This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS146943.roa File: AS146943.roa (raw, json) Hash identifier: VIJGa9ct6P4XwVzO5Eqt8PVsBpNmrmMSATdlGxOORRU= Subject key identifier: CF:09:5A:33:10:D1:58:E9:16:DA:DC:31:A1:CC:F8:C6:EC:3F:E6:45 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 4DC3E8AA07904A47BF832A08B57E0A751268F577 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS146943.roa Signing time: Mon 08 Dec 2025 14:45:19 +0000 ROA not before: Mon 08 Dec 2025 14:40:19 +0000 ROA not after: Mon 07 Dec 2026 14:45:19 +0000 asID: 146943 IP address blocks: 191.101.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c3:e8:aa:07:90:4a:47:bf:83:2a:08:b5:7e:0a:75:12:68:f5:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 8 14:40:19 2025 GMT Not After : Dec 7 14:45:19 2026 GMT Subject: CN=CF095A3310D158E916DADC31A1CCF8C6EC3FE645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3b:c0:33:be:cb:ef:2d:d5:47:26:0e:fb:de: 16:5c:f9:63:d1:20:80:49:ee:47:6a:de:33:1d:c4: 73:65:d4:e7:2f:56:3a:c1:12:8d:0c:16:7a:20:a8: 3b:3b:4c:65:c5:a1:0a:50:64:69:49:96:3f:25:b9: ed:05:93:10:61:74:e9:82:7d:46:4b:79:52:04:58: bd:ec:08:95:7d:84:04:fc:0e:cc:a2:0f:a2:ff:3a: 7b:f9:1d:27:79:6e:62:94:28:92:8c:ce:ff:1a:06: 26:c2:71:96:b6:35:9f:d1:bf:80:a2:2a:23:b4:a9: 48:fc:53:ea:96:af:4b:31:c6:d4:84:b6:e4:75:97: d5:57:0c:c6:5d:d9:bd:c6:0b:fa:a3:15:bf:97:3f: 8c:f1:77:05:82:fe:c1:a6:25:d3:4e:5b:d3:0a:ec: c9:96:5d:46:2e:e9:a8:3a:9d:30:e5:5e:ff:c1:c2: c4:dc:80:bb:f8:3c:0c:79:77:d8:1a:a4:2f:d5:78: c5:ea:10:28:8f:8e:5d:7c:c3:43:f4:c3:ab:e5:b3: c1:52:db:64:19:44:66:91:39:ce:36:94:19:ed:86: 05:eb:59:1c:29:02:95:96:ee:46:33:64:14:08:55: be:14:51:c5:99:c7:9a:39:42:04:d3:cb:7b:c0:f8: 2a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:09:5A:33:10:D1:58:E9:16:DA:DC:31:A1:CC:F8:C6:EC:3F:E6:45 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS146943.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.101.187.0/24 Signature Algorithm: sha256WithRSAEncryption 05:dd:d9:62:40:04:d7:a2:2e:1f:07:34:43:23:c0:29:52:aa: 0a:d9:0e:8c:46:a6:e0:98:db:a1:24:ca:30:0d:7c:93:3c:1d: 0b:27:fb:22:fa:74:72:07:ca:7d:a7:33:4b:4b:e9:84:cf:36: 86:89:98:54:3a:32:0f:ab:05:0e:d2:5c:97:2e:2c:a2:e0:12: 4a:3b:69:0e:44:94:c0:ae:59:d6:d3:d2:46:c5:0e:ea:1e:fa: 2f:bb:e7:c5:2c:32:1b:1d:da:e0:8c:8b:54:a8:e9:51:1b:97: e7:df:54:ee:16:db:d9:05:e8:7d:61:1a:d6:a4:fa:9b:82:71: 93:87:bd:f4:2a:63:4b:86:27:d6:33:e1:78:ee:bf:c9:1c:36: f2:6e:e8:6a:11:17:02:67:fa:a3:3f:79:b3:cc:11:2a:06:a3: b4:a5:b5:13:ce:a6:d0:44:62:dc:8d:c1:5a:b3:4f:b4:91:d7: e6:1a:c9:80:d5:0b:93:bf:fc:46:14:0f:13:23:2b:80:5a:ee: 6c:e3:25:f3:bf:87:1a:a6:90:ec:2a:fc:b0:a8:b0:1c:be:85: 07:34:3d:09:e8:f2:08:55:83:7d:c1:58:e2:92:d3:2f:f9:12: a1:7b:ff:d2:2b:d2:86:76:1b:76:68:5c:26:2d:4d:31:db:68: dc:f7:31:a2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUTcPoqgeQSke/gyoItX4KdRJo9XcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDgxNDQwMTlaFw0yNjEyMDcxNDQ1MTlaMDMxMTAvBgNV BAMTKENGMDk1QTMzMTBEMTU4RTkxNkRBREMzMUExQ0NGOEM2RUMzRkU2NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTO8AzvsvvLdVHJg773hZc+WPR IIBJ7kdq3jMdxHNl1OcvVjrBEo0MFnogqDs7TGXFoQpQZGlJlj8lue0FkxBhdOmC fUZLeVIEWL3sCJV9hAT8DsyiD6L/Onv5HSd5bmKUKJKMzv8aBibCcZa2NZ/Rv4Ci KiO0qUj8U+qWr0sxxtSEtuR1l9VXDMZd2b3GC/qjFb+XP4zxdwWC/sGmJdNOW9MK 7MmWXUYu6ag6nTDlXv/BwsTcgLv4PAx5d9gapC/VeMXqECiPjl18w0P0w6vls8FS 22QZRGaROc42lBnthgXrWRwpApWW7kYzZBQIVb4UUcWZx5o5QgTTy3vA+CqDAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUzwlaMxDRWOkW2twxocz4xuw/5kUwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTQ2OTQzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv2W7 MA0GCSqGSIb3DQEBCwUAA4IBAQAF3dliQATXoi4fBzRDI8ApUqoK2Q6MRqbgmNuh JMowDXyTPB0LJ/si+nRyB8p9pzNLS+mEzzaGiZhUOjIPqwUO0lyXLiyi4BJKO2kO RJTArlnW09JGxQ7qHvovu+fFLDIbHdrgjItUqOlRG5fn31TuFtvZBeh9YRrWpPqb gnGTh730KmNLhifWM+F47r/JHDbybuhqERcCZ/qjP3mzzBEqBqO0pbUTzqbQRGLc jcFas0+0kdfmGsmA1QuTv/xGFA8TIyuAWu5s4yXzv4cappDsKvywqLAcvoUHND0J 6PIIVYN9wVjiktMv+RKhe//SK9KGdht2aFwmLU0x22jc9zGi -----END CERTIFICATE-----Generated at Wed Dec 17 18:07:11 2025 by rpki-client