This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10753.roa File: AS10753.roa (raw, json) Hash identifier: xwRSJMO5SupvI9Y4hkbHtwE/Xm9H+VzSjmT7pLvjSMo= Subject key identifier: 1B:43:4E:99:A0:7C:8E:DA:70:12:64:43:CA:F6:99:32:C0:C1:02:89 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 5966DB06081A1EEA9CD1BFE7F0240A20F75F4D80 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10753.roa Signing time: Tue 09 Dec 2025 13:45:52 +0000 ROA not before: Tue 09 Dec 2025 13:40:52 +0000 ROA not after: Tue 08 Dec 2026 13:45:52 +0000 asID: 10753 IP address blocks: 148.135.145.0/24 maxlen: 24 148.135.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:66:db:06:08:1a:1e:ea:9c:d1:bf:e7:f0:24:0a:20:f7:5f:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 9 13:40:52 2025 GMT Not After : Dec 8 13:45:52 2026 GMT Subject: CN=1B434E99A07C8EDA70126443CAF69932C0C10289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4e:3b:16:56:5e:78:ce:9d:6c:e8:3a:48:53: e8:e1:70:65:43:62:63:a7:92:7e:bc:70:c5:6d:01: 9e:18:15:0e:4f:59:e5:8f:c7:20:59:60:cb:8b:cc: 25:cf:b5:9f:2e:15:42:d7:35:c2:64:26:f5:ed:e3: 45:bc:95:53:ed:c9:1a:ff:4f:7b:a6:08:db:cd:ea: 3f:37:2e:a9:0b:85:98:74:da:d6:cc:7a:40:26:e8: b1:54:f0:16:f3:7d:c3:75:c4:76:15:4f:85:4e:8a: ab:b3:01:69:53:a9:53:81:90:fa:b3:74:62:8a:ec: c7:80:f9:f3:d7:26:69:2a:ed:d2:b3:67:6d:c0:f4: 0b:32:41:13:41:d1:0c:ec:52:ee:56:cd:ce:16:89: a4:dc:84:95:de:de:74:80:33:a2:ce:17:9f:6c:14: 26:ee:d8:01:bd:67:b4:ef:5f:77:12:db:78:fa:30: 7b:d6:59:f2:4b:c3:36:52:d1:80:1e:37:5c:d3:ec: 06:ef:f2:1d:76:37:c5:ff:8c:db:7c:5e:6a:9d:53: 03:f1:c9:b4:83:3e:e1:7b:9c:7c:4b:a0:ad:96:6a: 3d:cd:2b:02:92:65:01:94:eb:99:e4:4f:77:6f:ff: ec:eb:d3:ec:ba:87:50:6c:df:cc:e9:af:1b:11:9a: a7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:43:4E:99:A0:7C:8E:DA:70:12:64:43:CA:F6:99:32:C0:C1:02:89 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS10753.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.135.145.0/24 148.135.156.0/24 Signature Algorithm: sha256WithRSAEncryption 42:17:27:1d:1b:fa:4f:97:de:cf:93:05:0d:f3:85:0d:0a:65: 3b:d2:9c:69:13:6f:bc:2b:1c:07:e2:35:96:54:f8:76:18:ff: 05:76:1f:32:7f:fe:4a:21:14:25:29:77:8e:1b:74:81:7a:19: 77:e9:bd:04:be:4b:e3:00:9b:67:c6:46:0b:56:ac:f3:34:e1: ca:ea:05:56:10:3a:b0:98:0a:2f:83:fa:bd:7b:6c:22:a3:de: ec:59:72:1d:6e:c4:b5:92:47:9d:9b:99:e2:9b:59:1d:50:62: ba:60:ad:b0:bb:4a:45:83:87:d7:21:3b:8a:0d:eb:80:b6:f4: 88:94:f8:df:2c:cf:5e:a3:14:84:89:da:94:61:10:dd:24:b1: 0b:99:76:1c:ee:4f:d0:82:fe:0e:f8:0b:d1:a0:f3:23:2e:c3: 53:18:6f:9a:a0:27:9f:4a:4a:21:29:fd:c3:96:7f:68:a6:fc: d3:6a:b7:02:65:87:63:63:c2:de:8f:cc:a2:e1:11:7c:d4:3e: e6:c3:48:72:2d:cc:32:80:ae:cc:10:6a:fb:43:c3:4f:87:9d: 4c:ec:6e:a4:71:95:f2:34:d8:b8:bc:d8:f8:65:69:6f:53:34: 84:06:3d:f1:d8:ef:99:f4:cd:17:1e:10:8b:d6:cf:ae:e2:52: ba:b1:4a:05 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUWWbbBggaHuqc0b/n8CQKIPdfTYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMDkxMzQwNTJaFw0yNjEyMDgxMzQ1NTJaMDMxMTAvBgNV BAMTKDFCNDM0RTk5QTA3QzhFREE3MDEyNjQ0M0NBRjY5OTMyQzBDMTAyODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWTjsWVl54zp1s6DpIU+jhcGVD YmOnkn68cMVtAZ4YFQ5PWeWPxyBZYMuLzCXPtZ8uFULXNcJkJvXt40W8lVPtyRr/ T3umCNvN6j83LqkLhZh02tbMekAm6LFU8BbzfcN1xHYVT4VOiquzAWlTqVOBkPqz dGKK7MeA+fPXJmkq7dKzZ23A9AsyQRNB0QzsUu5Wzc4WiaTchJXe3nSAM6LOF59s FCbu2AG9Z7TvX3cS23j6MHvWWfJLwzZS0YAeN1zT7Abv8h12N8X/jNt8XmqdUwPx ybSDPuF7nHxLoK2Waj3NKwKSZQGU65nkT3dv/+zr0+y6h1Bs38zprxsRmqezAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUG0NOmaB8jtpwEmRDyvaZMsDBAokwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTA3NTMucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACUh5ED BACUh5wwDQYJKoZIhvcNAQELBQADggEBAEIXJx0b+k+X3s+TBQ3zhQ0KZTvSnGkT b7wrHAfiNZZU+HYY/wV2HzJ//kohFCUpd44bdIF6GXfpvQS+S+MAm2fGRgtWrPM0 4crqBVYQOrCYCi+D+r17bCKj3uxZch1uxLWSR52bmeKbWR1QYrpgrbC7SkWDh9ch O4oN64C29IiU+N8sz16jFISJ2pRhEN0ksQuZdhzuT9CC/g74C9Gg8yMuw1MYb5qg J59KSiEp/cOWf2im/NNqtwJlh2Njwt6PzKLhEXzUPubDSHItzDKArswQavtDw0+H nUzsbqRxlfI02Li82PhlaW9TNIQGPfHY75n0zRceEIvWz67iUrqxSgU= -----END CERTIFICATE-----Generated at Sat Dec 13 02:35:28 2025 by rpki-client