This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202673.roa File: AS202673.roa (raw, json) Hash identifier: pIgVVO8ahJhZavpj+mbPQxd4O+g88+PKtO8ZM+bAklA= Subject key identifier: 26:E4:36:8A:F3:10:1D:E3:F6:02:BA:77:F4:AA:35:3F:D0:E8:D0:61 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 7111672B0F7F979BABF36339375B54322DCDD35B Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202673.roa Signing time: Sun 30 Nov 2025 19:38:08 +0000 ROA not before: Sun 30 Nov 2025 19:33:08 +0000 ROA not after: Sun 29 Nov 2026 19:38:08 +0000 asID: 202673 IP address blocks: 5.181.135.0/24 maxlen: 24 191.101.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:11:67:2b:0f:7f:97:9b:ab:f3:63:39:37:5b:54:32:2d:cd:d3:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Nov 30 19:33:08 2025 GMT Not After : Nov 29 19:38:08 2026 GMT Subject: CN=26E4368AF3101DE3F602BA77F4AA353FD0E8D061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4c:14:23:bb:0b:bc:f9:f5:cd:6f:ec:20:2f: 9d:cd:ca:d1:71:59:cd:d9:28:72:ff:48:af:91:b8: 12:63:dc:1d:c1:8e:3e:34:66:72:aa:eb:4f:b1:33: 11:63:7b:05:7c:b4:ee:8c:51:a9:bc:66:cd:39:03: 99:cd:63:40:a4:bf:ec:6d:6c:a7:f9:9b:97:c0:26: 2c:ae:de:46:9d:86:3f:4f:7a:67:0d:d7:04:d9:ae: 9b:e2:34:bb:9f:d4:98:88:84:a0:8b:35:f0:26:d5: 91:4b:fb:c5:c4:7d:38:db:ac:d9:18:04:a1:77:0c: 01:48:87:02:2e:00:50:95:19:65:34:7f:47:88:06: ae:3f:a5:a8:18:5f:1c:83:2a:9f:a5:bf:0d:4d:fb: de:dd:01:b8:42:b3:ad:f7:54:56:9f:01:e7:ae:ae: 72:42:be:c7:f2:57:be:78:be:df:3e:91:ea:8e:71: b8:bf:73:8e:94:c1:4f:99:43:e1:35:a0:ad:78:58: 0a:b1:bc:e7:fd:e2:1c:d9:95:82:3b:d4:a5:c1:ac: db:c7:8b:5e:d4:f6:da:c0:1c:ea:c0:0c:dd:f8:fa: 23:e9:51:0c:ee:31:24:41:8e:7e:5b:2a:31:40:94: 4d:77:f4:cd:7e:73:a2:d3:c0:d1:3b:a4:54:f2:0d: 3d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E4:36:8A:F3:10:1D:E3:F6:02:BA:77:F4:AA:35:3F:D0:E8:D0:61 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS202673.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.135.0/24 191.101.251.0/24 Signature Algorithm: sha256WithRSAEncryption 79:fc:66:31:29:67:18:00:39:06:30:ec:5c:ba:e2:ac:9f:f9: c0:4f:e6:fb:b1:cf:34:21:fd:c3:cb:7c:4f:cb:3f:a7:36:77: 17:04:08:01:1d:5f:2a:84:79:f0:75:75:7e:b9:fd:dc:da:5a: 00:7d:6e:45:8e:5c:e4:de:29:dc:7a:72:0b:8c:06:0a:5d:b5: 8f:45:76:d6:24:4f:92:6c:4d:f1:b1:2b:96:e9:91:d1:9c:2b: 27:c6:98:6c:e5:c7:96:c4:4c:f9:73:3a:7a:ad:d6:d7:c1:4b: e8:57:5d:13:cd:9d:68:34:8e:8b:96:04:d7:b8:d6:f9:9d:36: fa:69:84:81:c2:ee:37:8e:0e:e2:05:1d:58:e2:0f:2b:7f:a6: e1:e3:08:59:3b:4b:d5:d2:91:e6:c7:7b:80:76:3f:dd:8d:79: 5e:79:d6:6d:50:eb:f4:f4:36:19:f5:46:9b:6f:55:ed:5c:a7: 08:53:92:7e:ee:12:fc:e5:33:4d:01:30:30:6a:d1:ac:a7:5d: 62:f8:3f:f3:30:66:aa:91:e6:c1:ee:1e:46:d8:cb:a5:5c:6b: 18:80:1f:eb:ee:c4:2b:aa:b9:99:cf:02:cc:d8:9f:d2:00:8b: 6b:28:06:f0:2d:7b:66:39:79:f8:c4:5f:b0:91:92:ae:9f:ff: a6:e6:cd:9b -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUcRFnKw9/l5ur82M5N1tUMi3N01swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTExMzAxOTMzMDhaFw0yNjExMjkxOTM4MDhaMDMxMTAvBgNV BAMTKDI2RTQzNjhBRjMxMDFERTNGNjAyQkE3N0Y0QUEzNTNGRDBFOEQwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnTBQjuwu8+fXNb+wgL53NytFx Wc3ZKHL/SK+RuBJj3B3Bjj40ZnKq60+xMxFjewV8tO6MUam8Zs05A5nNY0Ckv+xt bKf5m5fAJiyu3kadhj9PemcN1wTZrpviNLuf1JiIhKCLNfAm1ZFL+8XEfTjbrNkY BKF3DAFIhwIuAFCVGWU0f0eIBq4/pagYXxyDKp+lvw1N+97dAbhCs633VFafAeeu rnJCvsfyV754vt8+keqOcbi/c46UwU+ZQ+E1oK14WAqxvOf94hzZlYI71KXBrNvH i17U9trAHOrADN34+iPpUQzuMSRBjn5bKjFAlE139M1+c6LTwNE7pFTyDT1VAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUJuQ2ivMQHeP2Arp39Ko1P9Do0GEwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjAyNjczLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbWH AwQAv2X7MA0GCSqGSIb3DQEBCwUAA4IBAQB5/GYxKWcYADkGMOxcuuKsn/nAT+b7 sc80If3Dy3xPyz+nNncXBAgBHV8qhHnwdXV+uf3c2loAfW5Fjlzk3incenILjAYK XbWPRXbWJE+SbE3xsSuW6ZHRnCsnxphs5ceWxEz5czp6rdbXwUvoV10TzZ1oNI6L lgTXuNb5nTb6aYSBwu43jg7iBR1Y4g8rf6bh4whZO0vV0pHmx3uAdj/djXleedZt UOv09DYZ9Uabb1XtXKcIU5J+7hL85TNNATAwatGsp11i+D/zMGaqkebB7h5G2Mul XGsYgB/r7sQrqrmZzwLM2J/SAItrKAbwLXtmOXn4xF+wkZKun/+m5s2b -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:22 2025 by rpki-client