This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS46844.roa File: AS46844.roa (raw, json) Hash identifier: eN0+3cpaOl4/2liJ+hLsbOF6PuQ3KPltdVir5YtIT8Q= Subject key identifier: D5:4C:02:22:53:B9:F5:39:F7:D4:DB:16:AF:1C:0C:6C:43:0D:05:88 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 22F3CC30496712588FB4AD6CB2C3D6E6F12AD4D5 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS46844.roa Signing time: Sat 20 Dec 2025 20:25:57 +0000 ROA not before: Sat 20 Dec 2025 20:20:57 +0000 ROA not after: Sat 19 Dec 2026 20:25:57 +0000 asID: 46844 IP address blocks: 95.135.163.0/24 maxlen: 24 178.92.50.0/24 maxlen: 24 178.92.179.0/24 maxlen: 24 178.92.196.0/24 maxlen: 24 178.92.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f3:cc:30:49:67:12:58:8f:b4:ad:6c:b2:c3:d6:e6:f1:2a:d4:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 20 20:20:57 2025 GMT Not After : Dec 19 20:25:57 2026 GMT Subject: CN=D54C022253B9F539F7D4DB16AF1C0C6C430D0588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ff:b7:e7:61:8c:24:61:41:36:18:21:1f:27: 63:59:ab:8e:8f:e9:9c:26:74:6c:8a:f2:7a:ba:55: fa:11:01:92:70:d3:30:8e:62:00:05:6f:2f:2e:b7: 1d:6a:4c:78:fb:6f:cd:89:21:ce:fc:a3:32:81:58: d7:22:d2:12:c0:4e:b1:b7:17:a4:bd:de:8d:f2:5c: d3:ba:3d:c2:01:ae:51:07:17:3f:49:68:3c:2a:1d: 10:48:12:c0:fe:b1:3d:ad:2c:91:9c:3a:23:ec:f7: 08:18:17:fe:11:65:05:64:c7:ba:3b:53:a7:29:d1: de:50:6f:53:0c:41:c6:f0:57:a9:71:7a:65:be:2f: e9:6a:d9:4c:9d:9f:7a:e2:bf:93:be:e9:40:41:4a: c1:d2:df:ab:be:e1:94:03:e9:53:c5:a7:7e:47:1b: 91:10:77:c9:a2:32:c2:68:eb:21:a5:b5:6e:1e:ac: 22:39:9e:97:8f:04:0b:ac:10:87:5d:d7:aa:db:a6: 9a:20:5c:78:49:d9:f0:f6:6f:b5:66:ec:b4:78:b5: fb:48:cd:ab:9d:97:15:1d:af:63:51:22:27:33:ea: dd:60:3e:55:5e:f7:68:f4:37:7e:6b:42:64:6c:52: 6a:65:91:bf:f1:47:8e:6d:c3:a7:de:cc:58:3a:2c: d3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4C:02:22:53:B9:F5:39:F7:D4:DB:16:AF:1C:0C:6C:43:0D:05:88 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS46844.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.135.163.0/24 178.92.50.0/24 178.92.179.0/24 178.92.196.0/24 178.92.202.0/24 Signature Algorithm: sha256WithRSAEncryption 52:34:af:5d:b6:26:34:09:c3:c3:91:4b:21:47:6b:9f:42:3f: 2c:9f:f6:6d:56:31:bb:65:12:c6:00:6d:19:11:56:ed:32:db: 5b:2c:5a:ad:ff:ac:2a:ff:b3:8a:8a:8b:1a:0d:7f:f8:51:b3: c1:58:83:d2:19:26:2a:88:7b:c6:aa:ec:8e:38:bc:6b:f8:9f: 6c:8c:49:d1:be:84:f0:ed:e6:58:be:eb:cc:9a:7e:ec:e4:c1: 76:cd:89:24:c7:ca:6b:77:40:f0:53:d7:00:35:2c:86:5c:61: 17:e0:0d:33:3e:ef:d1:6c:de:0b:35:9d:f8:38:f7:12:ca:e2: fb:0a:e8:2a:2b:7a:c3:ae:b8:41:14:86:92:91:18:73:6e:68: b1:2a:b9:22:6c:03:97:e2:fa:c3:fb:35:1f:ea:24:8f:e9:95: 18:ef:17:99:a7:1f:a0:7a:74:2e:14:e1:9c:6f:22:4a:58:57: 8f:a6:47:8f:7d:09:8c:a3:e0:f7:59:16:6d:44:03:1b:88:2d: 52:cb:9b:72:d0:a6:ac:99:e9:44:5a:14:5a:44:55:c0:f2:64: 9a:d0:93:b6:ec:3f:4b:50:27:4a:35:e2:0f:b2:18:16:7e:7c: 75:1a:8e:4a:42:f4:72:65:0f:19:e7:45:84:62:c2:2f:4a:d1: c3:de:a7:ec -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUIvPMMElnEliPtK1sssPW5vEq1NUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMjAyMDIwNTdaFw0yNjEyMTkyMDI1NTdaMDMxMTAvBgNV BAMTKEQ1NEMwMjIyNTNCOUY1MzlGN0Q0REIxNkFGMUMwQzZDNDMwRDA1ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk/7fnYYwkYUE2GCEfJ2NZq46P 6ZwmdGyK8nq6VfoRAZJw0zCOYgAFby8utx1qTHj7b82JIc78ozKBWNci0hLATrG3 F6S93o3yXNO6PcIBrlEHFz9JaDwqHRBIEsD+sT2tLJGcOiPs9wgYF/4RZQVkx7o7 U6cp0d5Qb1MMQcbwV6lxemW+L+lq2Uydn3riv5O+6UBBSsHS36u+4ZQD6VPFp35H G5EQd8miMsJo6yGltW4erCI5npePBAusEIdd16rbppogXHhJ2fD2b7Vm7LR4tftI zaudlxUdr2NRIicz6t1gPlVe92j0N35rQmRsUmplkb/xR45tw6fezFg6LNMvAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQU1UwCIlO59Tn31NsWrxwMbEMNBYgwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDY4NDQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBABfh6MD BACyXDIDBACyXLMDBACyXMQDBACyXMowDQYJKoZIhvcNAQELBQADggEBAFI0r122 JjQJw8ORSyFHa59CPyyf9m1WMbtlEsYAbRkRVu0y21ssWq3/rCr/s4qKixoNf/hR s8FYg9IZJiqIe8aq7I44vGv4n2yMSdG+hPDt5li+68yafuzkwXbNiSTHymt3QPBT 1wA1LIZcYRfgDTM+79Fs3gs1nfg49xLK4vsK6CoresOuuEEUhpKRGHNuaLEquSJs A5fi+sP7NR/qJI/plRjvF5mnH6B6dC4U4ZxvIkpYV4+mR499CYyj4PdZFm1EAxuI LVLLm3LQpqyZ6URaFFpEVcDyZJrQk7bsP0tQJ0o14g+yGBZ+fHUajkpC9HJlDxnn RYRiwi9K0cPep+w= -----END CERTIFICATE-----Generated at Mon Dec 22 02:29:36 2025 by rpki-client