This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS51043.roa File: AS51043.roa (raw, json) Hash identifier: hBG73CMwlXWrdHdT0XsahKw0FgKVfhazKPDia6vOUkg= Subject key identifier: 9B:63:10:E4:2A:04:18:2E:3F:87:34:3C:75:4A:3D:AA:42:69:27:C9 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 311D8C1DD822C1F0051CD3F4F5B0F35F2BA69BF2 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS51043.roa Signing time: Wed 03 Dec 2025 08:55:13 +0000 ROA not before: Wed 03 Dec 2025 08:50:13 +0000 ROA not after: Wed 02 Dec 2026 08:55:13 +0000 asID: 51043 IP address blocks: 45.88.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:1d:8c:1d:d8:22:c1:f0:05:1c:d3:f4:f5:b0:f3:5f:2b:a6:9b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 08:50:13 2025 GMT Not After : Dec 2 08:55:13 2026 GMT Subject: CN=9B6310E42A04182E3F87343C754A3DAA426927C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e0:a8:e3:2b:d7:58:73:76:f3:9e:12:79:2b: 49:c0:13:0a:a3:2a:95:c2:63:86:a4:50:13:e7:08: 16:da:8c:5d:29:e3:b0:1e:ad:d1:5c:8e:ea:5b:31: 33:7c:55:66:40:d3:66:f4:cc:71:1f:2e:9e:bd:74: 36:b6:3d:f6:c1:ad:00:97:a9:c2:de:91:5f:c2:38: 8f:ae:da:e2:a0:bb:b3:1b:76:fc:6f:3d:ef:f8:c6: 18:51:24:3e:f5:a3:ea:45:e4:c4:b3:01:fa:70:e1: c3:23:fb:5a:66:03:f5:b8:e0:5f:de:3a:bb:ac:6f: 9a:d7:1c:fb:49:eb:86:7a:7c:45:6c:8b:c1:9b:4c: 1c:a2:c2:da:24:44:92:36:ed:dc:e8:d3:5d:21:46: d0:73:7e:9f:88:e4:86:5d:c9:a2:44:0a:d2:36:c4: c4:5b:cf:d1:b4:06:3c:f2:e1:74:89:92:71:ba:aa: 2a:f7:9e:ff:c8:6c:8f:d3:4e:fc:83:be:82:01:0a: b9:d5:93:75:82:83:c3:ac:8e:ba:a4:9c:ec:73:8d: 5b:13:09:29:2a:ea:6a:9b:3d:67:a0:0a:c8:e0:15: 91:2b:aa:ff:6c:62:42:31:15:e8:84:7a:2b:73:58: 03:a0:c8:82:1a:7d:d4:ad:34:87:8a:9b:bf:44:19: a8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:63:10:E4:2A:04:18:2E:3F:87:34:3C:75:4A:3D:AA:42:69:27:C9 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS51043.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.98.0/24 Signature Algorithm: sha256WithRSAEncryption ab:da:06:ca:5f:59:87:fb:d4:46:2f:2c:4a:5a:17:6f:ae:6a: 6c:11:67:65:3d:af:9c:53:c8:da:f8:ac:cb:42:37:79:0a:05: 14:d1:d0:7c:c8:49:78:f6:9c:3e:6e:5a:bd:5e:23:01:33:94: 62:94:aa:ed:3a:59:0d:c1:5b:da:bd:d6:44:43:e6:b4:84:48: 3b:92:3a:36:41:72:aa:0c:a6:79:a6:86:23:51:d3:e6:62:24: a9:04:d4:b1:1d:9a:2c:0e:1f:10:67:d4:43:ac:86:be:58:84: 0c:49:15:56:39:fc:05:ed:ba:85:d8:7f:86:ba:ce:b3:1d:6d: 53:7c:a0:3a:ed:8d:53:53:9f:39:99:04:02:2f:9b:0e:82:a1: 5b:c5:c6:64:09:6c:c5:ce:9a:e4:6a:4b:73:59:c8:36:15:ed: 8f:c3:96:df:8f:24:f2:f8:3e:1e:f1:c5:a6:ea:87:b9:4e:2c: ea:35:25:a3:43:dc:8f:7c:9b:6e:fe:87:20:09:04:f1:91:bb: e8:da:78:03:06:f1:05:43:87:08:a6:17:3e:cc:b6:4d:b7:8a: dd:f5:e4:39:02:f5:c3:66:4b:78:3b:fa:95:f1:20:5b:e8:84: eb:13:aa:67:8c:a6:cb:df:04:3f:f0:c0:9a:e9:94:80:db:74: d9:83:e1:ee -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUMR2MHdgiwfAFHNP09bDzXyumm/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwODUwMTNaFw0yNjEyMDIwODU1MTNaMDMxMTAvBgNV BAMTKDlCNjMxMEU0MkEwNDE4MkUzRjg3MzQzQzc1NEEzREFBNDI2OTI3QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG4KjjK9dYc3bznhJ5K0nAEwqj KpXCY4akUBPnCBbajF0p47AerdFcjupbMTN8VWZA02b0zHEfLp69dDa2PfbBrQCX qcLekV/COI+u2uKgu7MbdvxvPe/4xhhRJD71o+pF5MSzAfpw4cMj+1pmA/W44F/e Orusb5rXHPtJ64Z6fEVsi8GbTByiwtokRJI27dzo010hRtBzfp+I5IZdyaJECtI2 xMRbz9G0Bjzy4XSJknG6qir3nv/IbI/TTvyDvoIBCrnVk3WCg8OsjrqknOxzjVsT CSkq6mqbPWegCsjgFZErqv9sYkIxFeiEeitzWAOgyIIafdStNIeKm79EGagbAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUm2MQ5CoEGC4/hzQ8dUo9qkJpJ8kwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNTEwNDMucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtWGIw DQYJKoZIhvcNAQELBQADggEBAKvaBspfWYf71EYvLEpaF2+uamwRZ2U9r5xTyNr4 rMtCN3kKBRTR0HzISXj2nD5uWr1eIwEzlGKUqu06WQ3BW9q91kRD5rSESDuSOjZB cqoMpnmmhiNR0+ZiJKkE1LEdmiwOHxBn1EOshr5YhAxJFVY5/AXtuoXYf4a6zrMd bVN8oDrtjVNTnzmZBAIvmw6CoVvFxmQJbMXOmuRqS3NZyDYV7Y/Dlt+PJPL4Ph7x xabqh7lOLOo1JaND3I98m27+hyAJBPGRu+jaeAMG8QVDhwimFz7Mtk23it315DkC 9cNmS3g7+pXxIFvohOsTqmeMpsvfBD/wwJrplIDbdNmD4e4= -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:24 2025 by rpki-client