This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS44620.roa File: AS44620.roa (raw, json) Hash identifier: dQua4CyTkantHz4zugt7WasF17F0IUWsKs5/luCHpdU= Subject key identifier: 09:EC:D6:20:D7:3F:3B:56:B5:1C:90:46:CD:FE:8A:5A:59:B1:B5:FA Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 1218A04F270D1795EE2724228C107506CD98A459 Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS44620.roa Signing time: Thu 27 Nov 2025 09:28:47 +0000 ROA not before: Thu 27 Nov 2025 09:23:47 +0000 ROA not after: Thu 26 Nov 2026 09:28:47 +0000 asID: 44620 IP address blocks: 212.87.198.0/24 maxlen: 24 212.87.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:18:a0:4f:27:0d:17:95:ee:27:24:22:8c:10:75:06:cd:98:a4:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Nov 27 09:23:47 2025 GMT Not After : Nov 26 09:28:47 2026 GMT Subject: CN=09ECD620D73F3B56B51C9046CDFE8A5A59B1B5FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:31:af:0f:22:33:6c:0c:c5:30:3b:86:70:72: 81:b6:07:d1:d8:f7:53:35:06:91:25:8f:46:5d:4e: f3:df:a7:e1:01:ba:00:43:46:fc:ab:d1:dc:21:22: cd:be:11:58:67:03:61:07:f7:a7:d6:43:46:11:3f: 37:8e:17:e7:82:0f:c4:1c:8e:5f:28:0c:ba:96:65: 04:1b:b3:db:c0:13:f7:eb:e9:a3:51:3f:bf:a2:d7: d9:ad:e0:f7:df:41:bb:76:d3:76:3d:c8:6e:6f:56: f4:b3:e5:fd:2d:ef:91:63:f1:cd:04:cb:ed:3f:91: 4b:5a:dd:31:41:77:05:e9:43:4b:a3:c9:d0:fe:09: f3:13:d0:af:cd:cb:d6:1f:52:e8:3b:af:39:43:c9: 16:15:0b:0b:8a:6f:02:b6:9b:36:d4:97:fd:ce:87: 33:84:e0:54:fb:34:15:a5:81:15:4e:b0:d7:44:31: a7:5c:9e:07:29:d4:7e:b9:c3:f6:6a:24:25:13:9d: 09:7a:5d:d4:bb:b3:c4:84:15:bc:8b:42:5d:df:f1: 79:cd:4e:d6:6e:39:53:6e:b0:16:9f:48:cb:f2:1e: e4:ad:92:03:32:21:79:6a:5c:ff:e0:9a:22:25:28: 70:dc:aa:12:ff:92:e2:29:7e:dc:20:89:a8:80:19: 60:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EC:D6:20:D7:3F:3B:56:B5:1C:90:46:CD:FE:8A:5A:59:B1:B5:FA X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS44620.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.87.198.0/23 Signature Algorithm: sha256WithRSAEncryption 51:98:f7:8c:c1:9f:cb:d7:8f:2a:06:57:5a:d4:74:fa:23:48: d5:06:4c:0a:69:15:76:a4:95:55:1e:01:b0:cf:d0:98:25:00: e0:c0:df:91:23:4b:46:3b:2e:4e:ca:1d:60:6b:cc:5c:bc:af: 59:2b:31:64:25:39:3f:d8:da:04:8d:fe:38:2b:1f:6c:b1:e2: 9f:84:b3:c5:43:84:3f:6a:5d:78:b0:46:c0:48:80:ac:53:b7: ef:f5:3d:56:42:fd:a0:d1:72:92:00:2e:7e:22:4a:1c:73:8c: 75:ed:50:5d:3d:bb:cf:dd:ab:ef:13:7d:d9:1b:99:0f:e8:bf: 7a:d4:b1:a4:6f:98:2b:eb:c2:4b:cc:b0:40:47:a1:94:3e:4c: a5:e8:7f:03:02:42:92:12:da:ec:92:83:5c:5f:d0:39:99:aa: cc:ae:22:03:ce:42:1e:88:08:b2:24:74:41:e1:7d:96:0a:5b: df:ad:90:63:74:8c:06:d7:c8:61:22:ab:c8:44:2c:8f:12:b5: 2c:af:dd:f1:f0:49:7b:c0:2a:07:0b:01:8f:33:aa:f7:73:84: 5f:1d:45:71:f0:c7:95:b3:c0:d3:23:fd:1d:4a:3e:0b:5f:9f: 5f:a9:67:6a:76:d7:1e:fb:89:5e:ae:9a:0f:a2:30:ad:83:51: d8:82:a9:6c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUEhigTycNF5XuJyQijBB1Bs2YpFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNTExMjcwOTIzNDdaFw0yNjExMjYwOTI4NDdaMDMxMTAvBgNV BAMTKDA5RUNENjIwRDczRjNCNTZCNTFDOTA0NkNERkU4QTVBNTlCMUI1RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxMa8PIjNsDMUwO4ZwcoG2B9HY 91M1BpElj0ZdTvPfp+EBugBDRvyr0dwhIs2+EVhnA2EH96fWQ0YRPzeOF+eCD8Qc jl8oDLqWZQQbs9vAE/fr6aNRP7+i19mt4PffQbt203Y9yG5vVvSz5f0t75Fj8c0E y+0/kUta3TFBdwXpQ0ujydD+CfMT0K/Ny9YfUug7rzlDyRYVCwuKbwK2mzbUl/3O hzOE4FT7NBWlgRVOsNdEMadcngcp1H65w/ZqJCUTnQl6XdS7s8SEFbyLQl3f8XnN TtZuOVNusBafSMvyHuStkgMyIXlqXP/gmiIlKHDcqhL/kuIpftwgiaiAGWD3AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUCezWINc/O1a1HJBGzf6KWlmxtfowHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTNDQ2MjAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHUV8Yw DQYJKoZIhvcNAQELBQADggEBAFGY94zBn8vXjyoGV1rUdPojSNUGTAppFXaklVUe AbDP0JglAODA35EjS0Y7Lk7KHWBrzFy8r1krMWQlOT/Y2gSN/jgrH2yx4p+Es8VD hD9qXXiwRsBIgKxTt+/1PVZC/aDRcpIALn4iShxzjHXtUF09u8/dq+8TfdkbmQ/o v3rUsaRvmCvrwkvMsEBHoZQ+TKXofwMCQpIS2uySg1xf0DmZqsyuIgPOQh6ICLIk dEHhfZYKW9+tkGN0jAbXyGEiq8hELI8StSyv3fHwSXvAKgcLAY8zqvdzhF8dRXHw x5WzwNMj/R1KPgtfn1+pZ2p21x77iV6umg+iMK2DUdiCqWw= -----END CERTIFICATE-----Generated at Fri Dec 5 09:26:48 2025 by rpki-client