This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS59692.roa File: AS59692.roa (raw, json) Hash identifier: R9F0P6y42eArYAScHnTYwAHVwI0raNk10/x0BeD1Y0w= Subject key identifier: 7E:71:EE:AC:39:12:1D:0E:83:CB:73:BD:F3:A9:3A:FB:E5:66:B4:1A Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 237C44A8CD6DA2651292F1268B78F4A95C471FE8 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS59692.roa Signing time: Tue 23 Dec 2025 14:28:23 +0000 ROA not before: Tue 23 Dec 2025 14:23:23 +0000 ROA not after: Tue 22 Dec 2026 14:28:23 +0000 asID: 59692 IP address blocks: 181.214.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:7c:44:a8:cd:6d:a2:65:12:92:f1:26:8b:78:f4:a9:5c:47:1f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 23 14:23:23 2025 GMT Not After : Dec 22 14:28:23 2026 GMT Subject: CN=7E71EEAC39121D0E83CB73BDF3A93AFBE566B41A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:25:71:80:c2:ba:87:00:fc:3a:86:d2:fd:2f: 38:81:88:2b:21:7b:82:f2:9b:7e:92:10:6a:d5:5d: 0c:e3:bf:5d:90:76:d7:c5:6a:fd:f3:3a:d1:7c:eb: 11:c6:8a:2a:c2:7f:11:ff:d0:25:20:c3:ae:cf:b8: cd:d3:35:83:dc:5c:5e:2f:92:5c:10:d2:38:11:96: bd:af:63:05:ff:41:81:03:c8:34:d7:f4:16:f6:e4: 1e:a9:f8:fa:29:dd:9e:73:a1:5c:b0:c7:be:0e:cc: 33:e2:60:09:5a:9f:3c:8f:e2:12:98:58:ec:93:b0: a0:7b:c4:bc:fa:72:61:a2:94:b9:91:54:b1:56:c7: cf:0e:ad:f6:b2:f4:47:48:a5:1b:c0:59:7a:51:ae: a2:c0:95:50:dc:ea:aa:4b:5c:3a:b3:4b:47:9f:dc: 9f:16:94:e0:01:e7:4c:41:7f:bf:c2:57:15:bf:69: 6d:db:7b:b9:4e:bb:77:9b:31:09:df:2b:df:ba:bd: 48:57:e7:e4:75:c0:16:9f:c0:a1:61:47:b5:57:89: 6f:ff:33:b3:a4:a1:c3:d4:0c:ef:19:25:b8:cb:c2: 91:a5:a7:d7:dc:08:b4:92:56:29:49:06:d4:cb:05: 09:da:e8:a5:87:3a:2c:01:48:d0:2d:c7:bf:8b:45: 79:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:71:EE:AC:39:12:1D:0E:83:CB:73:BD:F3:A9:3A:FB:E5:66:B4:1A X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS59692.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.214.208.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:ef:bb:62:9e:3e:5e:42:73:47:1f:fc:b0:a6:4f:d9:13:17: 40:50:30:79:9b:69:fd:bb:7e:ea:3b:3f:f7:b5:c3:69:84:93: e3:25:da:e4:17:bd:b9:ad:79:68:3f:d6:57:61:f5:7e:65:8c: d0:1b:91:8e:11:4f:e6:74:c8:10:20:39:4c:62:54:25:98:d6: db:a7:aa:87:23:fd:e2:7b:17:77:a5:4c:d2:0f:30:df:c4:ef: dd:06:ef:9d:42:67:20:e8:ee:b8:2a:18:bf:16:14:01:7f:f4: 05:4b:2c:4a:d2:31:ce:71:a1:8b:02:c2:a1:04:1e:38:8a:d7: f2:4f:66:fa:87:0d:d9:82:52:f9:0a:31:6d:ca:ed:31:b2:fb: d7:fd:8d:7f:10:c7:ac:39:55:18:65:33:e3:29:01:59:16:47: dc:5c:52:b6:c4:58:05:0d:83:db:6b:f8:2a:39:53:24:cb:ab: f8:58:fe:0e:db:9f:3b:1f:79:6e:8d:ce:87:80:93:91:42:f3: 84:52:74:c3:dc:01:9a:8c:6b:df:f3:80:b7:7a:99:c0:e9:14: 25:c6:b7:2b:46:db:5f:7f:4b:2d:e8:7a:a9:ac:e8:46:91:a8: 43:49:87:0d:da:bd:14:2f:6c:ba:dd:06:59:c2:07:72:ca:7f: d1:00:63:b4 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUI3xEqM1tomUSkvEmi3j0qVxHH+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMjMxNDIzMjNaFw0yNjEyMjIxNDI4MjNaMDMxMTAvBgNV BAMTKDdFNzFFRUFDMzkxMjFEMEU4M0NCNzNCREYzQTkzQUZCRTU2NkI0MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSJXGAwrqHAPw6htL9LziBiCsh e4Lym36SEGrVXQzjv12QdtfFav3zOtF86xHGiirCfxH/0CUgw67PuM3TNYPcXF4v klwQ0jgRlr2vYwX/QYEDyDTX9Bb25B6p+Pop3Z5zoVywx74OzDPiYAlanzyP4hKY WOyTsKB7xLz6cmGilLmRVLFWx88Orfay9EdIpRvAWXpRrqLAlVDc6qpLXDqzS0ef 3J8WlOAB50xBf7/CVxW/aW3be7lOu3ebMQnfK9+6vUhX5+R1wBafwKFhR7VXiW// M7OkocPUDO8ZJbjLwpGlp9fcCLSSVilJBtTLBQna6KWHOiwBSNAtx7+LRXlZAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUfnHurDkSHQ6Dy3O986k6++VmtBowHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNTk2OTIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC11tAw DQYJKoZIhvcNAQELBQADggEBAArvu2KePl5Cc0cf/LCmT9kTF0BQMHmbaf27fuo7 P/e1w2mEk+Ml2uQXvbmteWg/1ldh9X5ljNAbkY4RT+Z0yBAgOUxiVCWY1tunqocj /eJ7F3elTNIPMN/E790G751CZyDo7rgqGL8WFAF/9AVLLErSMc5xoYsCwqEEHjiK 1/JPZvqHDdmCUvkKMW3K7TGy+9f9jX8Qx6w5VRhlM+MpAVkWR9xcUrbEWAUNg9tr +Co5UyTLq/hY/g7bnzsfeW6NzoeAk5FC84RSdMPcAZqMa9/zgLd6mcDpFCXGtytG 219/Sy3oeqms6EaRqENJhw3avRQvbLrdBlnCB3LKf9EAY7Q= -----END CERTIFICATE-----Generated at Mon Jan 19 15:11:33 2026 by rpki-client