This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS7029.roa File: AS7029.roa (raw, json) Hash identifier: 4ibdtfyZ6r0SYGA5cgdaxJrsxlWPgnm3mhfYixRZzWg= Subject key identifier: 78:62:59:6E:1B:01:58:CE:68:7B:AB:50:55:7D:4F:07:EA:5F:37:D5 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 0E12E5B3657052C5953B17D3D3153143F041AC7A Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS7029.roa Signing time: Fri 12 Dec 2025 00:55:32 +0000 ROA not before: Fri 12 Dec 2025 00:50:32 +0000 ROA not after: Fri 11 Dec 2026 00:55:32 +0000 asID: 7029 IP address blocks: 191.101.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:12:e5:b3:65:70:52:c5:95:3b:17:d3:d3:15:31:43:f0:41:ac:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 12 00:50:32 2025 GMT Not After : Dec 11 00:55:32 2026 GMT Subject: CN=7862596E1B0158CE687BAB50557D4F07EA5F37D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2f:36:85:d7:8c:25:74:81:45:6b:01:75:17: be:1a:ce:c2:8b:16:0a:12:15:c7:c1:2c:fe:a8:22: 5e:43:e8:f9:65:17:bd:6e:1e:03:4a:62:02:bf:cd: ba:b6:ea:de:4a:17:e5:fb:c9:29:48:96:39:c3:74: cb:55:c5:37:d6:c2:8b:7f:81:eb:de:e4:68:b4:37: 54:ee:2e:d5:4e:98:1f:97:a8:00:d0:68:ed:9e:ca: 4a:cc:ad:4c:26:71:95:dd:eb:f2:a1:b2:64:2e:9e: f4:02:9b:0b:82:ef:11:86:c6:82:6a:95:c4:df:ee: 2c:b0:7f:d4:8e:69:df:2f:87:5f:9e:be:57:8e:2f: 6a:02:57:f5:3a:d3:c9:63:d7:d3:98:99:3e:01:5c: 7a:f8:84:f3:43:6d:25:51:99:31:9e:5c:b9:92:92: 9f:f9:f4:d0:03:a9:3e:1b:a9:8d:c1:ff:a8:c3:b5: 33:1a:78:b4:33:e8:ea:af:c4:8e:1e:eb:cf:2d:ac: 1a:5c:59:e2:5e:8e:6f:25:d9:a8:9c:b7:6f:2c:ba: df:a0:8e:68:45:ee:5e:32:c8:3a:a5:95:0a:30:fa: 34:15:d3:b6:b4:6f:96:26:6f:0e:8d:28:7c:94:b3: b1:55:39:f3:bb:6c:c1:4d:6e:0c:4d:22:84:71:50: a9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:62:59:6E:1B:01:58:CE:68:7B:AB:50:55:7D:4F:07:EA:5F:37:D5 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS7029.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.101.27.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:30:94:aa:05:4e:b0:0d:50:4e:15:ac:c2:f7:f7:c5:90:89: d8:94:8d:ed:ef:e5:e4:64:58:d9:a7:16:13:bb:cd:51:a6:45: f1:c8:ed:d1:1b:3d:c4:75:a3:26:89:11:72:1f:f9:2b:3e:12: 86:03:14:82:98:c2:b8:00:a6:a6:80:3b:b5:ee:b2:f2:4f:dc: 26:54:cc:f1:14:08:64:06:55:db:51:44:af:31:90:17:50:05: 85:09:32:23:64:49:21:b2:e0:d2:e5:93:d0:0f:93:57:c4:39: a4:bb:20:44:a6:2c:1e:10:ac:28:42:78:c9:04:6b:8c:00:cb: a1:cd:ff:e1:44:f5:d1:0e:d4:e8:6c:be:c4:12:07:68:32:96: 7a:94:12:3b:2b:da:be:29:7d:c4:46:74:d4:10:b6:e7:f7:ce: 08:b3:de:70:d4:66:0b:8f:ca:a0:18:00:54:9d:93:f9:06:e2: 81:ed:86:ef:07:0c:dd:4e:ec:71:b1:7c:84:06:a0:c4:a0:6b: 17:74:2e:98:d8:b7:c9:7c:04:25:89:45:27:56:69:43:74:23: 9e:3f:3d:66:c5:66:d8:a3:82:57:57:6b:a4:70:d1:81:d4:46: d0:b1:54:7a:98:cd:6f:49:b4:ff:82:f0:1b:79:f3:43:ca:9d: 2d:a5:81:b7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUDhLls2VwUsWVOxfT0xUxQ/BBrHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMTIwMDUwMzJaFw0yNjEyMTEwMDU1MzJaMDMxMTAvBgNV BAMTKDc4NjI1OTZFMUIwMTU4Q0U2ODdCQUI1MDU1N0Q0RjA3RUE1RjM3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLLzaF14wldIFFawF1F74azsKL FgoSFcfBLP6oIl5D6PllF71uHgNKYgK/zbq26t5KF+X7ySlIljnDdMtVxTfWwot/ geve5Gi0N1TuLtVOmB+XqADQaO2eykrMrUwmcZXd6/KhsmQunvQCmwuC7xGGxoJq lcTf7iywf9SOad8vh1+evleOL2oCV/U608lj19OYmT4BXHr4hPNDbSVRmTGeXLmS kp/59NADqT4bqY3B/6jDtTMaeLQz6OqvxI4e688trBpcWeJejm8l2aict28sut+g jmhF7l4yyDqllQow+jQV07a0b5Ymbw6NKHyUs7FVOfO7bMFNbgxNIoRxUKlNAgMB AAGjggIIMIICBDAdBgNVHQ4EFgQUeGJZbhsBWM5oe6tQVX1PB+pfN9UwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNzAyOS5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL9lGzAN BgkqhkiG9w0BAQsFAAOCAQEADjCUqgVOsA1QThWswvf3xZCJ2JSN7e/l5GRY2acW E7vNUaZF8cjt0Rs9xHWjJokRch/5Kz4ShgMUgpjCuACmpoA7te6y8k/cJlTM8RQI ZAZV21FErzGQF1AFhQkyI2RJIbLg0uWT0A+TV8Q5pLsgRKYsHhCsKEJ4yQRrjADL oc3/4UT10Q7U6Gy+xBIHaDKWepQSOyvavil9xEZ01BC25/fOCLPecNRmC4/KoBgA VJ2T+Qbige2G7wcM3U7scbF8hAagxKBrF3QumNi3yXwEJYlFJ1ZpQ3Qjnj89ZsVm 2KOCV1drpHDRgdRG0LFUepjNb0m0/4LwG3nzQ8qdLaWBtw== -----END CERTIFICATE-----Generated at Tue Dec 16 22:31:53 2025 by rpki-client