This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51561.roa File: AS51561.roa (raw, json) Hash identifier: xj9TMSfk4xGijq1KgqAiWL1pYo9t06QupA2DYF6bVZQ= Subject key identifier: 83:89:21:FC:8F:DE:51:79:2B:BC:FC:B3:52:91:6F:7B:E0:B5:BE:25 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 26814CC1C0AF83A6CA93903FBFF79F0031796137 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51561.roa Signing time: Thu 27 Nov 2025 11:30:12 +0000 ROA not before: Thu 27 Nov 2025 11:25:12 +0000 ROA not after: Thu 26 Nov 2026 11:30:12 +0000 asID: 51561 IP address blocks: 82.39.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:81:4c:c1:c0:af:83:a6:ca:93:90:3f:bf:f7:9f:00:31:79:61:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 27 11:25:12 2025 GMT Not After : Nov 26 11:30:12 2026 GMT Subject: CN=838921FC8FDE51792BBCFCB352916F7BE0B5BE25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:ab:91:2c:f7:32:dc:12:f4:51:df:91:15: cf:83:11:6e:f0:76:3e:e2:9e:16:78:3f:33:06:0c: 0c:12:6d:1a:2c:14:d7:1d:2a:1a:54:a4:ee:fa:ed: 14:84:4e:f2:b8:96:bb:5c:ab:d9:74:dd:45:e0:07: 1d:7f:87:0c:0e:c4:70:84:fd:e0:68:58:63:91:e1: 6f:2b:82:62:e2:f1:9d:a7:05:08:8f:21:0a:b0:be: d9:0f:73:60:93:6e:47:cc:8a:5e:e5:d4:d3:b1:40: e7:5e:ac:31:1b:80:6a:1f:1b:51:7b:9a:e0:47:8d: 8b:38:99:f3:6f:72:5f:52:20:35:9f:e3:6b:b1:bd: c9:d7:da:f6:1f:4f:b2:59:8a:62:8b:0d:7c:4d:5e: 28:09:56:75:bf:b9:32:87:99:27:74:9a:71:cb:d6: 59:ee:ed:41:98:e2:32:f2:73:af:bf:9f:bb:9e:9a: be:fe:6a:04:fc:80:f8:96:9b:15:8a:c6:8d:63:40: 94:06:29:1f:08:f1:81:10:dd:05:be:13:3b:3a:d5: 5d:03:74:6a:47:e6:0e:c9:69:d0:01:0b:b9:8d:49: 32:6c:84:64:f6:18:96:c7:62:ef:0a:7f:af:72:52: b3:f6:13:96:8d:51:df:2c:f8:87:58:95:ef:e8:24: 0e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:89:21:FC:8F:DE:51:79:2B:BC:FC:B3:52:91:6F:7B:E0:B5:BE:25 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51561.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.142.0/24 Signature Algorithm: sha256WithRSAEncryption 18:2b:ce:51:69:9c:45:18:ea:3c:6d:09:6e:c5:a8:f6:78:8a: dc:59:e4:41:93:b9:8b:f7:04:04:26:3b:a4:6a:59:18:4a:d3: 52:d9:ab:b3:25:c0:e5:f1:55:65:cf:ca:d1:7f:52:41:47:c7: b4:07:05:a1:94:04:b2:30:80:ee:a0:4b:1f:dd:4c:b6:49:b3: c6:8d:82:4c:a7:73:85:fa:86:3f:15:9a:b9:8d:5c:bf:17:f9: 92:ba:f2:b6:18:d9:2e:a6:d8:11:6d:25:eb:dd:9d:52:29:2b: e2:dc:bf:f1:1c:da:c5:f3:a2:2b:a9:94:00:61:84:27:97:3a: 6c:ac:e2:eb:ad:9f:b3:a4:fb:1c:68:cc:63:4a:63:f8:e9:0d: 32:b7:6c:08:8a:b4:7c:57:2f:04:7f:a0:30:21:4e:34:4b:b3: 6b:bc:f6:1f:61:f9:a9:66:28:51:f0:6d:1c:fa:02:de:6b:5e: 03:28:9b:02:1a:54:7e:bb:ab:42:3a:ad:97:11:e3:96:03:27: bc:4c:9d:ae:49:e5:69:26:c2:d5:3a:f6:13:49:38:58:1e:26: 7c:60:ef:e4:90:af:0a:32:f4:82:aa:08:f0:8d:66:ea:94:6c: 4a:97:48:9a:57:c9:33:f0:c0:7b:83:50:99:24:9e:69:f5:b2: a9:6b:5b:e2 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUJoFMwcCvg6bKk5A/v/efADF5YTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjcxMTI1MTJaFw0yNjExMjYxMTMwMTJaMDMxMTAvBgNV BAMTKDgzODkyMUZDOEZERTUxNzkyQkJDRkNCMzUyOTE2RjdCRTBCNUJFMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJyauRLPcy3BL0Ud+RFc+DEW7w dj7inhZ4PzMGDAwSbRosFNcdKhpUpO767RSETvK4lrtcq9l03UXgBx1/hwwOxHCE /eBoWGOR4W8rgmLi8Z2nBQiPIQqwvtkPc2CTbkfMil7l1NOxQOderDEbgGofG1F7 muBHjYs4mfNvcl9SIDWf42uxvcnX2vYfT7JZimKLDXxNXigJVnW/uTKHmSd0mnHL 1lnu7UGY4jLyc6+/n7uemr7+agT8gPiWmxWKxo1jQJQGKR8I8YEQ3QW+Ezs61V0D dGpH5g7JadABC7mNSTJshGT2GJbHYu8Kf69yUrP2E5aNUd8s+IdYle/oJA4tAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUg4kh/I/eUXkrvPyzUpFve+C1viUwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNTE1NjEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSJ44w DQYJKoZIhvcNAQELBQADggEBABgrzlFpnEUY6jxtCW7FqPZ4itxZ5EGTuYv3BAQm O6RqWRhK01LZq7MlwOXxVWXPytF/UkFHx7QHBaGUBLIwgO6gSx/dTLZJs8aNgkyn c4X6hj8VmrmNXL8X+ZK68rYY2S6m2BFtJevdnVIpK+Lcv/Ec2sXzoiuplABhhCeX Omys4uutn7Ok+xxozGNKY/jpDTK3bAiKtHxXLwR/oDAhTjRLs2u89h9h+almKFHw bRz6At5rXgMomwIaVH67q0I6rZcR45YDJ7xMna5J5WkmwtU69hNJOFgeJnxg7+SQ rwoy9IKqCPCNZuqUbEqXSJpXyTPwwHuDUJkknmn1sqlrW+I= -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:42 2025 by rpki-client