This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS149573.roa File: AS149573.roa (raw, json) Hash identifier: Bw5TqNRo2B3pPCQBZRtmFezXbeMCubgV282q5s8+ZS8= Subject key identifier: 82:82:E3:DA:A4:ED:45:D2:76:51:54:92:96:F1:BB:AC:F6:D8:D0:6E Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 0E6F5EA0C0738ED97A781135B3A9C3AEBEB87CAD Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS149573.roa Signing time: Wed 26 Nov 2025 10:32:34 +0000 ROA not before: Wed 26 Nov 2025 10:27:34 +0000 ROA not after: Wed 25 Nov 2026 10:32:34 +0000 asID: 149573 IP address blocks: 191.101.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:6f:5e:a0:c0:73:8e:d9:7a:78:11:35:b3:a9:c3:ae:be:b8:7c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Nov 26 10:27:34 2025 GMT Not After : Nov 25 10:32:34 2026 GMT Subject: CN=8282E3DAA4ED45D27651549296F1BBACF6D8D06E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:4c:d7:ea:6f:b1:88:dd:ce:36:37:21:b5: c5:4f:13:25:0d:4f:05:e0:d1:4e:92:76:73:99:20: 20:60:3c:03:f6:e7:de:74:c4:66:6c:4f:3c:43:1f: 88:06:f0:18:b8:35:01:ca:bd:a5:59:cb:2a:56:a8: 70:33:49:4a:9c:89:ce:8d:95:d1:82:7e:45:53:ac: 44:4b:0c:ee:61:e1:0d:a0:e4:6d:8d:56:10:09:bf: 68:e7:02:52:30:d6:a0:5a:b4:d2:5f:3e:c2:cc:04: fa:db:ea:53:77:48:bf:87:b9:70:52:f4:bb:24:13: a2:c3:f3:81:5f:7b:4e:dc:13:00:5b:cf:40:02:ee: 14:82:ef:cf:c9:0c:2f:8a:ba:f2:6b:a5:91:22:cb: 75:8c:bb:6d:0e:dc:d3:13:ac:44:e0:96:bc:17:b4: bc:10:36:1a:e9:ca:95:5f:de:1a:f6:8a:f9:e8:fb: d8:7d:84:a7:61:5c:bc:07:4a:c4:d0:a3:8d:84:7c: a9:59:ea:f3:a2:29:e1:a1:01:3b:c0:4f:db:76:1d: bc:78:cf:80:ab:d9:cd:9b:29:2c:e7:28:68:92:e3: 24:08:86:e3:40:7d:ed:41:c3:1f:37:c8:c3:df:f9: 89:9e:9b:b9:6e:8a:c0:9e:ee:d9:92:ae:92:b2:d8: 2a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:82:E3:DA:A4:ED:45:D2:76:51:54:92:96:F1:BB:AC:F6:D8:D0:6E X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS149573.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.101.187.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:37:32:3b:05:fe:92:94:5b:1b:69:fd:17:d7:21:64:74:3d: 18:30:71:46:c1:2e:83:cf:40:46:5f:b2:25:d4:b0:46:7d:ca: 9f:a9:68:81:53:25:ac:b1:c3:78:4d:d2:cf:a5:fb:08:6e:93: 91:b1:2a:4d:a5:2e:7f:d6:40:fa:f0:e1:dd:2d:62:ba:70:2c: 5f:de:b5:7f:5f:1f:4b:4e:92:c9:dd:b1:85:8b:e5:6a:5d:c9: bb:66:af:c1:04:8e:13:d6:87:fb:a2:15:38:66:e3:5c:85:7b: a0:4f:2f:41:f3:dc:9f:69:05:bf:56:3e:0d:7f:fe:9a:fc:7f: ad:0b:82:07:b1:e1:15:0c:7d:dd:8a:9f:5c:5f:7e:8a:c9:88: 9f:96:fa:05:a9:ca:89:f3:39:65:2d:3d:94:0c:47:8d:65:ee: 96:8c:c3:94:fc:e8:06:5a:83:ff:92:de:cd:9d:8b:8d:5c:cd: 0e:7f:0e:88:56:12:14:c0:ce:65:da:4d:a7:90:87:f7:1d:f2: ab:c3:ab:38:ba:a1:69:85:8a:46:c9:09:0e:68:4f:12:71:da: e4:fb:26:3b:1a:88:85:b9:b1:97:15:75:b1:ee:62:fb:11:e1: 5f:95:4a:60:dd:7a:98:0e:8f:7a:e5:2f:1c:5d:9a:96:a6:cf: 74:1d:a1:8f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUDm9eoMBzjtl6eBE1s6nDrr64fK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTExMjYxMDI3MzRaFw0yNjExMjUxMDMyMzRaMDMxMTAvBgNV BAMTKDgyODJFM0RBQTRFRDQ1RDI3NjUxNTQ5Mjk2RjFCQkFDRjZEOEQwNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0w0zX6m+xiN3ONjchtcVPEyUN TwXg0U6SdnOZICBgPAP25950xGZsTzxDH4gG8Bi4NQHKvaVZyypWqHAzSUqcic6N ldGCfkVTrERLDO5h4Q2g5G2NVhAJv2jnAlIw1qBatNJfPsLMBPrb6lN3SL+HuXBS 9LskE6LD84Ffe07cEwBbz0AC7hSC78/JDC+KuvJrpZEiy3WMu20O3NMTrETglrwX tLwQNhrpypVf3hr2ivno+9h9hKdhXLwHSsTQo42EfKlZ6vOiKeGhATvAT9t2Hbx4 z4Cr2c2bKSznKGiS4yQIhuNAfe1Bwx83yMPf+Ymem7luisCe7tmSrpKy2CrnAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUgoLj2qTtRdJ2UVSSlvG7rPbY0G4wHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTQ5NTczLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv2W7 MA0GCSqGSIb3DQEBCwUAA4IBAQCdNzI7Bf6SlFsbaf0X1yFkdD0YMHFGwS6Dz0BG X7Il1LBGfcqfqWiBUyWsscN4TdLPpfsIbpORsSpNpS5/1kD68OHdLWK6cCxf3rV/ Xx9LTpLJ3bGFi+VqXcm7Zq/BBI4T1of7ohU4ZuNchXugTy9B89yfaQW/Vj4Nf/6a /H+tC4IHseEVDH3dip9cX36KyYiflvoFqcqJ8zllLT2UDEeNZe6WjMOU/OgGWoP/ kt7NnYuNXM0Ofw6IVhIUwM5l2k2nkIf3HfKrw6s4uqFphYpGyQkOaE8Scdrk+yY7 GoiFubGXFXWx7mL7EeFflUpg3XqYDo965S8cXZqWps90HaGP -----END CERTIFICATE-----Generated at Wed Dec 3 11:45:25 2025 by rpki-client