This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS5650.roa File: AS5650.roa (raw, json) Hash identifier: R3tSbdq3vIHPDN13yHIxfXop/4yewsERvzkMTDTzOKM= Subject key identifier: 82:CA:2E:37:F9:F4:71:D0:83:5D:29:0E:96:30:03:36:1F:D8:DB:9A Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 32631094424C083A82FF4F5758A3ED3939EA125A Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS5650.roa Signing time: Sat 13 Dec 2025 10:02:28 +0000 ROA not before: Sat 13 Dec 2025 09:57:28 +0000 ROA not after: Sat 12 Dec 2026 10:02:28 +0000 asID: 5650 IP address blocks: 83.171.244.0/22 maxlen: 22 85.8.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:63:10:94:42:4c:08:3a:82:ff:4f:57:58:a3:ed:39:39:ea:12:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Dec 13 09:57:28 2025 GMT Not After : Dec 12 10:02:28 2026 GMT Subject: CN=82CA2E37F9F471D0835D290E963003361FD8DB9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:55:fd:8f:3a:58:7d:96:d4:0a:d5:6e:93:00: 4b:14:dd:c9:a4:a5:e6:dc:9f:e5:16:2a:d9:57:14: 35:31:6b:19:85:7f:ea:74:68:e5:3b:8f:92:36:12: 1a:78:62:ee:f6:10:9a:76:2e:9c:24:29:dd:45:53: af:a3:e6:13:c5:3a:69:98:9e:91:b4:d7:c5:6c:b0: bd:e8:59:7d:bd:94:d9:e5:d2:e9:78:92:79:2c:65: b3:cb:d6:7e:a0:56:be:e0:cc:b4:e9:24:9a:18:53: e0:fc:01:dd:a5:ce:c1:00:c7:81:5b:ff:0c:07:da: 2d:53:45:d2:44:01:ab:88:8f:e5:79:a5:31:a4:95: e1:c1:28:a5:a6:04:2f:23:5c:c2:c2:58:a9:52:23: 63:c2:b5:f5:4a:ea:c1:ca:ff:3a:66:ba:ed:a3:a7: 20:72:ee:40:82:d7:ea:77:fa:82:77:c0:a4:84:12: 34:95:1c:ff:55:6f:85:94:16:b1:ff:b1:f7:a5:d5: 6e:b2:a2:1b:48:24:56:14:c5:53:73:cb:e0:33:3b: 43:53:bf:be:bb:3d:e5:c7:f7:36:df:ea:54:e5:70: 13:bd:8a:91:f3:26:fa:f9:4e:0d:b7:93:21:50:bf: c1:b1:b5:29:81:fb:0d:25:17:94:a7:37:58:91:95: ff:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CA:2E:37:F9:F4:71:D0:83:5D:29:0E:96:30:03:36:1F:D8:DB:9A X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS5650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.171.244.0/22 85.8.144.0/22 Signature Algorithm: sha256WithRSAEncryption 59:60:d7:67:90:93:6d:1e:8f:38:8e:1a:d8:5a:00:66:14:e2: ee:a8:8d:e8:5e:1a:76:7b:0a:80:07:64:01:8c:a0:b7:45:a9: 53:83:60:d0:fb:1d:2c:86:86:0f:85:d4:02:51:6b:a0:c0:b6: 91:a8:ed:b3:19:35:bb:19:71:f4:58:96:af:ec:9c:d2:29:af: fb:7d:59:35:82:b8:89:b5:f5:8c:0b:04:77:a7:f0:85:74:44: ac:e6:1e:6f:99:6b:e3:06:71:5e:7a:d0:b0:56:3b:d1:01:f0: 94:15:4b:0a:33:cb:5f:00:68:cd:73:0b:1e:5f:4c:99:7a:c9: a7:cd:bf:99:5e:d1:2d:70:73:73:85:63:67:05:5c:84:13:61: 72:5e:78:01:33:96:10:e8:52:45:b9:5b:fe:fe:a2:75:f3:87: f8:cd:7b:58:78:d5:cf:b6:f9:91:74:1e:a1:73:eb:29:8b:76: e7:6b:0f:51:de:79:c8:40:50:69:b2:10:0b:75:e7:b4:af:d6: 25:14:79:19:40:0b:e7:92:b0:00:3f:4a:14:e1:af:4b:95:35: d1:47:be:b7:48:36:bf:56:15:ab:d4:53:5d:d4:00:1d:39:ff: 4d:cd:ad:0d:59:bb:a7:a2:c7:d7:78:59:50:2e:89:52:1a:f5: 6a:cd:6f:53 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUMmMQlEJMCDqC/09XWKPtOTnqElowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNTEyMTMwOTU3MjhaFw0yNjEyMTIxMDAyMjhaMDMxMTAvBgNV BAMTKDgyQ0EyRTM3RjlGNDcxRDA4MzVEMjkwRTk2MzAwMzM2MUZEOERCOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjVf2POlh9ltQK1W6TAEsU3cmk pebcn+UWKtlXFDUxaxmFf+p0aOU7j5I2Ehp4Yu72EJp2LpwkKd1FU6+j5hPFOmmY npG018VssL3oWX29lNnl0ul4knksZbPL1n6gVr7gzLTpJJoYU+D8Ad2lzsEAx4Fb /wwH2i1TRdJEAauIj+V5pTGkleHBKKWmBC8jXMLCWKlSI2PCtfVK6sHK/zpmuu2j pyBy7kCC1+p3+oJ3wKSEEjSVHP9Vb4WUFrH/sfel1W6yohtIJFYUxVNzy+AzO0NT v767PeXH9zbf6lTlcBO9ipHzJvr5Tg23kyFQv8GxtSmB+w0lF5SnN1iRlf95AgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUgsouN/n0cdCDXSkOljADNh/Y25owHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTNTY1MC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlOr9AME AlUIkDANBgkqhkiG9w0BAQsFAAOCAQEAWWDXZ5CTbR6POI4a2FoAZhTi7qiN6F4a dnsKgAdkAYygt0WpU4Ng0PsdLIaGD4XUAlFroMC2kajtsxk1uxlx9FiWr+yc0imv +31ZNYK4ibX1jAsEd6fwhXRErOYeb5lr4wZxXnrQsFY70QHwlBVLCjPLXwBozXML Hl9MmXrJp82/mV7RLXBzc4VjZwVchBNhcl54ATOWEOhSRblb/v6idfOH+M17WHjV z7b5kXQeoXPrKYt252sPUd55yEBQabIQC3XntK/WJRR5GUAL55KwAD9KFOGvS5U1 0Ue+t0g2v1YVq9RTXdQAHTn/Tc2tDVm7p6LH13hZUC6JUhr1as1vUw== -----END CERTIFICATE-----Generated at Wed Dec 17 20:45:24 2025 by rpki-client