This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61254.roa File: AS61254.roa (raw, json) Hash identifier: 90mP4XkYxXbijXgY5pxTcywg3PySz92WCZSz2+t0PMI= Subject key identifier: AF:65:A0:3D:B9:B2:B2:51:CE:1D:55:E0:FB:1A:A5:0A:05:01:BB:F0 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 1537E01D706EC6F1FA4604F378576764559192D8 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61254.roa Signing time: Mon 17 Nov 2025 18:27:43 +0000 ROA not before: Mon 17 Nov 2025 18:22:43 +0000 ROA not after: Mon 16 Nov 2026 18:27:43 +0000 asID: 61254 IP address blocks: 130.185.127.0/24 maxlen: 24 179.61.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Dec 2025 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:37:e0:1d:70:6e:c6:f1:fa:46:04:f3:78:57:67:64:55:91:92:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Nov 17 18:22:43 2025 GMT Not After : Nov 16 18:27:43 2026 GMT Subject: CN=AF65A03DB9B2B251CE1D55E0FB1AA50A0501BBF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:75:d9:6b:8e:23:84:55:65:f2:98:9f:67:68: 05:09:fa:70:f6:22:91:a7:9a:fb:f9:7f:9d:32:a9: 54:7e:25:ed:58:46:85:61:3d:58:64:de:ac:9a:27: 5c:9b:ee:62:02:cd:95:ac:22:17:f9:4e:b3:38:de: a9:50:a4:48:5f:5c:21:02:0d:aa:64:9e:d1:a9:a9: 88:ea:b9:0d:f7:f1:57:c6:9f:e5:55:66:d5:e3:df: 5c:8b:b0:89:13:4d:d6:c3:66:36:5f:4e:5b:bf:c1: a3:23:4b:51:7b:05:5a:c4:f8:84:92:c5:35:23:bf: 2c:bf:3f:44:0d:28:3a:7a:3e:62:5e:50:59:81:3d: dc:aa:dc:08:b6:74:3c:81:89:5f:d2:77:57:7c:25: 0a:2d:38:d8:96:a1:19:0b:8c:5b:49:df:01:c2:f2: ca:8b:63:4f:7b:97:9b:28:7e:ff:e4:4a:0c:58:47: ec:48:2a:02:cd:e0:71:d4:00:af:f1:73:0f:0e:f3: 0c:d9:00:83:3d:b9:7b:16:45:22:6f:76:c1:52:34: cf:d5:23:9b:3d:9c:cd:ad:4c:d7:44:39:cb:2d:9e: 8b:71:88:e1:66:db:6b:ea:e6:a8:53:e3:c2:44:81: 2b:f2:fb:e1:a9:65:e2:c8:92:ac:91:91:08:bc:c0: aa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:65:A0:3D:B9:B2:B2:51:CE:1D:55:E0:FB:1A:A5:0A:05:01:BB:F0 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61254.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.185.127.0/24 179.61.226.0/24 Signature Algorithm: sha256WithRSAEncryption 00:cc:5e:07:07:60:2a:55:e7:cb:49:2e:d5:ac:d1:a8:0e:24: 6a:ad:07:4f:f2:db:a6:af:82:24:c0:8a:fb:15:99:97:1e:4d: 0b:d4:02:ea:92:5a:f9:af:48:6c:7b:03:46:97:36:ea:18:96: 81:50:ff:c1:de:76:a3:70:1b:f0:b2:1f:22:06:63:e7:70:4c: fb:7a:6d:a5:8a:ea:9d:6a:52:f5:4a:52:7d:59:93:7c:65:a2: 03:04:61:c8:ae:2b:34:69:de:26:2e:30:18:2e:ba:a6:0f:40: 98:64:a4:34:58:18:3f:e3:e6:8f:04:c4:20:89:7e:a1:c7:a0: 6d:4d:80:17:50:9e:2f:38:0d:2e:5c:6d:b5:d7:a7:04:69:a1: f4:e0:7e:ab:5c:f9:01:d6:47:68:35:1b:30:12:1f:1c:ae:51: 07:96:1c:12:13:ae:af:37:09:0f:13:5c:ec:e1:60:82:7a:77: d2:e5:7a:5a:ad:32:c5:97:00:6e:0d:f7:84:17:55:06:c8:74: f5:21:50:70:43:2f:a4:67:3d:45:df:fc:93:85:c6:98:52:77: 42:b0:ef:a2:ba:c2:1b:bf:5b:bb:88:b2:47:21:80:7f:a0:92: 60:e8:18:e4:92:0a:cb:0f:4b:88:27:c8:e1:cc:c5:cf:b5:4b: 14:60:e1:79 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUFTfgHXBuxvH6RgTzeFdnZFWRktgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTExMTcxODIyNDNaFw0yNjExMTYxODI3NDNaMDMxMTAvBgNV BAMTKEFGNjVBMDNEQjlCMkIyNTFDRTFENTVFMEZCMUFBNTBBMDUwMUJCRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfddlrjiOEVWXymJ9naAUJ+nD2 IpGnmvv5f50yqVR+Je1YRoVhPVhk3qyaJ1yb7mICzZWsIhf5TrM43qlQpEhfXCEC DapkntGpqYjquQ338VfGn+VVZtXj31yLsIkTTdbDZjZfTlu/waMjS1F7BVrE+ISS xTUjvyy/P0QNKDp6PmJeUFmBPdyq3Ai2dDyBiV/Sd1d8JQotONiWoRkLjFtJ3wHC 8sqLY097l5sofv/kSgxYR+xIKgLN4HHUAK/xcw8O8wzZAIM9uXsWRSJvdsFSNM/V I5s9nM2tTNdEOcstnotxiOFm22vq5qhT48JEgSvy++GpZeLIkqyRkQi8wKolAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUr2WgPbmyslHOHVXg+xqlCgUBu/AwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNjEyNTQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACCuX8D BACzPeIwDQYJKoZIhvcNAQELBQADggEBAADMXgcHYCpV58tJLtWs0agOJGqtB0/y 26avgiTAivsVmZceTQvUAuqSWvmvSGx7A0aXNuoYloFQ/8HedqNwG/CyHyIGY+dw TPt6baWK6p1qUvVKUn1Zk3xlogMEYciuKzRp3iYuMBguuqYPQJhkpDRYGD/j5o8E xCCJfqHHoG1NgBdQni84DS5cbbXXpwRpofTgfqtc+QHWR2g1GzASHxyuUQeWHBIT rq83CQ8TXOzhYIJ6d9LlelqtMsWXAG4N94QXVQbIdPUhUHBDL6RnPUXf/JOFxphS d0Kw76K6whu/W7uIskchgH+gkmDoGOSSCssPS4gnyOHMxc+1SxRg4Xk= -----END CERTIFICATE-----Generated at Sun Nov 30 06:09:19 2025 by rpki-client