This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS57851.roa
File: AS57851.roa (raw, json)
Hash identifier: GZA8fSb1LLaQZGrgBWEsmk6jgkb0bE9mtVm68AsDf1A=
Subject key identifier: D9:4A:1E:0B:82:25:9E:22:EA:CA:74:2A:B9:D9:DF:24:F7:89:97:12
Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial: 7EEDC293C2298D015448675A270E1762C301EDD1
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS57851.roa
Signing time: Fri 04 Jul 2025 07:51:24 +0000
ROA not before: Fri 04 Jul 2025 07:46:24 +0000
ROA not after: Fri 03 Jul 2026 07:51:24 +0000
asID: 57851
IP address blocks: 2a07:54c2::/36 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:ed:c2:93:c2:29:8d:01:54:48:67:5a:27:0e:17:62:c3:01:ed:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Validity
Not Before: Jul 4 07:46:24 2025 GMT
Not After : Jul 3 07:51:24 2026 GMT
Subject: CN=D94A1E0B82259E22EACA742AB9D9DF24F7899712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f9:1d:ce:3f:47:c4:f9:da:90:e8:05:5f:0a:
35:f5:b7:d9:cb:96:b3:b6:6d:1a:44:35:c8:95:65:
c8:3a:88:05:39:10:c2:f4:6e:38:81:e4:54:49:1a:
51:34:1a:35:1b:72:d3:71:bd:de:5d:2f:60:b0:1f:
38:93:bd:16:2c:43:99:e4:ad:ff:ee:50:99:97:66:
ab:49:7f:fb:d4:ed:2b:fc:81:2c:8d:dd:36:c6:74:
49:2f:43:5a:f8:41:bd:26:26:60:f8:a9:97:6d:c1:
ce:1a:dd:89:57:1f:d3:01:1f:49:03:4a:66:9b:31:
2f:7e:e0:97:ba:fd:f6:32:6c:fd:55:4a:9d:2e:64:
b8:2e:56:b6:95:8c:74:9f:f8:f1:07:6c:57:4e:50:
b7:fa:b1:5a:0c:5d:51:a2:b2:aa:8d:5b:0f:78:f9:
e2:ba:1f:3d:69:de:16:76:a4:5b:dd:2b:64:71:ae:
4b:17:e6:6e:70:5f:db:84:9d:7f:69:15:14:cb:9a:
32:c6:df:8f:f8:7d:72:96:61:5b:fd:aa:bc:51:91:
f1:77:2d:7a:50:47:63:59:13:b0:0e:db:30:9c:40:
21:33:4d:cc:93:8e:2d:f9:31:e4:40:15:2d:b9:c3:
d0:68:e8:aa:6e:aa:2e:42:a3:92:0c:7b:d3:5f:7e:
c5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4A:1E:0B:82:25:9E:22:EA:CA:74:2A:B9:D9:DF:24:F7:89:97:12
X509v3 Authority Key Identifier:
keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS57851.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c2::/36
Signature Algorithm: sha256WithRSAEncryption
0c:ad:33:28:13:e6:d4:a3:38:a1:56:84:36:f2:2c:80:26:61:
df:5e:84:d5:7e:36:bb:df:c0:43:52:16:c3:e1:4a:b3:ac:92:
14:5f:0f:bf:c0:f9:a2:c5:12:31:43:9a:c9:6a:d8:da:61:1e:
bc:67:1f:dd:84:8b:6c:05:eb:14:b7:95:92:f3:9e:4e:71:ae:
a6:36:9d:f8:dc:68:32:4f:ad:ec:e6:b8:f6:a1:76:ad:28:f0:
8e:eb:3b:f8:5b:44:c7:a5:c5:a3:a4:db:2c:ec:57:79:25:cd:
ed:6f:80:cd:9d:68:26:36:a9:d0:23:56:46:9d:e5:92:48:db:
a4:d7:a7:a5:95:5d:86:ce:39:2c:93:6b:ae:4f:33:a2:25:77:
ae:c5:32:40:e5:70:ba:01:11:76:1d:67:3c:8a:9a:07:74:f0:
1a:bc:8a:7c:6a:c3:6f:17:af:f3:bc:64:95:c8:37:6b:5b:31:
1f:6a:19:80:fc:d1:90:2c:d6:4f:bf:7c:a2:fe:f1:9d:11:ec:
8b:fa:f5:05:7f:e6:55:30:7b:c8:d8:e2:36:b4:be:98:64:cf:
b7:c9:2e:4b:a7:b2:d0:1f:ab:b8:84:58:33:30:cd:4a:17:c4:
8d:5e:b0:e4:58:13:bf:51:e5:16:ed:d6:f5:a9:10:c6:41:05:
29:c7:ba:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 22:04:46 2025 by rpki-client