This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS10753.roa
File: AS10753.roa (raw, json)
Hash identifier: W+VoRnNS3v9DFcekO9VFCiUs3t3aftt91/ISr5Nxfnw=
Subject key identifier: 3A:AF:42:D7:22:25:46:04:DE:E2:A7:10:B6:8F:2F:BD:3A:6D:0A:BB
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 66387F6642745462E44681F87F25004BD36984E3
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS10753.roa
Signing time: Tue 09 Dec 2025 13:43:53 +0000
ROA not before: Tue 09 Dec 2025 13:38:53 +0000
ROA not after: Tue 08 Dec 2026 13:43:53 +0000
asID: 10753
IP address blocks: 46.202.61.0/24 maxlen: 24
46.202.66.0/24 maxlen: 24
46.202.70.0/24 maxlen: 24
46.202.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Dec 2025 16:11:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:38:7f:66:42:74:54:62:e4:46:81:f8:7f:25:00:4b:d3:69:84:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Dec 9 13:38:53 2025 GMT
Not After : Dec 8 13:43:53 2026 GMT
Subject: CN=3AAF42D722254604DEE2A710B68F2FBD3A6D0ABB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:d3:d8:47:ba:1e:55:a2:c7:e9:a9:35:1a:
4f:a3:57:31:33:8f:8e:f5:f0:ff:96:81:99:63:7c:
7e:ca:e1:32:36:46:d6:9d:bb:6c:d2:ac:80:a1:53:
76:8a:35:a4:e3:06:c4:ed:06:fd:6f:67:ed:8c:12:
a5:8d:db:fe:49:78:dc:69:9b:14:de:62:9f:72:51:
03:52:14:7d:ae:bf:00:83:cb:b6:50:88:85:19:56:
d2:3b:00:65:9f:c8:b6:c6:94:73:d1:2d:5e:c2:17:
60:30:6e:8a:98:83:61:72:5e:3d:1d:87:2b:a4:6d:
8f:d4:c6:a9:52:ed:56:84:15:78:6d:96:a0:d1:c1:
c3:e8:78:41:f9:de:f0:8c:7e:4c:2c:68:82:99:65:
f5:67:fe:43:62:9d:fa:fe:80:1c:da:d3:92:d0:56:
3c:49:d4:4a:5c:84:94:ae:66:3c:2b:55:18:f5:f6:
24:48:61:96:50:19:f6:8e:fb:fd:0c:77:2a:98:1f:
a8:d1:95:93:7a:d1:4d:6c:cb:c6:a8:13:e9:32:aa:
79:05:b8:71:fe:06:49:62:83:d2:17:72:29:60:91:
6f:e3:cf:ec:66:c0:a6:f3:3d:8c:ec:58:a8:68:7d:
3e:8a:7e:75:f2:85:a4:5f:2f:8f:12:43:c1:3b:f3:
34:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AF:42:D7:22:25:46:04:DE:E2:A7:10:B6:8F:2F:BD:3A:6D:0A:BB
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS10753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.61.0/24
46.202.66.0/24
46.202.70.0/24
46.202.75.0/24
Signature Algorithm: sha256WithRSAEncryption
75:6e:6b:18:57:87:81:7e:f2:cd:19:6a:5d:8f:82:20:17:0c:
26:c0:24:8c:49:23:5f:85:84:42:e2:94:c7:ec:e0:11:e0:59:
85:5b:06:40:77:df:2c:11:d9:d7:d4:7d:6a:b7:64:3a:88:75:
01:43:e4:6e:fe:1b:6d:63:58:9c:af:1b:30:29:fc:91:ab:ca:
5d:a9:d9:70:e5:62:18:64:37:13:d6:99:4b:3b:fc:59:99:07:
13:4f:58:12:74:eb:7d:0f:d9:36:42:cf:2a:87:d7:a0:f3:b6:
4a:6f:66:fd:f2:b5:c8:b3:9c:fa:c2:1f:62:aa:a7:b6:b9:fd:
b6:13:be:0d:8d:b4:17:c0:50:c4:2d:01:e6:13:70:04:5e:70:
98:51:3f:6d:59:eb:81:b1:90:08:f4:09:d5:f3:c4:d7:30:e1:
8e:18:ca:7a:08:9f:b3:b0:d8:c4:0c:3e:bd:7d:0e:2e:49:72:
70:92:84:9a:46:21:c0:2c:fb:41:f4:8e:79:94:03:1f:9d:65:
e2:3f:3f:1f:12:ef:18:1e:88:ee:12:1a:fd:59:00:ba:f0:25:
f3:65:18:d9:89:df:34:de:da:3e:e7:61:fa:a9:e7:2b:4a:1c:
46:57:88:6a:b1:93:00:b6:ab:4b:ca:fd:23:eb:fe:46:1e:69:
e2:2f:90:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 08:07:19 2025 by rpki-client