This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS48976.roa File: AS48976.roa (raw, json) Hash identifier: kf3ys1UM7b0VdSH7WoEKILTd8uNrZnDGAuDy2pFMkTg= Subject key identifier: 83:CA:9F:82:EA:16:E2:FD:9F:82:59:DF:2D:9A:11:0B:21:42:06:D5 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 7D3D50D93861DBFF1D36319C785FDFDF864C97DC Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS48976.roa Signing time: Wed 04 Feb 2026 12:57:40 +0000 ROA not before: Wed 04 Feb 2026 12:52:40 +0000 ROA not after: Wed 03 Feb 2027 12:57:40 +0000 asID: 48976 IP address blocks: 84.54.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:3d:50:d9:38:61:db:ff:1d:36:31:9c:78:5f:df:df:86:4c:97:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:40 2026 GMT Not After : Feb 3 12:57:40 2027 GMT Subject: CN=83CA9F82EA16E2FD9F8259DF2D9A110B214206D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:4b:de:a3:e6:cc:80:1e:ca:16:f1:19:fd:3d: e9:12:98:65:86:58:87:25:2c:3d:c9:18:8e:77:58: b2:0d:b5:02:67:b2:e4:f1:e8:e2:1f:46:56:0f:66: ea:a1:34:97:c5:f5:0a:1d:66:0a:4b:a0:80:5d:a3: 0b:f0:5c:c6:79:0c:27:b9:97:e5:40:5e:e4:c3:17: 00:d5:57:57:9e:3d:52:b2:8e:65:3b:e1:ba:9c:f4: 03:11:1a:10:78:6d:d4:f7:f1:00:f8:24:ef:ab:76: d3:05:86:46:93:22:88:92:4c:7e:f9:0c:e6:76:19: 38:99:48:61:9a:d0:e2:45:0d:8d:de:0d:9d:c2:d4: 66:b9:bc:90:87:54:90:8e:a0:c0:67:1a:dc:a7:b8: cd:56:8e:38:b3:93:1c:ef:cd:48:7e:76:0a:18:c5: e8:44:8d:c3:ec:b3:90:e4:bc:a4:a2:80:c5:a8:3a: 22:0d:9d:df:cb:18:45:8d:35:82:ee:ba:96:69:2a: 26:92:7e:68:f7:9d:25:47:a4:c6:a5:dd:c7:08:41: 62:ea:80:1c:3f:a7:6d:1f:b7:43:27:08:e1:11:63: 99:15:d2:66:12:e2:66:63:05:2a:3e:83:d2:5f:cf: 9d:75:b7:f4:72:ca:4f:51:69:62:d0:79:44:bf:80: fa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CA:9F:82:EA:16:E2:FD:9F:82:59:DF:2D:9A:11:0B:21:42:06:D5 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS48976.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.2.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:b8:c9:52:38:12:07:b4:a4:08:be:34:b1:cb:4f:38:c5:05: 95:59:03:6b:42:19:b1:32:c3:f2:52:dd:fc:fa:08:ef:c0:92: e8:02:aa:f6:7d:5c:c0:c2:07:24:cb:95:bd:5f:3f:0e:2a:70: 68:79:90:51:09:69:fd:8f:b1:3b:44:b0:89:fe:bc:d5:15:83: 94:5e:e8:81:42:5a:22:af:00:8b:da:e1:37:cf:3f:f7:46:d0: aa:0a:0b:9c:d0:d2:a0:b6:47:db:22:77:83:eb:ab:67:22:6b: 09:da:b4:74:4c:2d:6b:9a:83:ae:b3:62:72:88:13:37:7d:c6: 4f:73:4b:b6:76:04:39:08:30:e0:9c:99:79:95:02:cc:8b:2d: 41:bb:67:aa:be:21:9c:b1:a2:b1:49:58:6c:f9:da:55:03:5d: e0:66:78:f4:38:9a:63:13:26:6f:8e:04:e7:7b:25:8c:e0:5d: c4:11:4c:c4:35:f6:5f:c2:0f:c9:ae:82:90:f9:5e:7a:fc:22: 08:08:26:05:de:69:e7:12:62:14:87:ca:91:0b:85:6b:f5:ed: 55:24:52:5e:f9:72:59:75:b4:96:3a:00:e5:0f:ec:51:06:2a: d4:8f:5b:ec:43:e8:00:c3:07:d9:30:f8:7f:1e:b0:02:36:e2: 04:54:a2:67 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUfT1Q2Thh2/8dNjGceF/f34ZMl9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNDBaFw0yNzAyMDMxMjU3NDBaMDMxMTAvBgNV BAMTKDgzQ0E5RjgyRUExNkUyRkQ5RjgyNTlERjJEOUExMTBCMjE0MjA2RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2S96j5syAHsoW8Rn9PekSmGWG WIclLD3JGI53WLINtQJnsuTx6OIfRlYPZuqhNJfF9QodZgpLoIBdowvwXMZ5DCe5 l+VAXuTDFwDVV1eePVKyjmU74bqc9AMRGhB4bdT38QD4JO+rdtMFhkaTIoiSTH75 DOZ2GTiZSGGa0OJFDY3eDZ3C1Ga5vJCHVJCOoMBnGtynuM1WjjizkxzvzUh+dgoY xehEjcPss5DkvKSigMWoOiINnd/LGEWNNYLuupZpKiaSfmj3nSVHpMal3ccIQWLq gBw/p20ft0MnCOERY5kV0mYS4mZjBSo+g9Jfz511t/Ryyk9RaWLQeUS/gPoVAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUg8qfguoW4v2fglnfLZoRCyFCBtUwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTNDg5NzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFUNgIw DQYJKoZIhvcNAQELBQADggEBAJu4yVI4Ege0pAi+NLHLTzjFBZVZA2tCGbEyw/JS 3fz6CO/AkugCqvZ9XMDCByTLlb1fPw4qcGh5kFEJaf2PsTtEsIn+vNUVg5Re6IFC WiKvAIva4TfPP/dG0KoKC5zQ0qC2R9sid4Prq2ciawnatHRMLWuag66zYnKIEzd9 xk9zS7Z2BDkIMOCcmXmVAsyLLUG7Z6q+IZyxorFJWGz52lUDXeBmePQ4mmMTJm+O BOd7JYzgXcQRTMQ19l/CD8mugpD5Xnr8IggIJgXeaecSYhSHypELhWv17VUkUl75 cll1tJY6AOUP7FEGKtSPW+xD6ADDB9kw+H8esAI24gRUomc= -----END CERTIFICATE-----Generated at Thu Feb 5 13:52:19 2026 by rpki-client