This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30860.roa File: AS30860.roa (raw, json) Hash identifier: CZDlDldn/Oeq/DqTdH5vUM+gbHPizZCYcOL2klSSPQs= Subject key identifier: 93:C6:F9:42:54:E0:F7:B0:BB:56:6D:40:89:D3:50:AC:1B:A2:85:07 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 4B61A4D3641F56F95C89F59390CD2E7EBE4F834F Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30860.roa Signing time: Thu 11 Dec 2025 16:55:32 +0000 ROA not before: Thu 11 Dec 2025 16:50:32 +0000 ROA not after: Thu 10 Dec 2026 16:55:32 +0000 asID: 30860 IP address blocks: 2.57.20.0/23 maxlen: 24 185.34.42.0/24 maxlen: 24 185.174.63.0/24 maxlen: 24 191.96.69.0/24 maxlen: 24 191.96.171.0/24 maxlen: 24 191.96.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:61:a4:d3:64:1f:56:f9:5c:89:f5:93:90:cd:2e:7e:be:4f:83:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 11 16:50:32 2025 GMT Not After : Dec 10 16:55:32 2026 GMT Subject: CN=93C6F94254E0F7B0BB566D4089D350AC1BA28507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:84:fe:f3:93:b7:08:7b:0d:2c:f0:64:3f:82: d0:f0:c0:d9:87:fa:51:a9:9d:c8:be:c4:f9:a8:88: 85:54:7d:56:c7:a9:86:18:02:3a:2c:a2:a0:20:85: b3:5a:ca:d9:bf:cd:a2:34:85:be:3f:94:35:a9:f9: bf:03:b0:50:4d:a2:5f:00:ae:10:7a:c9:1d:dd:6c: 7e:bd:b7:92:3c:fd:1f:39:98:fb:f1:35:21:5d:ac: 79:2b:7f:d8:a8:96:a8:cb:34:15:71:b7:f6:81:d7: ad:17:ee:ff:57:17:d4:29:61:6a:49:0d:a8:91:0d: 65:b1:e8:e9:1d:f5:e9:3a:24:e9:d9:3b:7e:e8:ca: de:f7:7f:69:a5:6d:7f:e6:df:63:44:47:95:16:1a: a3:8f:73:cb:7c:9e:9e:2b:87:91:27:72:6b:13:7c: 32:cf:54:fb:fe:12:53:b6:6d:d3:8b:2f:0f:3c:f1: 08:24:61:b7:64:4b:a5:cd:09:8b:42:e6:33:04:8a: 58:f1:0f:99:2a:20:48:08:3e:1c:66:e3:40:80:96: 27:84:27:4c:52:83:69:36:a5:d5:8b:e2:77:43:65: 91:d4:65:d4:8b:6c:1e:c3:e0:ad:67:42:c0:5e:0e: ea:f6:f7:e8:ab:c9:2f:3a:55:2f:7a:2a:bc:ea:19: 61:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C6:F9:42:54:E0:F7:B0:BB:56:6D:40:89:D3:50:AC:1B:A2:85:07 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS30860.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.20.0/23 185.34.42.0/24 185.174.63.0/24 191.96.69.0/24 191.96.171.0/24 191.96.173.0/24 Signature Algorithm: sha256WithRSAEncryption 89:d9:44:17:cf:4e:81:e5:70:47:20:74:7c:94:c1:72:71:28: 96:aa:95:d7:c0:7a:ee:61:dd:ff:4d:76:25:8f:2b:27:57:8d: 04:59:76:69:d4:cc:9d:4f:65:a6:b1:b7:fe:f9:61:27:37:59: fc:72:68:73:27:cd:d2:c0:1d:15:93:a9:02:0b:f9:b7:44:80: 50:b3:53:fb:d3:34:9e:98:09:5e:1c:1e:d3:0d:b9:81:30:7c: 14:fb:2c:32:8c:9e:be:a2:b7:a7:b7:a1:9e:6a:ee:19:e6:e1: f4:13:1b:b2:cf:82:e6:73:1a:dc:c0:6d:40:2d:f8:fc:47:a5: 94:82:8a:53:9d:0a:e9:01:f7:45:23:44:26:11:80:ca:da:56: ac:dc:0c:9b:11:79:bf:e1:16:33:6e:ed:f5:21:e5:ce:d8:c4: 53:df:f3:8e:37:10:bb:43:7d:1d:e8:e5:8d:d5:25:5b:4f:9c: 26:b8:70:85:be:72:3f:7f:09:a5:42:7a:e3:e1:e5:7f:46:18: 79:a6:eb:a3:9b:62:87:b4:97:c2:b5:f4:69:18:90:fc:c0:2a: 6c:5a:0c:a0:08:5b:31:98:79:d1:3f:55:19:b7:45:cb:da:69: 0c:f2:ec:14:3e:81:aa:4d:4d:8c:2c:cd:91:c5:da:4c:e9:42: fa:2b:05:5b -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgIUS2Gk02QfVvlcifWTkM0ufr5Pg08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMTExNjUwMzJaFw0yNjEyMTAxNjU1MzJaMDMxMTAvBgNV BAMTKDkzQzZGOTQyNTRFMEY3QjBCQjU2NkQ0MDg5RDM1MEFDMUJBMjg1MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXhP7zk7cIew0s8GQ/gtDwwNmH +lGpnci+xPmoiIVUfVbHqYYYAjosoqAghbNaytm/zaI0hb4/lDWp+b8DsFBNol8A rhB6yR3dbH69t5I8/R85mPvxNSFdrHkrf9iolqjLNBVxt/aB160X7v9XF9QpYWpJ DaiRDWWx6Okd9ek6JOnZO37oyt73f2mlbX/m32NER5UWGqOPc8t8np4rh5EncmsT fDLPVPv+ElO2bdOLLw888QgkYbdkS6XNCYtC5jMEiljxD5kqIEgIPhxm40CAlieE J0xSg2k2pdWL4ndDZZHUZdSLbB7D4K1nQsBeDur29+iryS86VS96KrzqGWHvAgMB AAGjggInMIICIzAdBgNVHQ4EFgQUk8b5QlTg97C7Vm1AidNQrBuihQcwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMzA4NjAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBAECORQD BAC5IioDBAC5rj8DBAC/YEUDBAC/YKsDBAC/YK0wDQYJKoZIhvcNAQELBQADggEB AInZRBfPToHlcEcgdHyUwXJxKJaqldfAeu5h3f9NdiWPKydXjQRZdmnUzJ1PZaax t/75YSc3WfxyaHMnzdLAHRWTqQIL+bdEgFCzU/vTNJ6YCV4cHtMNuYEwfBT7LDKM nr6it6e3oZ5q7hnm4fQTG7LPguZzGtzAbUAt+PxHpZSCilOdCukB90UjRCYRgMra VqzcDJsReb/hFjNu7fUh5c7YxFPf8443ELtDfR3o5Y3VJVtPnCa4cIW+cj9/CaVC euPh5X9GGHmm66ObYoe0l8K19GkYkPzAKmxaDKAIWzGYedE/VRm3RcvaaQzy7BQ+ gapNTYwszZHF2kzpQvorBVs= -----END CERTIFICATE-----Generated at Fri Dec 19 14:29:52 2025 by rpki-client