This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS48925.roa File: AS48925.roa (raw, json) Hash identifier: 0J2PU4JojbM4f+1mpfHWrBMkNQAXO7xEPN2DxYMIJEA= Subject key identifier: B1:F7:B3:01:30:8E:1B:89:E7:2B:7C:86:42:14:86:0C:DE:F2:01:3A Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 3C0AB6AFB51817DD570DAE27EFED4687328551DE Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS48925.roa Signing time: Fri 14 Nov 2025 13:28:41 +0000 ROA not before: Fri 14 Nov 2025 13:23:41 +0000 ROA not after: Fri 13 Nov 2026 13:28:41 +0000 asID: 48925 IP address blocks: 45.151.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:0a:b6:af:b5:18:17:dd:57:0d:ae:27:ef:ed:46:87:32:85:51:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Nov 14 13:23:41 2025 GMT Not After : Nov 13 13:28:41 2026 GMT Subject: CN=B1F7B301308E1B89E72B7C864214860CDEF2013A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f8:f3:c0:18:00:26:09:39:57:f7:7e:ba:a4: e3:87:b0:5f:46:1f:8e:25:c6:18:f3:7f:33:f0:98: d5:4a:69:78:d7:71:56:dd:03:44:0e:4b:32:a3:97: b4:a7:12:00:b6:f7:50:a7:fe:53:bd:e3:2b:46:4f: 69:d8:9c:9f:6a:d1:06:12:3a:18:35:72:53:c3:22: 00:5c:db:9a:e2:6d:89:bb:3e:36:05:f6:d9:c7:f3: ae:f8:1c:36:f9:f9:1d:40:b5:c3:ea:8a:7d:78:a3: 5d:f1:d7:ac:9f:d0:88:b3:d2:20:59:8f:e5:46:9e: da:60:d5:18:1d:a8:a4:bd:30:69:b7:cd:c8:cd:2f: 44:eb:62:2a:a7:c3:41:ae:e2:3a:d3:32:59:ab:7a: b5:db:0c:e4:c9:38:26:0c:04:cc:e7:e2:c5:6e:1a: fb:3e:53:1f:7e:76:b1:19:1c:c4:3b:2f:8a:1e:89: 7a:b7:56:04:30:4d:73:55:75:f7:2c:1d:2e:e3:24: 31:b8:4f:19:74:9a:94:f5:6a:97:80:85:1d:2d:44: b6:37:56:11:69:6b:ca:31:92:4e:f5:ee:b2:21:7c: 22:2f:0c:fc:84:64:c0:7a:18:54:bf:50:ba:a2:ba: be:bc:62:0b:ec:b9:fd:c3:02:ce:bf:35:98:d6:be: 3d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F7:B3:01:30:8E:1B:89:E7:2B:7C:86:42:14:86:0C:DE:F2:01:3A X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS48925.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.44.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:66:07:62:45:05:a7:88:f0:b8:f2:a5:ce:49:17:97:18:25: b2:2f:ea:21:eb:f7:52:35:42:5c:7c:40:f3:3f:bf:b5:74:98: a3:a1:31:9b:65:d6:3b:c3:be:5a:f0:c6:ac:8d:2e:1f:3c:c7: 59:5d:81:82:df:07:dd:9d:e5:62:01:bf:b6:51:b7:16:fe:e4: 12:b5:75:95:e3:f7:95:8d:45:44:1e:5d:08:7a:ca:2c:a7:95: 3b:1d:d2:c8:a0:75:2a:c9:dc:59:5b:3d:4c:6d:1f:66:63:37: 81:c9:01:4e:97:41:01:98:b2:1c:b8:0f:fd:d8:04:13:3f:7a: 18:88:7d:0e:95:17:5d:09:56:97:24:d9:6c:ee:56:78:72:68: 88:f8:d8:36:b1:da:78:93:ad:63:a1:f2:24:70:0c:9a:3e:c8: c3:18:1b:d2:cb:c3:ac:44:5b:aa:34:8b:22:55:b5:3b:56:15: 63:b1:04:d8:3b:10:c5:3f:30:01:ec:e4:ee:eb:dd:b5:74:d5: fd:da:9b:94:88:e4:38:23:c8:6f:76:58:22:a2:16:34:46:0e: ba:72:4d:f3:83:c3:9d:10:a1:44:43:9a:5a:ab:04:94:75:eb: 9a:11:e0:69:63:a3:3a:ad:fc:35:57:16:ae:fd:ea:be:11:8f: 38:b0:07:45 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUPAq2r7UYF91XDa4n7+1GhzKFUd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNTExMTQxMzIzNDFaFw0yNjExMTMxMzI4NDFaMDMxMTAvBgNV BAMTKEIxRjdCMzAxMzA4RTFCODlFNzJCN0M4NjQyMTQ4NjBDREVGMjAxM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP+PPAGAAmCTlX9366pOOHsF9G H44lxhjzfzPwmNVKaXjXcVbdA0QOSzKjl7SnEgC291Cn/lO94ytGT2nYnJ9q0QYS Ohg1clPDIgBc25ribYm7PjYF9tnH8674HDb5+R1AtcPqin14o13x16yf0Iiz0iBZ j+VGntpg1RgdqKS9MGm3zcjNL0TrYiqnw0Gu4jrTMlmrerXbDOTJOCYMBMzn4sVu Gvs+Ux9+drEZHMQ7L4oeiXq3VgQwTXNVdfcsHS7jJDG4Txl0mpT1apeAhR0tRLY3 VhFpa8oxkk717rIhfCIvDPyEZMB6GFS/ULqiur68Ygvsuf3DAs6/NZjWvj1HAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUsfezATCOG4nnK3yGQhSGDN7yATowHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTNDg5MjUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtlyww DQYJKoZIhvcNAQELBQADggEBADtmB2JFBaeI8Ljypc5JF5cYJbIv6iHr91I1Qlx8 QPM/v7V0mKOhMZtl1jvDvlrwxqyNLh88x1ldgYLfB92d5WIBv7ZRtxb+5BK1dZXj 95WNRUQeXQh6yiynlTsd0sigdSrJ3FlbPUxtH2ZjN4HJAU6XQQGYshy4D/3YBBM/ ehiIfQ6VF10JVpck2WzuVnhyaIj42Dax2niTrWOh8iRwDJo+yMMYG9LLw6xEW6o0 iyJVtTtWFWOxBNg7EMU/MAHs5O7r3bV01f3am5SI5DgjyG92WCKiFjRGDrpyTfOD w50QoURDmlqrBJR165oR4Gljozqt/DVXFq796r4RjziwB0U= -----END CERTIFICATE-----Generated at Fri Dec 5 07:59:50 2025 by rpki-client