46:26:6f:c2:9b:cd:71:db:f2:92: 1f:86:31:e6:79:b3:3d:39:1f:9e:56:ae:76:09:ed: 76:a4:52:27:29:21:6d:af:83:b1:7b:45:a6:4a:8f: 73:39:de:91:f8:41:d7:71:88:65:23:0a:66:7e:95: ce:e5:94:db:cc:db:a4:01:66:dc:df:c3:b4:e1:b4: 26:39:ae:d9:c1:d5:97:d5:92:96:26:cc:ee:28:66: 63:8e:8b:0c:85:68:c8:ea:5c:b8:9c:92:31:22:83: b5:90:2e:12:ff:51:4c:c4:04:58:94:c8:f4:f8:d5: e0:01:b1:5e:4c:f6:81:11:a2:12:24:87:03:e4:18: ae:4f:89:4e:38:b6:3d:d7:0c:26:87:f7:ab:ee:50: 67:e5:f8:ee:71:d5:3c:c6:00:85:fc:e4:f7:74:da: 54:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B5:D3:8B:3C:F4:1B:A0:D6:05:34:4C:A7:D4:CD:A4:E8:B3:1F:E2 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13287.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.101.36.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:ea:4a:ee:1c:ac:80:7d:18:22:f6:96:66:15:17:4e:8c:b4: 70:e8:e5:1d:89:17:d2:96:be:22:d4:41:62:df:eb:53:5f:04: 4a:2e:90:44:85:3b:48:95:05:a0:5b:66:7a:e0:5a:e6:cc:a9: 2d:69:0e:cb:23:4e:99:1d:16:a0:22:54:fe:2f:40:37:31:7a: 42:ce:2f:f9:68:ab:21:cb:1d:53:78:5c:91:39:ca:e3:0e:f9: b0:96:92:68:01:72:ea:86:7b:e6:aa:0d:5c:ed:83:e7:65:41: b8:bd:32:5a:88:c6:f0:b2:5a:e0:a6:28:82:30:30:b0:0c:2c: eb:77:23:7b:08:5b:dc:05:30:79:27:ab:2b:e3:fb:92:63:65: 15:b7:4b:2b:fc:b3:a3:5d:12:e2:0d:f4:5c:bd:d1:1f:cf:cc: f3:6f:c7:2a:d0:b3:6a:62:a4:5d:b7:aa:33:6f:88:6d:b9:c4: d9:b9:40:3f:ab:f1:cd:15:a6:23:c3:28:56:b7:dc:20:3c:7d: b5:7f:d7:22:65:56:79:80:7e:dd:d5:a7:8c:da:e8:cd:9d:b4: ed:41:71:70:5a:56:89:f1:d5:03:81:5d:b2:9b:0b:99:9c:d3: 64:4d:02:fa:88:60:22:46:df:f1:b9:3b:11:3e:86:73:55:e8: 06:8f:2a:d5 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUYKsZs5ERj9IewhmtjTPvPpSDz3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNjAxMjMxMjUwMzVaFw0yNzAxMjIxMjU1MzVaMDMxMTAvBgNV BAMTKDE0QjVEMzhCM0NGNDFCQTBENjA1MzQ0Q0E3RDRDREE0RThCMzFGRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLFFvWhB6v2SE7lu3IRQFR7C0u 3JSMXxg1Zih5X7WqIsGTu20UtUbwKZVgNsorDNftpqmACY630CgSvZ1t4Kmok5b6 nqRY3AMT6A8bpFJZEhAo7jGeFKd4aWm99y/qRiZvwpvNcdvykh+GMeZ5sz05H55W rnYJ7XakUicpIW2vg7F7RaZKj3M53pH4QddxiGUjCmZ+lc7llNvM26QBZtzfw7Th tCY5rtnB1ZfVkpYmzO4oZmOOiwyFaMjqXLickjEig7WQLhL/UUzEBFiUyPT41eAB sV5M9oERohIkhwPkGK5PiU44tj3XDCaH96vuUGfl+O5x1TzGAIX85Pd02lS9AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUFLXTizz0G6DWBTRMp9TNpOizH+IwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTMyODcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/ZSQw DQYJKoZIhvcNAQELBQADggEBAJzqSu4crIB9GCL2lmYVF06MtHDo5R2JF9KWviLU QWLf61NfBEoukESFO0iVBaBbZnrgWubMqS1pDssjTpkdFqAiVP4vQDcxekLOL/lo qyHLHVN4XJE5yuMO+bCWkmgBcuqGe+aqDVztg+dlQbi9MlqIxvCyWuCmKIIwMLAM LOt3I3sIW9wFMHknqyvj+5JjZRW3Syv8s6NdEuIN9Fy90R/PzPNvxyrQs2pipF23 qjNviG25xNm5QD+r8c0VpiPDKFa33CA8fbV/1yJlVnmAft3Vp4za6M2dtO1BcXBa Vonx1QOBXbKbC5mc02RNAvqIYCJG3/G5OxE+hnNV6AaPKtU= -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:10 2026 by rpki-client