This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50673.roa File: AS50673.roa (raw, json) Hash identifier: SmHHvJt2O951Bok7IfnCLouSzFahy/pePACeelwHwqI= Subject key identifier: 61:02:FC:CB:AA:6C:76:D0:36:43:6B:3D:EF:28:54:30:D6:14:83:F2 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 50C652787F3691861C9786D04B9D78BF481E1114 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50673.roa Signing time: Wed 03 Dec 2025 08:55:14 +0000 ROA not before: Wed 03 Dec 2025 08:50:14 +0000 ROA not after: Wed 02 Dec 2026 08:55:14 +0000 asID: 50673 IP address blocks: 185.172.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c6:52:78:7f:36:91:86:1c:97:86:d0:4b:9d:78:bf:48:1e:11:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 08:50:14 2025 GMT Not After : Dec 2 08:55:14 2026 GMT Subject: CN=6102FCCBAA6C76D036436B3DEF285430D61483F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:33:31:23:0c:6e:7f:67:2c:43:08:ce:d9: e9:18:ac:5a:da:c3:62:36:7a:21:ed:ef:63:9d:82: f2:c7:3d:30:d6:29:1d:a0:d6:a1:9a:2b:3e:b0:20: 35:53:5e:0e:f9:c7:5f:af:47:7d:0c:aa:0b:3a:5e: 43:19:23:4a:66:4f:f4:ff:8a:61:df:c5:0e:c4:ba: a3:62:4e:31:47:a3:45:38:2e:8f:bd:7f:18:bb:d0: 37:09:31:50:26:d5:da:d1:19:9a:9f:34:a4:b4:6b: e8:06:10:10:be:f6:a2:69:eb:93:5b:b5:7d:0b:2c: 4b:55:62:54:2d:ad:50:f5:86:1a:9e:5f:f0:c7:8d: 54:72:da:71:bf:af:15:60:90:91:20:73:54:8b:68: c8:a9:de:46:53:a5:27:db:63:ba:a9:19:7e:90:8b: a2:09:10:a7:d7:b2:8c:32:01:df:77:a8:80:db:68: b7:a0:e5:ae:bf:c8:3d:1e:40:ac:5f:a9:1c:81:25: 7b:f4:03:8e:7e:bb:f2:14:3b:c0:c1:5b:a5:13:99: 8c:c9:49:66:2d:54:4e:10:f6:90:14:b7:55:92:fb: 74:79:9e:5b:28:de:d0:ad:e0:8a:d4:61:18:62:97: 88:a0:8d:39:e5:dc:4b:d1:68:80:9d:a8:cf:40:81: 96:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:02:FC:CB:AA:6C:76:D0:36:43:6B:3D:EF:28:54:30:D6:14:83:F2 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS50673.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.56.0/24 Signature Algorithm: sha256WithRSAEncryption 27:7a:38:b3:71:10:99:f6:67:17:a0:e3:a8:db:b6:8d:26:72: 6b:26:d3:73:70:80:ba:e7:c3:0d:73:a9:de:72:f3:9a:67:3a: 3f:2e:ea:49:25:a5:b9:c6:ca:4c:82:0b:6f:24:a8:05:5a:f5: 4c:e7:81:5d:de:99:78:31:ab:80:b8:23:b2:c3:0e:3a:37:0c: 3b:8e:32:9b:5e:6a:ce:44:bc:b3:71:35:b8:80:55:d1:67:0e: 47:a3:a6:86:1e:83:24:cd:de:cb:45:0c:85:18:da:28:2a:77: 1c:71:f2:c3:1f:13:79:ed:ef:2d:62:7d:cb:10:8a:17:50:c5: f5:c8:88:13:29:a2:0b:6c:38:1d:f7:a7:ec:42:a6:09:87:7e: 43:1d:7d:2a:43:8d:ad:e3:ac:61:29:d9:36:11:a4:1a:d1:b7: 1d:96:9e:95:ec:a2:8f:f6:55:07:dc:e1:d4:bc:f8:ce:91:f2: 67:d5:b3:8e:9e:a5:1e:05:7b:33:dc:fd:bc:5e:1b:e5:57:16: b9:15:d6:6b:ce:25:dd:c1:58:67:96:9f:d5:65:7c:f9:29:fd: 91:0a:92:f9:56:d8:96:65:93:ec:f3:71:0a:97:5f:e1:59:b5: d3:9d:3a:ae:8e:7b:6c:d2:88:12:0c:33:eb:a9:f8:30:18:e8: 20:ff:b0:f2 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUUMZSeH82kYYcl4bQS514v0geERQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwODUwMTRaFw0yNjEyMDIwODU1MTRaMDMxMTAvBgNV BAMTKDYxMDJGQ0NCQUE2Qzc2RDAzNjQzNkIzREVGMjg1NDMwRDYxNDgzRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwbTMxIwxuf2csQwjO2ekYrFra w2I2eiHt72OdgvLHPTDWKR2g1qGaKz6wIDVTXg75x1+vR30Mqgs6XkMZI0pmT/T/ imHfxQ7EuqNiTjFHo0U4Lo+9fxi70DcJMVAm1drRGZqfNKS0a+gGEBC+9qJp65Nb tX0LLEtVYlQtrVD1hhqeX/DHjVRy2nG/rxVgkJEgc1SLaMip3kZTpSfbY7qpGX6Q i6IJEKfXsowyAd93qIDbaLeg5a6/yD0eQKxfqRyBJXv0A45+u/IUO8DBW6UTmYzJ SWYtVE4Q9pAUt1WS+3R5nlso3tCt4IrUYRhil4igjTnl3EvRaICdqM9AgZbTAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUYQL8y6psdtA2Q2s97yhUMNYUg/IwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNTA2NzMucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5rDgw DQYJKoZIhvcNAQELBQADggEBACd6OLNxEJn2Zxeg46jbto0mcmsm03NwgLrnww1z qd5y85pnOj8u6kklpbnGykyCC28kqAVa9UzngV3emXgxq4C4I7LDDjo3DDuOMpte as5EvLNxNbiAVdFnDkejpoYegyTN3stFDIUY2igqdxxx8sMfE3nt7y1ifcsQihdQ xfXIiBMpogtsOB33p+xCpgmHfkMdfSpDja3jrGEp2TYRpBrRtx2WnpXsoo/2VQfc 4dS8+M6R8mfVs46epR4FezPc/bxeG+VXFrkV1mvOJd3BWGeWn9VlfPkp/ZEKkvlW 2JZlk+zzcQqXX+FZtdOdOq6Oe2zSiBIMM+up+DAY6CD/sPI= -----END CERTIFICATE-----Generated at Sat Dec 6 13:46:11 2025 by rpki-client