This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211439.roa File: AS211439.roa (raw, json) Hash identifier: qBnAwtN2C+qBYBUx5LFt/YxZJj9yiVvzssuNqIdD6xo= Subject key identifier: 09:46:8E:29:81:44:54:A0:3A:30:95:A8:78:1A:51:DA:47:38:2A:A2 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 3815611094EF54C5515EAE9B3484DB8AFB767A09 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211439.roa Signing time: Tue 20 Jan 2026 15:55:34 +0000 ROA not before: Tue 20 Jan 2026 15:50:34 +0000 ROA not after: Tue 19 Jan 2027 15:55:34 +0000 asID: 211439 IP address blocks: 181.41.209.0/24 maxlen: 24 181.214.172.0/24 maxlen: 24 181.215.24.0/24 maxlen: 24 181.215.54.0/24 maxlen: 24 191.96.2.0/24 maxlen: 24 191.101.143.0/24 maxlen: 24 191.101.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:15:61:10:94:ef:54:c5:51:5e:ae:9b:34:84:db:8a:fb:76:7a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Jan 20 15:50:34 2026 GMT Not After : Jan 19 15:55:34 2027 GMT Subject: CN=09468E29814454A03A3095A8781A51DA47382AA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:e6:cc:65:2d:54:75:88:02:3b:8c:6f:58: e5:46:15:3c:b7:ab:ce:e7:99:83:86:48:a2:dd:98: dd:02:d4:5f:b6:b1:f6:51:1c:2b:b0:fe:9e:7c:5c: 4d:3b:26:21:fb:55:cc:b1:c0:65:8d:7c:a2:0e:36: ad:92:e3:3a:1a:67:d2:b0:cc:2b:5a:1f:5a:38:e2: 55:f2:7a:3f:ea:9e:08:a8:41:4a:1c:b3:0a:d4:b7: 41:cb:cc:51:ee:d0:b0:2f:64:ac:10:c8:10:03:79: ca:5a:73:69:fd:a9:24:6c:0c:e2:57:ab:ab:08:b9: 58:4d:be:58:7e:49:d6:c9:10:42:83:95:10:d5:34: f4:ac:99:be:cc:76:b7:c6:d5:0b:ed:4a:85:8e:c6: 08:09:e6:9f:1a:e1:d8:33:92:f8:50:d1:fc:f0:f0: b5:7f:f7:38:7f:7a:cc:70:35:07:8b:23:37:1c:bd: 6e:5b:dd:c7:a7:45:5a:53:1e:51:24:9c:cb:ca:ca: c3:30:46:59:64:7f:94:03:2e:aa:65:62:43:d2:5e: cc:c3:55:06:e9:4f:cc:a0:60:3b:d4:e4:5a:67:3b: c5:d3:71:90:88:6d:12:a8:55:76:5c:a4:1c:6b:38: b1:a5:0a:8b:78:06:04:92:df:78:e1:fb:14:b4:61: e2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:46:8E:29:81:44:54:A0:3A:30:95:A8:78:1A:51:DA:47:38:2A:A2 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.41.209.0/24 181.214.172.0/24 181.215.24.0/24 181.215.54.0/24 191.96.2.0/24 191.101.143.0/24 191.101.248.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:0c:62:93:15:32:1b:14:91:90:e6:0b:d5:5e:66:d5:9d:ba: 67:c2:2c:d4:b1:5e:bb:af:fa:5a:33:20:5e:c6:18:bd:50:21: 42:1d:eb:e6:65:c2:2f:5e:af:d8:93:77:a6:0a:b3:90:27:6e: 4f:9c:ec:ab:c5:49:50:f8:8d:5d:dc:4a:cc:b9:af:33:a9:9d: a3:b9:ef:7c:69:3c:f9:10:32:28:3e:ce:54:1a:c2:43:02:df: 59:cf:78:68:de:d9:94:79:f9:a5:c4:53:25:19:dd:d4:70:d1: 46:b5:40:00:26:a8:2f:7d:ea:1b:6c:80:01:ec:cc:39:58:de: b1:d0:55:ae:0d:f1:29:5c:8c:89:0b:e0:a5:a9:cc:e7:49:fd: c1:f5:ce:9a:07:84:4e:43:6c:9c:b9:bb:a9:e4:f7:d0:4f:9e: 3e:97:24:43:c2:a1:64:52:6f:8e:7c:39:a0:24:06:03:65:09: 13:0a:45:1f:e9:63:4d:90:66:2d:9b:b1:15:d5:8c:a0:a4:4c: f4:f5:be:62:b4:e9:c5:81:5d:00:ec:39:06:0c:28:d8:1e:9d: 14:99:b5:ee:91:ac:b3:99:16:34:7c:ba:d4:6f:3a:70:86:4f: f5:0d:1b:e1:78:37:56:7f:c7:81:fd:25:d2:f6:44:20:f6:df: 33:cf:c1:da -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUOBVhEJTvVMVRXq6bNITbivt2egkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNjAxMjAxNTUwMzRaFw0yNzAxMTkxNTU1MzRaMDMxMTAvBgNV BAMTKDA5NDY4RTI5ODE0NDU0QTAzQTMwOTVBODc4MUE1MURBNDczODJBQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+OObMZS1UdYgCO4xvWOVGFTy3 q87nmYOGSKLdmN0C1F+2sfZRHCuw/p58XE07JiH7VcyxwGWNfKIONq2S4zoaZ9Kw zCtaH1o44lXyej/qngioQUocswrUt0HLzFHu0LAvZKwQyBADecpac2n9qSRsDOJX q6sIuVhNvlh+SdbJEEKDlRDVNPSsmb7MdrfG1QvtSoWOxggJ5p8a4dgzkvhQ0fzw 8LV/9zh/esxwNQeLIzccvW5b3cenRVpTHlEknMvKysMwRllkf5QDLqplYkPSXszD VQbpT8ygYDvU5FpnO8XTcZCIbRKoVXZcpBxrOLGlCot4BgSS33jh+xS0YeKxAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUCUaOKYFEVKA6MJWoeBpR2kc4KqIwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjExNDM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAtSnR AwQAtdasAwQAtdcYAwQAtdc2AwQAv2ACAwQAv2WPAwQAv2X4MA0GCSqGSIb3DQEB CwUAA4IBAQA6DGKTFTIbFJGQ5gvVXmbVnbpnwizUsV67r/paMyBexhi9UCFCHevm ZcIvXq/Yk3emCrOQJ25PnOyrxUlQ+I1d3ErMua8zqZ2jue98aTz5EDIoPs5UGsJD At9Zz3ho3tmUefmlxFMlGd3UcNFGtUAAJqgvfeobbIAB7Mw5WN6x0FWuDfEpXIyJ C+ClqcznSf3B9c6aB4ROQ2ycubup5PfQT54+lyRDwqFkUm+OfDmgJAYDZQkTCkUf 6WNNkGYtm7EV1YygpEz09b5itOnFgV0A7DkGDCjYHp0UmbXukayzmRY0fLrUbzpw hk/1DRvheDdWf8eB/SXS9kQg9t8zz8Ha -----END CERTIFICATE-----Generated at Sun Jan 25 08:54:26 2026 by rpki-client