This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210977.roa File: AS210977.roa (raw, json) Hash identifier: vizxRt4g9heRq5C+/hHnXlDEo8Cob5fm7y41tOz9mjA= Subject key identifier: 18:4E:3E:30:16:FD:E7:AC:C3:70:E4:0A:A6:EA:08:DF:18:B2:6D:03 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 0D97BBA68E678068330E5A2E4D12B85FF9097864 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210977.roa Signing time: Wed 03 Dec 2025 08:55:12 +0000 ROA not before: Wed 03 Dec 2025 08:50:12 +0000 ROA not after: Wed 02 Dec 2026 08:55:12 +0000 asID: 210977 IP address blocks: 191.96.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:97:bb:a6:8e:67:80:68:33:0e:5a:2e:4d:12:b8:5f:f9:09:78:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 08:50:12 2025 GMT Not After : Dec 2 08:55:12 2026 GMT Subject: CN=184E3E3016FDE7ACC370E40AA6EA08DF18B26D03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:54:f6:60:01:7b:e2:d6:09:d7:f5:87:e2:07: 7f:2b:83:13:26:3f:36:4a:75:fa:c9:20:cd:f8:0c: 52:ab:36:1f:79:1e:15:fb:13:a7:be:19:5e:59:65: 60:e5:41:fc:67:24:84:a3:60:b7:ba:12:dd:e9:38: b6:f8:2f:ce:86:56:96:81:d1:f3:f9:5b:dc:88:65: 46:79:42:d2:79:92:af:ef:fb:dc:04:65:2c:eb:e2: 65:f4:b5:3d:c9:88:4e:ca:c1:cf:0e:3d:f5:45:57: c0:2c:41:fb:4c:64:7a:ff:e2:35:4b:84:55:fb:71: 3e:18:3b:18:ae:d2:43:c4:0b:00:15:08:24:36:59: d5:3a:48:18:a7:ea:1f:e0:12:8d:1a:aa:91:d6:47: 96:0d:cd:43:c1:b5:eb:89:a5:16:aa:23:6e:d9:e6: 97:73:3d:d4:c8:aa:ad:e0:1a:4d:95:bf:71:e2:ee: a6:6e:0b:e5:14:3b:60:0a:d0:ef:66:0a:02:ab:7d: a7:4c:0a:a1:53:bf:7b:88:f6:ab:f1:85:ad:ef:79: 99:52:28:40:83:c5:b4:dc:8a:d7:fa:c4:99:26:c2: ee:5c:62:77:c4:a6:d6:7b:87:03:b0:70:b4:66:04: db:2a:9f:ff:3f:79:10:02:ef:ff:31:d5:87:cf:0c: e3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4E:3E:30:16:FD:E7:AC:C3:70:E4:0A:A6:EA:08:DF:18:B2:6D:03 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210977.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.96.96.0/24 Signature Algorithm: sha256WithRSAEncryption 07:82:b7:e3:dc:85:fc:cd:a2:55:2a:85:f4:ae:29:37:0b:bc: c9:c7:23:9c:91:c8:a0:6e:7e:1b:54:1d:71:65:0b:37:f1:b8: 4f:f2:5e:e2:bd:62:ef:f4:f8:67:17:0b:ed:f0:85:0b:f6:46: 68:0a:da:95:1a:9e:f2:c8:91:27:9d:f5:11:31:8d:59:b3:ac: 9e:58:3c:58:25:1c:ae:fd:ed:f2:7f:2c:30:10:84:29:b4:78: 12:f5:b6:2c:89:e7:7e:75:01:8d:3c:38:fd:15:fc:0b:da:10: 11:ba:d6:6b:e5:1d:ce:66:54:9e:17:0c:51:78:58:b1:d5:0d: 5e:2a:26:76:0f:22:6c:3b:3b:f6:2d:de:8c:6e:92:9d:92:a3: 99:ff:71:6e:58:87:54:8c:6f:c4:8c:07:eb:f3:5b:d3:7e:d7: 5e:1e:89:d7:b3:15:e5:15:72:d1:7b:ca:e9:05:30:dc:9f:09: ba:5a:21:37:c7:54:df:6d:43:d4:d6:a3:61:f7:35:f2:73:77: 06:cb:88:4e:76:93:6c:e6:fe:31:0e:1c:9e:b5:c3:20:de:69: b0:56:c8:17:16:27:b8:7f:b4:c0:c0:27:89:69:38:c4:c5:dd: 35:ab:cc:d3:47:3b:8b:f7:ef:4a:50:df:ac:d0:18:2f:9a:0b: 9b:07:4f:16 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUDZe7po5ngGgzDlouTRK4X/kJeGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwODUwMTJaFw0yNjEyMDIwODU1MTJaMDMxMTAvBgNV BAMTKDE4NEUzRTMwMTZGREU3QUNDMzcwRTQwQUE2RUEwOERGMThCMjZEMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4VPZgAXvi1gnX9YfiB38rgxMm PzZKdfrJIM34DFKrNh95HhX7E6e+GV5ZZWDlQfxnJISjYLe6Et3pOLb4L86GVpaB 0fP5W9yIZUZ5QtJ5kq/v+9wEZSzr4mX0tT3JiE7Kwc8OPfVFV8AsQftMZHr/4jVL hFX7cT4YOxiu0kPECwAVCCQ2WdU6SBin6h/gEo0aqpHWR5YNzUPBteuJpRaqI27Z 5pdzPdTIqq3gGk2Vv3Hi7qZuC+UUO2AK0O9mCgKrfadMCqFTv3uI9qvxha3veZlS KECDxbTcitf6xJkmwu5cYnfEptZ7hwOwcLRmBNsqn/8/eRAC7/8x1YfPDOOPAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUGE4+MBb956zDcOQKpuoI3xiybQMwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjEwOTc3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv2Bg MA0GCSqGSIb3DQEBCwUAA4IBAQAHgrfj3IX8zaJVKoX0rik3C7zJxyOckcigbn4b VB1xZQs38bhP8l7ivWLv9PhnFwvt8IUL9kZoCtqVGp7yyJEnnfURMY1Zs6yeWDxY JRyu/e3yfywwEIQptHgS9bYsied+dQGNPDj9FfwL2hARutZr5R3OZlSeFwxReFix 1Q1eKiZ2DyJsOzv2Ld6MbpKdkqOZ/3FuWIdUjG/EjAfr81vTftdeHonXsxXlFXLR e8rpBTDcnwm6WiE3x1TfbUPU1qNh9zXyc3cGy4hOdpNs5v4xDhyetcMg3mmwVsgX Fie4f7TAwCeJaTjExd01q8zTRzuL9+9KUN+s0BgvmgubB08W -----END CERTIFICATE-----Generated at Sat Dec 6 12:49:05 2025 by rpki-client