This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS48011.roa File: AS48011.roa (raw, json) Hash identifier: 0v2NiDeefZGyPoOCzbJOwO8VEBy4zrqHfFXCxaj8g8Q= Subject key identifier: 8C:05:CB:3A:FD:D2:35:82:0B:98:15:71:1D:7B:03:70:28:3C:0B:6C Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 7117692629B432BF934D3FCE1EC8A700FD835C2A Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS48011.roa Signing time: Wed 04 Feb 2026 12:57:47 +0000 ROA not before: Wed 04 Feb 2026 12:52:47 +0000 ROA not after: Wed 03 Feb 2027 12:57:47 +0000 asID: 48011 IP address blocks: 5.133.124.0/23 maxlen: 23 5.133.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:17:69:26:29:b4:32:bf:93:4d:3f:ce:1e:c8:a7:00:fd:83:5c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:47 2026 GMT Not After : Feb 3 12:57:47 2027 GMT Subject: CN=8C05CB3AFDD235820B9815711D7B0370283C0B6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:18:aa:ea:bb:2d:cb:93:b7:85:a0:1b:e1:a8: 0f:1a:44:64:38:5a:65:4a:91:ab:f8:98:13:5c:85: af:51:de:4e:58:a6:0d:1a:e0:0e:72:32:45:f0:ff: d5:82:be:23:64:49:f0:e9:e4:72:e2:db:07:54:48: c3:eb:6f:9c:19:77:cd:8a:7f:d0:b8:d6:41:c3:d0: 05:e0:ca:e1:c2:ae:3b:33:60:8f:4a:68:b8:89:27: 19:19:be:72:ef:99:0b:ff:49:74:92:3e:7a:bd:e9: 5b:6c:ee:4a:8c:e7:48:bd:be:00:c6:0d:d2:9c:54: 60:1f:af:de:cb:84:82:ca:f0:03:ba:b3:e9:89:bb: 36:55:5b:8c:5f:3f:b2:35:c3:e2:d7:e9:16:30:20: c7:f4:e5:5d:6d:c2:40:d2:0b:ab:16:dc:aa:59:50: 7e:b1:08:22:b2:45:f8:ce:78:f2:11:7a:e9:3e:9e: fd:13:a6:12:97:a5:87:74:2e:7f:21:0a:ab:da:21: 45:fd:40:de:bf:2f:45:19:79:3a:08:25:bc:57:b3: 35:33:27:11:b6:2e:2e:4c:00:4c:ec:99:98:10:ea: 05:55:78:55:9d:e0:cd:bf:fd:d8:b4:21:ea:f2:fa: 51:85:a1:f8:6c:1c:48:d7:de:e8:14:a3:17:61:08: 68:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:05:CB:3A:FD:D2:35:82:0B:98:15:71:1D:7B:03:70:28:3C:0B:6C X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS48011.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.124.0/22 Signature Algorithm: sha256WithRSAEncryption e0:60:3c:43:0c:00:28:64:24:bc:fb:1a:fa:c6:c5:f5:09:93: 71:9d:80:bc:c7:a3:87:b3:74:76:c0:52:15:9c:28:56:4e:c9: d1:d1:e9:b9:3a:e6:1f:36:05:d7:3c:20:ac:b9:8a:c9:d9:16: d4:89:09:4c:b9:b6:d0:4b:38:f5:5f:c3:ff:d4:da:ef:79:a6: 93:ce:92:23:3e:88:e1:ff:29:88:d3:05:3d:ab:90:a2:ae:eb: dc:8d:0c:f0:7f:78:30:aa:1b:2c:cb:7f:7f:bb:5d:cb:5e:96: 7a:24:31:41:ba:37:0e:92:2e:8a:e6:b4:29:86:9d:be:0c:a9: 0c:27:3e:0f:a9:49:4b:5f:72:c4:73:22:97:6e:f8:69:84:3b: 15:28:c6:50:7e:4b:27:59:9e:fd:14:9b:11:7c:85:aa:7b:52: 58:d4:59:fd:9e:28:6e:2b:bf:85:52:1c:e8:f4:73:f2:4a:13: 76:e4:1b:e9:6c:8f:38:84:c8:9e:3a:e1:a7:ec:c4:1b:08:f1: 7d:54:cf:a3:ee:2d:15:48:b0:69:81:5d:a0:85:fe:01:2b:fc: 73:f3:a0:28:20:3d:15:02:39:72:2e:60:c9:88:e8:56:ac:da: df:49:b5:2d:63:7b:62:ef:de:c3:9c:a1:4e:bd:af:21:fa:7a: b1:bf:0b:db -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUcRdpJim0Mr+TTT/OHsinAP2DXCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNDdaFw0yNzAyMDMxMjU3NDdaMDMxMTAvBgNV BAMTKDhDMDVDQjNBRkREMjM1ODIwQjk4MTU3MTFEN0IwMzcwMjgzQzBCNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNGKrquy3Lk7eFoBvhqA8aRGQ4 WmVKkav4mBNcha9R3k5Ypg0a4A5yMkXw/9WCviNkSfDp5HLi2wdUSMPrb5wZd82K f9C41kHD0AXgyuHCrjszYI9KaLiJJxkZvnLvmQv/SXSSPnq96Vts7kqM50i9vgDG DdKcVGAfr97LhILK8AO6s+mJuzZVW4xfP7I1w+LX6RYwIMf05V1twkDSC6sW3KpZ UH6xCCKyRfjOePIReuk+nv0TphKXpYd0Ln8hCqvaIUX9QN6/L0UZeToIJbxXszUz JxG2Li5MAEzsmZgQ6gVVeFWd4M2//di0Iery+lGFofhsHEjX3ugUoxdhCGi7AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUjAXLOv3SNYILmBVxHXsDcCg8C2wwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTNDgwMTEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIFhXww DQYJKoZIhvcNAQELBQADggEBAOBgPEMMAChkJLz7GvrGxfUJk3GdgLzHo4ezdHbA UhWcKFZOydHR6bk65h82Bdc8IKy5isnZFtSJCUy5ttBLOPVfw//U2u95ppPOkiM+ iOH/KYjTBT2rkKKu69yNDPB/eDCqGyzLf3+7XctelnokMUG6Nw6SLormtCmGnb4M qQwnPg+pSUtfcsRzIpdu+GmEOxUoxlB+SydZnv0UmxF8hap7UljUWf2eKG4rv4VS HOj0c/JKE3bkG+lsjziEyJ464afsxBsI8X1Uz6PuLRVIsGmBXaCF/gEr/HPzoCgg PRUCOXIuYMmI6Fas2t9JtS1je2Lv3sOcoU69ryH6erG/C9s= -----END CERTIFICATE-----Generated at Thu Feb 5 13:53:00 2026 by rpki-client