This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS209854.roa File: AS209854.roa (raw, json) Hash identifier: SSwi9C2aP9hEG9QdxIP29gPrQ6EzHAQFhnZeTTS969s= Subject key identifier: 82:07:69:5C:D8:29:C0:88:C2:90:0B:66:70:DD:45:ED:E6:84:0C:69 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 3BAA7EB07ABDBD21FE19285E98A029C7286CCB47 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS209854.roa Signing time: Wed 05 Nov 2025 09:55:11 +0000 ROA not before: Wed 05 Nov 2025 09:50:11 +0000 ROA not after: Wed 04 Nov 2026 09:55:11 +0000 asID: 209854 IP address blocks: 45.137.29.0/24 maxlen: 24 181.41.195.0/24 maxlen: 24 181.41.197.0/24 maxlen: 24 181.214.177.0/24 maxlen: 24 181.214.246.0/24 maxlen: 24 181.215.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 10:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:aa:7e:b0:7a:bd:bd:21:fe:19:28:5e:98:a0:29:c7:28:6c:cb:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Nov 5 09:50:11 2025 GMT Not After : Nov 4 09:55:11 2026 GMT Subject: CN=8207695CD829C088C2900B6670DD45EDE6840C69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:46:ef:27:d5:98:ef:ce:ba:bc:92:33:29:b8: 3e:89:be:28:d9:69:cb:dd:ff:a0:e5:23:0f:a1:17: 81:c1:38:f2:e9:ac:b9:b2:15:00:5d:c6:51:bb:ff: 38:82:4e:9d:70:44:d2:13:27:9b:5a:2d:b7:37:6d: 4b:fd:86:7f:2a:25:95:dd:3c:15:7f:bb:82:11:f6: 86:30:56:0b:3e:c8:7d:5f:9e:dc:5a:99:03:27:08: 9e:db:f0:af:96:f1:28:bd:87:dc:26:67:91:e5:1d: d4:bd:45:a6:3c:3c:40:80:e3:43:6e:5e:36:b6:27: 14:13:4f:fc:d8:64:34:ba:4e:f2:e6:7c:b7:35:1c: e8:81:e7:41:06:53:d3:75:2d:ac:86:ff:fd:63:b2: ad:3f:3d:37:87:97:e7:36:91:f0:2b:1a:47:58:6a: 8e:c4:dd:3b:b6:68:37:f6:53:5b:a0:dc:43:82:54: ec:a0:08:28:af:92:83:56:c7:5e:e8:12:a1:46:17: 3e:56:ff:c1:40:8a:e9:49:2d:b3:ea:11:ca:8b:9f: 42:ec:72:5d:8a:e2:3a:76:3c:56:4a:2d:02:d1:12: c0:41:e2:cc:b3:cb:94:98:4e:c2:44:25:1c:f4:7d: 03:ee:f3:8d:a2:0b:45:b4:49:7a:ee:2a:37:12:f7: c5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:07:69:5C:D8:29:C0:88:C2:90:0B:66:70:DD:45:ED:E6:84:0C:69 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS209854.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.29.0/24 181.41.195.0/24 181.41.197.0/24 181.214.177.0/24 181.214.246.0/24 181.215.7.0/24 Signature Algorithm: sha256WithRSAEncryption 27:d2:cb:77:dd:f0:31:5e:9c:ee:a0:7e:42:2a:c4:0d:3f:a3: dc:8a:b9:31:8c:ea:ea:40:64:11:e1:d3:a6:a1:24:67:f9:00: 79:4a:88:7c:f6:5a:be:89:8f:21:32:02:29:8e:39:ce:15:02: 33:cf:7a:99:a0:de:5f:91:9d:c8:1b:e4:a7:ae:90:51:6a:79: e7:ae:20:64:7c:20:1f:d5:a3:fa:3c:01:85:49:d7:50:a7:4c: 3c:3a:d7:b2:3f:9a:fb:26:c6:da:68:8b:41:6b:7a:01:d7:9c: b6:a3:80:7e:dd:56:03:24:8d:4c:03:3f:f3:8b:59:14:9b:a8: ae:6c:58:89:34:66:fb:39:66:91:43:11:1c:5f:c7:05:b8:8d: 09:15:fd:01:5a:37:f2:88:94:d4:5f:18:09:39:3f:66:33:34: f2:c8:9e:7a:cd:78:d2:74:d6:29:32:42:82:0a:e5:29:76:c8: cf:64:a8:0d:db:e0:53:83:ef:8c:98:5a:8e:44:5d:d3:0c:37: 28:ca:5b:7a:27:40:01:b4:f0:ee:51:36:73:cd:c1:a6:bb:25: b8:41:8a:df:22:fe:3d:2a:51:0e:bd:96:a8:75:2a:48:f1:d4: 26:6f:7d:f0:b8:8f:23:ec:e7:af:4a:71:09:d0:d6:e4:72:21: c4:2b:6c:d6 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUO6p+sHq9vSH+GShemKApxyhsy0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTExMDUwOTUwMTFaFw0yNjExMDQwOTU1MTFaMDMxMTAvBgNV BAMTKDgyMDc2OTVDRDgyOUMwODhDMjkwMEI2NjcwREQ0NUVERTY4NDBDNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQRu8n1Zjvzrq8kjMpuD6JvijZ acvd/6DlIw+hF4HBOPLprLmyFQBdxlG7/ziCTp1wRNITJ5taLbc3bUv9hn8qJZXd PBV/u4IR9oYwVgs+yH1fntxamQMnCJ7b8K+W8Si9h9wmZ5HlHdS9RaY8PECA40Nu Xja2JxQTT/zYZDS6TvLmfLc1HOiB50EGU9N1LayG//1jsq0/PTeHl+c2kfArGkdY ao7E3Tu2aDf2U1ug3EOCVOygCCivkoNWx17oEqFGFz5W/8FAiulJLbPqEcqLn0Ls cl2K4jp2PFZKLQLREsBB4syzy5SYTsJEJRz0fQPu842iC0W0SXruKjcS98XZAgMB AAGjggIoMIICJDAdBgNVHQ4EFgQUggdpXNgpwIjCkAtmcN1F7eaEDGkwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjA5ODU0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALYkd AwQAtSnDAwQAtSnFAwQAtdaxAwQAtdb2AwQAtdcHMA0GCSqGSIb3DQEBCwUAA4IB AQAn0st33fAxXpzuoH5CKsQNP6PcirkxjOrqQGQR4dOmoSRn+QB5Soh89lq+iY8h MgIpjjnOFQIzz3qZoN5fkZ3IG+SnrpBRannnriBkfCAf1aP6PAGFSddQp0w8Otey P5r7JsbaaItBa3oB15y2o4B+3VYDJI1MAz/zi1kUm6iubFiJNGb7OWaRQxEcX8cF uI0JFf0BWjfyiJTUXxgJOT9mMzTyyJ56zXjSdNYpMkKCCuUpdsjPZKgN2+BTg++M mFqORF3TDDcoylt6J0ABtPDuUTZzzcGmuyW4QYrfIv49KlEOvZaodSpI8dQmb33w uI8j7OevSnEJ0NbkciHEK2zW -----END CERTIFICATE-----Generated at Fri Dec 5 15:00:35 2025 by rpki-client