This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210846.roa File: AS210846.roa (raw, json) Hash identifier: 7SL3irJRiMHqmMGym8xfPvZ6Ns3M7IZ6vymxfUT8JEk= Subject key identifier: 82:53:C7:66:20:79:D6:F3:B0:41:EE:AC:50:B2:B7:36:AB:CD:46:ED Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 3B88DE503B8E99A2B25C1EC89B4498C5495A1CBC Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210846.roa Signing time: Wed 03 Dec 2025 08:55:13 +0000 ROA not before: Wed 03 Dec 2025 08:50:13 +0000 ROA not after: Wed 02 Dec 2026 08:55:13 +0000 asID: 210846 IP address blocks: 45.133.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:88:de:50:3b:8e:99:a2:b2:5c:1e:c8:9b:44:98:c5:49:5a:1c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 08:50:13 2025 GMT Not After : Dec 2 08:55:13 2026 GMT Subject: CN=8253C7662079D6F3B041EEAC50B2B736ABCD46ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b7:e8:89:21:51:1e:6c:82:4a:53:9e:93:ca: d1:28:1d:5c:93:6e:0a:a6:c7:3b:b2:bd:44:2b:f7: e2:5a:33:3b:9e:9a:ff:69:a6:10:6d:80:c9:f8:6a: 42:b5:a7:6b:c1:36:6f:7f:67:39:3b:d2:b2:98:6e: f2:29:3c:62:08:e2:b1:87:d9:8f:4d:b5:42:81:e2: f9:b1:b6:d2:0f:5d:77:e2:35:11:04:80:53:bd:da: 16:dc:02:0d:19:58:fa:6a:fa:d2:39:af:5a:c0:a4: 0e:ee:8f:58:31:dc:07:bc:ff:44:8b:5c:8b:18:4c: 19:51:b0:c1:04:50:de:6e:36:d0:e2:1d:e8:63:4e: a1:03:97:9b:23:2e:0d:6d:9a:93:ff:96:5e:a2:2f: c4:b8:2c:46:4a:e3:a3:a8:be:67:36:8f:ba:e4:06: dd:4c:f4:68:d2:97:02:32:54:82:82:bb:5a:89:cc: 0e:e7:21:05:bc:e3:68:5b:52:60:c0:82:00:82:60: 5b:a0:62:37:d7:08:95:95:25:bc:fa:7d:35:48:53: 79:48:be:64:7c:c0:e2:ef:9e:80:97:3c:05:02:75: 70:96:7f:01:3d:47:8f:4a:cf:bc:d0:85:03:9f:db: 60:c0:ac:48:87:90:9d:2f:c7:fe:68:d6:06:b4:88: cd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:53:C7:66:20:79:D6:F3:B0:41:EE:AC:50:B2:B7:36:AB:CD:46:ED X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210846.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.174.0/24 Signature Algorithm: sha256WithRSAEncryption 47:3f:47:f5:3c:9a:5e:cc:84:b1:e0:b0:43:cd:e6:0d:7e:2e: de:6d:c1:52:42:a7:73:6e:54:61:65:34:c0:b1:97:f0:84:21: b5:67:bc:df:ac:b2:f0:6e:27:84:a8:61:81:a9:39:16:26:be: 8e:cb:df:5c:86:95:de:e8:36:3c:7b:80:1c:36:88:25:32:36: 60:5e:2a:7e:1a:8e:95:6f:b2:62:2c:c9:af:95:ec:b9:76:9a: 7a:6b:17:dd:e6:94:63:42:0c:01:b5:be:fd:80:07:b7:53:4c: d1:11:0a:1e:74:e7:cf:99:6c:14:64:55:97:a9:69:63:91:82: b6:a9:79:e1:62:0c:ff:86:96:4f:b0:1b:8f:13:ba:08:ab:7e: d6:46:b3:26:1c:01:3d:10:15:10:a4:d0:ca:e9:f4:a6:dd:0f: a5:1f:34:0b:c1:b2:c7:15:07:4e:72:f7:b5:d7:66:a2:85:83: fc:25:60:7c:71:d2:51:c6:cd:9b:cb:f5:44:25:4b:1a:b1:eb: 6a:62:95:93:7b:6a:73:d0:db:15:dd:54:f6:b0:6f:a7:75:b4: fe:31:bc:22:bd:7c:56:df:ba:71:13:a4:eb:6e:72:93:c0:0c: 18:36:57:5b:54:b1:50:4b:50:9c:0f:9d:5e:bd:a1:41:a3:d0: d8:b9:85:61 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUO4jeUDuOmaKyXB7Im0SYxUlaHLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwODUwMTNaFw0yNjEyMDIwODU1MTNaMDMxMTAvBgNV BAMTKDgyNTNDNzY2MjA3OUQ2RjNCMDQxRUVBQzUwQjJCNzM2QUJDRDQ2RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDft+iJIVEebIJKU56TytEoHVyT bgqmxzuyvUQr9+JaMzuemv9pphBtgMn4akK1p2vBNm9/Zzk70rKYbvIpPGII4rGH 2Y9NtUKB4vmxttIPXXfiNREEgFO92hbcAg0ZWPpq+tI5r1rApA7uj1gx3Ae8/0SL XIsYTBlRsMEEUN5uNtDiHehjTqEDl5sjLg1tmpP/ll6iL8S4LEZK46Oovmc2j7rk Bt1M9GjSlwIyVIKCu1qJzA7nIQW842hbUmDAggCCYFugYjfXCJWVJbz6fTVIU3lI vmR8wOLvnoCXPAUCdXCWfwE9R49Kz7zQhQOf22DArEiHkJ0vx/5o1ga0iM37AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUglPHZiB51vOwQe6sULK3NqvNRu0wHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjEwODQ2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYWu MA0GCSqGSIb3DQEBCwUAA4IBAQBHP0f1PJpezISx4LBDzeYNfi7ebcFSQqdzblRh ZTTAsZfwhCG1Z7zfrLLwbieEqGGBqTkWJr6Oy99chpXe6DY8e4AcNoglMjZgXip+ Go6Vb7JiLMmvley5dpp6axfd5pRjQgwBtb79gAe3U0zREQoedOfPmWwUZFWXqWlj kYK2qXnhYgz/hpZPsBuPE7oIq37WRrMmHAE9EBUQpNDK6fSm3Q+lHzQLwbLHFQdO cve112aihYP8JWB8cdJRxs2by/VEJUsasetqYpWTe2pz0NsV3VT2sG+ndbT+Mbwi vXxW37pxE6TrbnKTwAwYNldbVLFQS1CcD51evaFBo9DYuYVh -----END CERTIFICATE-----Generated at Sat Dec 6 12:46:39 2025 by rpki-client