This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS207610.roa File: AS207610.roa (raw, json) Hash identifier: MP+NKlCtvNtW8ykN6nbv2krGDTVsJvdb5/zd+fIH9AQ= Subject key identifier: 4F:3C:DC:69:BA:FB:7B:A3:61:D6:BB:6F:D0:D6:2B:14:B7:F3:64:04 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 4484F8656845CD574F1951F55FF71B624B169A17 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS207610.roa Signing time: Sun 04 Jan 2026 18:32:44 +0000 ROA not before: Sun 04 Jan 2026 18:27:44 +0000 ROA not after: Sun 03 Jan 2027 18:32:44 +0000 asID: 207610 IP address blocks: 2.57.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:84:f8:65:68:45:cd:57:4f:19:51:f5:5f:f7:1b:62:4b:16:9a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Jan 4 18:27:44 2026 GMT Not After : Jan 3 18:32:44 2027 GMT Subject: CN=4F3CDC69BAFB7BA361D6BB6FD0D62B14B7F36404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:51:52:83:19:b6:23:cf:ba:f4:a3:4c:15:8d: c5:a9:96:96:8a:26:c3:27:e8:d0:0b:fd:1b:04:78: 01:01:8b:19:45:d4:82:a9:5f:48:15:49:5b:2c:79: 05:b4:ec:5d:81:5f:4e:3b:d4:5c:e1:f8:04:1b:44: 54:e3:4a:28:a4:c4:38:73:cd:5c:05:b5:8c:f9:c0: f7:49:67:70:21:11:eb:d5:51:a8:30:82:76:52:17: 6a:3a:11:a3:47:a6:92:90:53:5e:f7:d1:aa:44:47: 80:0a:e5:3d:9f:56:62:c5:c9:ce:13:e4:8e:bd:93: 35:c4:2b:99:9c:6a:65:2d:c2:fc:9e:5e:5b:0a:04: 34:32:b1:af:16:b0:9e:81:6e:69:a3:aa:df:1d:89: 74:88:d4:ed:1b:2b:75:3f:9f:ff:fd:f5:c7:0c:c1: 97:a8:18:9d:92:b4:e2:c2:74:cc:98:cf:95:d6:98: 2b:42:53:db:64:a0:d2:f1:dc:51:bc:54:ca:85:95: a7:91:ae:50:4b:ab:a2:5f:9b:ac:ed:a8:ad:89:ba: 1c:3b:0c:5d:ae:f8:9a:a3:c6:e7:97:dd:3d:34:e8: 96:95:ee:ca:b2:ac:b7:70:8d:c2:57:1d:d6:60:cc: 01:a5:2f:7a:95:0d:54:f9:f6:af:bf:31:dc:d8:15: f5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3C:DC:69:BA:FB:7B:A3:61:D6:BB:6F:D0:D6:2B:14:B7:F3:64:04 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS207610.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.17.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:2f:34:a7:a8:e1:54:2c:f3:c4:dd:c0:d9:d4:9f:10:2e:cb: ba:5f:4c:d6:35:8d:c1:37:fd:fe:20:4f:f2:0c:0c:3a:7c:4f: a4:8d:fa:c7:d9:61:80:d2:a5:46:68:0f:d3:6d:72:13:9b:7b: 63:00:90:00:84:6d:a2:c4:46:98:a4:bd:e2:f3:54:ec:a4:4c: 5f:ca:af:14:4d:49:be:19:0b:7d:f7:77:bd:c2:22:fd:d7:58: 22:60:30:83:aa:4c:6d:83:55:fe:ae:71:b8:91:3b:70:f5:13: ed:91:06:d3:9b:c4:3b:23:d8:94:fe:a5:5b:3c:46:b6:bd:90: 7e:70:05:15:8a:e0:79:35:ca:53:f8:a4:01:59:46:1d:41:8c: 0d:fd:de:a5:bf:72:87:26:ea:47:ca:42:15:2b:d5:eb:60:08: 35:a6:dc:f3:71:04:80:5f:8b:64:69:2d:3d:92:f1:a1:fc:9c: 0e:e7:b9:0f:88:da:46:f1:d9:93:36:c4:7a:b3:1a:2c:ea:59: 5a:96:de:00:fb:60:6e:75:18:be:67:c6:c1:11:f6:64:6d:b3: b3:92:cd:66:e2:78:c8:30:fa:b3:23:3e:8a:75:14:a8:b2:9b: f1:03:3c:6e:50:56:16:b2:5c:bf:87:e0:9c:a2:84:5d:a8:24: b9:d5:d5:81 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIURIT4ZWhFzVdPGVH1X/cbYksWmhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNjAxMDQxODI3NDRaFw0yNzAxMDMxODMyNDRaMDMxMTAvBgNV BAMTKDRGM0NEQzY5QkFGQjdCQTM2MUQ2QkI2RkQwRDYyQjE0QjdGMzY0MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgUVKDGbYjz7r0o0wVjcWplpaK JsMn6NAL/RsEeAEBixlF1IKpX0gVSVsseQW07F2BX0471Fzh+AQbRFTjSiikxDhz zVwFtYz5wPdJZ3AhEevVUagwgnZSF2o6EaNHppKQU1730apER4AK5T2fVmLFyc4T 5I69kzXEK5mcamUtwvyeXlsKBDQysa8WsJ6Bbmmjqt8diXSI1O0bK3U/n//99ccM wZeoGJ2StOLCdMyYz5XWmCtCU9tkoNLx3FG8VMqFlaeRrlBLq6Jfm6ztqK2Juhw7 DF2u+JqjxueX3T006JaV7sqyrLdwjcJXHdZgzAGlL3qVDVT59q+/MdzYFfVZAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUTzzcabr7e6Nh1rtv0NYrFLfzZAQwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjA3NjEwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjkR MA0GCSqGSIb3DQEBCwUAA4IBAQBLLzSnqOFULPPE3cDZ1J8QLsu6X0zWNY3BN/3+ IE/yDAw6fE+kjfrH2WGA0qVGaA/TbXITm3tjAJAAhG2ixEaYpL3i81TspExfyq8U TUm+GQt993e9wiL911giYDCDqkxtg1X+rnG4kTtw9RPtkQbTm8Q7I9iU/qVbPEa2 vZB+cAUViuB5NcpT+KQBWUYdQYwN/d6lv3KHJupHykIVK9XrYAg1ptzzcQSAX4tk aS09kvGh/JwO57kPiNpG8dmTNsR6sxos6llalt4A+2BudRi+Z8bBEfZkbbOzks1m 4njIMPqzIz6KdRSospvxAzxuUFYWsly/h+CcooRdqCS51dWB -----END CERTIFICATE-----Generated at Mon Jan 12 08:30:33 2026 by rpki-client