This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS197071.roa File: AS197071.roa (raw, json) Hash identifier: Zf+NvUg/7EFwSOstjaFIro/OFO8DcSaqEL8LiOxTSfU= Subject key identifier: EF:F4:21:44:69:3D:DB:4E:BC:07:F0:95:1F:7B:5B:DB:9E:5A:EA:90 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 77BA69A53AA0EF5DB8899246402B64CE3209B26B Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS197071.roa Signing time: Wed 03 Dec 2025 08:55:14 +0000 ROA not before: Wed 03 Dec 2025 08:50:14 +0000 ROA not after: Wed 02 Dec 2026 08:55:14 +0000 asID: 197071 IP address blocks: 191.101.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ba:69:a5:3a:a0:ef:5d:b8:89:92:46:40:2b:64:ce:32:09:b2:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 08:50:14 2025 GMT Not After : Dec 2 08:55:14 2026 GMT Subject: CN=EFF42144693DDB4EBC07F0951F7B5BDB9E5AEA90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5b:fe:b3:5a:4c:06:79:3a:2d:28:e7:ce:8e: 77:3c:7d:fd:20:44:0f:10:4c:47:51:ce:5e:7a:36: b1:8b:b2:3b:1f:44:ac:02:30:c9:61:5d:6f:ab:48: ee:91:f0:25:95:76:2f:d5:73:cc:ab:7b:95:69:06: 26:2d:8e:27:a6:d8:c4:5c:df:f4:c0:57:98:42:a0: a2:75:94:17:4b:b3:6c:08:83:a7:55:15:8c:a6:15: c6:e7:91:7a:c2:89:52:1b:e2:37:5a:52:c8:8b:f0: 0e:29:80:79:12:2c:98:22:89:8e:80:42:00:78:5d: ca:b4:8c:54:3a:5e:8a:4a:79:c2:40:f5:a5:cd:ce: fd:fe:ca:bf:85:34:ac:c5:1a:85:58:54:d0:47:95: c0:8a:8d:e8:7d:80:ba:3e:49:e7:f3:1c:b0:ad:c6: 02:20:89:b3:c3:68:03:81:21:c6:20:a3:dc:4d:9f: ed:05:d6:c3:5f:28:34:bb:3b:72:43:6d:cb:06:16: 6e:9d:8f:8b:11:c9:3d:71:24:aa:65:d1:04:78:d5: 6c:59:1d:32:6c:ca:39:d9:ed:60:13:f6:3a:15:a1: 44:7e:48:39:40:61:60:99:e1:38:69:ab:50:22:d4: b0:2f:07:02:42:83:c8:2d:d0:19:2f:85:ef:f9:d8: ff:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F4:21:44:69:3D:DB:4E:BC:07:F0:95:1F:7B:5B:DB:9E:5A:EA:90 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS197071.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.101.51.0/24 Signature Algorithm: sha256WithRSAEncryption 34:00:26:44:e6:85:44:eb:ac:1d:a6:54:a5:15:d8:14:f9:2b: 48:31:8e:b4:62:38:8b:ae:52:c9:14:27:e6:cb:c4:32:5f:fc: ce:46:a8:17:bf:bd:5b:8c:65:54:4b:b4:23:fe:d9:e6:f3:65: d3:92:73:75:fb:76:66:30:75:47:40:bd:4b:10:26:93:8e:aa: f4:4f:59:e1:ca:33:c9:2e:ef:e4:c8:c4:81:68:93:77:8a:37: 3f:de:11:01:66:ce:c1:aa:13:db:ab:c9:88:91:d2:f2:da:13: c4:26:f9:4c:d4:a4:31:64:3b:8a:73:1f:36:12:44:a2:63:da: 23:49:ae:13:bf:56:21:11:32:9a:8f:a3:82:74:13:8d:d1:52: f8:e6:c5:44:d7:3b:75:52:15:6a:57:46:9a:e6:e9:72:3e:2e: 49:d8:ce:14:c1:c1:4f:d1:f3:a4:a5:37:5d:80:85:71:4b:85: 9c:73:2e:06:ae:d7:19:fa:a4:ad:fc:d5:f5:db:bc:db:b1:17: ec:9b:ad:3b:cb:f0:37:21:80:b0:a4:58:49:0c:52:f5:d6:7f: 12:2e:d6:8e:41:36:93:da:e9:42:50:ac:7f:6d:c1:45:4c:17: 00:d8:cf:0b:bd:c2:ed:9b:2d:c8:94:33:bf:bf:c4:0c:a8:d8: 57:71:48:f5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUd7pppTqg7124iZJGQCtkzjIJsmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwODUwMTRaFw0yNjEyMDIwODU1MTRaMDMxMTAvBgNV BAMTKEVGRjQyMTQ0NjkzRERCNEVCQzA3RjA5NTFGN0I1QkRCOUU1QUVBOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClW/6zWkwGeTotKOfOjnc8ff0g RA8QTEdRzl56NrGLsjsfRKwCMMlhXW+rSO6R8CWVdi/Vc8yre5VpBiYtjiem2MRc 3/TAV5hCoKJ1lBdLs2wIg6dVFYymFcbnkXrCiVIb4jdaUsiL8A4pgHkSLJgiiY6A QgB4Xcq0jFQ6XopKecJA9aXNzv3+yr+FNKzFGoVYVNBHlcCKjeh9gLo+SefzHLCt xgIgibPDaAOBIcYgo9xNn+0F1sNfKDS7O3JDbcsGFm6dj4sRyT1xJKpl0QR41WxZ HTJsyjnZ7WAT9joVoUR+SDlAYWCZ4Thpq1Ai1LAvBwJCg8gt0Bkvhe/52P8HAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU7/QhRGk92068B/CVH3tb255a6pAwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTk3MDcxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv2Uz MA0GCSqGSIb3DQEBCwUAA4IBAQA0ACZE5oVE66wdplSlFdgU+StIMY60YjiLrlLJ FCfmy8QyX/zORqgXv71bjGVUS7Qj/tnm82XTknN1+3ZmMHVHQL1LECaTjqr0T1nh yjPJLu/kyMSBaJN3ijc/3hEBZs7BqhPbq8mIkdLy2hPEJvlM1KQxZDuKcx82EkSi Y9ojSa4Tv1YhETKaj6OCdBON0VL45sVE1zt1UhVqV0aa5ulyPi5J2M4UwcFP0fOk pTddgIVxS4Wccy4GrtcZ+qSt/NX127zbsRfsm607y/A3IYCwpFhJDFL11n8SLtaO QTaT2ulCUKx/bcFFTBcA2M8LvcLtmy3IlDO/v8QMqNhXcUj1 -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:16 2025 by rpki-client