This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS7843.roa File: AS7843.roa (raw, json) Hash identifier: fx1Bs22ut7nX2hvy4D5+b2jGPiP+Os7hAQjFvwT6P9g= Subject key identifier: 27:68:32:70:14:23:8D:CD:97:8B:B9:B6:82:3D:DD:50:89:E8:02:AF Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 3E5FF01AD0C51D51C75CDB75B60A9F619D336D6E Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS7843.roa Signing time: Mon 12 Jan 2026 14:56:22 +0000 ROA not before: Mon 12 Jan 2026 14:51:22 +0000 ROA not after: Mon 11 Jan 2027 14:56:22 +0000 asID: 7843 IP address blocks: 45.137.119.0/24 maxlen: 24 92.118.160.0/24 maxlen: 24 179.61.239.0/24 maxlen: 24 181.214.97.0/24 maxlen: 24 181.214.108.0/24 maxlen: 24 181.214.111.0/24 maxlen: 24 181.214.113.0/24 maxlen: 24 191.96.58.0/24 maxlen: 24 191.96.64.0/24 maxlen: 24 191.101.56.0/24 maxlen: 24 191.101.85.0/24 maxlen: 24 191.101.87.0/24 maxlen: 24 191.101.95.0/24 maxlen: 24 193.7.202.0/24 maxlen: 24 193.31.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:5f:f0:1a:d0:c5:1d:51:c7:5c:db:75:b6:0a:9f:61:9d:33:6d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Jan 12 14:51:22 2026 GMT Not After : Jan 11 14:56:22 2027 GMT Subject: CN=2768327014238DCD978BB9B6823DDD5089E802AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e4:3d:c7:8f:28:9c:b1:8f:02:2f:1d:a0:43: ad:93:b4:80:b6:a7:2a:cd:e5:6d:9b:7f:b8:e4:3a: 84:b7:6b:36:5e:d7:08:95:c1:c9:2d:7b:09:52:3e: dd:5a:c0:6a:00:56:93:50:f4:d8:45:d7:2e:36:bf: 36:da:2b:98:a3:f5:72:36:2e:22:79:96:10:07:ac: c3:0b:d3:0e:48:ff:48:21:17:f2:24:c3:63:7a:68: 2a:43:fa:6b:cc:81:03:27:93:b8:9a:ce:2a:4b:45: 80:2a:eb:0f:ad:34:1a:c0:90:87:c2:d0:d8:fc:3a: 58:02:88:f9:82:3e:02:31:b1:b9:c8:72:43:1a:a9: 1c:b3:97:93:d8:2b:65:b1:f1:a2:d3:5c:c4:6e:13: 22:90:33:1a:ff:2f:ba:70:17:f3:d6:51:bf:12:75: 4c:33:2a:74:ce:09:bd:7e:f2:54:74:4e:ef:86:cd: c9:eb:7d:ed:f4:18:0a:c1:29:7c:65:14:fa:a2:91: c1:ec:80:cc:e4:b5:07:a9:43:44:df:9e:e2:9b:8f: ff:0f:2f:0f:30:3e:20:05:f3:40:e7:e3:2c:2a:7a: 60:2e:9b:98:71:2f:aa:cf:4e:a0:ca:0f:63:dd:db: 03:d2:d7:86:53:b3:fe:bf:d5:6b:9d:99:85:78:7c: 2e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:68:32:70:14:23:8D:CD:97:8B:B9:B6:82:3D:DD:50:89:E8:02:AF X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS7843.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.119.0/24 92.118.160.0/24 179.61.239.0/24 181.214.97.0/24 181.214.108.0/24 181.214.111.0/24 181.214.113.0/24 191.96.58.0/24 191.96.64.0/24 191.101.56.0/24 191.101.85.0/24 191.101.87.0/24 191.101.95.0/24 193.7.202.0/24 193.31.41.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:c6:19:6f:1d:cf:20:0c:a2:9b:93:97:8a:f1:b2:d3:91:64: fa:d3:e5:f7:07:a8:eb:b6:0a:94:12:37:f1:1d:fa:85:87:c0: 65:e2:f1:49:bd:fd:10:69:52:ce:08:3e:12:7b:9d:b7:17:3d: 22:50:0f:f6:b8:e4:ab:ed:82:27:a7:3e:5c:26:79:e3:9f:19: a3:c4:b0:59:9e:b9:e0:b1:bb:1c:48:f2:39:e7:aa:8a:9d:e0: 86:74:57:25:96:e2:45:05:7e:e2:08:de:aa:92:b5:de:20:42: 5e:ce:5d:fb:b1:fc:d4:b9:11:02:fe:2c:24:82:a9:a3:29:c5: 54:81:d5:87:ce:36:bb:0c:bb:84:9c:00:b6:11:68:29:0c:42: 94:0a:eb:ff:77:43:bc:a4:54:58:df:2a:5f:2a:e1:55:0c:51: 4c:76:95:17:82:f6:f5:43:de:3e:89:17:4a:05:7b:4a:39:40: 96:00:8c:2c:79:73:ea:38:6c:6f:89:95:06:ed:cd:b9:22:58: a1:b3:0d:93:59:2d:2b:1e:21:c7:15:30:c0:7b:37:4b:a1:cb: 79:6b:a1:fe:82:91:79:d0:9a:b5:e6:a6:91:b8:84:e0:77:ac: ab:a0:67:07:32:36:4e:f4:61:c5:b7:18:a4:42:5a:a1:0e:24: be:73:a1:8f -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIUPl/wGtDFHVHHXNt1tgqfYZ0zbW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNjAxMTIxNDUxMjJaFw0yNzAxMTExNDU2MjJaMDMxMTAvBgNV BAMTKDI3NjgzMjcwMTQyMzhEQ0Q5NzhCQjlCNjgyM0RERDUwODlFODAyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO5D3HjyicsY8CLx2gQ62TtIC2 pyrN5W2bf7jkOoS3azZe1wiVwcktewlSPt1awGoAVpNQ9NhF1y42vzbaK5ij9XI2 LiJ5lhAHrMML0w5I/0ghF/Ikw2N6aCpD+mvMgQMnk7iazipLRYAq6w+tNBrAkIfC 0Nj8OlgCiPmCPgIxsbnIckMaqRyzl5PYK2Wx8aLTXMRuEyKQMxr/L7pwF/PWUb8S dUwzKnTOCb1+8lR0Tu+Gzcnrfe30GArBKXxlFPqikcHsgMzktQepQ0TfnuKbj/8P Lw8wPiAF80Dn4ywqemAum5hxL6rPTqDKD2Pd2wPS14ZTs/6/1WudmYV4fC4xAgMB AAGjggJcMIICWDAdBgNVHQ4EFgQUJ2gycBQjjc2Xi7m2gj3dUInoAq8wHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNzg0My5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBzBggrBgEFBQcBBwEB/wRkMGIwYAQCAAEwWgMEAC2JdwME AFx2oAMEALM97wMEALXWYQMEALXWbAMEALXWbwMEALXWcQMEAL9gOgMEAL9gQAME AL9lOAMEAL9lVQMEAL9lVwMEAL9lXwMEAMEHygMEAMEfKTANBgkqhkiG9w0BAQsF AAOCAQEATMYZbx3PIAyim5OXivGy05Fk+tPl9weo67YKlBI38R36hYfAZeLxSb39 EGlSzgg+Enudtxc9IlAP9rjkq+2CJ6c+XCZ5458Zo8SwWZ654LG7HEjyOeeqip3g hnRXJZbiRQV+4gjeqpK13iBCXs5d+7H81LkRAv4sJIKpoynFVIHVh842uwy7hJwA thFoKQxClArr/3dDvKRUWN8qXyrhVQxRTHaVF4L29UPePokXSgV7SjlAlgCMLHlz 6jhsb4mVBu3NuSJYobMNk1ktKx4hxxUwwHs3S6HLeWuh/oKRedCateamkbiE4Hes q6BnBzI2TvRhxbcYpEJaoQ4kvnOhjw== -----END CERTIFICATE-----Generated at Mon Jan 19 15:11:34 2026 by rpki-client