This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS19844.roa File: AS19844.roa (raw, json) Hash identifier: LJR9fAlitGGdBWekoEipIxg3xzSRCREJk15j1HpvvDw= Subject key identifier: 19:13:07:7A:69:78:CA:60:F7:A6:B8:B6:E8:A4:60:98:15:5A:60:9D Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 5C90E01E970C14931DCBB23F3D85A8A9C5DD6F7C Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS19844.roa Signing time: Wed 03 Dec 2025 08:55:14 +0000 ROA not before: Wed 03 Dec 2025 08:50:14 +0000 ROA not after: Wed 02 Dec 2026 08:55:14 +0000 asID: 19844 IP address blocks: 191.96.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:90:e0:1e:97:0c:14:93:1d:cb:b2:3f:3d:85:a8:a9:c5:dd:6f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 08:50:14 2025 GMT Not After : Dec 2 08:55:14 2026 GMT Subject: CN=1913077A6978CA60F7A6B8B6E8A46098155A609D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0b:78:3f:2e:61:60:53:b5:7f:78:7f:c0:be: 59:c5:9a:81:42:fa:e4:32:d4:10:32:15:ca:57:0b: ba:21:48:12:fb:39:a4:5a:a8:46:fd:c9:16:3e:80: 63:f2:09:74:c7:2e:8d:b5:51:ac:ee:5c:f3:66:dc: ca:b7:3a:0a:ae:84:4c:24:6a:cd:da:88:de:38:87: 4a:7b:71:50:06:a0:f2:65:61:1b:fd:af:ea:b3:81: 90:88:e8:25:6e:80:85:3b:b3:da:b7:a4:6d:6f:70: 8d:dd:76:91:d7:7b:a0:f7:0e:9b:d0:70:af:c6:73: 18:d7:cf:49:da:85:0a:a3:e2:4c:d0:83:5c:bb:2f: 9c:67:46:cc:fb:ec:77:47:79:c1:3b:cd:67:5b:d0: 67:64:ed:9d:b5:a4:9b:38:06:ce:57:e2:84:e1:cf: 15:9a:5b:0c:62:ec:d6:e6:46:ec:31:86:90:17:24: 90:d7:4b:a4:8e:4c:15:0f:71:ad:7b:11:5e:7f:5a: 2b:13:72:0c:8d:17:fb:15:d3:44:25:29:d6:d6:f5: ca:2e:d8:10:ef:6e:fa:19:30:c0:36:a3:63:7d:b0: 0a:2e:b6:66:01:3c:02:47:4d:da:c3:cd:38:a7:8b: 7a:2b:d2:33:cd:36:8d:35:7e:d8:41:53:5f:64:e2: 0d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:13:07:7A:69:78:CA:60:F7:A6:B8:B6:E8:A4:60:98:15:5A:60:9D X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS19844.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.96.49.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:da:de:e1:bf:f3:a3:0d:a2:bc:73:35:7b:50:3b:e0:f2:9f: 4e:6d:2f:5a:f7:02:20:4c:26:6d:c5:1f:a5:05:69:61:69:dd: 5d:b9:90:cb:26:d6:64:1d:ac:78:12:86:ea:9b:24:60:04:2f: d7:8a:bd:88:e7:80:a7:38:38:d8:3f:72:ac:48:54:b3:d6:00: e7:47:ab:9e:3d:04:fc:4e:2d:c4:06:22:8a:e2:a4:2f:7b:ce: 41:e1:50:ae:2c:13:bc:00:2a:ad:e9:a5:3a:22:c2:d9:33:73: eb:10:01:be:45:95:b9:cf:94:9f:3d:d6:9f:ff:04:a7:b8:d6: 3a:a6:fa:04:5f:05:dc:de:2e:db:38:f3:58:8f:67:55:46:9b: 8e:11:c4:de:01:24:b5:f6:26:6b:1c:1e:5b:9a:a4:f2:c4:b4: 98:ff:1c:94:af:2b:47:bc:7d:0a:12:52:a0:5d:dc:53:3c:05: ca:55:b1:4d:6c:66:f5:3c:47:af:2e:5d:f4:df:97:86:d0:46: 50:da:a2:29:98:5d:66:bd:1c:82:64:d9:65:f4:de:c8:c0:6d: 28:b5:1b:09:3a:23:05:10:b5:1e:9f:b5:6a:96:bb:d5:5a:83: 01:f8:dd:43:48:5c:51:aa:28:01:34:61:66:15:3a:62:ba:ec: 9e:e6:4b:b3 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUXJDgHpcMFJMdy7I/PYWoqcXdb3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwODUwMTRaFw0yNjEyMDIwODU1MTRaMDMxMTAvBgNV BAMTKDE5MTMwNzdBNjk3OENBNjBGN0E2QjhCNkU4QTQ2MDk4MTU1QTYwOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYC3g/LmFgU7V/eH/AvlnFmoFC +uQy1BAyFcpXC7ohSBL7OaRaqEb9yRY+gGPyCXTHLo21UazuXPNm3Mq3OgquhEwk as3aiN44h0p7cVAGoPJlYRv9r+qzgZCI6CVugIU7s9q3pG1vcI3ddpHXe6D3DpvQ cK/GcxjXz0nahQqj4kzQg1y7L5xnRsz77HdHecE7zWdb0Gdk7Z21pJs4Bs5X4oTh zxWaWwxi7NbmRuwxhpAXJJDXS6SOTBUPca17EV5/WisTcgyNF/sV00QlKdbW9cou 2BDvbvoZMMA2o2N9sAoutmYBPAJHTdrDzTini3or0jPNNo01fthBU19k4g1DAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUGRMHeml4ymD3pri26KRgmBVaYJ0wHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTk4NDQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/YDEw DQYJKoZIhvcNAQELBQADggEBAEva3uG/86MNorxzNXtQO+Dyn05tL1r3AiBMJm3F H6UFaWFp3V25kMsm1mQdrHgShuqbJGAEL9eKvYjngKc4ONg/cqxIVLPWAOdHq549 BPxOLcQGIoripC97zkHhUK4sE7wAKq3ppToiwtkzc+sQAb5FlbnPlJ891p//BKe4 1jqm+gRfBdzeLts481iPZ1VGm44RxN4BJLX2JmscHluapPLEtJj/HJSvK0e8fQoS UqBd3FM8BcpVsU1sZvU8R68uXfTfl4bQRlDaoimYXWa9HIJk2WX03sjAbSi1Gwk6 IwUQtR6ftWqWu9VagwH43UNIXFGqKAE0YWYVOmK67J7mS7M= -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:23 2025 by rpki-client