This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS59711.roa File: AS59711.roa (raw, json) Hash identifier: cDEar2h9XED8ar1FPxvdgNY+Q5h8Ar4NHfsN0tVDA+M= Subject key identifier: 6C:8D:EE:C7:5E:17:28:AF:3F:35:9A:2A:5B:95:46:0E:63:63:9C:78 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 0C2F06A7A4A042D7821F428537AAE0A8EE1E59B4 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS59711.roa Signing time: Fri 19 Dec 2025 14:55:32 +0000 ROA not before: Fri 19 Dec 2025 14:50:32 +0000 ROA not after: Fri 18 Dec 2026 14:55:32 +0000 asID: 59711 IP address blocks: 46.202.72.0/24 maxlen: 24 46.202.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:2f:06:a7:a4:a0:42:d7:82:1f:42:85:37:aa:e0:a8:ee:1e:59:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 19 14:50:32 2025 GMT Not After : Dec 18 14:55:32 2026 GMT Subject: CN=6C8DEEC75E1728AF3F359A2A5B95460E63639C78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8d:1e:76:ad:c9:65:cb:dd:fc:06:67:84:dd: 52:81:d2:af:06:44:cd:88:7b:33:d8:cf:45:1b:32: ec:43:8f:88:8e:3f:fa:cc:bc:cc:a7:ac:2d:04:ae: 58:b1:58:62:40:37:ce:1f:9a:35:50:c5:c9:a5:6f: 5a:df:02:f1:11:67:34:0f:94:f9:51:e7:fd:7d:8e: 7c:0b:8c:92:59:2d:3a:26:b2:3e:60:26:db:46:98: 89:b7:80:c0:a0:11:8d:56:ff:f9:47:6c:1f:7b:6f: e1:11:7d:85:30:74:c8:13:10:03:d0:33:47:29:9a: 0b:7c:66:90:c5:d1:0b:bd:2c:3f:bc:cb:4c:68:c8: fe:e1:1e:ec:c5:35:31:28:a2:98:cd:bf:30:a4:85: d5:3e:89:d0:f0:06:a6:04:b2:1e:0e:21:f1:a9:8f: 8e:9c:2e:77:24:ab:54:2c:75:f6:0b:af:09:90:76: 92:90:85:40:b7:09:3f:e8:90:89:8e:b7:86:81:b1: 17:fe:7e:c9:77:59:46:4d:57:bb:54:09:85:18:0e: de:91:02:da:3d:1d:8e:d5:f7:56:53:fc:7f:96:50: c0:82:96:b1:e3:89:ae:74:a2:bc:f4:06:61:44:43: 51:65:e4:03:a6:d7:4a:82:a3:b3:53:27:e2:ca:a1: d2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8D:EE:C7:5E:17:28:AF:3F:35:9A:2A:5B:95:46:0E:63:63:9C:78 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS59711.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.202.72.0/24 46.202.79.0/24 Signature Algorithm: sha256WithRSAEncryption 15:24:f6:fc:b7:9b:c4:eb:c4:a2:6f:b3:2b:f6:1d:de:79:73: 21:b0:75:38:ed:e9:95:4c:9e:10:38:53:5a:3f:49:35:1c:b3: b2:ed:60:0c:49:6f:e7:f2:5f:e0:bf:35:3d:4d:77:de:12:8a: c7:6d:7d:83:fa:e5:07:c5:28:d8:4d:f9:e6:ba:df:fe:7f:f1: e0:69:97:77:11:47:08:e4:44:b2:f0:72:4d:f0:ce:ec:3f:16: d6:70:0d:bf:a4:fb:46:7e:ad:81:67:d9:bb:1d:62:8b:f3:34: 2e:1c:d1:7a:20:01:4a:f9:b9:ae:a4:3b:13:d3:55:60:fe:21: 11:84:da:ac:08:a3:c1:d4:e8:05:46:8d:93:70:47:43:e1:f5: e8:63:3d:d9:db:d7:44:a1:7c:66:f6:ae:fa:8c:4f:54:fd:03: 2a:1d:50:57:b3:b2:28:a6:b5:ef:33:cd:41:a9:23:35:c2:9c: 1f:f8:cf:42:b7:82:2d:f9:cd:5e:21:72:7b:95:d8:00:a0:02: 81:6f:73:9c:68:5c:89:e5:dd:e7:7f:4f:9d:99:8d:c9:f0:8e: 41:3a:a7:67:28:ee:83:2e:eb:02:4b:31:9e:c0:97:00:51:d1: f3:b3:16:dd:d8:8c:34:54:ed:c0:09:7c:1c:e6:e6:54:20:84: 37:5c:57:2d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUDC8Gp6SgQteCH0KFN6rgqO4eWbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMTkxNDUwMzJaFw0yNjEyMTgxNDU1MzJaMDMxMTAvBgNV BAMTKDZDOERFRUM3NUUxNzI4QUYzRjM1OUEyQTVCOTU0NjBFNjM2MzlDNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmjR52rclly938BmeE3VKB0q8G RM2IezPYz0UbMuxDj4iOP/rMvMynrC0ErlixWGJAN84fmjVQxcmlb1rfAvERZzQP lPlR5/19jnwLjJJZLTomsj5gJttGmIm3gMCgEY1W//lHbB97b+ERfYUwdMgTEAPQ M0cpmgt8ZpDF0Qu9LD+8y0xoyP7hHuzFNTEoopjNvzCkhdU+idDwBqYEsh4OIfGp j46cLnckq1QsdfYLrwmQdpKQhUC3CT/okImOt4aBsRf+fsl3WUZNV7tUCYUYDt6R Ato9HY7V91ZT/H+WUMCClrHjia50orz0BmFEQ1Fl5AOm10qCo7NTJ+LKodJPAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUbI3ux14XKK8/NZoqW5VGDmNjnHgwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNTk3MTEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAAuykgD BAAuyk8wDQYJKoZIhvcNAQELBQADggEBABUk9vy3m8TrxKJvsyv2Hd55cyGwdTjt 6ZVMnhA4U1o/STUcs7LtYAxJb+fyX+C/NT1Nd94SisdtfYP65QfFKNhN+ea63/5/ 8eBpl3cRRwjkRLLwck3wzuw/FtZwDb+k+0Z+rYFn2bsdYovzNC4c0XogAUr5ua6k OxPTVWD+IRGE2qwIo8HU6AVGjZNwR0Ph9ehjPdnb10ShfGb2rvqMT1T9AyodUFez siimte8zzUGpIzXCnB/4z0K3gi35zV4hcnuV2ACgAoFvc5xoXInl3ed/T52Zjcnw jkE6p2co7oMu6wJLMZ7AlwBR0fOzFt3YjDRU7cAJfBzm5lQghDdcVy0= -----END CERTIFICATE-----Generated at Sun Dec 21 05:37:38 2025 by rpki-client