This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS199058.roa File: AS199058.roa (raw, json) Hash identifier: kd2Oy8mu2wXCqmt9kZJOpAw6pH/3g2c9PK8gMXZjnuY= Subject key identifier: 71:7E:47:B2:13:86:37:D2:14:3A:66:C3:CE:A2:52:E0:57:D7:F3:F6 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 0491A6188C53E94576448741EA6CD7AB22B1CA28 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS199058.roa Signing time: Tue 16 Dec 2025 10:55:32 +0000 ROA not before: Tue 16 Dec 2025 10:50:32 +0000 ROA not after: Tue 15 Dec 2026 10:55:32 +0000 asID: 199058 IP address blocks: 191.101.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:91:a6:18:8c:53:e9:45:76:44:87:41:ea:6c:d7:ab:22:b1:ca:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 16 10:50:32 2025 GMT Not After : Dec 15 10:55:32 2026 GMT Subject: CN=717E47B2138637D2143A66C3CEA252E057D7F3F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bd:76:3a:65:f1:53:df:c9:4a:f0:fb:9a:b3: d2:de:36:9c:bf:ee:7d:9f:03:06:cd:1e:29:63:8e: 8d:4f:9c:15:66:2d:1e:52:b1:dc:fe:3a:d4:1d:e9: 0c:31:90:c0:df:2b:20:5c:8d:fd:26:e3:3a:55:f1: 20:7b:ee:75:ca:20:8e:17:3d:72:8a:d1:b7:96:3f: b2:cf:33:6c:08:95:0d:71:0c:e6:93:be:4d:19:cd: 26:cc:c9:c0:14:ac:e8:59:1c:65:e0:9f:49:c9:34: 29:60:1b:46:4c:13:de:9b:36:41:e9:b7:b6:e0:28: d8:52:26:43:84:c5:f8:9a:c3:12:ab:ac:51:d3:69: 3d:15:78:a6:8e:0c:74:19:f2:19:f3:b0:f6:a0:01: cf:26:99:48:eb:59:f1:65:70:77:eb:4a:55:7a:71: 80:ca:6b:30:7a:20:1f:eb:d1:a7:0b:e2:a6:68:4c: 07:32:98:3d:8e:fe:d9:f5:05:e4:89:01:eb:5f:67: 5d:a5:c4:f1:b2:75:e8:c5:34:55:a6:60:6f:f7:b0: b8:16:df:27:d9:93:f2:c5:54:11:0e:24:67:ad:5f: a3:9d:2b:0f:3f:40:1c:d0:34:16:2f:a6:7b:64:45: 32:90:ec:03:84:a2:55:b7:6e:f2:17:aa:e0:c6:21: 19:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7E:47:B2:13:86:37:D2:14:3A:66:C3:CE:A2:52:E0:57:D7:F3:F6 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS199058.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.101.184.0/24 Signature Algorithm: sha256WithRSAEncryption 56:54:0d:6e:62:8f:82:f4:a3:30:08:66:ee:a8:b1:80:31:d5: d3:e8:29:7b:d8:eb:44:1f:cf:ec:a1:a7:6f:f4:7a:b0:99:2e: f1:00:ae:8e:bc:a5:5b:4b:0d:35:f2:82:ed:95:7e:65:74:0c: 22:79:f5:c5:8c:6d:b7:95:5b:d4:15:8c:c1:d6:5f:03:60:04: 39:8e:fc:6a:f9:30:3f:f6:e7:5c:83:70:2d:de:3b:4f:bc:62: 2e:26:17:3e:19:cd:89:49:50:af:de:f5:83:b2:ce:38:4c:e4: f7:dd:ce:43:0b:d0:08:92:7d:b5:48:d6:73:51:e0:ae:dc:a3: 66:75:8e:5d:81:7b:da:5a:ad:96:e1:f4:e1:65:a8:25:2f:5b: 88:39:6a:de:51:7f:d8:8e:5f:5b:c4:c7:a4:52:bf:b9:da:18: bd:97:97:0b:d1:19:8a:41:82:10:2c:f0:2a:64:76:e1:48:6d: 68:3c:dd:53:3a:da:76:15:0d:b4:9e:eb:77:ff:5e:53:5b:16: 9d:50:91:cf:aa:c9:c9:27:f7:93:c9:d6:37:e4:15:ca:90:0a: cb:11:c1:b8:32:8e:57:40:ee:79:0e:c3:d8:18:6e:30:67:4c: 0a:29:3b:9d:b0:6b:33:6c:25:99:ce:7e:ee:59:7c:6c:37:09: f6:e3:f7:51 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUBJGmGIxT6UV2RIdB6mzXqyKxyigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMTYxMDUwMzJaFw0yNjEyMTUxMDU1MzJaMDMxMTAvBgNV BAMTKDcxN0U0N0IyMTM4NjM3RDIxNDNBNjZDM0NFQTI1MkUwNTdEN0YzRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCovXY6ZfFT38lK8Puas9LeNpy/ 7n2fAwbNHiljjo1PnBVmLR5Ssdz+OtQd6QwxkMDfKyBcjf0m4zpV8SB77nXKII4X PXKK0beWP7LPM2wIlQ1xDOaTvk0ZzSbMycAUrOhZHGXgn0nJNClgG0ZME96bNkHp t7bgKNhSJkOExfiawxKrrFHTaT0VeKaODHQZ8hnzsPagAc8mmUjrWfFlcHfrSlV6 cYDKazB6IB/r0acL4qZoTAcymD2O/tn1BeSJAetfZ12lxPGydejFNFWmYG/3sLgW 3yfZk/LFVBEOJGetX6OdKw8/QBzQNBYvpntkRTKQ7AOEolW3bvIXquDGIRmpAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUcX5HshOGN9IUOmbDzqJS4FfX8/YwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTk5MDU4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv2W4 MA0GCSqGSIb3DQEBCwUAA4IBAQBWVA1uYo+C9KMwCGbuqLGAMdXT6Cl72OtEH8/s oadv9HqwmS7xAK6OvKVbSw018oLtlX5ldAwiefXFjG23lVvUFYzB1l8DYAQ5jvxq +TA/9udcg3At3jtPvGIuJhc+Gc2JSVCv3vWDss44TOT33c5DC9AIkn21SNZzUeCu 3KNmdY5dgXvaWq2W4fThZaglL1uIOWreUX/Yjl9bxMekUr+52hi9l5cL0RmKQYIQ LPAqZHbhSG1oPN1TOtp2FQ20nut3/15TWxadUJHPqsnJJ/eTydY35BXKkArLEcG4 Mo5XQO55DsPYGG4wZ0wKKTudsGszbCWZzn7uWXxsNwn24/dR -----END CERTIFICATE-----Generated at Wed Dec 17 17:56:26 2025 by rpki-client