This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS273162.roa File: AS273162.roa (raw, json) Hash identifier: SvMzLFpxrmjJpnq+XlWOjCGYUbQmqsS4bkNppHuiAAo= Subject key identifier: B9:AE:A8:E0:F2:E0:2E:36:97:AF:51:3F:21:5F:46:72:39:D5:2B:62 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 2B3FFBFBD3FB7014F883F453A881B579118E9D1A Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS273162.roa Signing time: Thu 27 Nov 2025 20:33:35 +0000 ROA not before: Thu 27 Nov 2025 20:28:35 +0000 ROA not after: Thu 26 Nov 2026 20:33:35 +0000 asID: 273162 IP address blocks: 191.101.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:3f:fb:fb:d3:fb:70:14:f8:83:f4:53:a8:81:b5:79:11:8e:9d:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Nov 27 20:28:35 2025 GMT Not After : Nov 26 20:33:35 2026 GMT Subject: CN=B9AEA8E0F2E02E3697AF513F215F467239D52B62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ed:13:1f:4c:b6:07:b9:8e:a8:a4:e4:d3:bc: 26:80:78:fb:71:7c:4d:51:c7:74:28:75:7e:ba:d0: 66:da:ac:b0:32:d2:0e:55:c2:c4:79:71:7e:c0:c5: b2:4a:93:34:23:01:09:94:1c:71:75:27:da:bb:d3: 80:9e:ac:2a:c8:22:02:63:89:ac:37:2d:f0:6d:65: c6:b9:7d:59:bd:63:ae:b5:d7:10:60:17:08:9c:29: b8:4d:66:ed:93:fe:8a:57:16:25:18:4c:81:3e:fc: 59:b1:fe:3a:09:e0:92:de:ce:34:ac:4b:6d:06:0c: 1d:d8:65:af:04:03:c2:bf:f8:7a:11:b9:2d:c1:08: db:55:d8:f7:ca:5d:20:bf:cb:f2:4b:ea:a8:e7:61: 55:5f:fc:fb:a9:79:94:bd:4a:40:2f:cc:ec:a4:e3: 84:db:5e:44:75:57:81:4f:42:f2:8c:a7:41:40:67: 96:6e:db:51:3a:a0:b2:fe:2c:b8:9e:02:67:be:ce: fa:39:3c:65:62:99:6b:4a:dc:bf:7e:b4:3b:37:c6: 90:ff:e1:ff:16:e8:78:5b:54:b2:c3:d9:26:30:27: c3:a6:a7:22:a6:04:79:08:5c:24:7d:f7:74:74:73: ac:3f:51:8f:c7:05:aa:d2:b9:32:6c:af:ab:6b:3b: 32:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AE:A8:E0:F2:E0:2E:36:97:AF:51:3F:21:5F:46:72:39:D5:2B:62 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS273162.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.101.58.0/24 Signature Algorithm: sha256WithRSAEncryption 18:0d:ea:1a:be:ff:bd:c1:c0:b0:0b:da:47:ad:51:d9:be:4a: ee:ea:4a:b1:0d:a1:7a:87:1c:f2:23:ad:2c:9d:a5:c9:b9:f6: 4b:0a:44:19:91:19:21:f3:2c:36:66:bf:3a:f3:ed:9e:02:12: 74:eb:7a:34:c6:a6:26:ac:e1:2d:bf:46:47:93:c2:2d:61:b0: 0e:31:c4:15:e7:54:b0:48:18:8c:e1:81:ac:7b:28:3d:d2:3e: e8:58:32:6d:97:02:bc:bb:e2:4c:db:03:b0:03:8b:4e:d3:cd: 88:3a:26:e5:ed:a7:0d:27:90:3a:cb:de:ff:d5:8f:76:85:91: ab:91:ef:4d:71:69:88:56:c5:cd:80:24:4d:41:ae:e1:41:4f: ed:b2:36:ad:c1:61:52:89:98:6b:04:cb:c2:0e:c8:3e:ea:fc: 35:e6:ea:7d:d8:fa:8d:4e:99:ef:98:6c:bb:41:21:e0:1e:07: 59:b1:a7:3e:ec:19:4a:fe:d7:62:88:c2:58:4e:0b:30:e6:c0: 9a:f2:71:86:f8:47:cf:91:16:54:e4:be:83:6f:15:a4:10:75: 1a:af:d8:54:b4:dc:d9:b9:4a:9c:97:1c:36:6b:b5:3f:0e:58: 52:16:cd:03:fe:b2:da:a2:44:f6:c1:e3:63:2a:96:86:f6:33: ca:77:c5:7e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUKz/7+9P7cBT4g/RTqIG1eRGOnRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTExMjcyMDI4MzVaFw0yNjExMjYyMDMzMzVaMDMxMTAvBgNV BAMTKEI5QUVBOEUwRjJFMDJFMzY5N0FGNTEzRjIxNUY0NjcyMzlENTJCNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC77RMfTLYHuY6opOTTvCaAePtx fE1Rx3QodX660GbarLAy0g5VwsR5cX7AxbJKkzQjAQmUHHF1J9q704CerCrIIgJj iaw3LfBtZca5fVm9Y6611xBgFwicKbhNZu2T/opXFiUYTIE+/Fmx/joJ4JLezjSs S20GDB3YZa8EA8K/+HoRuS3BCNtV2PfKXSC/y/JL6qjnYVVf/PupeZS9SkAvzOyk 44TbXkR1V4FPQvKMp0FAZ5Zu21E6oLL+LLieAme+zvo5PGVimWtK3L9+tDs3xpD/ 4f8W6HhbVLLD2SYwJ8OmpyKmBHkIXCR993R0c6w/UY/HBarSuTJsr6trOzJtAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUua6o4PLgLjaXr1E/IV9GcjnVK2IwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjczMTYyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv2U6 MA0GCSqGSIb3DQEBCwUAA4IBAQAYDeoavv+9wcCwC9pHrVHZvkru6kqxDaF6hxzy I60snaXJufZLCkQZkRkh8yw2Zr868+2eAhJ063o0xqYmrOEtv0ZHk8ItYbAOMcQV 51SwSBiM4YGseyg90j7oWDJtlwK8u+JM2wOwA4tO082IOibl7acNJ5A6y97/1Y92 hZGrke9NcWmIVsXNgCRNQa7hQU/tsjatwWFSiZhrBMvCDsg+6vw15up92PqNTpnv mGy7QSHgHgdZsac+7BlK/tdiiMJYTgsw5sCa8nGG+EfPkRZU5L6DbxWkEHUar9hU tNzZuUqclxw2a7U/DlhSFs0D/rLaokT2weNjKpaG9jPKd8V+ -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:19 2025 by rpki-client