This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS42831.roa File: AS42831.roa (raw, json) Hash identifier: +tdCTR9WMBDb4/xZRs6LiSITk13yXtcQqjJk+AFb6l0= Subject key identifier: 15:16:AC:C4:00:A9:3D:6E:59:57:3B:26:3F:12:EE:AB:5A:1B:B3:95 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 052B291325CF37580FCCCC932454D196D4CACC4F Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS42831.roa Signing time: Mon 01 Dec 2025 19:59:00 +0000 ROA not before: Mon 01 Dec 2025 19:54:00 +0000 ROA not after: Mon 30 Nov 2026 19:59:00 +0000 asID: 42831 IP address blocks: 5.181.124.0/24 maxlen: 24 5.252.78.0/24 maxlen: 24 37.143.61.0/24 maxlen: 24 179.61.181.0/24 maxlen: 24 181.215.25.0/24 maxlen: 24 181.215.140.0/24 maxlen: 24 181.215.226.0/24 maxlen: 24 181.215.229.0/24 maxlen: 24 191.96.110.0/24 maxlen: 24 191.96.209.0/24 maxlen: 24 191.101.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 10:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:2b:29:13:25:cf:37:58:0f:cc:cc:93:24:54:d1:96:d4:ca:cc:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 1 19:54:00 2025 GMT Not After : Nov 30 19:59:00 2026 GMT Subject: CN=1516ACC400A93D6E59573B263F12EEAB5A1BB395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:22:84:4f:06:25:bf:78:61:57:7b:93:03:74: 5f:74:66:07:e3:17:c0:ed:fd:42:ef:b3:31:35:ed: ea:b1:89:28:47:6e:0a:5b:4e:13:10:89:54:a8:62: c8:3b:62:6b:67:77:5f:33:77:22:ac:d6:3e:dd:84: b0:13:b3:56:e9:68:05:7d:f5:0f:c4:0c:1f:65:3f: ca:7e:c0:cc:98:a3:cf:23:55:ec:c4:2a:07:3a:a7: 80:b3:af:e6:d4:68:37:8b:d6:e6:c7:4c:08:c2:ac: 68:29:df:3f:aa:67:95:f3:e2:bd:e4:ec:22:16:b3: 63:d0:a3:e3:74:fd:c3:d1:18:55:61:20:56:7a:e7: 0e:3f:48:13:cc:7c:59:15:26:08:58:09:9f:9f:ce: 8d:03:e5:68:e2:2b:90:96:d0:97:a9:9c:82:62:52: 0f:fa:e4:2b:15:2a:6b:7e:14:74:d6:62:85:13:aa: 84:50:68:96:57:ac:79:b6:a8:5a:03:1d:e5:b1:e7: 27:ff:25:22:bb:83:1a:f8:d0:f5:89:d2:03:d3:c5: cc:81:9d:4c:30:89:54:db:e3:6f:47:88:1c:2f:57: 10:7f:8e:d2:20:a8:45:c1:e6:b0:38:30:79:d8:9a: 38:bd:32:33:99:0e:16:bb:00:98:35:ac:75:3f:f4: 46:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:16:AC:C4:00:A9:3D:6E:59:57:3B:26:3F:12:EE:AB:5A:1B:B3:95 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS42831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.124.0/24 5.252.78.0/24 37.143.61.0/24 179.61.181.0/24 181.215.25.0/24 181.215.140.0/24 181.215.226.0/24 181.215.229.0/24 191.96.110.0/24 191.96.209.0/24 191.101.59.0/24 Signature Algorithm: sha256WithRSAEncryption 73:1b:ab:a9:6b:0d:38:23:84:d2:db:cd:3c:33:5a:d7:22:3b: 8f:a8:30:73:8a:20:64:82:b0:9e:f7:d4:32:82:7d:d4:1d:80: c9:f9:22:c7:06:86:fb:19:7a:2d:e7:53:52:84:24:44:59:1d: d7:a2:69:5f:f8:3d:f1:20:b7:79:27:5a:33:07:66:f5:0b:1b: 21:19:f1:f6:82:ea:38:25:4d:75:e9:6f:2d:16:18:9d:96:b7: 07:f1:61:ed:97:5a:7a:89:3b:51:68:13:97:6e:00:69:5f:39: 61:e4:6c:06:d8:c2:46:c6:8f:89:fe:51:93:c9:3b:12:e0:42: 66:9d:35:2c:80:5f:43:83:66:b9:f1:1f:dd:2b:2a:02:c5:66: d2:ee:fc:17:eb:46:f2:d4:b9:3b:45:c1:e8:8a:23:76:e3:20: 4c:5b:9a:96:ce:00:d1:5a:54:81:3c:c8:ad:7e:60:23:08:d1: a9:db:27:c3:b6:f8:b8:ed:7e:c9:c8:bf:5e:c9:94:5a:58:03: 44:99:45:b4:98:56:51:5d:bb:35:76:a8:23:7e:40:8e:68:51: c7:86:d9:78:ac:53:0c:3c:cd:68:4f:b6:63:66:fd:b1:96:74: ae:1f:84:24:3d:71:fa:31:fe:03:38:c6:61:a8:42:f1:fa:f8: d2:25:81:33 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIUBSspEyXPN1gPzMyTJFTRltTKzE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDExOTU0MDBaFw0yNjExMzAxOTU5MDBaMDMxMTAvBgNV BAMTKDE1MTZBQ0M0MDBBOTNENkU1OTU3M0IyNjNGMTJFRUFCNUExQkIzOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXIoRPBiW/eGFXe5MDdF90Zgfj F8Dt/ULvszE17eqxiShHbgpbThMQiVSoYsg7Ymtnd18zdyKs1j7dhLATs1bpaAV9 9Q/EDB9lP8p+wMyYo88jVezEKgc6p4Czr+bUaDeL1ubHTAjCrGgp3z+qZ5Xz4r3k 7CIWs2PQo+N0/cPRGFVhIFZ65w4/SBPMfFkVJghYCZ+fzo0D5WjiK5CW0JepnIJi Ug/65CsVKmt+FHTWYoUTqoRQaJZXrHm2qFoDHeWx5yf/JSK7gxr40PWJ0gPTxcyB nUwwiVTb429HiBwvVxB/jtIgqEXB5rA4MHnYmji9MjOZDha7AJg1rHU/9Ea7AgMB AAGjggJFMIICQTAdBgNVHQ4EFgQUFRasxACpPW5ZVzsmPxLuq1obs5UwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDI4MzEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwWwYIKwYBBQUHAQcBAf8ETDBKMEgEAgABMEIDBAAFtXwD BAAF/E4DBAAljz0DBACzPbUDBAC11xkDBAC114wDBAC11+IDBAC11+UDBAC/YG4D BAC/YNEDBAC/ZTswDQYJKoZIhvcNAQELBQADggEBAHMbq6lrDTgjhNLbzTwzWtci O4+oMHOKIGSCsJ731DKCfdQdgMn5IscGhvsZei3nU1KEJERZHdeiaV/4PfEgt3kn WjMHZvULGyEZ8faC6jglTXXpby0WGJ2WtwfxYe2XWnqJO1FoE5duAGlfOWHkbAbY wkbGj4n+UZPJOxLgQmadNSyAX0ODZrnxH90rKgLFZtLu/BfrRvLUuTtFweiKI3bj IExbmpbOANFaVIE8yK1+YCMI0anbJ8O2+LjtfsnIv17JlFpYA0SZRbSYVlFduzV2 qCN+QI5oUceG2XisUww8zWhPtmNm/bGWdK4fhCQ9cfox/gM4xmGoQvH6+NIlgTM= -----END CERTIFICATE-----Generated at Fri Dec 5 16:18:53 2025 by rpki-client