This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46844.roa File: AS46844.roa (raw, json) Hash identifier: 2YapLbF4oekcjkkLOaRYVT+JuVQjrN2CKm396SeAOzk= Subject key identifier: 15:07:A8:95:BA:A5:F8:BB:D6:CB:D1:41:7D:10:48:E5:6D:12:46:EB Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 6ED91CF368FB878E8C5849642E3BBBEA21946375 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46844.roa Signing time: Sat 20 Dec 2025 05:55:32 +0000 ROA not before: Sat 20 Dec 2025 05:50:32 +0000 ROA not after: Sat 19 Dec 2026 05:55:32 +0000 asID: 46844 IP address blocks: 191.101.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 15:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d9:1c:f3:68:fb:87:8e:8c:58:49:64:2e:3b:bb:ea:21:94:63:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 20 05:50:32 2025 GMT Not After : Dec 19 05:55:32 2026 GMT Subject: CN=1507A895BAA5F8BBD6CBD1417D1048E56D1246EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:38:c0:fb:0b:38:a7:98:4d:25:24:07:16:c9: b3:85:46:5f:86:bd:a6:50:fa:e9:b8:d2:25:36:01: 16:eb:cb:31:53:f6:0a:a6:a4:e3:77:40:1c:d1:89: f3:06:dc:f5:76:3f:48:f1:09:f4:6e:17:ae:a6:d4: 48:40:f1:d4:b4:56:51:59:3e:78:3d:56:51:0b:48: 12:ee:de:c5:64:ff:dd:72:9b:fe:3a:07:0b:da:5a: 67:ad:a3:e6:9d:0e:09:22:0c:4b:7d:fa:28:24:72: 2c:e6:5d:99:4a:47:f0:76:25:be:ba:c5:fa:ef:a6: 56:0e:b8:27:99:f8:b9:d0:23:5e:35:68:05:19:1b: 48:42:6f:7f:71:96:dc:08:8b:06:21:b8:3f:ce:7c: a4:8d:91:18:c7:26:45:2f:cf:bc:41:ad:0c:fe:2c: e1:ad:45:4d:30:1f:44:bc:32:44:31:e2:81:2b:fa: 53:fd:13:f4:4d:6d:1e:91:6a:ef:e1:88:4a:4a:80: 93:df:90:db:66:2a:5a:0a:1e:c6:53:fb:f0:43:29: 55:3c:be:cd:72:7a:4a:b9:b8:02:3d:59:d7:59:02: 78:94:a6:8e:e3:e8:17:65:ff:87:6f:71:30:6b:08: e9:32:d4:0e:09:19:54:94:96:c7:e8:3c:22:42:de: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:07:A8:95:BA:A5:F8:BB:D6:CB:D1:41:7D:10:48:E5:6D:12:46:EB X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS46844.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.101.48.0/24 Signature Algorithm: sha256WithRSAEncryption 78:a4:51:db:b2:98:26:38:a2:01:6a:04:e8:7a:d9:9b:8d:1c: c6:57:2d:9a:36:b0:64:98:ea:1a:50:f5:06:ea:20:51:d0:29: 73:ad:da:cb:71:56:21:3f:36:51:aa:37:61:1a:6c:5f:2a:da: 21:b9:df:b8:f9:10:ad:ea:c7:60:a0:82:23:be:fe:26:ad:40: cd:f3:6a:18:ef:2c:eb:6e:19:9d:f2:7d:67:0a:45:9a:6d:f0: 59:10:ee:f8:6f:14:3a:bb:24:c8:63:0a:62:45:ae:6f:1e:96: ca:0c:49:fc:c0:37:a0:e5:c3:fd:07:23:8d:09:eb:b5:e9:d8: c1:73:6d:66:12:0e:67:13:bc:9d:93:aa:46:fa:1c:a6:75:0d: d3:dd:86:b7:a8:ac:be:f2:1c:4b:da:33:8e:ed:22:9b:6b:bd: b2:ad:5c:11:27:f8:cd:2e:33:d2:a1:fc:d3:4a:d3:7d:50:18: 6f:b7:49:db:92:28:2c:8b:b6:65:8b:f3:fd:42:3b:b0:98:a4: b7:b6:d0:ef:bb:43:63:23:86:e6:8c:96:a6:f8:4f:49:4f:3c: b1:77:9b:25:db:68:b1:38:5b:4a:c6:dc:96:53:ba:76:9b:97: 9e:b0:4d:4b:b3:38:45:54:cf:e7:a3:47:ae:24:45:b4:99:d4: 84:e2:2f:8a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUbtkc82j7h46MWElkLju76iGUY3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMjAwNTUwMzJaFw0yNjEyMTkwNTU1MzJaMDMxMTAvBgNV BAMTKDE1MDdBODk1QkFBNUY4QkJENkNCRDE0MTdEMTA0OEU1NkQxMjQ2RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhOMD7CzinmE0lJAcWybOFRl+G vaZQ+um40iU2ARbryzFT9gqmpON3QBzRifMG3PV2P0jxCfRuF66m1EhA8dS0VlFZ Png9VlELSBLu3sVk/91ym/46BwvaWmeto+adDgkiDEt9+igkcizmXZlKR/B2Jb66 xfrvplYOuCeZ+LnQI141aAUZG0hCb39xltwIiwYhuD/OfKSNkRjHJkUvz7xBrQz+ LOGtRU0wH0S8MkQx4oEr+lP9E/RNbR6Rau/hiEpKgJPfkNtmKloKHsZT+/BDKVU8 vs1yekq5uAI9WddZAniUpo7j6Bdl/4dvcTBrCOky1A4JGVSUlsfoPCJC3rRFAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUFQeolbql+LvWy9FBfRBI5W0SRuswHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDY4NDQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC/ZTAw DQYJKoZIhvcNAQELBQADggEBAHikUduymCY4ogFqBOh62ZuNHMZXLZo2sGSY6hpQ 9QbqIFHQKXOt2stxViE/NlGqN2EabF8q2iG537j5EK3qx2CggiO+/iatQM3zahjv LOtuGZ3yfWcKRZpt8FkQ7vhvFDq7JMhjCmJFrm8elsoMSfzAN6Dlw/0HI40J67Xp 2MFzbWYSDmcTvJ2Tqkb6HKZ1DdPdhreorL7yHEvaM47tIptrvbKtXBEn+M0uM9Kh /NNK031QGG+3SduSKCyLtmWL8/1CO7CYpLe20O+7Q2MjhuaMlqb4T0lPPLF3myXb aLE4W0rG3JZTunabl56wTUuzOEVUz+ejR64kRbSZ1ITiL4o= -----END CERTIFICATE-----Generated at Sun Jan 11 20:36:55 2026 by rpki-client