This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS45671.roa
File: AS45671.roa (raw, json)
Hash identifier: FYKjNw0PLTn2d9uBj12frAJTgXfPYoQ9HYv93EHjI7A=
Subject key identifier: F2:5A:7A:EE:82:52:3B:62:47:FE:06:22:6E:12:0F:2A:B3:D4:FA:D2
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 600485C9B9167679A076AA553DA63F23479DA179
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS45671.roa
Signing time: Wed 03 Dec 2025 08:55:12 +0000
ROA not before: Wed 03 Dec 2025 08:50:12 +0000
ROA not after: Wed 02 Dec 2026 08:55:12 +0000
asID: 45671
IP address blocks: 179.61.228.0/24 maxlen: 24
179.61.240.0/24 maxlen: 24
181.214.17.0/24 maxlen: 24
181.214.43.0/24 maxlen: 24
181.214.112.0/24 maxlen: 24
181.214.162.0/24 maxlen: 24
181.214.163.0/24 maxlen: 24
181.214.174.0/24 maxlen: 24
181.215.168.0/24 maxlen: 24
191.101.37.0/24 maxlen: 24
191.101.141.0/24 maxlen: 24
191.101.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 10:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:04:85:c9:b9:16:76:79:a0:76:aa:55:3d:a6:3f:23:47:9d:a1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Dec 3 08:50:12 2025 GMT
Not After : Dec 2 08:55:12 2026 GMT
Subject: CN=F25A7AEE82523B6247FE06226E120F2AB3D4FAD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:0d:a7:c5:a2:14:07:0a:2e:e7:08:ab:24:
c3:ed:f2:a7:72:dc:26:ff:41:03:b9:66:58:51:99:
fd:6c:77:e0:e0:c3:33:c1:a2:c8:78:59:02:61:90:
e7:8c:4e:b2:3c:b8:ef:01:a2:6b:34:49:40:b3:8a:
e4:6b:0f:f8:d1:59:c1:24:b4:c3:9d:32:0f:59:5c:
02:74:19:10:78:b1:a4:2e:a7:d9:30:ba:63:41:d4:
d0:01:96:1b:1d:61:46:85:c8:c9:60:36:c7:47:0f:
28:8d:f7:6b:04:48:05:52:f9:e9:b1:f7:e8:63:dd:
9c:ef:e1:04:00:b9:ad:5e:e6:78:2c:72:ce:98:89:
a5:7c:8e:09:61:88:1d:40:37:ab:29:a6:40:76:d5:
c0:d9:79:1e:b4:6d:af:8e:f6:a6:0a:bd:77:75:9e:
d9:b6:2d:9a:61:e6:e0:56:ba:7f:82:1c:a6:d3:25:
bf:ba:2f:71:f4:67:c8:43:70:11:71:81:c6:3e:6c:
66:47:a2:0d:80:2d:3b:15:08:96:d5:05:03:ac:94:
72:7f:a5:91:15:2c:eb:a3:95:15:ee:66:6d:bd:95:
a9:e9:63:48:34:59:ec:b8:88:3b:40:ed:c5:4e:d6:
ce:5f:80:57:35:58:1c:6b:4f:f9:3c:cf:39:82:85:
f7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5A:7A:EE:82:52:3B:62:47:FE:06:22:6E:12:0F:2A:B3:D4:FA:D2
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS45671.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.228.0/24
179.61.240.0/24
181.214.17.0/24
181.214.43.0/24
181.214.112.0/24
181.214.162.0/23
181.214.174.0/24
181.215.168.0/24
191.101.37.0/24
191.101.141.0/24
191.101.161.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d2:29:d7:41:cd:5c:c6:2f:41:3b:5f:cd:39:d0:b1:b6:fa:
1e:c7:64:e3:fd:38:68:2e:3a:55:54:71:cf:93:c6:eb:08:98:
d3:1b:bc:d5:25:8d:c3:b1:14:a9:8b:8c:33:75:d6:cc:69:e7:
5a:7d:4b:6e:54:c5:e1:8a:fd:4c:57:64:d1:69:73:f8:59:f5:
f9:89:06:f5:dc:02:e2:9d:08:a5:19:67:07:7a:25:b5:7e:52:
15:5c:58:95:c0:34:5a:f9:bf:0c:4e:38:39:a8:a0:a5:9d:6d:
3b:7c:a9:91:fd:0f:20:6a:bd:dc:21:51:bf:3f:1a:44:0f:92:
80:14:99:2d:21:55:c3:03:51:e1:8f:bf:2e:10:3d:75:cc:8c:
86:91:7d:c1:d4:4a:86:7c:c3:83:9c:48:bc:9f:95:a4:8d:e2:
4b:ef:34:34:f4:53:a8:ec:f3:0f:d0:8a:5e:d9:67:63:33:e6:
62:5e:43:5b:e2:e7:f0:88:cf:23:d3:ec:84:81:70:7f:b7:8f:
2a:c4:ce:38:b2:9a:76:b6:f7:71:af:5f:c0:01:7e:15:bb:79:
30:83:d2:ff:7c:8e:88:5f:e0:e7:3f:81:e3:d4:47:9a:06:60:
73:9f:52:30:77:5e:0e:55:64:7c:41:32:e7:33:af:52:91:ae:
68:ba:aa:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Dec 5 18:34:13 2025 by rpki-client