This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS56485.roa File: AS56485.roa (raw, json) Hash identifier: tkX4GkpR5zNcwqR5LBbN4e2+p/+HV5NgMx3xswRUzMg= Subject key identifier: 22:B5:D3:76:38:B7:EF:F0:00:CE:4E:98:10:92:15:93:48:85:6D:17 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 02390AD65DD097F163A644BC168FFB5DB633A404 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS56485.roa Signing time: Thu 04 Dec 2025 12:55:14 +0000 ROA not before: Thu 04 Dec 2025 12:50:14 +0000 ROA not after: Thu 03 Dec 2026 12:55:14 +0000 asID: 56485 IP address blocks: 181.214.134.0/24 maxlen: 24 191.101.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:39:0a:d6:5d:d0:97:f1:63:a6:44:bc:16:8f:fb:5d:b6:33:a4:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 4 12:50:14 2025 GMT Not After : Dec 3 12:55:14 2026 GMT Subject: CN=22B5D37638B7EFF000CE4E981092159348856D17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5d:d2:7a:0b:b5:ed:c0:87:df:53:9a:88:89: a8:5e:3c:47:cb:63:0e:dd:50:17:96:5a:74:39:7c: b7:d5:d0:84:ab:65:4a:ef:d9:b4:48:53:7a:d4:20: cc:41:ec:9d:e1:27:04:29:3f:23:b5:e4:e7:c8:2f: a2:91:00:c7:be:50:bc:1c:72:c3:71:5b:6f:f4:c5: a6:5e:8c:af:74:86:d1:94:ee:ca:e4:bb:a2:0e:a0: c8:f2:39:3a:8d:03:05:91:0e:bf:7a:79:a9:1b:3b: ea:14:97:eb:ae:1e:50:d3:46:0c:77:2e:2f:09:b1: 87:c4:48:52:86:ef:d0:8c:fd:b8:4f:ee:b0:95:23: c5:e9:a5:32:6e:dc:a4:67:d0:aa:10:0b:43:6b:27: bd:6b:2f:69:be:13:29:d9:6e:c3:6d:b7:b6:22:bd: 31:b1:6a:be:c5:9b:4f:2c:be:92:93:c8:99:d5:89: df:6a:eb:71:d2:c3:e2:a9:e5:7f:a8:92:06:a7:ca: 43:a0:c8:79:18:57:0e:d4:dd:62:b8:92:7f:12:f6: 5c:e7:49:ca:07:2d:fc:c1:da:fa:d8:08:e3:03:bf: b0:8b:99:86:96:9b:c3:1c:26:6a:ff:7d:7e:d7:8e: 36:79:a9:33:d3:5e:ab:1a:de:9a:99:90:07:cb:43: 4d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B5:D3:76:38:B7:EF:F0:00:CE:4E:98:10:92:15:93:48:85:6D:17 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS56485.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.214.134.0/24 191.101.49.0/24 Signature Algorithm: sha256WithRSAEncryption 86:62:ed:7c:8e:b4:c4:57:76:01:13:86:90:6f:72:a8:6b:14: be:3f:4e:f5:c1:b3:95:3d:7e:21:d5:45:ed:27:f3:5f:6a:2f: e3:66:46:d4:ba:ca:0f:2b:35:f3:b3:d9:8a:20:f1:30:2f:91: 54:46:3e:b5:58:bc:c9:3a:ce:7c:b2:2b:b9:ce:a8:63:f1:fa: 8c:c0:0f:a7:34:f0:b8:10:d5:4b:43:23:1a:95:08:c5:5c:04: a9:ef:4b:81:f8:d0:77:81:bf:36:26:76:23:4d:0d:7a:bf:19: 8c:6b:63:33:ec:51:ec:24:1b:07:45:73:b0:1b:70:82:f0:b4: 47:f3:a8:96:83:0e:e0:c0:97:fc:d7:a4:57:3c:27:b8:c9:39: 24:1c:d1:da:58:6c:a3:2e:4e:2f:9f:d1:96:64:bb:a9:08:34: 42:09:52:6c:b8:16:3c:bb:74:db:6b:6c:b0:4a:da:47:8d:d2: 76:1c:00:3a:fd:59:bf:09:a5:d2:55:c9:f3:3f:57:cf:9d:f7: a1:f3:12:59:8c:5c:57:36:68:48:4b:d3:ff:ff:ab:e7:22:ba: 63:31:9f:d3:ee:30:28:73:d6:90:0d:f8:43:19:37:70:59:bc: 60:a1:7e:8b:f0:93:0c:71:5b:93:3b:10:c6:a5:0e:43:bf:ae: 4d:24:36:ca -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUAjkK1l3Ql/FjpkS8Fo/7XbYzpAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDQxMjUwMTRaFw0yNjEyMDMxMjU1MTRaMDMxMTAvBgNV BAMTKDIyQjVEMzc2MzhCN0VGRjAwMENFNEU5ODEwOTIxNTkzNDg4NTZEMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEXdJ6C7XtwIffU5qIiahePEfL Yw7dUBeWWnQ5fLfV0ISrZUrv2bRIU3rUIMxB7J3hJwQpPyO15OfIL6KRAMe+ULwc csNxW2/0xaZejK90htGU7srku6IOoMjyOTqNAwWRDr96eakbO+oUl+uuHlDTRgx3 Li8JsYfESFKG79CM/bhP7rCVI8XppTJu3KRn0KoQC0NrJ71rL2m+EynZbsNtt7Yi vTGxar7Fm08svpKTyJnVid9q63HSw+Kp5X+okganykOgyHkYVw7U3WK4kn8S9lzn ScoHLfzB2vrYCOMDv7CLmYaWm8McJmr/fX7XjjZ5qTPTXqsa3pqZkAfLQ02VAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUIrXTdji37/AAzk6YEJIVk0iFbRcwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNTY0ODUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAC11oYD BAC/ZTEwDQYJKoZIhvcNAQELBQADggEBAIZi7XyOtMRXdgEThpBvcqhrFL4/TvXB s5U9fiHVRe0n819qL+NmRtS6yg8rNfOz2Yog8TAvkVRGPrVYvMk6znyyK7nOqGPx +ozAD6c08LgQ1UtDIxqVCMVcBKnvS4H40HeBvzYmdiNNDXq/GYxrYzPsUewkGwdF c7AbcILwtEfzqJaDDuDAl/zXpFc8J7jJOSQc0dpYbKMuTi+f0ZZku6kINEIJUmy4 Fjy7dNtrbLBK2keN0nYcADr9Wb8JpdJVyfM/V8+d96HzElmMXFc2aEhL0///q+ci umMxn9PuMChz1pAN+EMZN3BZvGChfovwkwxxW5M7EMalDkO/rk0kNso= -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:53 2025 by rpki-client