This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62610.roa File: AS62610.roa (raw, json) Hash identifier: XiHXKARzMxkb3W12hkpbTA8ay6uqwUmgCYKZiNH5rNc= Subject key identifier: FF:D2:7A:3A:0A:DC:B7:84:FC:E0:3E:70:A8:7F:1F:22:AE:BF:BF:68 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 690E85045AEB42B25CAB06511C720D8BF49865CE Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62610.roa Signing time: Fri 28 Nov 2025 00:02:45 +0000 ROA not before: Thu 27 Nov 2025 23:57:45 +0000 ROA not after: Fri 27 Nov 2026 00:02:45 +0000 asID: 62610 IP address blocks: 140.150.232.0/24 maxlen: 24 167.148.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0e:85:04:5a:eb:42:b2:5c:ab:06:51:1c:72:0d:8b:f4:98:65:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 27 23:57:45 2025 GMT Not After : Nov 27 00:02:45 2026 GMT Subject: CN=FFD27A3A0ADCB784FCE03E70A87F1F22AEBFBF68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:3d:92:45:70:7d:8b:95:15:92:05:0b:e3: 7b:0d:2b:3e:0b:8d:34:4f:c4:eb:c0:a6:66:fc:61: 56:f5:e7:78:4c:bb:90:d5:ca:69:94:e6:66:ef:0f: 10:14:f1:d8:10:d4:df:48:eb:09:1c:39:de:a4:db: 4c:2a:23:6f:8b:2a:5d:f0:80:cf:7c:b9:52:f2:2f: 63:a4:5f:1d:f5:e5:f8:50:f3:18:dd:01:37:19:04: 36:a8:93:55:8d:e6:7e:0d:7f:66:59:52:e2:54:ad: fa:f1:4a:d4:39:d0:84:bf:c4:6c:27:9d:66:5a:1a: 1e:76:26:05:95:04:e3:26:99:92:30:f5:ea:aa:9c: c8:0d:25:6d:9c:36:79:18:3f:ef:39:3b:7f:3b:d1: 8d:e1:d4:a9:3b:7b:0d:e8:c6:ba:f2:29:fe:05:0e: 1a:94:91:a3:7a:2a:ac:4a:83:68:5d:7e:88:59:6d: 01:de:03:30:ce:59:ec:67:1f:60:df:40:62:9a:a7: 7c:e1:43:0f:9a:0f:1e:3a:ea:72:35:79:c5:b3:60: 4c:20:90:1b:4e:42:38:03:ca:98:28:70:5e:e9:60: c0:9b:65:0d:55:ef:47:b4:8c:81:85:f1:55:2e:a7: 9d:36:9b:1e:ae:8e:71:31:aa:cf:27:98:16:47:99: d5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D2:7A:3A:0A:DC:B7:84:FC:E0:3E:70:A8:7F:1F:22:AE:BF:BF:68 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS62610.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.150.232.0/24 167.148.169.0/24 Signature Algorithm: sha256WithRSAEncryption bb:29:97:4e:f5:93:a8:fc:37:3b:04:4f:fb:1e:0f:76:8c:22: c7:24:7a:56:2a:b4:58:31:4f:6f:e4:b7:bf:46:54:bb:76:94: 3a:d9:75:e2:fa:c9:18:13:38:77:8c:62:4a:8a:1a:ad:3e:01: 09:ef:d6:da:d4:a7:24:a6:ba:8a:b5:cd:36:ec:5e:2e:c9:46: 02:58:fd:ec:b3:c6:a4:ae:25:c3:fc:59:80:d9:b4:b9:30:3c: 5b:6a:89:5f:76:eb:f9:bf:20:e2:57:40:b4:51:ca:d4:23:e9: 81:25:e9:88:ef:a9:93:c2:b5:e4:05:83:07:41:33:71:44:95: 7a:cd:91:65:b4:63:03:73:f7:a6:00:2a:48:ad:63:8c:1a:6d: af:06:16:a5:e3:b8:c9:92:f5:3f:73:d7:44:ec:e5:ad:04:7c: dd:35:0d:26:5f:3e:9d:f1:92:1e:03:7b:8f:f3:31:c7:be:5b: b6:8d:02:d9:51:79:0e:e2:b0:05:28:64:14:67:10:d3:e9:c6: 2f:76:bd:53:f3:5d:db:ec:a3:74:ad:94:ff:85:5d:d6:24:07: 6f:b1:1e:cf:d1:4a:c6:67:4e:55:41:d9:9a:46:f7:f1:0d:41: d6:f9:bd:d5:72:89:a2:15:39:5d:84:e4:9e:4c:b9:6c:b9:76: c3:96:3f:73 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUaQ6FBFrrQrJcqwZRHHINi/SYZc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMjcyMzU3NDVaFw0yNjExMjcwMDAyNDVaMDMxMTAvBgNV BAMTKEZGRDI3QTNBMEFEQ0I3ODRGQ0UwM0U3MEE4N0YxRjIyQUVCRkJGNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxDz2SRXB9i5UVkgUL43sNKz4L jTRPxOvApmb8YVb153hMu5DVymmU5mbvDxAU8dgQ1N9I6wkcOd6k20wqI2+LKl3w gM98uVLyL2OkXx315fhQ8xjdATcZBDaok1WN5n4Nf2ZZUuJUrfrxStQ50IS/xGwn nWZaGh52JgWVBOMmmZIw9eqqnMgNJW2cNnkYP+85O3870Y3h1Kk7ew3oxrryKf4F DhqUkaN6KqxKg2hdfohZbQHeAzDOWexnH2DfQGKap3zhQw+aDx466nI1ecWzYEwg kBtOQjgDypgocF7pYMCbZQ1V70e0jIGF8VUup502mx6ujnExqs8nmBZHmdXZAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU/9J6Ogrct4T84D5wqH8fIq6/v2gwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNjI2MTAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACMlugD BACnlKkwDQYJKoZIhvcNAQELBQADggEBALspl071k6j8NzsET/seD3aMIsckelYq tFgxT2/kt79GVLt2lDrZdeL6yRgTOHeMYkqKGq0+AQnv1trUpySmuoq1zTbsXi7J RgJY/eyzxqSuJcP8WYDZtLkwPFtqiV926/m/IOJXQLRRytQj6YEl6YjvqZPCteQF gwdBM3FElXrNkWW0YwNz96YAKkitY4waba8GFqXjuMmS9T9z10Ts5a0EfN01DSZf Pp3xkh4De4/zMce+W7aNAtlReQ7isAUoZBRnENPpxi92vVPzXdvso3StlP+FXdYk B2+xHs/RSsZnTlVB2ZpG9/ENQdb5vdVyiaIVOV2E5J5MuWy5dsOWP3M= -----END CERTIFICATE-----Generated at Fri Dec 5 05:07:05 2025 by rpki-client