This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18796.roa File: AS18796.roa (raw, json) Hash identifier: 3JcSqN/16WNNpGBrkmQKemGF41hIE3QjWEhUH4mqQDE= Subject key identifier: 83:1D:1B:1C:98:8F:DF:6A:E9:07:83:26:19:AF:74:07:35:08:24:F8 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 3FEA5B1B0EED198D93395F71131CE6CB8ED0C24F Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18796.roa Signing time: Tue 09 Dec 2025 00:55:14 +0000 ROA not before: Tue 09 Dec 2025 00:50:14 +0000 ROA not after: Tue 08 Dec 2026 00:55:14 +0000 asID: 18796 IP address blocks: 191.96.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 12:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ea:5b:1b:0e:ed:19:8d:93:39:5f:71:13:1c:e6:cb:8e:d0:c2:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 9 00:50:14 2025 GMT Not After : Dec 8 00:55:14 2026 GMT Subject: CN=831D1B1C988FDF6AE907832619AF7407350824F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:46:6a:d1:8a:83:4b:5b:7e:32:21:0c:9f:dc: 30:3c:2e:db:f2:30:01:7f:d2:70:f1:8e:11:a2:84: ab:ce:c1:cc:f1:20:3a:a4:8a:a9:46:eb:e7:f4:e4: 7d:ac:b6:11:31:b6:da:c0:17:93:26:66:79:0b:fd: 9e:7a:1d:72:35:4c:b8:85:58:7f:f0:c0:a6:28:41: c8:72:f2:b0:de:cf:49:c9:5b:7d:2b:7a:fb:55:4b: 51:d8:c1:fd:a4:31:28:9c:87:60:b4:19:f9:6e:c7: b1:eb:1a:37:d0:6d:86:dc:c6:9f:f7:a7:7e:2e:0f: 8a:97:ca:fa:5e:aa:e9:3d:38:12:c2:36:f3:51:21: 6f:07:06:da:69:18:0e:35:61:02:ff:b4:af:a2:89: c8:df:44:01:d6:1d:27:85:1c:59:5f:90:66:0e:6b: 1c:a0:07:0f:f9:ae:2f:d9:37:63:cf:4e:5e:d0:7d: ef:12:33:6c:da:bd:31:16:ce:b6:83:af:d8:0d:1b: 8c:d8:e5:ec:2f:90:27:c8:6d:61:31:f7:1a:97:8b: bb:fa:14:9c:88:10:21:e5:f6:a6:0e:df:d0:a3:76: 43:cd:b3:08:27:7e:e2:68:73:1f:8c:99:5f:58:ef: 53:1c:ec:43:b1:fa:12:c2:96:eb:de:5a:12:b4:c2: 63:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1D:1B:1C:98:8F:DF:6A:E9:07:83:26:19:AF:74:07:35:08:24:F8 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS18796.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.96.231.0/24 Signature Algorithm: sha256WithRSAEncryption 17:c7:5f:43:57:08:a3:20:ef:a1:11:b1:ee:46:58:f6:b3:1e: 66:6a:d9:08:31:7e:11:d4:8b:b4:fa:a7:47:51:f9:2f:0d:72: 31:75:0c:bb:46:34:fc:3e:18:8b:bc:5b:4c:06:3e:33:99:13: f2:43:21:8b:a3:a7:c1:53:81:31:3c:91:d2:af:d0:5f:d9:9f: 30:c6:16:46:b9:08:1f:a1:24:3f:68:2e:df:08:a4:79:bc:47: b1:1c:18:c1:c4:65:79:0a:7a:21:4b:1d:56:e1:f1:78:a7:0d: 15:2a:a0:07:5b:c4:c7:76:91:92:c4:bb:2c:4b:ba:f2:90:0e: c6:03:9f:22:62:46:e5:1a:68:bd:ea:75:30:de:dd:c9:66:59: b5:20:08:0f:e3:3b:49:15:a7:c9:6a:fb:4b:71:14:f1:40:46: 12:9b:eb:92:2e:64:67:4f:18:92:5d:0c:12:00:8b:24:b8:e2: b5:c7:74:92:c2:5a:40:22:9f:bc:16:f1:be:ac:b6:b8:1d:2c: 76:c8:17:f8:5d:36:03:5c:bf:ae:2d:0f:a1:86:77:df:a5:94: 4f:b1:17:70:eb:85:f4:50:e5:a8:0e:c5:50:d0:a9:09:d5:03: 69:8b:7d:78:af:09:2f:16:04:20:e2:9e:2d:e3:e5:1c:53:21: 82:54:1b:9f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUP+pbGw7tGY2TOV9xExzmy47Qwk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDkwMDUwMTRaFw0yNjEyMDgwMDU1MTRaMDMxMTAvBgNV BAMTKDgzMUQxQjFDOTg4RkRGNkFFOTA3ODMyNjE5QUY3NDA3MzUwODI0RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkRmrRioNLW34yIQyf3DA8Ltvy MAF/0nDxjhGihKvOwczxIDqkiqlG6+f05H2sthExttrAF5MmZnkL/Z56HXI1TLiF WH/wwKYoQchy8rDez0nJW30revtVS1HYwf2kMSich2C0Gflux7HrGjfQbYbcxp/3 p34uD4qXyvpequk9OBLCNvNRIW8HBtppGA41YQL/tK+iicjfRAHWHSeFHFlfkGYO axygBw/5ri/ZN2PPTl7Qfe8SM2zavTEWzraDr9gNG4zY5ewvkCfIbWEx9xqXi7v6 FJyIECHl9qYO39CjdkPNswgnfuJocx+MmV9Y71Mc7EOx+hLCluveWhK0wmOZAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUgx0bHJiP32rpB4MmGa90BzUIJPgwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTg3OTYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/YOcw DQYJKoZIhvcNAQELBQADggEBABfHX0NXCKMg76ERse5GWPazHmZq2QgxfhHUi7T6 p0dR+S8NcjF1DLtGNPw+GIu8W0wGPjOZE/JDIYujp8FTgTE8kdKv0F/ZnzDGFka5 CB+hJD9oLt8IpHm8R7EcGMHEZXkKeiFLHVbh8XinDRUqoAdbxMd2kZLEuyxLuvKQ DsYDnyJiRuUaaL3qdTDe3clmWbUgCA/jO0kVp8lq+0txFPFARhKb65IuZGdPGJJd DBIAiyS44rXHdJLCWkAin7wW8b6strgdLHbIF/hdNgNcv64tD6GGd9+llE+xF3Dr hfRQ5agOxVDQqQnVA2mLfXivCS8WBCDini3j5RxTIYJUG58= -----END CERTIFICATE-----Generated at Fri Dec 19 21:49:21 2025 by rpki-client