This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS135377.roa File: AS135377.roa (raw, json) Hash identifier: drc8IaawSbOox7kkg0EMjFr5sLDhpWQ4ESPYG2ignRE= Subject key identifier: 66:2D:86:2A:AB:44:64:8B:ED:EB:CE:CF:DB:76:3C:F7:33:CA:A0:EF Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 4DA53CAC5550CE60DE6BF5F67822EED6B7B3FEB3 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS135377.roa Signing time: Fri 19 Dec 2025 10:55:32 +0000 ROA not before: Fri 19 Dec 2025 10:50:32 +0000 ROA not after: Fri 18 Dec 2026 10:55:32 +0000 asID: 135377 IP address blocks: 181.215.201.0/24 maxlen: 24 181.215.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a5:3c:ac:55:50:ce:60:de:6b:f5:f6:78:22:ee:d6:b7:b3:fe:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 19 10:50:32 2025 GMT Not After : Dec 18 10:55:32 2026 GMT Subject: CN=662D862AAB44648BEDEBCECFDB763CF733CAA0EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:fa:f8:52:e6:68:41:fc:fb:ae:44:bf:b7: b7:b9:4c:ca:f6:2f:6f:50:e4:74:4e:48:f6:7f:c3: 56:32:5a:04:e6:34:34:54:3a:21:bd:2a:88:52:25: 16:8f:be:e1:ee:da:aa:c9:32:33:a5:68:81:ef:de: 33:43:7a:8c:21:b5:8e:77:3f:23:c8:24:bd:57:43: d0:88:4d:ff:f6:32:37:c6:e4:06:8e:80:1e:1b:12: cc:66:2e:69:95:a5:91:44:bc:bd:94:35:3b:1d:5a: 35:9a:4a:61:19:21:16:bb:4d:af:29:d1:92:e6:32: d0:ee:01:a9:20:14:cb:4a:ec:3c:00:b9:27:bd:62: d9:51:1b:b7:af:1f:03:de:19:50:ed:5d:7a:61:29: ac:96:a2:7d:cf:d5:c2:61:b1:1f:bb:1f:74:2c:38: e0:4d:c7:0a:11:fe:b9:50:3a:99:17:d1:08:bf:9e: 8e:55:55:2f:e0:61:85:8f:cd:b9:15:9c:78:8f:a4: b0:ba:50:d8:d6:2c:ab:30:ac:38:9c:79:a1:b9:4f: cd:6a:55:b7:28:5d:c1:ef:11:bb:39:4f:29:34:98: 2e:1d:f9:f6:fd:7a:bb:d6:31:81:21:bd:71:99:b4: 12:ea:4d:5f:19:b0:65:76:f3:d6:8a:59:b2:f9:59: c3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2D:86:2A:AB:44:64:8B:ED:EB:CE:CF:DB:76:3C:F7:33:CA:A0:EF X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS135377.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.215.201.0/24 181.215.203.0/24 Signature Algorithm: sha256WithRSAEncryption 19:cf:dd:29:28:35:d1:1a:ec:27:68:55:26:ff:3d:44:47:36: 66:69:c3:ca:4d:0e:e5:7a:9d:b3:53:ed:03:d0:72:cb:27:eb: b9:1e:52:a5:1a:3c:25:ee:b3:0a:ae:da:91:99:84:57:02:64: d1:db:47:c2:f6:c8:2f:f5:32:2f:6f:63:9e:eb:80:bc:ec:08: 6e:05:39:4c:28:f0:95:8f:e7:80:43:41:92:7c:a7:f5:07:cd: 82:91:8a:ba:3a:48:54:dd:0e:b4:94:d8:8c:9e:3c:96:f2:25: b5:06:05:f1:c3:aa:12:79:25:6a:22:09:a9:16:15:1c:5b:bc: af:24:6e:56:41:f9:d5:9a:98:d7:d1:e5:20:d4:5b:ce:2b:38: ec:5d:c6:33:64:49:94:cd:04:5c:49:8c:1e:7f:e9:7f:9a:1b: 93:64:a7:98:13:73:ca:24:3a:aa:f5:3a:4e:ab:a8:50:8d:a0: dd:6c:40:de:36:0e:53:03:de:f1:28:a5:e2:35:dc:1c:a0:6b: 32:ba:c5:9c:a1:15:a8:63:af:ea:ae:e5:33:63:a8:15:4a:a5: 4f:27:3d:4d:d4:56:8d:22:c0:30:5d:4e:f3:83:a0:ce:c9:ba: d1:20:78:bf:f7:9d:55:4e:9c:8c:67:52:99:ec:0a:7e:22:00: 4e:51:f9:da -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUTaU8rFVQzmDea/X2eCLu1rez/rMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMTkxMDUwMzJaFw0yNjEyMTgxMDU1MzJaMDMxMTAvBgNV BAMTKDY2MkQ4NjJBQUI0NDY0OEJFREVCQ0VDRkRCNzYzQ0Y3MzNDQUEwRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr0fr4UuZoQfz7rkS/t7e5TMr2 L29Q5HROSPZ/w1YyWgTmNDRUOiG9KohSJRaPvuHu2qrJMjOlaIHv3jNDeowhtY53 PyPIJL1XQ9CITf/2MjfG5AaOgB4bEsxmLmmVpZFEvL2UNTsdWjWaSmEZIRa7Ta8p 0ZLmMtDuAakgFMtK7DwAuSe9YtlRG7evHwPeGVDtXXphKayWon3P1cJhsR+7H3Qs OOBNxwoR/rlQOpkX0Qi/no5VVS/gYYWPzbkVnHiPpLC6UNjWLKswrDiceaG5T81q VbcoXcHvEbs5Tyk0mC4d+fb9ervWMYEhvXGZtBLqTV8ZsGV289aKWbL5WcNNAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUZi2GKqtEZIvt687P23Y89zPKoO8wHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTM1Mzc3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAtdfJ AwQAtdfLMA0GCSqGSIb3DQEBCwUAA4IBAQAZz90pKDXRGuwnaFUm/z1ERzZmacPK TQ7lep2zU+0D0HLLJ+u5HlKlGjwl7rMKrtqRmYRXAmTR20fC9sgv9TIvb2Oe64C8 7AhuBTlMKPCVj+eAQ0GSfKf1B82CkYq6OkhU3Q60lNiMnjyW8iW1BgXxw6oSeSVq IgmpFhUcW7yvJG5WQfnVmpjX0eUg1FvOKzjsXcYzZEmUzQRcSYwef+l/mhuTZKeY E3PKJDqq9TpOq6hQjaDdbEDeNg5TA97xKKXiNdwcoGsyusWcoRWoY6/qruUzY6gV SqVPJz1N1FaNIsAwXU7zg6DOybrRIHi/951VTpyMZ1KZ7Ap+IgBOUfna -----END CERTIFICATE-----Generated at Sat Dec 20 21:05:15 2025 by rpki-client