This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS203647.roa File: AS203647.roa (raw, json) Hash identifier: Wm7KdRx0LSNrF9UnhE9VWcrRFCUlZIVbqcRrjJHqKAI= Subject key identifier: C9:D6:19:AF:1F:CA:05:35:13:31:11:6A:4F:B3:B6:28:AB:7A:C0:A7 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 08DDE015C6B0D8519317F547173255146816B47E Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS203647.roa Signing time: Wed 03 Dec 2025 08:55:12 +0000 ROA not before: Wed 03 Dec 2025 08:50:12 +0000 ROA not after: Wed 02 Dec 2026 08:55:12 +0000 asID: 203647 IP address blocks: 181.215.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:dd:e0:15:c6:b0:d8:51:93:17:f5:47:17:32:55:14:68:16:b4:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 08:50:12 2025 GMT Not After : Dec 2 08:55:12 2026 GMT Subject: CN=C9D619AF1FCA05351331116A4FB3B628AB7AC0A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b8:ee:83:05:90:1e:e9:a7:41:b6:23:c2:6f: 24:25:4f:21:07:6a:7e:75:90:53:db:f0:cb:db:d9: 8d:eb:22:ca:16:52:4e:cd:88:25:f1:a0:22:ab:67: 04:34:99:80:cf:fa:7d:a3:f6:bb:9e:03:25:06:9c: 4b:4f:43:14:3f:aa:b0:44:2e:38:35:76:97:76:72: 01:a7:ca:7e:ae:2e:60:2d:8c:cb:d5:15:0e:70:96: 00:0f:e2:d1:79:fa:8b:0b:2a:88:1e:f2:87:27:c6: fc:17:d4:82:16:59:c7:9d:ad:ae:3c:ef:d6:c0:5f: 43:cc:b2:04:cb:9d:b1:2f:0a:ef:54:a2:97:c8:14: b0:ee:ec:53:03:fa:8c:24:ff:13:66:fb:7a:86:f4: ac:28:64:4a:47:ad:a6:52:50:77:45:46:a2:ac:01: d4:3d:9b:9d:4f:7f:fe:a2:5b:54:69:c2:21:62:66: fb:bd:56:94:1b:b7:a7:a4:34:2d:a7:80:6d:3c:c5: ea:6f:8c:b0:dc:9f:11:6c:00:aa:28:e4:32:4a:0d: d3:b6:8b:ea:6a:58:68:4a:8f:1d:79:22:bd:16:5b: 39:83:2b:21:f3:35:b9:3f:a8:2f:5e:3b:fa:30:ce: 5b:12:4f:8e:fd:31:01:ee:97:3f:ed:cf:ac:1b:ce: 67:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D6:19:AF:1F:CA:05:35:13:31:11:6A:4F:B3:B6:28:AB:7A:C0:A7 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS203647.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.215.15.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:8f:f6:64:da:ca:67:28:0f:1e:25:09:bc:2b:ca:f0:17:23: af:c8:1a:d2:12:b0:8b:72:d2:ce:ac:6a:6c:75:a1:26:d1:72: 2b:f3:21:54:99:54:06:53:0c:24:53:f3:a6:e6:cf:51:18:97: d2:bd:51:e9:11:25:e0:96:04:62:83:76:c4:22:f0:88:68:21: 66:8b:e9:c1:a4:24:5d:82:20:e4:ac:88:ae:14:53:08:77:1c: ad:f9:e6:53:4d:93:f5:28:99:85:87:8f:47:f2:fd:92:70:76: be:d4:0d:4c:85:ae:45:21:f6:da:fe:32:e2:c7:a7:04:44:5c: 09:7f:07:f9:94:1a:9c:59:f4:81:2b:b2:03:1d:49:ef:bc:04: 4d:36:dd:99:52:08:65:4d:34:2a:08:4c:ce:3d:79:77:33:bb: 97:78:55:9b:86:7d:7b:3c:9a:cf:74:f3:dd:81:68:7d:f6:9c: 49:ac:e3:e3:d5:66:8a:ae:38:40:ff:3d:e5:ec:43:6f:c1:e0: 43:d6:49:a5:d1:92:b3:44:7c:7c:3d:e7:fc:3d:e6:cd:ff:bf: 7c:22:cb:a5:ff:8a:89:24:32:4b:ee:c0:75:ee:f4:af:05:08: a9:fe:0f:e3:5d:0f:6b:59:90:5f:79:39:6b:fa:bc:e2:eb:9c: b8:6a:6e:a7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUCN3gFcaw2FGTF/VHFzJVFGgWtH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwODUwMTJaFw0yNjEyMDIwODU1MTJaMDMxMTAvBgNV BAMTKEM5RDYxOUFGMUZDQTA1MzUxMzMxMTE2QTRGQjNCNjI4QUI3QUMwQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyuO6DBZAe6adBtiPCbyQlTyEH an51kFPb8Mvb2Y3rIsoWUk7NiCXxoCKrZwQ0mYDP+n2j9rueAyUGnEtPQxQ/qrBE Ljg1dpd2cgGnyn6uLmAtjMvVFQ5wlgAP4tF5+osLKoge8ocnxvwX1IIWWcedra48 79bAX0PMsgTLnbEvCu9UopfIFLDu7FMD+owk/xNm+3qG9KwoZEpHraZSUHdFRqKs AdQ9m51Pf/6iW1RpwiFiZvu9VpQbt6ekNC2ngG08xepvjLDcnxFsAKoo5DJKDdO2 i+pqWGhKjx15Ir0WWzmDKyHzNbk/qC9eO/owzlsST479MQHulz/tz6wbzmeTAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUydYZrx/KBTUTMRFqT7O2KKt6wKcwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjAzNjQ3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtdcP MA0GCSqGSIb3DQEBCwUAA4IBAQBMj/Zk2spnKA8eJQm8K8rwFyOvyBrSErCLctLO rGpsdaEm0XIr8yFUmVQGUwwkU/Om5s9RGJfSvVHpESXglgRig3bEIvCIaCFmi+nB pCRdgiDkrIiuFFMIdxyt+eZTTZP1KJmFh49H8v2ScHa+1A1Mha5FIfba/jLix6cE RFwJfwf5lBqcWfSBK7IDHUnvvARNNt2ZUghlTTQqCEzOPXl3M7uXeFWbhn17PJrP dPPdgWh99pxJrOPj1WaKrjhA/z3l7ENvweBD1kml0ZKzRHx8Pef8PebN/798Isul /4qJJDJL7sB17vSvBQip/g/jXQ9rWZBfeTlr+rzi65y4am6n -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:29 2025 by rpki-client