This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9457.roa File: AS9457.roa (raw, json) Hash identifier: SW701HN2OkxHqaa3nuQBZlYEUkBWvL0iRQjdRuURxhc= Subject key identifier: DE:EF:8F:36:A9:4C:2F:7F:44:C2:14:D7:16:AF:29:8C:90:88:35:3D Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 6B284C03F0E3A2897465400BE47028B7D07A9B24 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9457.roa Signing time: Thu 08 Jan 2026 15:10:38 +0000 ROA not before: Thu 08 Jan 2026 15:05:38 +0000 ROA not after: Thu 07 Jan 2027 15:10:38 +0000 asID: 9457 IP address blocks: 147.79.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:28:4c:03:f0:e3:a2:89:74:65:40:0b:e4:70:28:b7:d0:7a:9b:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 8 15:05:38 2026 GMT Not After : Jan 7 15:10:38 2027 GMT Subject: CN=DEEF8F36A94C2F7F44C214D716AF298C9088353D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:06:fc:89:47:61:5e:e6:43:88:b3:fd:b7:c6: 05:ff:1a:af:c3:21:7a:b7:f4:18:cd:31:20:d8:1c: 26:17:3f:69:d7:9d:4f:3f:81:2f:d6:f6:8e:59:58: 6c:e7:fc:0c:cc:a4:44:8c:59:81:9b:63:b1:4c:b4: 72:2b:00:db:12:e5:a2:73:54:30:c9:43:c4:2d:bc: 50:7d:35:a4:07:cb:0b:79:12:3c:5b:9e:59:14:38: a1:cd:c0:c2:90:f4:bf:86:81:37:c6:73:b5:21:ba: 80:ea:92:a2:dd:5f:0d:30:01:41:86:6e:78:cd:01: fc:70:0c:c0:8e:fb:8b:d1:7b:7c:18:56:34:ff:d7: 9a:90:85:9e:77:b9:94:87:b6:41:f8:d1:7f:aa:70: 76:42:78:a8:7e:89:5f:85:86:23:76:39:0c:f8:ed: 7b:70:11:c9:28:74:2b:b4:d9:d8:aa:4b:d3:75:70: 30:43:bd:3b:1a:0a:94:15:53:cb:75:0e:3b:48:64: 16:91:5c:1d:91:8a:13:e0:a4:e2:dc:91:d1:26:b5: d9:80:5e:d9:de:83:90:80:d4:3c:e7:99:d5:5c:13: 04:0e:7b:48:9e:89:fb:4f:76:b4:69:19:3c:eb:83: 77:0d:ec:b7:3b:ce:12:5d:2f:f1:e5:02:13:f2:6c: 11:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EF:8F:36:A9:4C:2F:7F:44:C2:14:D7:16:AF:29:8C:90:88:35:3D X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS9457.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.79.14.0/24 Signature Algorithm: sha256WithRSAEncryption 75:e2:8c:c9:3f:40:7b:92:95:eb:0f:9f:14:e2:3a:e5:f3:b2: 21:5d:e9:f6:3d:93:e9:28:07:13:51:22:01:13:0a:33:10:74: d1:ab:22:67:c6:32:d8:68:31:d1:78:f3:c9:38:ce:fb:2f:b4: 8e:3b:f6:6b:9b:13:d6:5b:90:91:b4:ac:6a:14:26:a7:43:a4: b5:70:d2:ee:d1:77:52:0b:8e:d2:08:23:31:49:8e:5b:3d:5a: 6f:14:bb:18:08:de:3f:78:d9:2c:e1:a5:42:f3:db:1b:53:53: c6:b7:66:7f:d7:05:bc:06:08:82:c9:ed:bc:73:81:bc:62:9f: 64:13:91:cc:cb:02:ba:55:2a:95:0f:1e:bd:09:41:67:aa:25: 2e:12:28:46:97:3c:4e:ee:c7:d9:9a:ba:fe:15:fb:1d:fd:45: 08:32:ff:00:14:80:96:3d:f3:6d:54:85:01:44:5a:be:d1:79: 69:cd:71:60:8e:3b:d6:00:58:c0:a6:db:dd:20:21:ce:64:91: 22:ae:55:e6:04:0a:80:d8:e4:94:63:00:e9:a7:6f:10:66:48: bf:06:44:ec:01:fc:d7:a9:33:d3:31:3c:aa:22:0f:08:c9:cc: 30:9c:51:5f:ac:22:e3:bf:91:2d:f8:f5:b7:d4:2d:12:2b:7a: 7a:8f:c8:72 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUayhMA/Djool0ZUAL5HAot9B6myQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMDgxNTA1MzhaFw0yNzAxMDcxNTEwMzhaMDMxMTAvBgNV BAMTKERFRUY4RjM2QTk0QzJGN0Y0NEMyMTRENzE2QUYyOThDOTA4ODM1M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoBvyJR2Fe5kOIs/23xgX/Gq/D IXq39BjNMSDYHCYXP2nXnU8/gS/W9o5ZWGzn/AzMpESMWYGbY7FMtHIrANsS5aJz VDDJQ8QtvFB9NaQHywt5EjxbnlkUOKHNwMKQ9L+GgTfGc7UhuoDqkqLdXw0wAUGG bnjNAfxwDMCO+4vRe3wYVjT/15qQhZ53uZSHtkH40X+qcHZCeKh+iV+FhiN2OQz4 7XtwEckodCu02diqS9N1cDBDvTsaCpQVU8t1DjtIZBaRXB2RihPgpOLckdEmtdmA Xtneg5CA1DznmdVcEwQOe0ieiftPdrRpGTzrg3cN7Lc7zhJdL/HlAhPybBEdAgMB AAGjggIIMIICBDAdBgNVHQ4EFgQU3u+PNqlML39EwhTXFq8pjJCINT0wHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTOTQ1Ny5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJNPDjAN BgkqhkiG9w0BAQsFAAOCAQEAdeKMyT9Ae5KV6w+fFOI65fOyIV3p9j2T6SgHE1Ei ARMKMxB00asiZ8Yy2Ggx0XjzyTjO+y+0jjv2a5sT1luQkbSsahQmp0OktXDS7tF3 UguO0ggjMUmOWz1abxS7GAjeP3jZLOGlQvPbG1NTxrdmf9cFvAYIgsntvHOBvGKf ZBORzMsCulUqlQ8evQlBZ6olLhIoRpc8Tu7H2Zq6/hX7Hf1FCDL/ABSAlj3zbVSF AURavtF5ac1xYI471gBYwKbb3SAhzmSRIq5V5gQKgNjklGMA6advEGZIvwZE7AH8 16kz0zE8qiIPCMnMMJxRX6wi47+RLfj1t9QtEit6eo/Icg== -----END CERTIFICATE-----Generated at Mon Jan 19 08:13:46 2026 by rpki-client