This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47690.roa File: AS47690.roa (raw, json) Hash identifier: QI0my1FTo8Rf144//D+mxvzZ0GKrTiJyh8Hsy1o1VnM= Subject key identifier: 54:28:1E:A8:E3:9E:12:1C:F0:95:CB:A6:18:21:A7:90:C0:04:43:CC Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 78A21F38FD12E3B14604899A2EBEDD966690B3EE Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47690.roa Signing time: Tue 02 Dec 2025 22:28:46 +0000 ROA not before: Tue 02 Dec 2025 22:23:46 +0000 ROA not after: Tue 01 Dec 2026 22:28:46 +0000 asID: 47690 IP address blocks: 155.117.86.0/24 maxlen: 24 155.117.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a2:1f:38:fd:12:e3:b1:46:04:89:9a:2e:be:dd:96:66:90:b3:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 2 22:23:46 2025 GMT Not After : Dec 1 22:28:46 2026 GMT Subject: CN=54281EA8E39E121CF095CBA61821A790C00443CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:29:57:c0:85:2f:28:91:18:6a:43:ee:41:f7: 12:7e:b7:c4:63:41:20:46:4e:37:61:68:93:e3:e4: 7d:2a:fd:18:de:32:88:53:9c:ea:25:2d:9f:3f:d0: 03:04:3d:a3:c0:21:aa:39:01:a3:61:e4:b1:f3:0a: 0d:7a:c9:9f:c8:bc:4d:05:4c:ba:15:54:8d:cb:50: 2e:50:df:41:70:ec:e7:8c:00:7f:a2:f4:8a:72:f1: f8:c7:cc:f1:b5:14:b8:f3:da:3d:af:88:bf:db:5a: 04:8e:63:6c:2e:62:64:9b:48:71:0d:89:94:18:be: 12:11:b3:d6:be:be:7c:d1:cb:82:70:60:b7:c4:ee: 69:98:db:29:19:0a:bf:5e:06:91:1c:a1:2b:18:bb: a0:0f:62:72:9f:c6:16:f1:3b:2f:4e:f6:53:57:bf: 5e:c1:a5:c1:d2:67:1b:44:9a:b2:fe:d4:0f:57:f7: f9:b1:f0:f1:dd:99:c4:d6:1a:bf:d4:0a:4a:e0:62: a2:fa:cb:de:9b:42:c3:15:4d:ab:71:a2:4c:cc:03: 48:c0:e6:36:63:6a:cd:d3:20:78:79:85:25:05:d1: 39:1f:10:77:4b:78:1e:97:01:cb:bb:e2:cd:25:e9: 05:3a:22:41:76:bf:70:94:80:ea:fa:81:e5:ad:e2: cd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:28:1E:A8:E3:9E:12:1C:F0:95:CB:A6:18:21:A7:90:C0:04:43:CC X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS47690.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.117.86.0/24 155.117.97.0/24 Signature Algorithm: sha256WithRSAEncryption 62:89:07:73:bd:5e:67:44:ac:ef:50:41:73:46:98:ef:2f:81: a6:c1:74:bf:d9:e3:e4:0d:e7:93:82:19:8f:c5:04:d7:8a:6b: f5:30:11:3b:4a:de:b2:21:3d:58:76:27:35:e2:4d:70:50:9a: ff:b7:b0:d9:b9:f9:68:ba:be:c1:a2:36:41:11:bc:cc:20:48: c6:1a:53:b0:0b:13:5c:85:50:e5:aa:38:a4:04:37:f6:38:2d: 55:91:70:64:04:c5:5f:d4:17:26:c9:d5:8d:18:eb:f8:65:79: e5:98:30:6f:28:43:f0:28:83:d4:e1:45:a2:68:79:ca:a3:fd: 82:4c:a0:d3:08:af:e1:db:78:78:b2:b6:88:1f:69:14:71:36: e6:c5:17:2c:f7:07:c3:5a:1f:09:49:d2:a4:80:24:30:77:15: d3:3f:74:5a:69:33:3c:45:e9:e9:3e:3a:9d:ba:23:05:f6:78: 3e:a2:6f:63:c7:50:c4:cc:df:d7:16:ed:05:e9:20:46:8b:68: 85:f0:82:cc:d5:0e:33:01:c0:0a:99:ab:cd:0d:a4:8e:84:90: e6:47:bd:d0:0a:37:cc:6d:fb:4c:e4:97:85:59:82:54:fb:ac: be:90:02:83:79:da:a8:01:cf:87:08:6f:85:77:97:44:fa:51: 71:c1:07:49 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUeKIfOP0S47FGBImaLr7dlmaQs+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMDIyMjIzNDZaFw0yNjEyMDEyMjI4NDZaMDMxMTAvBgNV BAMTKDU0MjgxRUE4RTM5RTEyMUNGMDk1Q0JBNjE4MjFBNzkwQzAwNDQzQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaKVfAhS8okRhqQ+5B9xJ+t8Rj QSBGTjdhaJPj5H0q/RjeMohTnOolLZ8/0AMEPaPAIao5AaNh5LHzCg16yZ/IvE0F TLoVVI3LUC5Q30Fw7OeMAH+i9Ipy8fjHzPG1FLjz2j2viL/bWgSOY2wuYmSbSHEN iZQYvhIRs9a+vnzRy4JwYLfE7mmY2ykZCr9eBpEcoSsYu6APYnKfxhbxOy9O9lNX v17BpcHSZxtEmrL+1A9X9/mx8PHdmcTWGr/UCkrgYqL6y96bQsMVTatxokzMA0jA 5jZjas3TIHh5hSUF0TkfEHdLeB6XAcu74s0l6QU6IkF2v3CUgOr6geWt4s1FAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUVCgeqOOeEhzwlcumGCGnkMAEQ8wwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDc2OTAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACbdVYD BACbdWEwDQYJKoZIhvcNAQELBQADggEBAGKJB3O9XmdErO9QQXNGmO8vgabBdL/Z 4+QN55OCGY/FBNeKa/UwETtK3rIhPVh2JzXiTXBQmv+3sNm5+Wi6vsGiNkERvMwg SMYaU7ALE1yFUOWqOKQEN/Y4LVWRcGQExV/UFybJ1Y0Y6/hleeWYMG8oQ/Aog9Th RaJoecqj/YJMoNMIr+HbeHiytogfaRRxNubFFyz3B8NaHwlJ0qSAJDB3FdM/dFpp MzxF6ek+Op26IwX2eD6ib2PHUMTM39cW7QXpIEaLaIXwgszVDjMBwAqZq80NpI6E kOZHvdAKN8xt+0zkl4VZglT7rL6QAoN52qgBz4cIb4V3l0T6UXHBB0k= -----END CERTIFICATE-----Generated at Fri Dec 5 05:06:08 2025 by rpki-client