This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS53991.roa File: AS53991.roa (raw, json) Hash identifier: qo6G5s4Kzm2vYyQFvFINMR1E5z6P/mR37i+fk5m5Lu0= Subject key identifier: 4F:77:E2:58:07:02:46:3C:C2:F4:D8:16:54:76:3B:95:28:AD:8C:47 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: DAB17499F18592F2969733C831B4FDBC588977 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS53991.roa Signing time: Fri 05 Dec 2025 19:55:14 +0000 ROA not before: Fri 05 Dec 2025 19:50:14 +0000 ROA not after: Fri 04 Dec 2026 19:55:14 +0000 asID: 53991 IP address blocks: 181.215.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: da:b1:74:99:f1:85:92:f2:96:97:33:c8:31:b4:fd:bc:58:89:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 5 19:50:14 2025 GMT Not After : Dec 4 19:55:14 2026 GMT Subject: CN=4F77E2580702463CC2F4D81654763B9528AD8C47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b5:f8:7d:69:ed:66:7b:d9:a6:33:e0:90:3a: b2:c6:13:ef:67:56:34:c1:38:b5:e7:9b:78:46:9d: e9:e1:6c:8d:2c:cc:94:be:a9:73:cc:0d:7a:45:32: 87:72:23:8e:5b:0b:4e:59:70:44:da:bb:4a:59:ba: e7:ac:17:a2:8e:f3:0f:4b:36:bd:a2:fa:fa:fe:31: 6e:5d:9b:56:f0:cb:1f:5c:d2:6d:c7:85:16:99:ea: 0a:b8:1f:df:6a:84:0e:2c:80:2e:6b:ab:ca:da:93: 93:71:5a:60:74:91:4b:87:49:c2:6c:7c:ab:61:d4: 1e:18:07:33:08:ee:d1:51:f1:97:42:72:9a:3b:dc: 30:25:34:da:61:d7:58:19:51:6e:77:bf:1d:c4:2c: 52:0c:06:65:21:cb:59:b7:72:1e:36:6f:a3:67:21: b3:b3:75:d5:dd:7c:14:bc:89:a2:64:4d:13:25:07: 44:a1:68:6c:98:f5:8a:98:66:14:a9:07:bb:1e:ac: 72:9e:3c:ef:5a:3c:1d:51:1e:fd:ab:b4:45:0c:94: 9f:75:e1:ec:ec:f6:82:5c:26:7a:70:31:c3:86:74: b7:3e:de:58:f8:01:be:8a:a5:c7:dc:49:8f:21:bc: ac:69:2a:e3:31:fa:96:61:4f:37:67:32:d8:1c:00: a2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:77:E2:58:07:02:46:3C:C2:F4:D8:16:54:76:3B:95:28:AD:8C:47 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS53991.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.215.30.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:b2:9f:ab:1e:cd:af:09:36:0b:52:15:16:73:64:43:5f:c7: ef:74:96:90:d9:bb:f0:51:d7:6f:69:95:c5:9f:e2:de:10:1e: 46:73:a7:c1:41:01:ff:a9:a2:c2:36:4b:cb:dd:63:ff:9f:b4: 09:fb:b8:c2:81:ab:10:c5:c9:44:03:fa:91:3e:f6:59:52:1f: 52:62:72:2d:4f:00:72:d3:1f:4e:98:8a:cd:2c:93:7c:e4:32: 45:b1:53:ca:1c:b2:e9:83:d1:6e:75:47:db:7a:a6:77:ed:a5: fa:c1:b1:dc:2d:83:ff:51:15:c2:f3:0f:19:82:b8:b1:71:e4: 68:23:31:a8:df:2d:2b:e1:db:46:9f:a9:a7:cc:09:72:13:e9: 33:6e:eb:90:7e:64:f2:a1:d7:0a:bb:f6:45:4a:84:1b:96:33: 1e:d3:46:52:92:e1:84:fa:ae:2e:c2:37:0b:f5:f8:5c:66:2a: 4d:ab:97:ca:88:df:fc:18:d0:06:2b:fd:83:83:4d:bf:2c:6a: dc:ef:20:49:04:53:00:66:69:16:f5:b4:06:69:f0:28:89:8e: a3:bb:0f:6c:5b:ef:ce:ff:49:13:53:06:72:a3:db:5e:66:36: 03:37:66:03:94:fd:94:d1:3e:ac:f6:ed:16:02:21:90:9f:56: bc:9c:14:89 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUANqxdJnxhZLylpczyDG0/bxYiXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDUxOTUwMTRaFw0yNjEyMDQxOTU1MTRaMDMxMTAvBgNV BAMTKDRGNzdFMjU4MDcwMjQ2M0NDMkY0RDgxNjU0NzYzQjk1MjhBRDhDNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+tfh9ae1me9mmM+CQOrLGE+9n VjTBOLXnm3hGnenhbI0szJS+qXPMDXpFModyI45bC05ZcETau0pZuuesF6KO8w9L Nr2i+vr+MW5dm1bwyx9c0m3HhRaZ6gq4H99qhA4sgC5rq8rak5NxWmB0kUuHScJs fKth1B4YBzMI7tFR8ZdCcpo73DAlNNph11gZUW53vx3ELFIMBmUhy1m3ch42b6Nn IbOzddXdfBS8iaJkTRMlB0ShaGyY9YqYZhSpB7serHKePO9aPB1RHv2rtEUMlJ91 4ezs9oJcJnpwMcOGdLc+3lj4Ab6KpcfcSY8hvKxpKuMx+pZhTzdnMtgcAKIRAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUT3fiWAcCRjzC9NgWVHY7lSitjEcwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNTM5OTEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC11x4w DQYJKoZIhvcNAQELBQADggEBADqyn6seza8JNgtSFRZzZENfx+90lpDZu/BR129p lcWf4t4QHkZzp8FBAf+posI2S8vdY/+ftAn7uMKBqxDFyUQD+pE+9llSH1Jici1P AHLTH06Yis0sk3zkMkWxU8ocsumD0W51R9t6pnftpfrBsdwtg/9RFcLzDxmCuLFx 5GgjMajfLSvh20afqafMCXIT6TNu65B+ZPKh1wq79kVKhBuWMx7TRlKS4YT6ri7C Nwv1+FxmKk2rl8qI3/wY0AYr/YODTb8satzvIEkEUwBmaRb1tAZp8CiJjqO7D2xb 787/SRNTBnKj215mNgM3ZgOU/ZTRPqz27RYCIZCfVrycFIk= -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:42 2025 by rpki-client