This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271978.roa
File: AS271978.roa (raw, json)
Hash identifier: E+QHJgGImdsbZP1He204wHR5LX1wXtxQTKFzhkNtfwg=
Subject key identifier: 90:87:B7:28:21:F6:E0:CA:BC:00:19:9B:A6:76:D4:57:1A:47:29:D4
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 677776131324236BDB452078D6B14FC14D2D108B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271978.roa
Signing time: Wed 03 Dec 2025 08:55:13 +0000
ROA not before: Wed 03 Dec 2025 08:50:13 +0000
ROA not after: Wed 02 Dec 2026 08:55:13 +0000
asID: 271978
IP address blocks: 181.215.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 22:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:77:76:13:13:24:23:6b:db:45:20:78:d6:b1:4f:c1:4d:2d:10:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Dec 3 08:50:13 2025 GMT
Not After : Dec 2 08:55:13 2026 GMT
Subject: CN=9087B72821F6E0CABC00199BA676D4571A4729D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:be:1c:ce:03:d0:fc:58:c6:1c:29:04:7b:
ef:c8:e0:48:47:ff:03:1a:6c:17:7d:b6:d7:0a:22:
bc:c3:8a:dc:d0:23:60:07:00:ff:02:7d:c5:70:13:
31:58:c2:92:45:3f:ad:da:4e:d7:04:cb:3d:54:2c:
83:c4:aa:07:51:75:59:81:90:28:30:14:30:b9:92:
64:b4:3b:aa:67:cb:98:17:9a:24:70:3b:99:0e:c1:
1a:7a:b9:14:e2:89:2d:2a:a9:f3:58:2a:1b:af:6f:
4d:ac:b2:45:b4:c8:60:4d:73:d6:2a:16:b9:0b:ae:
20:31:e5:0c:3b:07:b6:4a:3f:fd:f0:a0:eb:95:74:
5e:ab:a0:86:ea:68:bd:15:c9:b1:0d:cf:95:f2:a3:
be:4d:48:df:95:f6:66:e2:7c:eb:7c:a7:21:f4:ba:
c4:67:5d:4c:80:15:e1:09:41:5d:cc:ab:9d:65:e0:
18:48:f8:22:8e:d2:fd:e7:da:6e:72:01:9e:04:d2:
fd:71:b0:14:0e:af:6c:34:12:ac:71:31:71:93:4c:
f9:6d:cf:60:98:ae:b3:66:9d:dc:48:e0:18:b2:00:
cd:77:cc:92:59:2d:8c:d3:b1:ea:e5:dd:87:ee:ae:
6f:d1:71:f1:19:21:79:22:47:7f:3a:c0:48:d1:53:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:87:B7:28:21:F6:E0:CA:BC:00:19:9B:A6:76:D4:57:1A:47:29:D4
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271978.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.241.0/24
Signature Algorithm: sha256WithRSAEncryption
77:9b:f0:46:ae:55:1a:94:81:cb:8c:4e:96:59:f9:27:ee:c9:
61:3a:8e:ef:b7:7d:e5:4a:28:36:c6:27:73:44:9d:8d:a9:65:
c6:14:9a:f2:77:a1:4e:dd:39:21:f6:0f:7a:40:fb:3a:b1:23:
11:af:a1:0c:63:2b:43:08:9d:dd:3d:9b:38:b1:32:34:dc:36:
86:0a:f5:83:37:df:9b:16:ef:b3:40:46:e8:d8:75:9d:bf:ca:
10:d7:1e:e7:c5:17:37:8e:01:b0:d3:20:7b:4a:18:30:84:8c:
2c:e8:86:9e:92:84:aa:d0:a1:df:50:99:2f:5b:b6:05:7c:dd:
e0:a2:fd:36:41:19:44:71:9a:6e:d2:02:4f:0e:db:ec:6e:d0:
41:c5:f0:f4:da:38:88:dd:ab:a3:fa:05:5d:84:1c:d2:34:7e:
96:aa:17:50:92:43:23:fe:18:2a:01:66:15:13:ea:1b:d9:d1:
54:92:56:24:78:37:8e:e5:d3:e0:60:0a:2d:12:08:a5:73:00:
b8:be:e7:87:5e:82:04:9e:18:64:f9:13:0a:20:d4:da:b9:6c:
bd:9f:57:75:c7:9e:fe:95:36:ea:fd:7d:34:2d:9b:98:22:7f:
c7:85:ac:5c:c3:a6:aa:7a:17:86:d8:92:ea:12:2d:0f:99:be:
82:d1:7e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:50:27 2025 by rpki-client