This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210356.roa File: AS210356.roa (raw, json) Hash identifier: KrB38byS7fjl91tu3Q76rftvhmxGHCsE4xxgSYKJlqE= Subject key identifier: C1:28:A8:7E:FF:87:4E:2B:E0:75:1E:0D:B3:F6:8B:83:C7:55:B2:04 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 20E518F2DE43828CDF814F5E110025B62A837C0D Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210356.roa Signing time: Wed 03 Dec 2025 08:55:13 +0000 ROA not before: Wed 03 Dec 2025 08:50:13 +0000 ROA not after: Wed 02 Dec 2026 08:55:13 +0000 asID: 210356 IP address blocks: 181.214.48.0/24 maxlen: 24 181.214.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e5:18:f2:de:43:82:8c:df:81:4f:5e:11:00:25:b6:2a:83:7c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 08:50:13 2025 GMT Not After : Dec 2 08:55:13 2026 GMT Subject: CN=C128A87EFF874E2BE0751E0DB3F68B83C755B204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:25:f0:7b:1d:4d:ee:3c:c0:d8:44:a7:50:de: 5f:c0:b7:bc:e1:1e:66:e5:c7:fc:5d:91:cd:a5:2b: fc:66:a6:d6:6b:d4:70:48:60:e8:4d:b4:dd:9b:a5: 4a:78:59:e1:80:73:28:ec:8a:dd:d6:26:cc:54:d0: de:05:bf:ae:9f:09:7b:81:c8:54:a8:4e:e7:b6:00: 84:dd:99:18:4d:eb:6c:04:ec:41:24:f2:33:d5:8f: 2e:23:a3:20:25:1b:dc:53:ce:54:52:0e:f1:f1:31: cc:0e:ba:c5:3e:a1:cf:4e:db:d1:e3:f3:a6:32:2e: 88:85:50:5d:3b:06:d4:c8:0b:59:2b:3b:b0:18:ec: d8:17:97:f1:94:eb:74:aa:ac:46:d5:69:67:09:c3: 2a:77:36:23:54:b4:3c:7e:0a:87:ed:b5:bc:e2:34: 5a:9e:ad:2b:b2:75:c8:a2:bc:b4:54:44:e7:1c:a9: 1f:cf:8c:a2:99:6b:88:8b:3b:bd:b4:9f:98:08:e5: 04:a4:a1:e1:c6:66:74:51:e8:47:95:50:73:30:5c: 7b:5c:93:ba:45:94:80:a5:33:29:f9:58:ef:a2:19: 9c:85:c8:08:0b:31:95:e2:7a:bb:99:72:51:6c:be: 56:63:7c:45:ce:5e:d8:fc:8f:ff:47:23:05:0c:c5: 7b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:28:A8:7E:FF:87:4E:2B:E0:75:1E:0D:B3:F6:8B:83:C7:55:B2:04 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.214.48.0/24 181.214.221.0/24 Signature Algorithm: sha256WithRSAEncryption ad:09:77:84:da:e7:33:eb:7d:b5:b9:46:00:57:49:cc:3d:80: 3c:78:b5:93:42:99:1b:a2:a4:31:e7:dd:a9:9d:68:27:dd:dd: e7:69:67:c6:24:29:75:02:c6:de:64:a9:9d:4f:3e:e1:df:12: 53:00:f8:64:a7:6a:f7:0f:32:52:86:99:23:60:c1:b2:47:40: cc:ff:ce:16:05:4c:61:b2:f1:02:77:86:2f:2e:50:52:b1:17: 4c:93:e1:b9:23:24:01:09:79:d6:83:b2:a6:6e:c5:22:ca:b8: cc:d9:ac:7c:4d:a1:67:d2:93:31:e5:84:56:a5:97:95:e2:a4: ac:27:c6:36:bc:75:15:75:fa:ef:29:15:cc:6f:c1:00:46:22: 4a:a1:3d:e8:d5:22:28:b9:26:2e:78:59:a3:b1:f1:05:2d:e0: e2:fb:25:72:76:2e:3e:f9:68:3c:1b:b7:45:ea:2f:1d:4e:fd: 8f:1c:3c:df:f7:5d:59:4e:c8:f2:cb:f2:fe:0f:10:01:eb:06: 03:9c:57:10:0b:c4:e3:5e:df:c4:d0:1a:1b:8b:fd:06:c0:82: 65:13:7d:b5:61:70:f0:7f:e1:9d:b2:f8:e3:f2:d5:a0:22:8d: 08:8a:fb:54:5f:0c:bf:26:5b:a2:73:40:8c:6e:86:13:67:d4: e0:8a:a1:34 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUIOUY8t5DgozfgU9eEQAltiqDfA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwODUwMTNaFw0yNjEyMDIwODU1MTNaMDMxMTAvBgNV BAMTKEMxMjhBODdFRkY4NzRFMkJFMDc1MUUwREIzRjY4QjgzQzc1NUIyMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0JfB7HU3uPMDYRKdQ3l/At7zh Hmblx/xdkc2lK/xmptZr1HBIYOhNtN2bpUp4WeGAcyjsit3WJsxU0N4Fv66fCXuB yFSoTue2AITdmRhN62wE7EEk8jPVjy4joyAlG9xTzlRSDvHxMcwOusU+oc9O29Hj 86YyLoiFUF07BtTIC1krO7AY7NgXl/GU63SqrEbVaWcJwyp3NiNUtDx+Cofttbzi NFqerSuydciivLRUROccqR/PjKKZa4iLO720n5gI5QSkoeHGZnRR6EeVUHMwXHtc k7pFlIClMyn5WO+iGZyFyAgLMZXieruZclFsvlZjfEXOXtj8j/9HIwUMxXsdAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUwSiofv+HTivgdR4Ns/aLg8dVsgQwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjEwMzU2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAtdYw AwQAtdbdMA0GCSqGSIb3DQEBCwUAA4IBAQCtCXeE2ucz6321uUYAV0nMPYA8eLWT QpkboqQx592pnWgn3d3naWfGJCl1AsbeZKmdTz7h3xJTAPhkp2r3DzJShpkjYMGy R0DM/84WBUxhsvECd4YvLlBSsRdMk+G5IyQBCXnWg7KmbsUiyrjM2ax8TaFn0pMx 5YRWpZeV4qSsJ8Y2vHUVdfrvKRXMb8EARiJKoT3o1SIouSYueFmjsfEFLeDi+yVy di4++Wg8G7dF6i8dTv2PHDzf911ZTsjyy/L+DxAB6wYDnFcQC8TjXt/E0Bobi/0G wIJlE321YXDwf+Gdsvjj8tWgIo0IivtUXwy/Jluic0CMboYTZ9TgiqE0 -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:46 2025 by rpki-client