This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211373.roa File: AS211373.roa (raw, json) Hash identifier: K3NJfXnwtP8abShEx1WC4ZIH2GZye5Hhw7DTNVlojeQ= Subject key identifier: AD:D7:A1:7B:A4:C9:5E:51:37:6C:79:0D:88:8A:B7:2C:AC:1E:55:84 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 503702118F19576410B81CA33687976BB6557E3A Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211373.roa Signing time: Tue 20 Jan 2026 08:55:34 +0000 ROA not before: Tue 20 Jan 2026 08:50:34 +0000 ROA not after: Tue 19 Jan 2027 08:55:34 +0000 asID: 211373 IP address blocks: 179.61.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:37:02:11:8f:19:57:64:10:b8:1c:a3:36:87:97:6b:b6:55:7e:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Jan 20 08:50:34 2026 GMT Not After : Jan 19 08:55:34 2027 GMT Subject: CN=ADD7A17BA4C95E51376C790D888AB72CAC1E5584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:ba:4a:da:cd:e9:dd:97:85:ea:03:4a:ac: 2d:dc:c3:c4:d3:e8:8e:53:67:c6:3d:02:56:19:3a: 2b:95:e2:92:91:29:37:14:bb:99:f4:d2:88:6c:e5: 21:d4:15:0b:33:ae:7c:0e:54:64:35:dd:4f:dd:06: 30:c1:ce:b5:ae:f3:58:b4:78:6b:82:9d:37:f6:96: 54:96:73:3c:d7:be:af:6c:ae:df:56:0d:64:e6:57: bb:a1:e1:a0:45:b3:88:b5:fb:70:df:06:5f:a1:59: 4a:0e:60:2f:7e:b5:ef:b2:24:58:45:c6:d3:6c:74: 04:b8:1f:b3:6b:39:61:01:13:0a:7c:e1:0e:45:6e: 6a:b8:80:eb:91:d6:f9:f8:c2:f8:bc:a6:7b:12:6d: 85:c3:79:56:4a:c7:b1:c2:d6:d2:16:fc:ae:f7:0b: c5:85:9c:af:9f:81:b9:6a:f4:c8:20:f2:68:dd:a7: 20:1a:fd:c8:55:1a:14:ef:74:1b:ec:b8:48:1c:e7: 4a:59:d6:12:59:d1:1b:16:1d:cc:ae:8d:ae:08:37: 8e:74:6b:63:89:59:44:1c:79:06:06:87:cc:ae:58: 98:cd:b6:d1:62:02:98:88:01:13:39:e1:49:8c:e5: 33:8c:74:47:d9:a1:3a:9c:fd:12:6f:dd:da:62:eb: 27:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D7:A1:7B:A4:C9:5E:51:37:6C:79:0D:88:8A:B7:2C:AC:1E:55:84 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211373.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.61.153.0/24 Signature Algorithm: sha256WithRSAEncryption 68:23:9f:0c:03:57:7c:34:0e:fa:0d:63:d5:16:af:17:80:5d: aa:36:1c:02:c8:d2:5a:c2:6d:f5:73:29:c1:67:62:c3:cc:1f: 3e:bd:6b:ae:54:15:5a:fa:a0:60:cf:b5:e8:5a:f8:d0:ff:1c: e9:81:72:d8:cb:3a:68:e3:04:4f:ba:b8:64:db:06:43:e8:3a: e3:70:e9:0e:5f:e8:d7:9d:cd:66:6d:50:af:15:f2:05:b3:f4: b5:7c:c8:93:bb:29:2f:eb:0b:85:17:88:65:ae:50:a6:eb:9e: 09:9f:99:7f:ac:59:f3:f3:19:b9:1d:6d:c5:4d:1b:5a:d0:ca: f9:3a:84:06:13:c3:d6:a3:9d:48:47:7d:ef:9b:8a:cf:e4:91: e6:71:a2:0c:8c:b3:b4:93:4e:da:d7:78:32:76:36:90:be:c8: b3:26:25:f6:50:4f:6c:40:1a:85:1b:88:e2:8f:19:d7:58:e5: 66:e2:39:ba:2e:48:b0:cc:76:ba:ca:84:a9:d5:58:14:e7:ee: fe:10:8b:fe:27:d8:25:76:83:71:51:86:b1:6b:5c:79:53:64: 49:65:02:01:f2:c8:8c:c4:f2:ab:52:26:3a:52:f5:e9:14:90: 46:c3:5a:22:45:2a:e6:57:b2:87:92:81:51:98:21:c8:9b:fb: 17:55:b0:76 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUUDcCEY8ZV2QQuByjNoeXa7ZVfjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNjAxMjAwODUwMzRaFw0yNzAxMTkwODU1MzRaMDMxMTAvBgNV BAMTKEFERDdBMTdCQTRDOTVFNTEzNzZDNzkwRDg4OEFCNzJDQUMxRTU1ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17bpK2s3p3ZeF6gNKrC3cw8TT 6I5TZ8Y9AlYZOiuV4pKRKTcUu5n00ohs5SHUFQszrnwOVGQ13U/dBjDBzrWu81i0 eGuCnTf2llSWczzXvq9srt9WDWTmV7uh4aBFs4i1+3DfBl+hWUoOYC9+te+yJFhF xtNsdAS4H7NrOWEBEwp84Q5Fbmq4gOuR1vn4wvi8pnsSbYXDeVZKx7HC1tIW/K73 C8WFnK+fgblq9Mgg8mjdpyAa/chVGhTvdBvsuEgc50pZ1hJZ0RsWHcyuja4IN450 a2OJWUQceQYGh8yuWJjNttFiApiIARM54UmM5TOMdEfZoTqc/RJv3dpi6yfbAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUrdehe6TJXlE3bHkNiIq3LKweVYQwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjExMzczLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsz2Z MA0GCSqGSIb3DQEBCwUAA4IBAQBoI58MA1d8NA76DWPVFq8XgF2qNhwCyNJawm31 cynBZ2LDzB8+vWuuVBVa+qBgz7XoWvjQ/xzpgXLYyzpo4wRPurhk2wZD6DrjcOkO X+jXnc1mbVCvFfIFs/S1fMiTuykv6wuFF4hlrlCm654Jn5l/rFnz8xm5HW3FTRta 0Mr5OoQGE8PWo51IR33vm4rP5JHmcaIMjLO0k07a13gydjaQvsizJiX2UE9sQBqF G4jijxnXWOVm4jm6LkiwzHa6yoSp1VgU5+7+EIv+J9gldoNxUYaxa1x5U2RJZQIB 8siMxPKrUiY6UvXpFJBGw1oiRSrmV7KHkoFRmCHIm/sXVbB2 -----END CERTIFICATE-----Generated at Sun Jan 25 08:54:40 2026 by rpki-client