This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270564.roa File: AS270564.roa (raw, json) Hash identifier: XR+7O8RqH4Fpdp7fEM+6eNgsjqtqJ5YgqRYBIN1pMYo= Subject key identifier: 08:55:F0:5C:10:1A:1B:35:81:7A:85:29:6D:05:6A:12:B8:DC:D9:D7 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 544C10195C87E6C3D0220420E7C3FD4A83D1F227 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270564.roa Signing time: Wed 03 Dec 2025 08:55:13 +0000 ROA not before: Wed 03 Dec 2025 08:50:13 +0000 ROA not after: Wed 02 Dec 2026 08:55:13 +0000 asID: 270564 IP address blocks: 181.41.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:4c:10:19:5c:87:e6:c3:d0:22:04:20:e7:c3:fd:4a:83:d1:f2:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 08:50:13 2025 GMT Not After : Dec 2 08:55:13 2026 GMT Subject: CN=0855F05C101A1B35817A85296D056A12B8DCD9D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6f:10:9f:bc:e9:16:87:0d:e0:26:52:ee:b0: 02:22:80:1c:01:70:78:99:25:f3:36:21:38:bc:86: c4:20:73:59:0b:19:d8:87:87:81:58:37:9e:31:95: df:7e:f7:e2:5f:ba:a1:3e:fb:b7:68:c8:41:f2:8f: c3:54:16:8c:b3:89:17:ce:44:78:5b:b1:70:e7:3a: cd:d6:d3:a6:1c:dd:2a:4b:7f:a7:25:43:0c:6f:18: 98:fb:ca:e1:c7:20:57:2f:da:2b:15:d5:69:ca:96: 3f:ab:30:aa:5e:da:80:1b:42:78:29:ed:5e:bf:f7: 5c:7d:77:75:47:76:bb:df:d2:19:05:47:e5:bc:25: be:ad:9e:d4:f8:e4:46:ab:fe:91:ac:3c:d4:7e:82: 38:5f:c5:f1:c7:3a:87:3f:4a:69:c9:44:c3:71:af: 68:dd:1a:48:1c:66:f4:52:1c:6c:0c:b3:d8:6b:51: 5e:88:02:57:a4:06:f9:23:59:f9:7a:a2:09:fe:49: 34:ea:41:ed:49:23:be:96:e3:a4:15:19:d1:66:e8: 4d:0a:41:ec:9c:3d:5a:45:83:e2:73:e8:f4:ef:72: d4:cb:21:e5:c6:d5:db:60:6f:79:e6:1c:77:b7:cc: 82:36:03:a3:69:3b:d8:2b:3b:01:67:36:7b:65:5d: d8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:55:F0:5C:10:1A:1B:35:81:7A:85:29:6D:05:6A:12:B8:DC:D9:D7 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270564.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.41.200.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:2b:91:87:9a:86:09:73:03:51:ac:b0:ff:7e:35:9e:68:f9: 8c:9d:cc:42:34:72:3a:8f:47:0d:6f:22:31:e8:fb:08:f4:ae: 66:e2:56:e0:23:68:0d:8b:16:d4:b0:9b:93:80:ac:ea:af:79: ce:91:16:11:f1:40:e1:86:ad:5e:1b:bc:af:49:1c:87:0e:ef: 8d:14:b3:1f:4c:51:ba:2b:8c:b0:0a:01:93:1c:ea:27:57:43: fd:a7:69:04:e5:82:6c:12:cf:4d:fa:09:4b:1f:85:68:12:3d: 43:d6:d7:20:1b:07:e3:12:de:28:3f:69:ae:41:5e:f1:5a:68: f5:44:3a:35:b8:cf:25:70:66:5d:c7:a8:c8:de:4b:25:cb:1c: ba:3b:2b:1d:a7:7c:2d:f2:3c:09:18:60:50:38:c3:43:90:cd: 32:8c:a5:04:95:b0:b4:f7:47:c6:60:a6:db:fb:ed:5f:08:62: 70:f6:43:47:82:03:10:0e:e8:56:64:fb:3c:87:cc:18:8f:12: 30:fa:79:13:31:9e:89:15:fe:50:94:92:18:4a:39:5d:3c:be: 70:22:68:9c:c7:d2:8f:9b:f7:96:ca:bd:2e:73:40:a5:99:6e: 80:de:d2:9d:8d:58:cc:67:15:ca:2d:7c:c6:cc:94:22:46:57: 82:00:ba:8e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUVEwQGVyH5sPQIgQg58P9SoPR8icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwODUwMTNaFw0yNjEyMDIwODU1MTNaMDMxMTAvBgNV BAMTKDA4NTVGMDVDMTAxQTFCMzU4MTdBODUyOTZEMDU2QTEyQjhEQ0Q5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbxCfvOkWhw3gJlLusAIigBwB cHiZJfM2ITi8hsQgc1kLGdiHh4FYN54xld9+9+JfuqE++7doyEHyj8NUFoyziRfO RHhbsXDnOs3W06Yc3SpLf6clQwxvGJj7yuHHIFcv2isV1WnKlj+rMKpe2oAbQngp 7V6/91x9d3VHdrvf0hkFR+W8Jb6tntT45Ear/pGsPNR+gjhfxfHHOoc/SmnJRMNx r2jdGkgcZvRSHGwMs9hrUV6IAlekBvkjWfl6ogn+STTqQe1JI76W46QVGdFm6E0K QeycPVpFg+Jz6PTvctTLIeXG1dtgb3nmHHe3zII2A6NpO9grOwFnNntlXdg9AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUCFXwXBAaGzWBeoUpbQVqErjc2dcwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjcwNTY0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtSnI MA0GCSqGSIb3DQEBCwUAA4IBAQBfK5GHmoYJcwNRrLD/fjWeaPmMncxCNHI6j0cN byIx6PsI9K5m4lbgI2gNixbUsJuTgKzqr3nOkRYR8UDhhq1eG7yvSRyHDu+NFLMf TFG6K4ywCgGTHOonV0P9p2kE5YJsEs9N+glLH4VoEj1D1tcgGwfjEt4oP2muQV7x Wmj1RDo1uM8lcGZdx6jI3kslyxy6Oysdp3wt8jwJGGBQOMNDkM0yjKUElbC090fG YKbb++1fCGJw9kNHggMQDuhWZPs8h8wYjxIw+nkTMZ6JFf5QlJIYSjldPL5wImic x9KPm/eWyr0uc0ClmW6A3tKdjVjMZxXKLXzGzJQiRleCALqO -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:17 2025 by rpki-client