This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS49453.roa File: AS49453.roa (raw, json) Hash identifier: cspzqAFOwUZ+FKbS/B1kJgSpXKkgCIPiq7K++OUJjP0= Subject key identifier: 99:AF:7E:9B:84:60:B5:58:FD:BA:27:D7:72:6A:F2:D7:BA:A8:5D:75 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 7BA3DCB467A3DE214544A3A21F6BE4BE711E814C Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS49453.roa Signing time: Sun 28 Dec 2025 21:10:22 +0000 ROA not before: Sun 28 Dec 2025 21:05:22 +0000 ROA not after: Sun 27 Dec 2026 21:10:22 +0000 asID: 49453 IP address blocks: 82.40.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a3:dc:b4:67:a3:de:21:45:44:a3:a2:1f:6b:e4:be:71:1e:81:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 28 21:05:22 2025 GMT Not After : Dec 27 21:10:22 2026 GMT Subject: CN=99AF7E9B8460B558FDBA27D7726AF2D7BAA85D75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cd:84:4d:7f:83:b6:07:5c:bc:28:b1:ea:df: de:71:f3:d8:66:1d:45:f1:d1:05:cc:6c:23:23:05: b5:86:03:7f:04:c3:f2:fe:67:91:bc:eb:57:1e:92: 14:08:5f:37:c4:44:3d:1d:cd:35:5b:b7:06:df:da: 66:bd:b0:bf:28:36:b0:ee:6c:7b:6e:32:8e:fb:18: fd:2a:78:7c:8a:63:3f:a8:14:d8:8b:05:4b:3c:55: 04:de:12:b5:00:db:90:b6:0b:8d:2f:f2:14:f3:3b: 9e:04:d3:d9:12:e2:b4:0a:06:fe:fe:20:a9:96:37: 74:85:36:2c:4a:5b:55:e3:3b:74:6e:5b:77:a5:22: ba:95:e3:95:61:48:46:be:cc:cc:98:e3:ef:b4:a0: a9:22:7c:00:1c:c5:aa:3e:64:ec:b8:c5:70:0b:dd: 74:f9:b0:de:16:df:43:ee:63:88:59:b1:04:21:3f: 84:40:bc:bf:a6:3d:ca:1b:b6:9a:08:de:bf:77:ca: 95:ee:0f:ae:56:c4:8a:91:71:3e:fb:23:e4:60:13: 09:0c:a7:71:34:ea:75:81:04:5a:10:21:f2:45:2a: 90:1b:8e:bb:30:e9:bd:36:fb:68:91:8a:99:4b:fc: 63:62:a6:0c:2e:a2:5d:36:18:43:bb:06:c5:85:bb: 66:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AF:7E:9B:84:60:B5:58:FD:BA:27:D7:72:6A:F2:D7:BA:A8:5D:75 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS49453.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.40.24.0/21 Signature Algorithm: sha256WithRSAEncryption 3a:61:f1:d6:5c:a5:bd:7f:1f:2e:bf:3f:35:ad:37:7b:f4:15: 42:e8:24:b1:ef:99:bf:0b:75:da:4e:ad:31:87:d0:3c:cb:27: 19:5b:c9:c4:13:97:ea:9b:2b:e2:3c:6c:1f:9c:bd:9e:aa:fb: fd:04:1c:d4:8e:3d:8f:f5:37:df:24:59:88:44:77:8c:0d:36: c2:25:28:a1:40:28:6b:1e:ed:3d:55:bd:bb:a4:6f:26:69:44: ed:76:b8:64:cb:05:01:ea:f9:5a:d5:72:a7:ad:c4:dd:8e:a9: e1:72:35:eb:66:ae:0d:f1:cb:2b:b6:bb:66:66:a7:fd:dd:6e: 76:de:23:92:27:75:87:d5:c5:4b:87:f6:f4:be:99:f0:d9:63: 57:5c:a8:3f:0c:11:02:e2:d5:74:7b:6d:c2:a0:8b:30:eb:62: dd:0b:87:62:ad:bf:04:93:fd:64:9f:52:f0:5d:25:f1:93:03: 16:75:bc:f0:f0:8b:28:81:98:a0:e4:90:43:85:37:46:69:94: dc:83:ab:31:1b:87:16:2a:e9:e8:ab:39:9d:16:a6:2a:bc:11: 40:3b:ff:10:de:bd:86:9d:0f:0f:37:18:e0:b2:0c:6c:17:b0: b8:b2:5e:74:a4:a3:66:59:18:57:43:72:71:df:ab:39:86:83: e0:02:68:37 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUe6PctGej3iFFRKOiH2vkvnEegUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMjgyMTA1MjJaFw0yNjEyMjcyMTEwMjJaMDMxMTAvBgNV BAMTKDk5QUY3RTlCODQ2MEI1NThGREJBMjdENzcyNkFGMkQ3QkFBODVENzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhzYRNf4O2B1y8KLHq395x89hm HUXx0QXMbCMjBbWGA38Ew/L+Z5G861cekhQIXzfERD0dzTVbtwbf2ma9sL8oNrDu bHtuMo77GP0qeHyKYz+oFNiLBUs8VQTeErUA25C2C40v8hTzO54E09kS4rQKBv7+ IKmWN3SFNixKW1XjO3RuW3elIrqV45VhSEa+zMyY4++0oKkifAAcxao+ZOy4xXAL 3XT5sN4W30PuY4hZsQQhP4RAvL+mPcobtpoI3r93ypXuD65WxIqRcT77I+RgEwkM p3E06nWBBFoQIfJFKpAbjrsw6b02+2iRiplL/GNipgwuol02GEO7BsWFu2a3AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUma9+m4RgtVj9uifXcmry17qoXXUwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDk0NTMucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANSKBgw DQYJKoZIhvcNAQELBQADggEBADph8dZcpb1/Hy6/PzWtN3v0FULoJLHvmb8LddpO rTGH0DzLJxlbycQTl+qbK+I8bB+cvZ6q+/0EHNSOPY/1N98kWYhEd4wNNsIlKKFA KGse7T1VvbukbyZpRO12uGTLBQHq+VrVcqetxN2OqeFyNetmrg3xyyu2u2Zmp/3d bnbeI5IndYfVxUuH9vS+mfDZY1dcqD8MEQLi1XR7bcKgizDrYt0Lh2KtvwST/WSf UvBdJfGTAxZ1vPDwiyiBmKDkkEOFN0ZplNyDqzEbhxYq6eirOZ0Wpiq8EUA7/xDe vYadDw83GOCyDGwXsLiyXnSko2ZZGFdDcnHfqzmGg+ACaDc= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:23 2026 by rpki-client