This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13627.roa File: AS13627.roa (raw, json) Hash identifier: v6FYGAjPgHXWX+9Sxs9uFyM41hWJLkKI3uf3I64e9Pk= Subject key identifier: 45:BC:DC:BB:91:72:AC:85:C0:58:1D:07:6F:14:E8:4E:22:D5:6C:8A Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 62C9E5CF5BB74459D7B386B6245E13C27DA31AA5 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13627.roa Signing time: Wed 03 Dec 2025 08:55:12 +0000 ROA not before: Wed 03 Dec 2025 08:50:12 +0000 ROA not after: Wed 02 Dec 2026 08:55:12 +0000 asID: 13627 IP address blocks: 185.137.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:c9:e5:cf:5b:b7:44:59:d7:b3:86:b6:24:5e:13:c2:7d:a3:1a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 08:50:12 2025 GMT Not After : Dec 2 08:55:12 2026 GMT Subject: CN=45BCDCBB9172AC85C0581D076F14E84E22D56C8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d5:97:cf:b6:7a:9b:f8:58:cf:5a:a1:f7:98: 19:97:af:b6:36:39:6c:9e:de:5c:fc:e9:d1:98:99: c5:9e:f9:25:81:8f:f0:33:aa:bd:00:36:45:b6:23: 65:66:18:a5:e1:83:63:53:a3:4a:d2:68:b0:fc:60: bf:ff:61:e6:ba:51:78:d9:95:e4:8e:e4:a9:87:37: 3d:3e:1f:d4:57:50:33:59:4f:fc:fe:74:7c:14:14: ab:89:f9:b4:6d:97:07:3d:9c:05:3a:7c:b3:b2:df: 90:d6:9e:db:9d:15:a4:7e:43:f6:22:59:b9:17:dc: bc:1c:96:7f:fc:0a:81:ef:fc:fb:42:63:ce:aa:3a: 6b:7a:70:03:9a:eb:53:38:2d:20:06:27:01:fe:f0: ae:23:55:9f:c6:97:f0:9a:cb:0a:72:da:cf:fb:97: 59:c0:f1:d5:0a:ec:0b:08:a6:9d:66:ae:ea:4d:39: 84:c5:f5:ec:62:00:9e:5b:16:08:f5:5a:34:43:d0: 21:1e:08:ea:48:3b:06:4b:95:7b:3c:0e:b8:88:2b: f3:6b:44:e6:45:12:dc:34:28:b9:44:cb:84:61:fa: 00:42:5c:20:72:da:be:10:56:38:30:c6:e0:62:17: f1:12:c3:64:3e:37:b2:ae:f1:c8:2a:3d:15:23:fa: 5b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BC:DC:BB:91:72:AC:85:C0:58:1D:07:6F:14:E8:4E:22:D5:6C:8A X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13627.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.94.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:fa:1a:c8:4d:56:71:c1:f7:a5:09:5c:c1:38:23:ad:7b:50: 91:26:06:31:60:3a:77:9f:68:39:71:ff:ba:10:c5:a3:90:5c: 89:a6:8c:f9:96:19:0a:70:7f:84:42:14:1a:71:02:a9:f2:7d: 33:8b:35:10:66:2c:13:31:8e:df:27:a9:37:c9:10:cb:ab:21: ff:9a:b8:c8:c2:06:0c:36:74:a6:5d:2f:6b:d2:11:bf:0f:b8: 60:ca:42:86:eb:f7:1d:3c:c5:4a:da:9e:f4:f3:9d:8c:1c:49: e2:e6:96:6d:44:fc:95:77:70:31:1d:65:5c:5d:ec:21:b8:98: 2a:da:7e:1c:00:a0:2b:ab:55:b6:b0:26:cd:33:63:fa:1c:2b: d8:f5:d1:69:bc:d2:d8:58:b4:37:d5:49:8a:27:20:60:21:40: 7c:a0:7e:73:9d:fa:51:7d:61:2e:35:33:cf:fa:13:1f:a7:22: 95:fa:82:43:28:62:db:be:5a:b0:c6:ed:28:f1:fd:39:83:76: 25:da:b5:b3:54:4e:3c:8f:72:9b:0a:e1:66:64:db:91:d9:c8: 5d:db:ba:c0:a7:ec:54:ef:58:29:a3:32:21:33:44:df:ce:ec: e3:6e:6d:83:f9:8b:1b:5f:a2:1e:49:0f:5b:94:c7:ae:69:ce: c2:33:f7:5d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUYsnlz1u3RFnXs4a2JF4Twn2jGqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwODUwMTJaFw0yNjEyMDIwODU1MTJaMDMxMTAvBgNV BAMTKDQ1QkNEQ0JCOTE3MkFDODVDMDU4MUQwNzZGMTRFODRFMjJENTZDOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1ZfPtnqb+FjPWqH3mBmXr7Y2 OWye3lz86dGYmcWe+SWBj/Azqr0ANkW2I2VmGKXhg2NTo0rSaLD8YL//Yea6UXjZ leSO5KmHNz0+H9RXUDNZT/z+dHwUFKuJ+bRtlwc9nAU6fLOy35DWntudFaR+Q/Yi WbkX3Lwcln/8CoHv/PtCY86qOmt6cAOa61M4LSAGJwH+8K4jVZ/Gl/Caywpy2s/7 l1nA8dUK7AsIpp1mrupNOYTF9exiAJ5bFgj1WjRD0CEeCOpIOwZLlXs8DriIK/Nr ROZFEtw0KLlEy4Rh+gBCXCBy2r4QVjgwxuBiF/ESw2Q+N7Ku8cgqPRUj+ltfAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQURbzcu5FyrIXAWB0HbxToTiLVbIowHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTM2Mjcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5iV4w DQYJKoZIhvcNAQELBQADggEBAF76GshNVnHB96UJXME4I617UJEmBjFgOnefaDlx /7oQxaOQXImmjPmWGQpwf4RCFBpxAqnyfTOLNRBmLBMxjt8nqTfJEMurIf+auMjC Bgw2dKZdL2vSEb8PuGDKQobr9x08xUranvTznYwcSeLmlm1E/JV3cDEdZVxd7CG4 mCrafhwAoCurVbawJs0zY/ocK9j10Wm80thYtDfVSYonIGAhQHygfnOd+lF9YS41 M8/6Ex+nIpX6gkMoYtu+WrDG7Sjx/TmDdiXatbNUTjyPcpsK4WZk25HZyF3busCn 7FTvWCmjMiEzRN/O7ONubYP5ixtfoh5JD1uUx65pzsIz910= -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:30 2025 by rpki-client