This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS49791.roa File: AS49791.roa (raw, json) Hash identifier: EUU0txPv9ZsNOX+Tl4GhlON1wHb18lhttEj7DbO9UpA= Subject key identifier: 74:C0:BF:1B:25:E7:AA:CB:84:FE:62:CF:1D:E2:EE:83:CB:3C:43:DC Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 484FC55E8734023CB96FAA02AFFB747E3DF09FFC Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS49791.roa Signing time: Mon 22 Dec 2025 14:05:50 +0000 ROA not before: Mon 22 Dec 2025 14:00:50 +0000 ROA not after: Mon 21 Dec 2026 14:05:50 +0000 asID: 49791 IP address blocks: 82.22.40.0/23 maxlen: 23 82.41.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:4f:c5:5e:87:34:02:3c:b9:6f:aa:02:af:fb:74:7e:3d:f0:9f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 22 14:00:50 2025 GMT Not After : Dec 21 14:05:50 2026 GMT Subject: CN=74C0BF1B25E7AACB84FE62CF1DE2EE83CB3C43DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:28:e9:f9:c0:0e:c2:a3:a3:c8:34:35:8c:20: 7f:e8:35:e4:99:e5:92:eb:00:be:f6:00:28:b0:9c: e4:ca:67:e1:37:e1:2f:d7:3f:82:ef:0e:c4:85:d9: 26:25:c5:fb:fc:70:ba:a8:42:f5:a8:7f:c7:99:cf: 76:a0:a1:f5:e1:75:5b:7a:3b:f3:f0:b2:12:37:7a: e0:54:82:e0:a0:0c:b8:7f:99:87:07:d3:4f:43:95: 32:c7:d9:2e:76:ec:d8:d7:6a:67:2b:de:d8:65:ef: 6a:c2:e9:11:e0:d3:ed:35:ad:ae:6b:67:3e:34:6f: 27:1a:5b:9b:0a:83:e1:fc:25:36:13:56:3b:b7:06: 78:4e:8c:6e:be:70:a3:68:87:40:0a:e6:f1:ac:3d: dd:d9:b8:c5:43:7c:7d:2e:fa:3b:4b:de:55:d0:4c: ff:b0:c3:48:9c:5b:ac:f0:c4:e9:b9:c2:1d:ee:a2: 50:e1:37:00:ae:ba:ae:b6:a0:43:0c:b9:27:14:5a: a9:fa:e9:2c:db:ad:a9:09:c2:65:28:36:c8:1c:ed: 2f:e2:ca:92:f3:fd:04:9d:cd:38:4a:b1:e7:f3:14: 27:98:8b:0d:05:da:fb:d6:1a:b4:61:8b:4c:8b:70: 27:2b:18:28:c0:66:01:d6:0e:19:f6:72:02:16:cb: 5c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C0:BF:1B:25:E7:AA:CB:84:FE:62:CF:1D:E2:EE:83:CB:3C:43:DC X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS49791.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.40.0/23 82.41.30.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:ac:0e:9f:d4:bf:f9:bf:e9:12:08:a0:97:b0:2b:77:48:22: db:ea:ad:00:21:e6:82:1d:05:0f:ce:5c:05:67:3e:ae:be:45: 30:31:f4:a4:f3:e2:03:85:85:07:62:1d:73:ed:d8:d8:e0:4e: 1f:f6:3e:7d:d1:a8:6e:1b:ac:83:19:55:bb:43:0c:7c:14:ef: 51:a7:42:62:48:af:dc:cd:66:68:06:c1:08:83:8b:60:a9:91: 92:c7:23:56:c0:44:a3:5b:1a:04:b7:0c:12:7b:e4:60:3b:b5: c1:c2:e7:f9:93:7d:04:93:fc:2a:f3:6c:1b:02:f4:90:71:a4: 13:92:a7:8a:cb:6d:be:37:c7:5d:60:c6:7e:42:08:44:f2:33: d0:00:a0:a6:02:a6:61:8e:b1:ec:20:5f:e6:a5:3f:d9:90:19: be:c3:2b:74:19:83:4f:59:0c:fa:17:20:05:08:76:f9:8f:c6: 2f:fc:24:5a:ab:30:5b:11:cc:9d:e3:dc:3a:b1:8b:12:d1:ee: 66:72:ef:c8:af:0f:80:a5:3a:f0:a6:08:c5:a2:1c:29:c6:2e: 3c:18:aa:ce:7f:07:ea:16:4c:e6:63:d5:30:de:63:52:70:b6: 8a:48:c6:a6:7e:10:3d:47:24:e8:90:af:17:c6:95:33:07:1d: 56:5c:f4:46 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUSE/FXoc0Ajy5b6oCr/t0fj3wn/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMjIxNDAwNTBaFw0yNjEyMjExNDA1NTBaMDMxMTAvBgNV BAMTKDc0QzBCRjFCMjVFN0FBQ0I4NEZFNjJDRjFERTJFRTgzQ0IzQzQzREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRKOn5wA7Co6PINDWMIH/oNeSZ 5ZLrAL72ACiwnOTKZ+E34S/XP4LvDsSF2SYlxfv8cLqoQvWof8eZz3agofXhdVt6 O/PwshI3euBUguCgDLh/mYcH009DlTLH2S527NjXamcr3thl72rC6RHg0+01ra5r Zz40bycaW5sKg+H8JTYTVju3BnhOjG6+cKNoh0AK5vGsPd3ZuMVDfH0u+jtL3lXQ TP+ww0icW6zwxOm5wh3uolDhNwCuuq62oEMMuScUWqn66SzbrakJwmUoNsgc7S/i ypLz/QSdzThKsefzFCeYiw0F2vvWGrRhi0yLcCcrGCjAZgHWDhn2cgIWy1wrAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUdMC/GyXnqsuE/mLPHeLug8s8Q9wwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDk3OTEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAFSFigD BAFSKR4wDQYJKoZIhvcNAQELBQADggEBAJqsDp/Uv/m/6RIIoJewK3dIItvqrQAh 5oIdBQ/OXAVnPq6+RTAx9KTz4gOFhQdiHXPt2NjgTh/2Pn3RqG4brIMZVbtDDHwU 71GnQmJIr9zNZmgGwQiDi2CpkZLHI1bARKNbGgS3DBJ75GA7tcHC5/mTfQST/Crz bBsC9JBxpBOSp4rLbb43x11gxn5CCETyM9AAoKYCpmGOsewgX+alP9mQGb7DK3QZ g09ZDPoXIAUIdvmPxi/8JFqrMFsRzJ3j3DqxixLR7mZy78ivD4ClOvCmCMWiHCnG LjwYqs5/B+oWTOZj1TDeY1JwtopIxqZ+ED1HJOiQrxfGlTMHHVZc9EY= -----END CERTIFICATE-----Generated at Sun Jan 18 08:55:44 2026 by rpki-client