This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS61120.roa File: AS61120.roa (raw, json) Hash identifier: 0RSVgAs4rR+GYucAnoZ8BAcPCyBq21tmckXxl3plY5Q= Subject key identifier: FF:24:8A:E0:7A:CF:A2:94:65:B7:65:D1:F6:88:0D:70:56:CA:88:CB Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 1228664993948E02248491FF8D9B31771E1023AC Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS61120.roa Signing time: Tue 25 Nov 2025 09:43:38 +0000 ROA not before: Tue 25 Nov 2025 09:38:38 +0000 ROA not after: Tue 24 Nov 2026 09:43:38 +0000 asID: 61120 IP address blocks: 2a14:7581:f90::/44 maxlen: 44 2a14:7581:f90::/48 maxlen: 48 2a14:7581:f91::/48 maxlen: 48 2a14:7581:f92::/48 maxlen: 48 2a14:7581:f93::/48 maxlen: 48 2a14:7581:f94::/48 maxlen: 48 2a14:7581:f95::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:28:66:49:93:94:8e:02:24:84:91:ff:8d:9b:31:77:1e:10:23:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Nov 25 09:38:38 2025 GMT Not After : Nov 24 09:43:38 2026 GMT Subject: CN=FF248AE07ACFA29465B765D1F6880D7056CA88CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:36:9d:28:1d:53:f6:22:41:bf:f1:d3:fe:e3: bc:d3:f0:42:d2:88:ff:25:2d:5e:10:e5:7c:51:f3: 30:de:eb:6d:64:a4:64:9f:5a:c5:d4:6e:8c:d9:77: ba:e3:92:7a:9b:7e:62:03:83:31:82:2c:2f:5a:9a: 60:c8:2f:30:26:05:0e:c2:65:86:2e:8a:6d:2e:f5: 21:81:8f:2d:40:4d:28:6a:9d:d9:5e:00:af:86:ce: 5f:36:e1:71:c7:76:61:11:f1:38:2e:fd:10:d6:50: 85:84:b9:ce:48:24:57:64:b6:bf:1e:05:30:10:a2: 8b:e9:20:69:ee:e4:67:df:e7:11:36:e7:b4:4a:64: 73:0e:6e:c2:0a:55:5b:4f:d6:d1:f9:98:c3:0a:23: f2:e8:13:52:5b:41:6d:e9:e6:a3:d7:6a:1f:38:60: 0b:14:78:80:d6:61:fc:86:da:6a:8b:f1:50:0d:89: d5:0e:56:07:6c:fc:39:10:7d:fe:75:77:84:8c:02: 98:c8:34:8a:57:46:73:6d:71:22:fa:0a:40:bc:9b: 87:c3:65:62:d9:e9:74:a3:82:74:6f:e0:54:ae:65: 53:97:33:a3:9b:be:60:88:7f:12:cd:07:b7:b8:aa: 16:77:69:46:92:ee:ba:af:e7:f0:e3:56:ee:52:68: 64:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:24:8A:E0:7A:CF:A2:94:65:B7:65:D1:F6:88:0D:70:56:CA:88:CB X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS61120.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:f90::/44 Signature Algorithm: sha256WithRSAEncryption 2e:76:77:0a:63:cc:6d:9c:ad:e6:99:04:66:9c:2d:4d:af:db: 50:e7:6e:44:e4:21:7b:58:00:9f:a1:70:c7:5f:3e:f3:ce:bf: 2b:24:45:38:f8:61:25:d7:24:b8:4b:4a:a3:44:db:64:79:73: 1b:e7:96:78:92:8f:77:0e:c3:d9:bb:2a:89:09:f3:33:de:a7: 6c:2d:9c:83:57:1a:65:fd:4a:b5:b9:47:be:de:f2:b7:f8:ed: ac:ea:b9:50:c4:01:fe:b7:4b:eb:d7:78:24:94:d9:c3:70:32: 01:80:21:7e:0c:20:e5:46:1c:89:8d:15:dd:24:df:43:81:d6: 81:7a:2d:ca:af:a4:0d:26:b3:15:7b:23:31:cb:f1:30:22:61: c0:41:3d:20:0a:10:bc:18:86:17:f9:46:f2:b5:58:a9:75:d2: 11:7f:a4:3b:64:3d:f7:09:70:35:df:b2:7a:e7:07:57:a9:b0: 7c:f5:93:51:de:62:b2:b0:42:1d:c9:22:bd:73:94:73:59:78: 2f:46:44:c7:4a:3e:2e:4c:20:7a:06:c0:3a:0b:e6:41:86:9c: bb:c3:d8:63:2d:a3:aa:cf:2c:1a:2f:67:84:e2:78:89:c2:7b: 32:81:9b:00:89:fd:f2:49:bb:4a:40:2a:52:c3:e1:55:f4:5f: 6f:ec:35:02 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUEihmSZOUjgIkhJH/jZsxdx4QI6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTExMjUwOTM4MzhaFw0yNjExMjQwOTQzMzhaMDMxMTAvBgNV BAMTKEZGMjQ4QUUwN0FDRkEyOTQ2NUI3NjVEMUY2ODgwRDcwNTZDQTg4Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPNp0oHVP2IkG/8dP+47zT8ELS iP8lLV4Q5XxR8zDe621kpGSfWsXUbozZd7rjknqbfmIDgzGCLC9ammDILzAmBQ7C ZYYuim0u9SGBjy1ATShqndleAK+Gzl824XHHdmER8Tgu/RDWUIWEuc5IJFdktr8e BTAQoovpIGnu5Gff5xE257RKZHMObsIKVVtP1tH5mMMKI/LoE1JbQW3p5qPXah84 YAsUeIDWYfyG2mqL8VANidUOVgds/DkQff51d4SMApjINIpXRnNtcSL6CkC8m4fD ZWLZ6XSjgnRv4FSuZVOXM6ObvmCIfxLNB7e4qhZ3aUaS7rqv5/DjVu5SaGS3AgMB AAGjggIMMIICCDAdBgNVHQ4EFgQU/ySK4HrPopRlt2XR9ogNcFbKiMswHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTNjExMjAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqFHWB D5AwDQYJKoZIhvcNAQELBQADggEBAC52dwpjzG2creaZBGacLU2v21DnbkTkIXtY AJ+hcMdfPvPOvyskRTj4YSXXJLhLSqNE22R5cxvnlniSj3cOw9m7KokJ8zPep2wt nINXGmX9SrW5R77e8rf47azquVDEAf63S+vXeCSU2cNwMgGAIX4MIOVGHImNFd0k 30OB1oF6LcqvpA0msxV7IzHL8TAiYcBBPSAKELwYhhf5RvK1WKl10hF/pDtkPfcJ cDXfsnrnB1epsHz1k1HeYrKwQh3JIr1zlHNZeC9GRMdKPi5MIHoGwDoL5kGGnLvD 2GMto6rPLBovZ4TieInCezKBmwCJ/fJJu0pAKlLD4VX0X2/sNQI= -----END CERTIFICATE-----Generated at Sat Dec 6 11:45:23 2025 by rpki-client