This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271960.roa File: AS271960.roa (raw, json) Hash identifier: zTifbFnK9yU0Jt+W1DQZFAXhzlOcvQluO4fbasY3fa4= Subject key identifier: 24:30:98:9E:9E:7D:CB:94:F3:F0:31:03:D8:7D:C4:AF:8A:DF:8F:F4 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 4405AD32910C48E7D2C505D9ABE8D9839A3E8245 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271960.roa Signing time: Wed 03 Dec 2025 08:55:13 +0000 ROA not before: Wed 03 Dec 2025 08:50:13 +0000 ROA not after: Wed 02 Dec 2026 08:55:13 +0000 asID: 271960 IP address blocks: 181.215.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:05:ad:32:91:0c:48:e7:d2:c5:05:d9:ab:e8:d9:83:9a:3e:82:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 08:50:13 2025 GMT Not After : Dec 2 08:55:13 2026 GMT Subject: CN=2430989E9E7DCB94F3F03103D87DC4AF8ADF8FF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f5:4a:94:1e:09:f1:1e:3d:da:12:73:92:43: 4e:26:99:02:3d:2d:2c:2e:03:d6:08:63:64:b5:a0: 36:9c:f5:05:8f:4d:10:a9:35:c7:e5:39:ea:50:1e: 29:8b:dc:6f:ff:85:8b:2d:0c:ef:23:9c:18:e6:5e: 00:cf:d0:5c:32:51:d2:e0:b2:2d:7e:d4:cd:c9:31: 5b:7f:ac:98:f7:60:f0:d8:69:c9:bf:cd:81:3d:a3: 0a:20:08:10:fa:05:7a:30:ac:ae:3a:c7:2c:93:3c: 37:2d:0f:c7:28:46:d6:6f:49:35:23:92:c5:99:4f: 5d:e2:36:49:db:d7:13:02:26:fe:2f:38:7a:a2:20: 20:2c:f8:30:60:2a:b0:44:40:1d:3f:e7:b1:2b:26: 1d:54:2f:05:c3:4e:b4:e4:3d:c6:02:27:e8:c9:f0: 2b:cc:0d:0c:20:ed:5e:99:d0:75:ee:2d:56:be:e8: 2d:13:b9:f8:13:01:9b:e0:36:b3:4f:c0:27:3c:8d: fd:08:a5:38:09:4c:45:5e:e6:f8:36:db:f4:69:54: 2a:f3:08:63:81:df:40:57:5e:a1:5e:47:56:21:f3: f7:17:ca:17:b1:f8:dc:f9:76:a6:e0:11:e3:87:6a: a6:ae:0d:37:de:5b:73:f2:ae:b4:78:b3:8f:06:88: 2f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:30:98:9E:9E:7D:CB:94:F3:F0:31:03:D8:7D:C4:AF:8A:DF:8F:F4 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271960.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.215.230.0/24 Signature Algorithm: sha256WithRSAEncryption 70:54:26:0d:af:53:ba:28:a1:d4:19:26:4a:63:a6:0a:26:13: 7d:07:dd:b2:b8:1f:19:50:a9:fe:05:a2:3f:8b:01:6f:0d:cb: e2:c3:e3:f9:02:88:28:b9:7f:f5:f8:d9:c4:ca:64:5b:f7:0a: 9f:06:6c:16:9b:ab:fe:8e:fd:6c:88:ea:c1:10:24:31:e9:de: 32:58:4d:ca:15:b8:35:08:8c:dc:dc:f6:bd:b5:41:7f:06:19: 39:51:32:95:73:61:84:24:64:2c:3f:ec:95:37:3c:d6:99:6a: 92:25:46:d3:7b:12:fb:91:53:e9:57:71:b6:b1:66:f1:35:16: 92:1e:2f:db:6c:b8:71:16:14:41:3b:ad:fa:a7:3e:40:0a:bf: d0:59:8f:4c:a0:f2:ac:e5:c8:83:a3:a7:1c:97:61:ad:22:66: 21:86:4d:69:df:06:e4:1e:7d:e0:23:48:31:c6:66:91:63:96: b8:c9:5a:62:aa:a3:d6:a5:93:a3:91:06:20:5b:cc:52:a4:79: 22:c4:8e:09:2f:9a:e7:6d:ea:07:f5:2d:87:01:38:56:fa:53: bf:95:a1:f3:09:26:0d:4a:7c:e5:d7:ff:75:d0:d2:fb:59:e7: 5c:0f:0b:28:d7:a9:ef:8b:ce:5e:31:36:16:fb:f5:6d:5e:5d: 32:da:ba:0e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIURAWtMpEMSOfSxQXZq+jZg5o+gkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwODUwMTNaFw0yNjEyMDIwODU1MTNaMDMxMTAvBgNV BAMTKDI0MzA5ODlFOUU3RENCOTRGM0YwMzEwM0Q4N0RDNEFGOEFERjhGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa9UqUHgnxHj3aEnOSQ04mmQI9 LSwuA9YIY2S1oDac9QWPTRCpNcflOepQHimL3G//hYstDO8jnBjmXgDP0FwyUdLg si1+1M3JMVt/rJj3YPDYacm/zYE9owogCBD6BXowrK46xyyTPDctD8coRtZvSTUj ksWZT13iNknb1xMCJv4vOHqiICAs+DBgKrBEQB0/57ErJh1ULwXDTrTkPcYCJ+jJ 8CvMDQwg7V6Z0HXuLVa+6C0TufgTAZvgNrNPwCc8jf0IpTgJTEVe5vg22/RpVCrz CGOB30BXXqFeR1Yh8/cXyhex+Nz5dqbgEeOHaqauDTfeW3PyrrR4s48GiC+TAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUJDCYnp59y5Tz8DED2H3Er4rfj/QwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjcxOTYwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtdfm MA0GCSqGSIb3DQEBCwUAA4IBAQBwVCYNr1O6KKHUGSZKY6YKJhN9B92yuB8ZUKn+ BaI/iwFvDcviw+P5AogouX/1+NnEymRb9wqfBmwWm6v+jv1siOrBECQx6d4yWE3K Fbg1CIzc3Pa9tUF/Bhk5UTKVc2GEJGQsP+yVNzzWmWqSJUbTexL7kVPpV3G2sWbx NRaSHi/bbLhxFhRBO636pz5ACr/QWY9MoPKs5ciDo6ccl2GtImYhhk1p3wbkHn3g I0gxxmaRY5a4yVpiqqPWpZOjkQYgW8xSpHkixI4JL5rnbeoH9S2HAThW+lO/laHz CSYNSnzl1/910NL7WedcDwso16nvi85eMTYW+/VtXl0y2roO -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:49 2025 by rpki-client