This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS55720.roa File: AS55720.roa (raw, json) Hash identifier: vGUGvgIXtM9Qj+WKJCWNaguhTEs8xYn0liMOvJbW+9M= Subject key identifier: F5:B7:C4:01:C1:20:70:EB:61:B0:73:2C:8A:17:15:EB:BA:10:B1:5F Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 44CBF553C07161FF5D906B3B86B2F66A4131B93C Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS55720.roa Signing time: Fri 26 Dec 2025 11:55:32 +0000 ROA not before: Fri 26 Dec 2025 11:50:32 +0000 ROA not after: Fri 25 Dec 2026 11:55:32 +0000 asID: 55720 IP address blocks: 5.181.132.0/24 maxlen: 24 181.215.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 19:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:cb:f5:53:c0:71:61:ff:5d:90:6b:3b:86:b2:f6:6a:41:31:b9:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 26 11:50:32 2025 GMT Not After : Dec 25 11:55:32 2026 GMT Subject: CN=F5B7C401C12070EB61B0732C8A1715EBBA10B15F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:01:10:08:ce:e7:5c:1f:44:8e:36:72:ee:d8: 85:9f:3a:cf:34:e4:9f:e4:d0:d8:d6:ad:97:25:01: 62:ad:7a:96:bb:a9:92:d5:5d:65:92:75:e8:a4:a0: d6:1f:0d:18:4b:e5:16:1c:e6:f8:85:53:d6:db:79: 25:48:d5:cb:ff:ff:0c:cf:3b:2c:2b:42:42:41:a8: b5:40:59:dd:4f:b9:32:1c:c0:b4:65:2b:c8:31:af: 2a:08:34:06:28:e9:08:e0:79:d3:d4:06:e2:7c:67: f0:2d:84:66:37:4f:78:dd:ae:18:40:1d:1c:b9:92: 19:ec:34:4c:f6:0d:e2:94:af:69:9a:8f:de:63:a3: 78:92:61:9e:1a:e6:4f:3c:7c:89:58:d5:60:f8:e3: 66:3b:ab:a6:29:49:dd:4d:f2:4e:ee:2b:23:f9:e3: f8:9f:d1:3a:5d:1e:fe:0f:89:77:84:b7:d5:a9:1c: 1a:4d:d1:ab:52:7a:61:6f:0f:8b:5f:be:e9:90:17: 6d:8d:45:fb:fd:05:d0:d0:a2:96:04:6c:c9:61:61: 18:cc:d5:72:80:ca:a2:b1:a1:94:8d:5b:7c:f5:3d: d6:38:c1:ea:79:20:82:b7:67:0e:82:16:18:ef:82: 2f:d5:d0:be:dc:62:27:a9:5d:c2:06:6b:97:32:d0: 10:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B7:C4:01:C1:20:70:EB:61:B0:73:2C:8A:17:15:EB:BA:10:B1:5F X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS55720.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.132.0/24 181.215.14.0/24 Signature Algorithm: sha256WithRSAEncryption 95:78:8c:15:be:da:81:65:80:b4:53:c8:9c:c1:8b:4a:a6:44: e6:fb:f0:81:51:60:57:9f:4c:6d:11:af:69:97:89:8f:f4:f2: 3c:4a:cc:fc:f5:f9:31:57:0b:ef:f9:d6:66:a5:2d:8b:39:07: 00:82:95:a1:62:d8:b9:9e:ed:9b:60:76:ab:f9:2e:6a:10:9e: a4:b6:ee:72:77:c4:fd:3a:44:f7:28:60:76:36:88:74:66:4b: 5d:d5:f8:42:4f:d0:5f:15:e6:47:cd:ba:f6:5d:58:dc:25:3f: 7a:cb:b4:da:33:cb:9b:e8:3f:00:d6:1b:53:21:8d:b2:0c:a4: 0d:a3:cb:eb:90:c4:12:39:9b:9e:51:48:f4:74:97:6a:20:f5: ce:af:4b:89:4d:5b:23:29:e6:63:93:e4:fe:74:d8:10:eb:a0: 67:cb:c8:1c:2e:16:c5:bd:82:61:d8:5b:aa:0b:5e:d9:71:d0: a6:b7:83:12:0d:3f:4a:99:1c:ce:dd:6c:01:47:f8:eb:2c:86: a4:63:f7:cf:4b:d5:27:9f:72:8d:13:9c:b5:34:84:3c:b0:fd: 81:d7:68:7f:42:9f:2f:f9:a7:79:6d:13:92:9f:65:8a:52:79: 24:03:4f:8d:09:60:84:c4:c5:1e:57:a3:a5:49:34:34:e1:64: 21:2b:a1:36 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIURMv1U8BxYf9dkGs7hrL2akExuTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMjYxMTUwMzJaFw0yNjEyMjUxMTU1MzJaMDMxMTAvBgNV BAMTKEY1QjdDNDAxQzEyMDcwRUI2MUIwNzMyQzhBMTcxNUVCQkExMEIxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTARAIzudcH0SONnLu2IWfOs80 5J/k0NjWrZclAWKtepa7qZLVXWWSdeikoNYfDRhL5RYc5viFU9bbeSVI1cv//wzP OywrQkJBqLVAWd1PuTIcwLRlK8gxryoINAYo6QjgedPUBuJ8Z/AthGY3T3jdrhhA HRy5khnsNEz2DeKUr2maj95jo3iSYZ4a5k88fIlY1WD442Y7q6YpSd1N8k7uKyP5 4/if0TpdHv4PiXeEt9WpHBpN0atSemFvD4tfvumQF22NRfv9BdDQopYEbMlhYRjM 1XKAyqKxoZSNW3z1PdY4wep5IIK3Zw6CFhjvgi/V0L7cYiepXcIGa5cy0BC5AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU9bfEAcEgcOthsHMsihcV67oQsV8wHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNTU3MjAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAAFtYQD BAC11w4wDQYJKoZIhvcNAQELBQADggEBAJV4jBW+2oFlgLRTyJzBi0qmROb78IFR YFefTG0Rr2mXiY/08jxKzPz1+TFXC+/51malLYs5BwCClaFi2Lme7Ztgdqv5LmoQ nqS27nJ3xP06RPcoYHY2iHRmS13V+EJP0F8V5kfNuvZdWNwlP3rLtNozy5voPwDW G1MhjbIMpA2jy+uQxBI5m55RSPR0l2og9c6vS4lNWyMp5mOT5P502BDroGfLyBwu FsW9gmHYW6oLXtlx0Ka3gxINP0qZHM7dbAFH+OsshqRj989L1Sefco0TnLU0hDyw /YHXaH9Cny/5p3ltE5KfZYpSeSQDT40JYITExR5Xo6VJNDThZCEroTY= -----END CERTIFICATE-----Generated at Sun Jan 18 04:11:49 2026 by rpki-client