This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS22427.roa File: AS22427.roa (raw, json) Hash identifier: 0sf7g8GC6BEA0nZ5+4ys7axU+2NBgLvavkNc096jS5E= Subject key identifier: AC:B0:18:E9:83:98:5F:FA:89:57:BF:C9:63:B4:9A:14:68:EC:CD:BD Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 3C7034DD9DB045EC6FEEAA9554C83624D7794D7F Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS22427.roa Signing time: Wed 26 Nov 2025 04:55:12 +0000 ROA not before: Wed 26 Nov 2025 04:50:12 +0000 ROA not after: Wed 25 Nov 2026 04:55:12 +0000 asID: 22427 IP address blocks: 181.41.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:70:34:dd:9d:b0:45:ec:6f:ee:aa:95:54:c8:36:24:d7:79:4d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Nov 26 04:50:12 2025 GMT Not After : Nov 25 04:55:12 2026 GMT Subject: CN=ACB018E983985FFA8957BFC963B49A1468ECCDBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9a:09:84:25:bc:19:d4:f7:b3:b0:89:46:58: dd:31:9b:b5:a0:7c:c5:92:2e:fb:88:d0:b1:a6:3b: 8f:47:a8:4c:8a:ac:6a:f5:d7:f0:6d:1a:08:3b:d9: d6:83:a2:9c:44:fb:73:cc:17:34:b6:53:5e:bb:8e: af:82:60:0b:bd:58:f8:58:bb:21:dd:91:e1:95:56: 79:10:92:1b:5e:85:80:71:28:5e:40:3f:b9:f2:bb: 59:4a:54:f6:b3:10:a9:4a:a2:a2:4a:c2:f2:f6:65: 5e:40:38:53:01:ad:80:e5:57:c5:42:98:fd:f0:3d: 1b:00:4b:76:52:99:f2:4c:11:cf:22:34:b0:53:70: ab:0f:03:27:38:e9:9e:13:ea:13:a2:10:74:10:62: fa:4e:59:29:cf:41:8f:7b:18:73:63:f5:c2:72:fa: 9b:e9:be:ad:bb:f8:c9:88:db:8b:ec:33:68:f9:47: 15:aa:77:07:d4:8f:10:1e:ab:b0:81:cb:6b:25:57: 72:3a:d9:80:19:c8:2d:cb:8e:c4:3f:ae:e9:c8:69: 7e:e4:f9:11:b9:34:74:4e:da:d6:b6:32:1a:79:9a: b7:e3:b9:bd:8e:e9:48:51:d1:27:8c:4a:18:7f:be: 80:51:65:e9:63:31:c4:57:28:58:46:27:53:f6:91: 57:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B0:18:E9:83:98:5F:FA:89:57:BF:C9:63:B4:9A:14:68:EC:CD:BD X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS22427.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.41.214.0/24 Signature Algorithm: sha256WithRSAEncryption 51:29:43:6e:32:3a:70:27:cd:9e:6d:a9:a1:f9:cb:3e:a9:30: 9b:e7:64:c3:3f:db:1f:a9:d5:62:ae:42:a6:4a:e4:53:13:4c: 4d:7f:f5:6f:a2:52:c0:c0:5c:f7:e3:95:fb:26:84:00:be:3a: 99:1f:37:b0:aa:13:ce:06:79:6a:eb:59:43:c8:78:80:e4:43: 0b:9e:2d:0a:94:01:f7:28:56:61:4b:0b:5a:15:e6:ac:08:19: 55:d3:fd:a8:2f:0c:ae:47:cd:b7:59:eb:38:fa:d4:9e:e6:2a: ea:cf:fc:60:ec:c5:6e:f4:69:36:7b:8e:d2:0a:73:3f:59:68: 40:52:de:97:fa:54:c4:da:dc:e7:5a:4e:18:e2:31:da:64:11: 48:f0:8e:26:a0:20:bb:65:dc:4a:e2:e5:0d:3f:f1:8d:d4:18: f3:03:f7:0d:c2:2f:8f:68:92:39:e9:58:b5:94:e8:26:90:3f: fa:34:57:df:30:e2:3a:34:e7:32:df:01:54:ac:b2:50:33:c9: cc:77:51:9c:89:5b:04:07:6c:29:14:2b:23:f7:48:7c:e8:48: ec:73:23:d7:b6:49:c6:c2:ad:00:dc:e3:b5:39:27:b4:98:28: 6c:91:af:21:62:69:ff:af:ed:ce:b3:02:25:9e:f2:a2:be:4c: a5:da:df:50 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUPHA03Z2wRexv7qqVVMg2JNd5TX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTExMjYwNDUwMTJaFw0yNjExMjUwNDU1MTJaMDMxMTAvBgNV BAMTKEFDQjAxOEU5ODM5ODVGRkE4OTU3QkZDOTYzQjQ5QTE0NjhFQ0NEQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mgmEJbwZ1PezsIlGWN0xm7Wg fMWSLvuI0LGmO49HqEyKrGr11/BtGgg72daDopxE+3PMFzS2U167jq+CYAu9WPhY uyHdkeGVVnkQkhtehYBxKF5AP7nyu1lKVPazEKlKoqJKwvL2ZV5AOFMBrYDlV8VC mP3wPRsAS3ZSmfJMEc8iNLBTcKsPAyc46Z4T6hOiEHQQYvpOWSnPQY97GHNj9cJy +pvpvq27+MmI24vsM2j5RxWqdwfUjxAeq7CBy2slV3I62YAZyC3LjsQ/runIaX7k +RG5NHRO2ta2Mhp5mrfjub2O6UhR0SeMShh/voBRZeljMcRXKFhGJ1P2kVczAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUrLAY6YOYX/qJV7/JY7SaFGjszb0wHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjI0Mjcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1KdYw DQYJKoZIhvcNAQELBQADggEBAFEpQ24yOnAnzZ5tqaH5yz6pMJvnZMM/2x+p1WKu QqZK5FMTTE1/9W+iUsDAXPfjlfsmhAC+OpkfN7CqE84GeWrrWUPIeIDkQwueLQqU AfcoVmFLC1oV5qwIGVXT/agvDK5HzbdZ6zj61J7mKurP/GDsxW70aTZ7jtIKcz9Z aEBS3pf6VMTa3OdaThjiMdpkEUjwjiagILtl3Eri5Q0/8Y3UGPMD9w3CL49okjnp WLWU6CaQP/o0V98w4jo05zLfAVSsslAzycx3UZyJWwQHbCkUKyP3SHzoSOxzI9e2 ScbCrQDc47U5J7SYKGyRryFiaf+v7c6zAiWe8qK+TKXa31A= -----END CERTIFICATE-----Generated at Sat Dec 6 15:45:15 2025 by rpki-client