This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS40244.roa File: AS40244.roa (raw, json) Hash identifier: 77pSZ3TXb4EPuPdEYamaQHmhyBkuqIdB3qjM5bN1mHc= Subject key identifier: 64:03:D5:0A:1A:70:88:70:F0:A3:4B:C8:B7:5A:64:F2:28:7C:0E:30 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 5DCD372FB97709176EF60FFB25648CF0D1266214 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS40244.roa Signing time: Wed 03 Dec 2025 08:55:13 +0000 ROA not before: Wed 03 Dec 2025 08:50:13 +0000 ROA not after: Wed 02 Dec 2026 08:55:13 +0000 asID: 40244 IP address blocks: 181.214.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:cd:37:2f:b9:77:09:17:6e:f6:0f:fb:25:64:8c:f0:d1:26:62:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 08:50:13 2025 GMT Not After : Dec 2 08:55:13 2026 GMT Subject: CN=6403D50A1A708870F0A34BC8B75A64F2287C0E30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:56:a7:0e:48:1b:07:fb:41:31:5d:e6:20:dc: da:c4:b6:9d:62:99:b5:98:dd:65:fd:a3:ff:ed:72: 7d:6c:1c:48:3e:7e:8a:5a:d1:ed:6c:de:58:78:6e: 80:85:1b:e1:8b:ee:ac:ea:5d:94:75:02:f9:71:02: 2d:2a:c3:c4:0f:6b:93:10:66:46:76:af:de:a8:d9: 76:6d:bd:18:73:ec:71:60:20:92:ce:33:1a:cd:84: df:a2:67:6e:40:35:97:8e:3a:07:00:9c:ea:ba:13: 73:39:44:19:b7:c7:e6:ed:35:be:00:10:6a:e1:78: 3e:36:11:6a:76:70:b6:9f:13:71:0a:c1:d0:ee:8d: 42:91:17:86:50:0c:fc:1e:72:fa:d0:3f:60:9c:ad: a4:97:1e:8b:fb:c0:fa:e9:94:0d:f5:32:62:55:5c: d5:c8:a2:84:49:8e:bb:20:fd:cf:01:a2:00:14:bd: cf:ea:1d:4a:5c:07:7f:a1:f7:06:25:f3:7a:43:c4: 97:20:44:58:d1:1f:e8:a7:56:79:40:dd:aa:ac:83: d2:30:ca:9d:78:95:a6:85:1d:fb:c2:01:95:55:64: 64:79:77:ac:b4:db:53:17:47:b6:91:e7:16:c7:82: e5:26:67:56:eb:b6:07:0b:e9:da:da:9a:0f:d1:8d: 2b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:03:D5:0A:1A:70:88:70:F0:A3:4B:C8:B7:5A:64:F2:28:7C:0E:30 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS40244.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.214.149.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:24:84:28:77:97:d4:7d:bd:3c:a1:0d:94:71:58:cc:fc:08: 39:0f:61:9e:79:32:8a:d1:c0:7a:75:6f:66:ea:a6:0f:fc:7a: a4:fb:dd:55:76:dc:c5:38:df:21:92:af:dc:b3:17:07:9d:71: a9:a0:19:07:c1:20:0c:58:2f:81:c2:4d:07:90:f9:3e:bd:a9: d4:62:45:d2:d0:72:dc:90:d6:42:f5:8e:35:22:1e:50:c7:97: 0f:e5:e6:ca:eb:89:2e:48:fc:47:0a:3b:4e:d3:44:a2:8a:b0: de:c2:a0:74:4c:c0:f8:66:f8:7f:ac:27:ae:cc:7a:75:17:5d: e7:ed:4b:d2:e0:d1:7f:f4:f1:ca:c8:bc:f6:f3:af:ef:3f:aa: 99:65:e8:a5:36:6d:9e:a8:2b:c0:92:54:e6:71:82:31:bd:97: 6a:e7:e6:88:bd:29:73:83:8b:2e:ce:72:86:61:2b:cb:bd:d6: ff:a3:2d:bc:ca:0f:6f:68:0d:31:72:ff:27:bb:5a:41:27:bd: f5:f1:92:47:d1:57:c8:d5:5c:03:8e:c6:3e:94:02:09:d3:7b: 38:20:2f:4c:6a:31:5a:8d:ba:cc:02:d1:e1:56:55:a5:a0:70: 79:aa:f8:1d:8b:db:6b:f8:b1:01:86:13:2f:9d:42:be:17:6b: 2a:85:73:46 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUXc03L7l3CRdu9g/7JWSM8NEmYhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwODUwMTNaFw0yNjEyMDIwODU1MTNaMDMxMTAvBgNV BAMTKDY0MDNENTBBMUE3MDg4NzBGMEEzNEJDOEI3NUE2NEYyMjg3QzBFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZVqcOSBsH+0ExXeYg3NrEtp1i mbWY3WX9o//tcn1sHEg+fopa0e1s3lh4boCFG+GL7qzqXZR1AvlxAi0qw8QPa5MQ ZkZ2r96o2XZtvRhz7HFgIJLOMxrNhN+iZ25ANZeOOgcAnOq6E3M5RBm3x+btNb4A EGrheD42EWp2cLafE3EKwdDujUKRF4ZQDPwecvrQP2CcraSXHov7wPrplA31MmJV XNXIooRJjrsg/c8BogAUvc/qHUpcB3+h9wYl83pDxJcgRFjRH+inVnlA3aqsg9Iw yp14laaFHfvCAZVVZGR5d6y021MXR7aR5xbHguUmZ1brtgcL6dramg/RjSs1AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUZAPVChpwiHDwo0vIt1pk8ih8DjAwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDAyNDQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC11pUw DQYJKoZIhvcNAQELBQADggEBAI4khCh3l9R9vTyhDZRxWMz8CDkPYZ55MorRwHp1 b2bqpg/8eqT73VV23MU43yGSr9yzFwedcamgGQfBIAxYL4HCTQeQ+T69qdRiRdLQ ctyQ1kL1jjUiHlDHlw/l5srriS5I/EcKO07TRKKKsN7CoHRMwPhm+H+sJ67MenUX XeftS9Lg0X/08crIvPbzr+8/qpll6KU2bZ6oK8CSVOZxgjG9l2rn5oi9KXODiy7O coZhK8u91v+jLbzKD29oDTFy/ye7WkEnvfXxkkfRV8jVXAOOxj6UAgnTezggL0xq MVqNuswC0eFWVaWgcHmq+B2L22v4sQGGEy+dQr4XayqFc0Y= -----END CERTIFICATE-----Generated at Sat Dec 6 12:49:03 2025 by rpki-client