This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS58955.roa File: AS58955.roa (raw, json) Hash identifier: vyZNmHnTu+qKBL6Lm2qpBEu1AwTHgJlPz2l2LWaHsB0= Subject key identifier: FC:21:FF:A9:6D:50:DF:57:3E:E9:90:57:B0:2E:46:4C:FE:0D:68:66 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 75A6749B8F9394A0CCC2BBCC415CE26470FD0C89 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS58955.roa Signing time: Wed 03 Dec 2025 08:55:12 +0000 ROA not before: Wed 03 Dec 2025 08:50:12 +0000 ROA not after: Wed 02 Dec 2026 08:55:12 +0000 asID: 58955 IP address blocks: 191.96.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:a6:74:9b:8f:93:94:a0:cc:c2:bb:cc:41:5c:e2:64:70:fd:0c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 08:50:12 2025 GMT Not After : Dec 2 08:55:12 2026 GMT Subject: CN=FC21FFA96D50DF573EE99057B02E464CFE0D6866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:47:c4:12:5a:9b:53:3c:7e:2f:98:f4:7d:46: cd:63:79:79:3f:6e:af:f7:25:64:78:c3:76:0b:da: e4:ea:81:89:61:a4:0c:8e:95:f1:81:b7:05:6e:1c: 61:ec:aa:b9:8a:8f:a8:d4:4d:0b:16:95:79:e0:33: 22:b7:e3:ef:3b:ae:b3:0a:3c:e9:a1:6b:2c:b9:dd: f1:d4:60:fa:c1:e7:04:cf:6e:f3:47:6f:9a:0f:71: 66:f7:e1:86:f3:7d:6c:02:3b:b7:74:a5:61:a6:4b: 87:e2:c1:32:3b:20:ae:17:83:04:1d:56:95:f1:ac: 3c:63:e1:e9:99:2a:24:3b:10:b0:55:4a:ee:29:24: ad:9c:1a:47:7a:91:8c:ab:b3:e8:95:35:1d:f7:18: 91:38:fe:84:cc:2e:f6:75:7f:fe:58:c2:28:f9:cf: 26:33:46:3f:8b:17:b0:6c:bc:8a:9d:88:4f:b7:22: b9:f2:d6:84:74:b1:f5:cd:99:ad:ca:06:ab:bb:e1: 8a:e3:00:6a:a0:ff:44:4b:a0:7b:c2:3e:b4:04:93: f2:f7:13:c0:2a:13:66:52:70:63:bb:42:8e:a1:77: 6b:91:31:69:f6:45:f3:3f:5a:13:aa:c9:00:eb:22: a4:a6:90:b3:d8:a1:27:50:d0:68:e1:b4:f2:2d:e4: 25:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:21:FF:A9:6D:50:DF:57:3E:E9:90:57:B0:2E:46:4C:FE:0D:68:66 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS58955.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.96.119.0/24 Signature Algorithm: sha256WithRSAEncryption 68:f3:8d:0b:76:a1:9e:92:1c:19:27:c6:d0:10:82:d2:ed:74: 6a:f5:62:1c:0f:db:d9:f1:d3:b1:05:3a:7c:f6:92:f7:38:b2: 65:77:a7:c3:dd:44:ac:35:77:a0:3f:f3:0e:e8:af:1e:bb:af: 70:1a:3d:7d:6c:23:bd:04:33:65:44:e2:30:7c:0d:d4:c6:8f: be:ad:c4:be:9c:9a:11:3b:d7:e1:0e:40:35:f2:46:48:18:95: 2a:86:d7:2a:e4:51:67:ed:e4:75:0a:9f:72:d5:1d:95:31:8a: 6a:f3:29:17:a4:55:64:a0:1c:19:5e:05:a1:66:37:06:8d:a3: 5d:8e:c7:2c:af:7f:a5:8a:0a:dc:20:11:9d:81:6f:97:51:10: 3c:f8:17:a7:3f:6a:1d:36:6c:22:4e:6a:31:dc:83:2b:14:b4: fe:77:b4:d5:a9:51:b5:af:e0:f4:43:8f:a0:46:8c:35:03:12: 38:b7:54:5f:08:c8:dd:85:7a:7c:c7:19:3b:4d:20:3a:17:03: d9:0a:00:a2:fc:9d:2e:4c:9c:70:4f:81:79:04:f1:a8:f2:e2: bf:09:73:22:71:56:4e:0b:3b:dc:40:21:88:7d:29:63:3c:0e: 37:29:2f:3b:12:e6:c2:ea:5a:0b:47:d8:7e:b8:6f:6d:bc:55: a5:ae:92:9f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUdaZ0m4+TlKDMwrvMQVziZHD9DIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwODUwMTJaFw0yNjEyMDIwODU1MTJaMDMxMTAvBgNV BAMTKEZDMjFGRkE5NkQ1MERGNTczRUU5OTA1N0IwMkU0NjRDRkUwRDY4NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYR8QSWptTPH4vmPR9Rs1jeXk/ bq/3JWR4w3YL2uTqgYlhpAyOlfGBtwVuHGHsqrmKj6jUTQsWlXngMyK34+87rrMK POmhayy53fHUYPrB5wTPbvNHb5oPcWb34YbzfWwCO7d0pWGmS4fiwTI7IK4XgwQd VpXxrDxj4emZKiQ7ELBVSu4pJK2cGkd6kYyrs+iVNR33GJE4/oTMLvZ1f/5Ywij5 zyYzRj+LF7BsvIqdiE+3Irny1oR0sfXNma3KBqu74YrjAGqg/0RLoHvCPrQEk/L3 E8AqE2ZScGO7Qo6hd2uRMWn2RfM/WhOqyQDrIqSmkLPYoSdQ0GjhtPIt5CVBAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQU/CH/qW1Q31c+6ZBXsC5GTP4NaGYwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNTg5NTUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/YHcw DQYJKoZIhvcNAQELBQADggEBAGjzjQt2oZ6SHBknxtAQgtLtdGr1YhwP29nx07EF Onz2kvc4smV3p8PdRKw1d6A/8w7orx67r3AaPX1sI70EM2VE4jB8DdTGj76txL6c mhE71+EOQDXyRkgYlSqG1yrkUWft5HUKn3LVHZUximrzKRekVWSgHBleBaFmNwaN o12Oxyyvf6WKCtwgEZ2Bb5dREDz4F6c/ah02bCJOajHcgysUtP53tNWpUbWv4PRD j6BGjDUDEji3VF8IyN2FenzHGTtNIDoXA9kKAKL8nS5MnHBPgXkE8ajy4r8JcyJx Vk4LO9xAIYh9KWM8DjcpLzsS5sLqWgtH2H64b228VaWukp8= -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:38 2025 by rpki-client