This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS48678.roa File: AS48678.roa (raw, json) Hash identifier: lOYGj4ZiFTyib4sp11blJAfER5YPPyGC4y5h6upVwFA= Subject key identifier: 70:D8:7A:01:31:1F:FD:47:B3:CC:A7:6D:36:81:41:AB:62:D8:58:9B Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 0D39425C924D1BB20E5D1B0D6586E205555F5D13 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS48678.roa Signing time: Wed 04 Feb 2026 12:57:52 +0000 ROA not before: Wed 04 Feb 2026 12:52:52 +0000 ROA not after: Wed 03 Feb 2027 12:57:52 +0000 asID: 48678 IP address blocks: 5.133.101.0/24 maxlen: 24 31.40.197.0/24 maxlen: 24 31.40.199.0/24 maxlen: 24 31.40.205.0/24 maxlen: 24 31.40.207.0/24 maxlen: 24 85.235.72.0/24 maxlen: 24 85.235.73.0/24 maxlen: 24 85.235.74.0/24 maxlen: 24 141.98.48.0/24 maxlen: 24 141.98.112.0/24 maxlen: 24 141.98.113.0/24 maxlen: 24 141.98.114.0/24 maxlen: 24 141.98.115.0/24 maxlen: 24 176.96.128.0/24 maxlen: 24 176.96.130.0/24 maxlen: 24 193.111.79.0/24 maxlen: 24 217.18.208.0/24 maxlen: 24 217.18.209.0/24 maxlen: 24 217.18.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:39:42:5c:92:4d:1b:b2:0e:5d:1b:0d:65:86:e2:05:55:5f:5d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:52 2026 GMT Not After : Feb 3 12:57:52 2027 GMT Subject: CN=70D87A01311FFD47B3CCA76D368141AB62D8589B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:cf:60:ff:4c:0f:82:57:c8:e6:cb:cb:0c: 7f:83:ad:e9:2e:a3:bf:46:39:ee:75:74:f2:0e:d0: 9b:76:b9:3a:44:cb:19:d0:09:72:6e:b3:a7:86:7e: 1c:e3:9e:73:21:3f:61:88:67:fc:ca:d4:b7:a7:1e: 48:ae:13:7b:39:67:95:3c:7d:44:38:86:d7:dd:ec: c5:8a:b0:52:52:40:11:17:ef:36:d7:c4:b0:30:ba: 04:b0:1b:a8:c6:b6:67:65:a1:05:8a:50:11:01:f3: 06:82:5b:10:1b:31:80:9b:d0:8f:38:b1:39:cc:26: 95:29:f0:32:07:57:97:93:43:6f:83:71:88:91:0e: be:0a:da:0d:e8:2d:3c:00:40:7b:4c:3f:79:4a:8b: e1:96:c4:8a:f6:30:23:30:8a:bc:71:d6:cf:98:ba: 57:56:92:17:97:e0:1e:1f:86:14:75:16:51:39:7f: b2:8b:bc:07:39:88:f7:5a:8b:63:86:1b:15:af:e3: 0b:95:98:eb:2f:53:29:8b:04:da:35:f1:dd:88:6d: b6:59:41:2f:fb:25:c2:c0:93:19:5a:7e:b0:f2:c3: 64:03:7c:a0:e7:47:ed:9b:77:20:26:ff:b5:8c:92: ea:86:99:b8:9c:a8:e7:3c:b3:3a:3a:a5:bf:09:7e: 52:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D8:7A:01:31:1F:FD:47:B3:CC:A7:6D:36:81:41:AB:62:D8:58:9B X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS48678.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.101.0/24 31.40.197.0/24 31.40.199.0/24 31.40.205.0/24 31.40.207.0/24 85.235.72.0-85.235.74.255 141.98.48.0/24 141.98.112.0/22 176.96.128.0/24 176.96.130.0/24 193.111.79.0/24 217.18.208.0/23 217.18.211.0/24 Signature Algorithm: sha256WithRSAEncryption 65:2b:bc:e8:3d:36:6e:3e:74:c6:8d:d9:c9:f2:e4:ec:3b:f8: e3:6c:3d:c9:a1:f9:53:16:1f:96:cb:c3:b6:ce:fe:d2:20:bf: a3:24:da:38:e1:49:4d:3a:32:eb:10:73:6b:1e:1a:92:21:90: cf:b4:c7:1f:a1:31:b8:ba:ff:c2:bb:25:60:30:33:8f:55:30: 0d:ed:94:d0:07:bb:d4:97:04:8d:d6:9e:8d:75:23:dc:0c:72: 8d:a8:53:b6:f9:41:18:80:03:9f:9b:9c:3d:bd:5f:5a:ec:cb: dd:3c:57:ea:6f:ee:98:9a:01:fc:f7:48:a6:3d:ba:46:43:37: c9:5d:ef:83:28:f7:c4:30:16:e8:4a:04:ee:b5:b7:59:9a:78: 15:31:01:f6:b5:32:c1:8d:bb:db:09:e5:94:a5:d8:ea:8d:6e: 4e:97:20:9e:a2:ee:76:3b:0f:88:95:fb:f1:d6:94:ac:00:c5: 45:0a:5a:1c:a7:b2:d7:f4:b6:7b:62:a5:8c:9f:c5:61:92:b8: 12:b8:0b:29:26:65:e2:3d:74:e0:ae:d8:51:68:61:de:f5:e9: cd:db:6b:0c:1a:6d:1a:fc:dd:ec:ce:70:67:f0:5c:ad:ee:e6: dd:30:98:77:f5:15:d6:21:a3:ac:51:1f:89:73:11:c2:d1:2f: 79:d0:23:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUDTlCXJJNG7IOXRsNZYbiBVVfXRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNTJaFw0yNzAyMDMxMjU3NTJaMDMxMTAvBgNV BAMTKDcwRDg3QTAxMzExRkZENDdCM0NDQTc2RDM2ODE0MUFCNjJEODU4OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiwc9g/0wPglfI5svLDH+Dreku o79GOe51dPIO0Jt2uTpEyxnQCXJus6eGfhzjnnMhP2GIZ/zK1LenHkiuE3s5Z5U8 fUQ4htfd7MWKsFJSQBEX7zbXxLAwugSwG6jGtmdloQWKUBEB8waCWxAbMYCb0I84 sTnMJpUp8DIHV5eTQ2+DcYiRDr4K2g3oLTwAQHtMP3lKi+GWxIr2MCMwirxx1s+Y uldWkheX4B4fhhR1FlE5f7KLvAc5iPdai2OGGxWv4wuVmOsvUymLBNo18d2IbbZZ QS/7JcLAkxlafrDyw2QDfKDnR+2bdyAm/7WMkuqGmbicqOc8szo6pb8JflIbAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUcNh6ATEf/UezzKdtNoFBq2LYWJswHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTNDg2Nzgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwbwYIKwYBBQUHAQcBAf8EYDBeMFwEAgABMFYDBAAFhWUD BAAfKMUDBAAfKMcDBAAfKM0DBAAfKM8wDAMEA1XrSAMEAFXrSgMEAI1iMAMEAo1i cAMEALBggAMEALBgggMEAMFvTwMEAdkS0AMEANkS0zANBgkqhkiG9w0BAQsFAAOC AQEAZSu86D02bj50xo3ZyfLk7Dv442w9yaH5UxYflsvDts7+0iC/oyTaOOFJTToy 6xBzax4akiGQz7THH6ExuLr/wrslYDAzj1UwDe2U0Ae71JcEjdaejXUj3AxyjahT tvlBGIADn5ucPb1fWuzL3TxX6m/umJoB/PdIpj26RkM3yV3vgyj3xDAW6EoE7rW3 WZp4FTEB9rUywY272wnllKXY6o1uTpcgnqLudjsPiJX78daUrADFRQpaHKey1/S2 e2KljJ/FYZK4ErgLKSZl4j104K7YUWhh3vXpzdtrDBptGvzd7M5wZ/Bcre7m3TCY d/UV1iGjrFEfiXMRwtEvedAj9w== -----END CERTIFICATE-----Generated at Thu Feb 5 13:53:02 2026 by rpki-client