This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48314.roa
File: AS48314.roa (raw, json)
Hash identifier: SaMEskNyDxirlR4dxapzjoTdy8Y6OXZYm/RtZH6GDIQ=
Subject key identifier: C6:3E:0C:32:50:90:04:D3:3D:34:E1:1B:EF:23:AF:3D:51:EB:CA:3C
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 38463961E5006002A1BE12747CA62F1D3963A512
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48314.roa
Signing time: Tue 11 Nov 2025 07:44:16 +0000
ROA not before: Tue 11 Nov 2025 07:39:16 +0000
ROA not after: Tue 10 Nov 2026 07:44:16 +0000
asID: 48314
IP address blocks: 194.110.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 10:42:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:46:39:61:e5:00:60:02:a1:be:12:74:7c:a6:2f:1d:39:63:a5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 11 07:39:16 2025 GMT
Not After : Nov 10 07:44:16 2026 GMT
Subject: CN=C63E0C32509004D33D34E11BEF23AF3D51EBCA3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:44:3e:aa:04:3a:81:e1:61:c9:ae:06:66:
3d:2b:33:be:bd:9a:cc:77:5f:83:c0:d0:ee:8f:20:
9a:80:e1:17:2a:7b:8b:ed:7d:d4:48:71:5f:09:c0:
93:b4:4e:1c:f7:55:ec:8c:a9:7e:00:22:1f:31:86:
00:c9:cd:33:17:6d:1b:6c:98:9a:3d:11:f3:fa:1c:
c1:bb:1c:e8:f1:9a:e9:81:d6:bc:37:55:61:44:26:
b3:2b:71:ef:53:f3:b1:de:18:e0:38:49:20:ae:e4:
f4:4d:ad:48:a5:bd:b0:41:fc:f0:67:8b:b8:57:93:
b7:a7:88:13:33:1d:c5:49:99:51:70:5e:1a:d1:1b:
ba:4f:29:f7:57:77:24:92:7a:c5:94:0b:5f:11:44:
b3:13:6b:99:69:06:1e:0f:11:b9:f9:c2:34:2c:74:
26:e3:ac:50:92:b2:e7:b2:9f:11:8b:d5:bb:38:f2:
31:52:55:0d:7a:ac:25:2f:00:9f:1c:53:4f:46:aa:
1e:3f:e9:df:17:1d:0c:de:0a:17:b4:c5:f8:09:70:
20:58:f9:eb:f4:a2:78:e8:d2:c4:74:4f:8b:61:50:
9f:fa:be:da:88:63:7a:d7:49:f2:81:6b:d0:24:52:
26:af:5a:86:c5:b1:c0:ec:1b:6a:24:23:5e:80:44:
1e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3E:0C:32:50:90:04:D3:3D:34:E1:1B:EF:23:AF:3D:51:EB:CA:3C
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48314.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.12.0/24
Signature Algorithm: sha256WithRSAEncryption
72:83:ab:0a:da:a2:54:28:69:a8:f4:3f:83:dd:be:08:de:1f:
93:c5:1b:76:ff:da:f4:63:60:7c:78:48:c0:27:a3:97:4b:7a:
02:b2:2e:6f:e6:69:63:f9:cf:84:0f:1d:80:c3:0e:dd:aa:dc:
7b:56:ea:11:91:c7:3d:85:17:c5:35:e4:b3:31:6f:32:06:27:
36:75:6b:73:3c:9a:4a:fa:cc:43:ad:6a:f7:80:1a:11:b8:af:
71:ca:92:3d:50:6d:85:4c:95:31:98:9a:b4:d6:fc:ce:cd:a0:
de:3e:02:bb:37:98:b4:5a:8d:ee:60:a4:63:8c:aa:ce:d3:73:
92:99:ec:fb:f7:f7:0e:48:80:23:fb:b9:3a:d7:b4:b0:55:e5:
54:99:ef:aa:8b:c8:8b:da:81:87:3c:d8:a0:b0:10:13:4d:de:
d5:bd:bf:a7:d3:3e:db:7e:59:86:54:ae:21:00:39:f2:35:89:
eb:64:92:7b:6a:f6:dd:32:62:4b:26:fb:30:74:b9:c8:52:65:
2d:8f:2d:83:f5:45:f2:24:e2:f9:d6:37:df:e3:5c:79:a4:6f:
09:d0:1f:87:70:f9:9f:7f:77:c9:0c:0d:09:7f:99:8f:c1:1d:
0f:1b:6b:e9:6a:0b:06:0e:b9:4b:25:ef:37:26:9e:6f:06:55:
1a:6d:df:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 18:46:47 2025 by rpki-client