This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213738.roa File: AS213738.roa (raw, json) Hash identifier: OVc0VhRqQ7ES/FGI5/CxMt0OyS3SofHRUf1eKOMl3g0= Subject key identifier: 44:D4:FB:AC:24:6E:0D:8E:0F:DB:53:4F:73:6C:18:92:1E:BE:3C:1E Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 6D2B97AE16EAFDDFA31DFCA20D42A28F83EFEAB4 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213738.roa Signing time: Sun 09 Nov 2025 19:55:11 +0000 ROA not before: Sun 09 Nov 2025 19:50:11 +0000 ROA not after: Sun 08 Nov 2026 19:55:11 +0000 asID: 213738 IP address blocks: 181.214.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 10:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:2b:97:ae:16:ea:fd:df:a3:1d:fc:a2:0d:42:a2:8f:83:ef:ea:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Nov 9 19:50:11 2025 GMT Not After : Nov 8 19:55:11 2026 GMT Subject: CN=44D4FBAC246E0D8E0FDB534F736C18921EBE3C1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3f:d8:1e:af:a0:78:9d:56:19:57:fb:1c:40: ac:08:da:30:b2:77:b0:7d:f5:3a:cc:40:b7:3c:f0: 79:88:9d:04:af:45:76:6a:0b:cc:d5:61:85:64:a4: bd:2c:e4:c6:12:5c:3c:5f:bb:b9:f1:40:6d:b6:68: bb:61:13:38:b2:b8:98:a5:bc:da:97:0f:b9:9c:6c: 97:a2:1b:2b:85:04:4a:61:a5:2a:db:dd:ad:64:65: 4b:63:d3:33:a5:39:66:5c:cb:da:f5:0c:68:b8:4f: 98:1f:16:70:d1:18:98:4b:5c:c0:33:63:d5:6b:63: d2:10:2f:a7:ba:7a:0e:5a:3f:62:ae:22:fa:20:79: 29:9e:ef:7f:9c:72:39:2a:ba:f4:e5:84:27:98:6d: 12:b5:83:31:37:f8:d9:30:10:30:87:ad:45:66:d9: ce:ff:bc:13:0c:17:51:4e:eb:2c:3d:24:e4:c5:58: 0b:76:a2:cf:fe:65:8b:c1:65:bc:c5:85:c9:67:3f: 21:9d:c7:cb:2f:2b:1a:18:8a:ae:50:30:2e:21:64: 52:75:15:c5:60:1e:47:13:06:2c:f0:a7:a7:e0:99: 3f:a9:21:ac:cc:2a:47:89:6a:86:2a:41:23:0d:2a: a8:73:f0:dc:c6:a6:cc:7f:1b:b7:43:53:8f:45:ac: 66:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D4:FB:AC:24:6E:0D:8E:0F:DB:53:4F:73:6C:18:92:1E:BE:3C:1E X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS213738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.214.95.0/24 Signature Algorithm: sha256WithRSAEncryption 11:3c:f6:61:71:60:1d:2d:13:93:35:6d:be:f7:77:ad:5b:9c: d4:fe:37:86:3b:34:88:a6:62:10:70:ad:d5:27:5b:b2:d4:5b: 8e:76:e5:1f:b9:e3:09:9a:17:cd:0e:b6:32:47:e0:93:bc:98: 79:b7:d1:16:0e:33:28:bc:eb:10:d9:39:4b:82:74:a6:7e:9b: c8:c1:d6:8c:76:18:88:ee:a4:6d:db:43:55:c5:38:9f:1a:6a: 85:74:c9:5f:c4:0c:29:04:7d:b2:42:95:cc:09:f5:03:c7:8e: 30:9c:5b:14:23:6c:9d:7e:ca:d5:9c:8c:a3:c0:cb:ba:78:b8: df:eb:09:7f:be:06:9e:b8:0c:e9:7b:0e:b4:60:b4:71:b4:38: fe:ec:29:3e:96:77:3f:1c:7a:76:c2:32:c0:8f:4c:f7:3c:0a: 76:25:d5:11:5f:8e:44:76:0f:dc:55:b0:1c:62:41:78:31:e4: c9:4f:c0:ca:42:e0:2e:b4:85:02:66:dc:fa:2e:0f:26:37:24: 1b:4f:20:6c:2d:54:a1:2d:0c:c3:e8:bf:99:23:8c:ef:2e:89: 7d:0a:9f:dc:7f:e4:06:e3:90:53:e2:da:db:9e:dc:9b:c9:4d: cc:f5:4c:ed:32:17:1a:04:cf:14:2c:29:c4:c2:7a:0a:00:41: 04:58:40:77 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUbSuXrhbq/d+jHfyiDUKij4Pv6rQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTExMDkxOTUwMTFaFw0yNjExMDgxOTU1MTFaMDMxMTAvBgNV BAMTKDQ0RDRGQkFDMjQ2RTBEOEUwRkRCNTM0RjczNkMxODkyMUVCRTNDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuP9ger6B4nVYZV/scQKwI2jCy d7B99TrMQLc88HmInQSvRXZqC8zVYYVkpL0s5MYSXDxfu7nxQG22aLthEziyuJil vNqXD7mcbJeiGyuFBEphpSrb3a1kZUtj0zOlOWZcy9r1DGi4T5gfFnDRGJhLXMAz Y9VrY9IQL6e6eg5aP2KuIvogeSme73+ccjkquvTlhCeYbRK1gzE3+NkwEDCHrUVm 2c7/vBMMF1FO6yw9JOTFWAt2os/+ZYvBZbzFhclnPyGdx8svKxoYiq5QMC4hZFJ1 FcVgHkcTBizwp6fgmT+pIazMKkeJaoYqQSMNKqhz8NzGpsx/G7dDU49FrGaPAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQURNT7rCRuDY4P21NPc2wYkh6+PB4wHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjEzNzM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtdZf MA0GCSqGSIb3DQEBCwUAA4IBAQARPPZhcWAdLROTNW2+93etW5zU/jeGOzSIpmIQ cK3VJ1uy1FuOduUfueMJmhfNDrYyR+CTvJh5t9EWDjMovOsQ2TlLgnSmfpvIwdaM dhiI7qRt20NVxTifGmqFdMlfxAwpBH2yQpXMCfUDx44wnFsUI2ydfsrVnIyjwMu6 eLjf6wl/vgaeuAzpew60YLRxtDj+7Ck+lnc/HHp2wjLAj0z3PAp2JdURX45Edg/c VbAcYkF4MeTJT8DKQuAutIUCZtz6Lg8mNyQbTyBsLVShLQzD6L+ZI4zvLol9Cp/c f+QG45BT4trbntybyU3M9UztMhcaBM8ULCnEwnoKAEEEWEB3 -----END CERTIFICATE-----Generated at Fri Dec 5 18:39:31 2025 by rpki-client