This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS397540.roa File: AS397540.roa (raw, json) Hash identifier: h15qN/b4CdpL/LOlhzBfXQJULB2h5uYcHB94huh4M84= Subject key identifier: A7:BE:4D:7B:DF:10:55:7B:A4:41:D9:64:A4:6A:BF:46:66:EA:C7:F9 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 63743E7D1231C74B069EA6D041A2CC4A26044C4E Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS397540.roa Signing time: Wed 03 Dec 2025 08:55:12 +0000 ROA not before: Wed 03 Dec 2025 08:50:12 +0000 ROA not after: Wed 02 Dec 2026 08:55:12 +0000 asID: 397540 IP address blocks: 181.215.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:74:3e:7d:12:31:c7:4b:06:9e:a6:d0:41:a2:cc:4a:26:04:4c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 08:50:12 2025 GMT Not After : Dec 2 08:55:12 2026 GMT Subject: CN=A7BE4D7BDF10557BA441D964A46ABF4666EAC7F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ee:9a:b4:51:98:3c:35:a3:20:27:6d:70:3f: 5c:cf:ba:34:0c:a4:31:de:16:00:be:f0:43:ee:e0: e5:d3:37:6a:f7:bd:76:24:a4:fc:02:0f:d8:49:54: 7c:af:e0:f9:5d:09:33:f6:69:14:38:a5:59:fa:9b: 45:80:20:12:c5:6a:e9:5a:a5:f4:3d:a1:1e:bb:b4: 26:e5:68:6d:e4:9a:11:3f:86:b3:4d:52:e7:b6:01: dd:fc:c8:91:37:41:c7:5e:06:46:e2:f2:81:5a:67: e8:33:64:38:4a:c6:80:f7:c2:78:48:50:eb:ec:17: 6b:7e:b8:43:c3:03:da:c5:13:c0:f7:88:37:f1:4e: 2a:51:1f:70:d9:89:f0:9f:f6:dc:2f:43:36:fb:e0: 20:aa:88:23:02:f0:f8:49:1c:f6:51:c4:0c:44:65: 77:1b:47:9a:0a:47:5a:14:b4:81:91:54:ce:d0:ef: e2:22:8c:40:95:ab:a5:52:82:d0:e1:db:a5:2a:fa: 86:bf:96:d3:8b:da:c8:2b:06:ad:fe:ea:65:ed:ab: 33:33:e5:1c:77:09:db:02:6a:f2:04:8f:82:55:2d: 69:86:03:01:ab:58:db:e1:6c:0a:cb:54:55:9c:44: c9:19:85:f4:6e:2a:c8:13:db:e1:af:d3:62:6c:ae: 97:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BE:4D:7B:DF:10:55:7B:A4:41:D9:64:A4:6A:BF:46:66:EA:C7:F9 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS397540.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.215.52.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:ea:ea:54:e0:68:6e:01:4b:04:2a:dd:b5:2e:da:3a:1f:9b: 8f:66:c9:13:7f:8e:d8:5f:bc:ca:31:90:80:cd:b4:7a:dd:41: e3:51:b3:60:5c:9b:f0:4c:87:b1:65:26:6f:3a:18:18:cf:d9: 3a:fa:ac:d8:51:4b:e6:fd:b5:8c:a3:14:55:84:70:a5:b3:a8: 5f:41:33:b6:03:79:cc:2e:50:9d:0d:98:06:e1:cb:13:ce:a7: 8e:0b:f9:9d:07:05:bc:7d:50:49:db:e9:53:3c:2c:e9:6f:ab: 61:e8:f5:80:00:a9:2d:f8:0e:55:4f:da:5a:a9:e7:c9:df:98: b1:54:3d:24:a5:6c:78:94:8a:20:3b:1b:ab:c6:00:85:60:bc: db:86:e5:4c:0e:bb:b3:6e:84:92:85:d4:a5:bf:08:66:e8:8a: 27:71:16:39:d7:d8:d3:ed:32:3a:99:21:6f:d9:9e:bd:7d:8f: 29:eb:cd:48:d0:57:90:0c:c0:25:7a:e2:f6:bd:1c:54:71:2e: f1:f0:09:fa:8b:6b:be:6b:4b:85:6a:f4:70:cd:33:6c:8a:6f: 19:8b:1a:e5:83:af:f8:55:9e:cb:c4:87:f0:c9:0e:80:43:88: ee:93:ea:f8:0d:fc:2a:94:e0:3a:29:fb:46:24:34:a6:ca:48: bb:1d:ab:76 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUY3Q+fRIxx0sGnqbQQaLMSiYETE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwODUwMTJaFw0yNjEyMDIwODU1MTJaMDMxMTAvBgNV BAMTKEE3QkU0RDdCREYxMDU1N0JBNDQxRDk2NEE0NkFCRjQ2NjZFQUM3RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW7pq0UZg8NaMgJ21wP1zPujQM pDHeFgC+8EPu4OXTN2r3vXYkpPwCD9hJVHyv4PldCTP2aRQ4pVn6m0WAIBLFaula pfQ9oR67tCblaG3kmhE/hrNNUue2Ad38yJE3QcdeBkbi8oFaZ+gzZDhKxoD3wnhI UOvsF2t+uEPDA9rFE8D3iDfxTipRH3DZifCf9twvQzb74CCqiCMC8PhJHPZRxAxE ZXcbR5oKR1oUtIGRVM7Q7+IijECVq6VSgtDh26Uq+oa/ltOL2sgrBq3+6mXtqzMz 5Rx3CdsCavIEj4JVLWmGAwGrWNvhbArLVFWcRMkZhfRuKsgT2+Gv02JsrpeNAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUp75Ne98QVXukQdlkpGq/Rmbqx/kwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMzk3NTQwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtdc0 MA0GCSqGSIb3DQEBCwUAA4IBAQA+6upU4GhuAUsEKt21Lto6H5uPZskTf47YX7zK MZCAzbR63UHjUbNgXJvwTIexZSZvOhgYz9k6+qzYUUvm/bWMoxRVhHCls6hfQTO2 A3nMLlCdDZgG4csTzqeOC/mdBwW8fVBJ2+lTPCzpb6th6PWAAKkt+A5VT9paqefJ 35ixVD0kpWx4lIogOxurxgCFYLzbhuVMDruzboSShdSlvwhm6IoncRY519jT7TI6 mSFv2Z69fY8p681I0FeQDMAleuL2vRxUcS7x8An6i2u+a0uFavRwzTNsim8Zixrl g6/4VZ7LxIfwyQ6AQ4juk+r4DfwqlOA6KftGJDSmyki7Hat2 -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:57 2025 by rpki-client