This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS273847.roa File: AS273847.roa (raw, json) Hash identifier: ebhjoBWh3SDXmURCubpT+IKs9QIXSEWmk1M521sfY5M= Subject key identifier: FC:33:FD:F8:0B:C2:D5:3E:04:46:94:1D:82:13:C3:18:32:51:FF:87 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 65ED748E6E9A54CD8FD784A38CD133A4AAA45E02 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS273847.roa Signing time: Sat 15 Nov 2025 00:55:11 +0000 ROA not before: Sat 15 Nov 2025 00:50:11 +0000 ROA not after: Sat 14 Nov 2026 00:55:11 +0000 asID: 273847 IP address blocks: 181.41.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ed:74:8e:6e:9a:54:cd:8f:d7:84:a3:8c:d1:33:a4:aa:a4:5e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Nov 15 00:50:11 2025 GMT Not After : Nov 14 00:55:11 2026 GMT Subject: CN=FC33FDF80BC2D53E0446941D8213C3183251FF87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:79:b4:1c:9a:fe:55:0b:59:70:4f:1c:86:ef: 4f:14:59:be:d4:f3:a1:0d:57:0a:48:d9:a3:e7:d8: 93:f6:53:35:88:b0:81:63:ca:56:59:a5:fb:4b:60: e0:8d:ae:ae:df:91:8e:29:c6:90:17:60:e6:c9:bb: 5c:a0:46:ec:04:8b:8d:ec:0d:06:53:1b:33:e1:af: 66:64:04:a1:d3:aa:b8:d5:c5:23:d9:0f:88:dd:cf: bf:be:fe:5e:ed:29:bb:29:ff:0b:59:2a:22:5b:90: 64:f9:7d:d5:1c:43:e8:28:72:50:a0:54:7a:86:f1: 03:6a:04:4c:9b:92:7a:bf:fe:55:5c:e4:52:77:5e: 5d:fa:81:c0:97:44:89:fd:da:07:f3:53:bf:2c:66: 67:11:ef:92:82:16:52:d6:a3:76:d6:e8:4f:7e:23: c5:6b:45:6c:1c:79:f6:6f:b8:c9:e8:f7:83:33:32: 31:73:0b:a8:6e:0d:76:02:93:7a:2a:87:36:fc:ef: 43:3d:0a:71:eb:60:ca:a5:8d:b6:d8:9e:e1:b1:48: 0f:c3:91:cb:e4:6c:09:de:73:03:08:25:c8:f6:13: 95:00:06:d8:45:a7:99:18:d9:3f:06:99:ea:5b:42: 89:b2:ff:a2:dc:38:43:a1:54:ba:45:13:c9:9a:44: d6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:33:FD:F8:0B:C2:D5:3E:04:46:94:1D:82:13:C3:18:32:51:FF:87 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS273847.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.41.199.0/24 Signature Algorithm: sha256WithRSAEncryption 71:d0:5b:e7:29:92:11:d5:a6:e4:5d:dd:1b:a9:84:bd:bf:b2: 1e:98:30:1f:aa:e8:4c:09:9f:23:4c:7c:10:fb:83:1a:a3:77: b8:73:7b:9d:78:56:ab:6a:91:fd:78:31:b7:e0:14:80:40:eb: 13:2f:74:b4:62:51:e4:20:a6:0b:43:72:cf:7f:5b:65:93:2a: 06:b0:b7:3b:04:de:74:d7:aa:ee:db:05:38:6f:64:26:59:65: 44:91:e1:69:79:52:c2:ca:db:61:52:82:70:73:3b:8c:85:78: 29:da:c3:60:81:dc:fb:96:81:83:99:8f:3c:cd:21:75:a0:ad: 87:e1:13:6f:0f:d3:24:39:d1:16:8d:5f:60:d6:fa:bb:ca:88: 5c:47:41:b9:dc:01:ee:70:f0:45:3a:45:34:82:ce:79:a6:49: 32:34:ef:48:0e:8a:a5:0b:f0:b8:22:e4:cf:57:a1:76:86:d3: 89:de:e9:46:34:7d:ea:9e:9e:4a:5c:bf:3d:48:f8:7e:8f:d6: 94:2d:db:8e:05:84:f9:73:3e:bf:68:3e:3f:74:e1:3f:23:1e: e8:e9:35:28:7e:da:36:45:83:ea:c9:9d:ea:ff:5c:3c:41:a1: 23:4d:07:b5:1e:92:9c:a1:63:c3:0c:f3:d4:bb:f3:56:0a:14: 08:2a:b7:6d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUZe10jm6aVM2P14SjjNEzpKqkXgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTExMTUwMDUwMTFaFw0yNjExMTQwMDU1MTFaMDMxMTAvBgNV BAMTKEZDMzNGREY4MEJDMkQ1M0UwNDQ2OTQxRDgyMTNDMzE4MzI1MUZGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeebQcmv5VC1lwTxyG708UWb7U 86ENVwpI2aPn2JP2UzWIsIFjylZZpftLYOCNrq7fkY4pxpAXYObJu1ygRuwEi43s DQZTGzPhr2ZkBKHTqrjVxSPZD4jdz7++/l7tKbsp/wtZKiJbkGT5fdUcQ+goclCg VHqG8QNqBEybknq//lVc5FJ3Xl36gcCXRIn92gfzU78sZmcR75KCFlLWo3bW6E9+ I8VrRWwcefZvuMno94MzMjFzC6huDXYCk3oqhzb870M9CnHrYMqljbbYnuGxSA/D kcvkbAnecwMIJcj2E5UABthFp5kY2T8GmepbQomy/6LcOEOhVLpFE8maRNZVAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU/DP9+AvC1T4ERpQdghPDGDJR/4cwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjczODQ3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtSnH MA0GCSqGSIb3DQEBCwUAA4IBAQBx0FvnKZIR1abkXd0bqYS9v7IemDAfquhMCZ8j THwQ+4Mao3e4c3udeFarapH9eDG34BSAQOsTL3S0YlHkIKYLQ3LPf1tlkyoGsLc7 BN5016ru2wU4b2QmWWVEkeFpeVLCytthUoJwczuMhXgp2sNggdz7loGDmY88zSF1 oK2H4RNvD9MkOdEWjV9g1vq7yohcR0G53AHucPBFOkU0gs55pkkyNO9IDoqlC/C4 IuTPV6F2htOJ3ulGNH3qnp5KXL89SPh+j9aULduOBYT5cz6/aD4/dOE/Ix7o6TUo fto2RYPqyZ3q/1w8QaEjTQe1HpKcoWPDDPPUu/NWChQIKrdt -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:59 2025 by rpki-client