This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270014.roa
File: AS270014.roa (raw, json)
Hash identifier: j9bP9KM7KAAskZEmNFc7KalikaRtR/1w+pDW9qr+4r0=
Subject key identifier: BD:7D:84:AD:1E:32:CC:68:4C:D3:C9:08:47:45:46:E2:2E:8C:23:0A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 365AEC66E9FC30DAE39127415363EC7A259BB757
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270014.roa
Signing time: Sat 20 Dec 2025 12:55:32 +0000
ROA not before: Sat 20 Dec 2025 12:50:32 +0000
ROA not after: Sat 19 Dec 2026 12:55:32 +0000
asID: 270014
IP address blocks: 191.96.184.0/24 maxlen: 24
191.101.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:5a:ec:66:e9:fc:30:da:e3:91:27:41:53:63:ec:7a:25:9b:b7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Dec 20 12:50:32 2025 GMT
Not After : Dec 19 12:55:32 2026 GMT
Subject: CN=BD7D84AD1E32CC684CD3C908474546E22E8C230A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3b:d8:c4:0d:5e:7b:da:64:d8:15:09:25:4e:
6d:09:06:c0:05:d7:c3:43:c2:0a:44:b9:54:d1:cc:
58:91:ad:c4:b2:f5:64:88:f8:58:11:4d:00:42:bc:
d8:ec:c3:09:14:b7:dc:d0:fa:2f:31:65:63:23:08:
fd:1f:b3:3f:78:bf:a6:77:53:dc:92:fa:d4:1d:8a:
06:c7:3d:f7:9f:56:ff:5f:a2:3c:f4:1f:7e:61:53:
f3:a9:8a:7a:1b:f2:e2:d3:ac:25:5e:a4:e8:ec:ba:
49:e9:ea:e6:e0:b3:51:68:06:ba:b7:88:e7:ac:7f:
fc:96:ec:eb:04:d4:76:62:74:c2:c5:5b:50:00:c4:
f8:7c:96:6e:35:b6:d1:2a:a1:97:92:5e:ba:04:9b:
ae:5c:1c:a1:fe:32:fa:32:56:9c:b8:58:9e:ae:5f:
6a:e2:28:82:0e:3f:63:b0:93:df:94:96:75:ac:f5:
f0:08:e3:84:44:b3:8d:14:3a:bd:8e:53:3b:5a:fc:
ff:65:40:3a:5f:4b:68:c9:15:16:92:ae:ac:cb:09:
53:07:26:71:fb:af:4d:d8:cb:64:0a:e9:75:be:77:
0d:cb:c9:e8:55:21:a8:24:27:7d:1f:e9:f4:2c:f1:
16:53:e8:de:07:bd:10:2f:d1:2f:3d:3f:e1:8c:3a:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7D:84:AD:1E:32:CC:68:4C:D3:C9:08:47:45:46:E2:2E:8C:23:0A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270014.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.184.0/24
191.101.193.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:6b:85:79:21:e2:ca:35:00:aa:eb:09:b1:b2:af:b8:d7:e4:
a4:7f:d8:b5:44:89:0b:7a:07:ce:5f:db:ae:dd:5f:9e:62:ec:
d2:9d:30:8c:61:ad:c6:e2:78:dd:82:63:c5:63:26:98:43:0f:
ba:0b:04:c5:16:06:4c:98:08:61:05:6e:d2:92:43:f6:86:dd:
9f:0b:fd:49:a8:b3:7e:29:e0:2a:d9:8a:38:92:fe:24:de:6e:
09:72:e3:04:ee:11:f7:36:b9:43:2b:65:96:6f:c1:4c:42:c2:
fa:e4:8e:a3:9c:6f:a6:92:c4:c7:f4:36:89:b1:a1:66:4d:6b:
8f:24:c5:e6:71:ca:fb:3f:e4:56:c5:e5:27:18:85:8f:a2:2e:
c8:34:c3:5f:5c:07:72:6a:59:0a:15:e6:5b:ff:80:d7:c5:e3:
9e:3e:55:df:51:17:4b:2b:1f:cc:d6:80:2c:6a:db:c2:a6:23:
6f:90:a9:43:97:38:cc:94:5d:0d:cb:96:27:9a:71:68:2b:28:
45:7e:e7:62:80:8e:c0:12:7f:a9:57:01:d8:b1:1d:b4:c4:3a:
17:e8:35:59:d6:da:61:34:8a:8a:d7:e6:ea:4b:80:d7:13:3d:
6b:40:3b:ba:58:96:f2:40:e0:68:ef:d4:44:77:79:32:5d:83:
7e:4c:b6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:54:34 2026 by rpki-client