This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215813.roa
File: AS215813.roa (raw, json)
Hash identifier: 9Md4bR8xBgDoenqZSvRpieq535p1QsE21zLd13GaAEM=
Subject key identifier: C9:F6:8B:19:F5:B5:D7:D5:5F:ED:B7:86:14:2E:58:7F:00:F3:7F:23
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 05211293357273F2DCD6524283B839351458CF08
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215813.roa
Signing time: Wed 26 Nov 2025 21:55:12 +0000
ROA not before: Wed 26 Nov 2025 21:50:12 +0000
ROA not after: Wed 25 Nov 2026 21:55:12 +0000
asID: 215813
IP address blocks: 179.61.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 22:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:21:12:93:35:72:73:f2:dc:d6:52:42:83:b8:39:35:14:58:cf:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 26 21:50:12 2025 GMT
Not After : Nov 25 21:55:12 2026 GMT
Subject: CN=C9F68B19F5B5D7D55FEDB786142E587F00F37F23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:44:f7:19:4d:e4:00:c9:67:3e:50:6d:13:98:
1f:0c:cc:34:d3:d1:d2:6d:bb:c7:d3:f9:5c:94:03:
ef:9f:c6:ff:7f:b3:aa:b3:91:0c:e1:c8:dc:54:b0:
03:8b:f3:4d:e5:4c:58:3b:90:b8:91:b8:1b:40:9d:
a4:11:9c:92:8c:fe:09:41:e6:1c:2e:ce:39:ee:8e:
29:51:66:ae:de:fd:9f:34:09:0d:89:6f:1a:1f:d8:
47:7f:bc:d2:ad:2b:5c:15:18:13:e8:6b:f6:02:45:
6a:e1:2e:2f:84:c8:5c:a2:c0:a0:b2:c2:92:32:f7:
51:43:16:68:6f:28:fd:e8:2b:09:f7:0b:49:bb:18:
b5:35:79:0e:af:24:09:cb:38:ec:ea:b4:91:15:c7:
7b:bc:9a:22:25:09:56:d4:d9:a5:9e:dc:30:07:7e:
02:55:3f:ea:14:49:a2:77:8a:39:9a:96:80:28:40:
42:9d:df:49:d2:2c:c1:a7:04:50:95:57:bd:95:75:
d7:ef:a6:db:5c:5b:cf:bb:0b:b6:b2:23:c4:21:60:
e2:50:82:4b:1b:c3:33:b4:29:b5:55:1e:e8:b0:59:
64:28:79:5e:51:b5:d5:c0:06:e0:0b:5c:5a:34:2e:
00:5c:12:ad:e2:87:e0:21:07:f1:92:08:c4:0c:3b:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F6:8B:19:F5:B5:D7:D5:5F:ED:B7:86:14:2E:58:7F:00:F3:7F:23
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215813.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.190.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:6e:98:61:55:99:85:68:a1:1b:b6:1c:e2:d0:d7:f0:4b:b8:
7e:b0:a6:cb:90:fc:91:2e:3f:e4:81:aa:49:55:dd:71:bf:07:
31:50:73:34:a8:7d:f1:8e:68:bf:01:ca:94:58:d7:08:ef:c0:
1e:48:5f:50:64:41:dc:23:7b:36:aa:84:8a:d2:c5:d3:ca:7a:
89:9d:fa:d8:14:02:cd:27:a3:d7:21:58:c0:ac:16:d8:c3:72:
fa:1a:d7:1c:d7:b1:16:09:83:99:3b:25:5c:b5:67:e0:93:87:
97:75:64:1d:03:b4:9f:0a:d9:81:80:43:a4:32:df:44:de:ed:
44:c0:63:3a:a2:05:53:d7:12:16:a4:b6:5e:f5:86:24:8a:48:
5d:bb:de:36:f9:5d:ff:67:31:75:7c:58:12:fc:68:7e:f9:71:
e7:ce:76:b7:a8:8f:83:6a:3b:32:c2:bb:dd:67:c1:36:70:ab:
34:b1:6e:c1:ce:db:60:8e:f8:a2:74:ac:5b:c2:34:a4:38:92:
cd:74:e8:1c:3d:ba:14:53:07:37:7d:0e:e4:12:25:56:ab:59:
2a:d0:f6:e3:33:49:ef:4b:be:93:48:09:6f:83:c7:a7:d0:2b:
14:38:4d:72:96:f3:7e:67:47:62:1e:93:9c:6a:47:24:af:25:
51:7d:e4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:01:25 2025 by rpki-client