This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205886.roa File: AS205886.roa (raw, json) Hash identifier: 1gzgpoIiIWV7B2oeJh2cX3c8jTdm+4Nw1feYrcxOLME= Subject key identifier: 08:91:65:2A:F7:1C:88:A9:E5:34:EE:DB:8A:54:3B:BA:E5:F6:31:E8 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 489BAEB4ADFD978EC9BDA4F56243C8C8CC8F00DB Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205886.roa Signing time: Tue 11 Nov 2025 03:16:56 +0000 ROA not before: Tue 11 Nov 2025 03:11:56 +0000 ROA not after: Tue 10 Nov 2026 03:16:56 +0000 asID: 205886 IP address blocks: 5.252.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 02:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:9b:ae:b4:ad:fd:97:8e:c9:bd:a4:f5:62:43:c8:c8:cc:8f:00:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Nov 11 03:11:56 2025 GMT Not After : Nov 10 03:16:56 2026 GMT Subject: CN=0891652AF71C88A9E534EEDB8A543BBAE5F631E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:60:72:ff:51:93:44:d7:02:49:55:89:f4:f3: 20:de:d2:c6:9f:88:80:12:96:63:8b:48:67:bc:f6: f2:70:1c:05:15:83:09:29:44:ef:e9:5a:69:f1:6f: da:c3:35:a0:9a:20:8c:ed:ff:dd:2d:e7:d2:01:34: f6:30:59:be:4e:33:6f:da:da:25:bc:72:67:4f:5e: 21:d7:d2:d8:06:ad:81:01:ee:ae:1f:b0:6c:2f:5c: fe:6b:11:e0:18:18:84:05:4f:0b:81:8a:26:28:6f: 7b:22:a7:81:99:a6:13:75:03:ee:5a:2b:4f:6e:14: 63:d5:45:c5:d7:2d:a6:f5:eb:2a:79:41:61:c8:4c: f4:00:08:c0:a3:23:16:c0:5c:26:29:cd:46:b2:ee: 74:e6:f7:27:bf:eb:34:41:6e:a1:a3:b5:f1:7f:9e: 3f:46:c0:9c:f0:4b:75:d0:e3:c8:c2:09:f1:68:b3: 88:0c:9c:09:af:a5:a6:4c:2c:72:bc:87:15:66:80: f5:6f:ca:49:1d:93:15:c1:11:f0:e6:35:3f:2f:2c: db:9a:db:66:10:91:25:4d:25:04:c7:95:a3:aa:af: ec:d7:25:a2:da:b0:23:70:7d:34:9a:63:29:10:fa: 5b:a6:08:de:2e:6c:b0:29:ba:da:a0:d9:41:b8:3d: 83:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:91:65:2A:F7:1C:88:A9:E5:34:EE:DB:8A:54:3B:BA:E5:F6:31:E8 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS205886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.83.0/24 Signature Algorithm: sha256WithRSAEncryption 47:38:ee:c0:16:8f:9f:da:5f:0e:e8:ed:2c:40:ba:59:0a:83: 51:41:df:bf:c6:ea:9c:55:53:31:c3:89:17:f1:0b:2b:e2:98: 06:ce:8b:e7:3b:84:fe:14:80:a2:43:f0:24:75:22:9f:75:55: 1b:98:7e:33:b9:be:cf:b5:ef:68:88:d5:3e:16:0b:87:27:3b: 74:ea:6d:37:54:95:b7:76:6e:62:d4:33:21:88:58:93:16:7d: 85:80:ad:97:93:b9:af:d0:80:ce:fb:2b:01:85:6c:a4:cc:fc: 35:83:25:ac:4b:cf:e8:f5:c1:dd:bf:4d:3d:d6:2a:25:50:e2: 25:e9:c0:82:3f:7a:6c:e8:0c:e2:51:5c:27:23:c8:e4:dc:41: 02:c9:36:f9:4f:ea:91:4e:86:57:3b:f7:47:04:8f:36:f4:3c: 50:9f:1c:ca:c9:c8:16:0a:92:1e:30:70:ad:b0:f8:15:a0:d6: ae:00:e5:a5:f9:e1:83:26:c5:11:e7:ff:fe:58:bd:c5:78:c3: 62:67:b6:a4:dc:8d:5f:29:03:c8:ed:24:eb:cb:6b:41:b0:d5: 85:53:29:0e:09:a2:21:7b:e5:5f:a6:49:bb:22:41:c0:f6:cc: c8:8b:4e:e8:bb:18:cf:a7:c5:02:2a:b8:1b:40:94:d5:a6:79: 77:11:2d:48 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUSJuutK39l47JvaT1YkPIyMyPANswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTExMTEwMzExNTZaFw0yNjExMTAwMzE2NTZaMDMxMTAvBgNV BAMTKDA4OTE2NTJBRjcxQzg4QTlFNTM0RUVEQjhBNTQzQkJBRTVGNjMxRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdYHL/UZNE1wJJVYn08yDe0saf iIASlmOLSGe89vJwHAUVgwkpRO/pWmnxb9rDNaCaIIzt/90t59IBNPYwWb5OM2/a 2iW8cmdPXiHX0tgGrYEB7q4fsGwvXP5rEeAYGIQFTwuBiiYob3sip4GZphN1A+5a K09uFGPVRcXXLab16yp5QWHITPQACMCjIxbAXCYpzUay7nTm9ye/6zRBbqGjtfF/ nj9GwJzwS3XQ48jCCfFos4gMnAmvpaZMLHK8hxVmgPVvykkdkxXBEfDmNT8vLNua 22YQkSVNJQTHlaOqr+zXJaLasCNwfTSaYykQ+lumCN4ubLAputqg2UG4PYN9AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUCJFlKvcciKnlNO7bilQ7uuX2MegwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjA1ODg2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABfxT MA0GCSqGSIb3DQEBCwUAA4IBAQBHOO7AFo+f2l8O6O0sQLpZCoNRQd+/xuqcVVMx w4kX8Qsr4pgGzovnO4T+FICiQ/AkdSKfdVUbmH4zub7Pte9oiNU+FguHJzt06m03 VJW3dm5i1DMhiFiTFn2FgK2Xk7mv0IDO+ysBhWykzPw1gyWsS8/o9cHdv0091iol UOIl6cCCP3ps6AziUVwnI8jk3EECyTb5T+qRToZXO/dHBI829DxQnxzKycgWCpIe MHCtsPgVoNauAOWl+eGDJsUR5//+WL3FeMNiZ7ak3I1fKQPI7STry2tBsNWFUykO CaIhe+Vfpkm7IkHA9szIi07ouxjPp8UCKrgbQJTVpnl3ES1I -----END CERTIFICATE-----Generated at Tue Dec 16 11:45:12 2025 by rpki-client