This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS49453.roa File: AS49453.roa (raw, json) Hash identifier: pKPUVHSsDIZvs7/FzEFRUiwdAadtX/apOel6LPEV0Rk= Subject key identifier: E3:AF:53:8A:AF:67:1B:9B:11:8F:A7:61:85:AB:E2:E6:8A:D3:CE:D5 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 14E22661954E2852830D8623AAC67C026B61B7C0 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS49453.roa Signing time: Wed 17 Dec 2025 18:25:07 +0000 ROA not before: Wed 17 Dec 2025 18:20:07 +0000 ROA not after: Wed 16 Dec 2026 18:25:07 +0000 asID: 49453 IP address blocks: 91.124.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 08:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e2:26:61:95:4e:28:52:83:0d:86:23:aa:c6:7c:02:6b:61:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 17 18:20:07 2025 GMT Not After : Dec 16 18:25:07 2026 GMT Subject: CN=E3AF538AAF671B9B118FA76185ABE2E68AD3CED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:07:b7:c3:97:fc:ca:7a:9c:6b:6a:51:d4:26: 48:23:26:03:e8:bc:d2:72:3a:f9:4c:b6:cd:f6:c4: 7a:18:d4:65:15:9f:17:2d:2f:f9:f5:e7:66:03:7c: 06:7a:07:25:2e:99:89:45:d8:fa:d1:68:5b:2c:74: eb:fa:a4:62:c9:6b:fc:82:cc:90:e6:b0:55:91:1e: 4f:0a:5c:06:42:51:d5:c3:6b:32:c9:d4:5a:12:09: 37:72:ae:b5:b9:18:96:50:30:17:6c:4a:82:cb:a9: b5:a0:68:7a:70:94:33:56:66:29:af:57:1e:ed:42: 85:f9:d7:4d:1d:40:24:9e:9a:23:b9:3a:da:a6:40: d1:ac:14:db:03:68:e6:9d:d7:27:49:0c:a4:bc:64: ca:3d:92:f0:9c:e0:a9:84:08:19:47:03:81:96:d2: b9:ee:73:4d:ca:4d:dc:39:2c:6f:d6:09:82:15:d2: 15:31:cd:20:27:65:8c:ba:6f:93:2d:3b:ac:77:d3: 22:a8:c0:a0:9e:6c:01:31:0d:92:d3:0f:d4:de:30: ef:0f:9c:23:4a:df:f6:e7:8e:d4:90:0a:c6:25:64: a9:cf:96:e6:b8:ed:f7:ca:4b:92:ca:81:85:40:26: 75:a9:e7:cb:62:5e:09:b9:e2:0f:24:00:47:9a:94: cf:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AF:53:8A:AF:67:1B:9B:11:8F:A7:61:85:AB:E2:E6:8A:D3:CE:D5 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS49453.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.124.92.0/22 Signature Algorithm: sha256WithRSAEncryption 73:ca:b1:9c:78:51:dd:41:49:69:7f:b7:a9:7f:b8:0b:c7:5a: df:62:f2:11:89:2d:f3:12:ea:50:bf:de:88:5b:ba:0e:eb:ed: 73:de:6d:c7:dd:29:59:ad:c0:27:72:cb:db:10:3f:e0:67:d6: 90:4b:2f:6d:01:4d:58:3c:0d:0b:c9:8a:bf:97:74:02:b7:8d: d4:3c:b8:08:05:01:cc:82:ec:f3:91:6c:00:8d:b5:a1:c3:fb: 12:6c:f4:30:a1:5b:63:32:50:c0:1b:48:f9:fd:63:fd:c3:77: 8d:7a:2d:48:5a:a2:5b:08:a2:c6:15:8f:91:fe:8f:2c:0c:8a: 15:84:28:04:ff:64:07:18:30:2e:b2:1a:9d:9c:58:06:1e:9b: 45:55:36:d2:c2:54:3c:fd:68:cc:d5:ae:0e:8d:ce:7b:33:98: 75:1f:90:01:de:e3:16:ff:a0:94:34:c3:05:d2:a8:b1:a7:97: 8d:e5:d3:df:2a:4c:80:a2:12:aa:f3:da:dc:74:5e:f7:30:ca: 3c:34:8d:57:67:ca:c9:a5:2f:10:9f:0f:e0:5c:6e:5b:cb:4f: 57:3a:e0:5a:21:07:1a:b6:1e:73:05:93:87:b2:bf:29:91:19: af:d6:7a:15:84:42:24:48:bb:e9:29:41:68:b9:49:c4:19:27: b6:38:8b:f3 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUFOImYZVOKFKDDYYjqsZ8Amtht8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMTcxODIwMDdaFw0yNjEyMTYxODI1MDdaMDMxMTAvBgNV BAMTKEUzQUY1MzhBQUY2NzFCOUIxMThGQTc2MTg1QUJFMkU2OEFEM0NFRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLB7fDl/zKepxralHUJkgjJgPo vNJyOvlMts32xHoY1GUVnxctL/n152YDfAZ6ByUumYlF2PrRaFssdOv6pGLJa/yC zJDmsFWRHk8KXAZCUdXDazLJ1FoSCTdyrrW5GJZQMBdsSoLLqbWgaHpwlDNWZimv Vx7tQoX5100dQCSemiO5OtqmQNGsFNsDaOad1ydJDKS8ZMo9kvCc4KmECBlHA4GW 0rnuc03KTdw5LG/WCYIV0hUxzSAnZYy6b5MtO6x30yKowKCebAExDZLTD9TeMO8P nCNK3/bnjtSQCsYlZKnPlua47ffKS5LKgYVAJnWp58tiXgm54g8kAEealM/NAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQU469Tiq9nG5sRj6dhhavi5orTztUwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDk0NTMucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJbfFww DQYJKoZIhvcNAQELBQADggEBAHPKsZx4Ud1BSWl/t6l/uAvHWt9i8hGJLfMS6lC/ 3ohbug7r7XPebcfdKVmtwCdyy9sQP+Bn1pBLL20BTVg8DQvJir+XdAK3jdQ8uAgF AcyC7PORbACNtaHD+xJs9DChW2MyUMAbSPn9Y/3Dd416LUhaolsIosYVj5H+jywM ihWEKAT/ZAcYMC6yGp2cWAYem0VVNtLCVDz9aMzVrg6NznszmHUfkAHe4xb/oJQ0 wwXSqLGnl43l098qTICiEqrz2tx0Xvcwyjw0jVdnysmlLxCfD+BcblvLT1c64Foh Bxq2HnMFk4eyvymRGa/WehWEQiRIu+kpQWi5ScQZJ7Y4i/M= -----END CERTIFICATE-----Generated at Thu Dec 18 18:49:55 2025 by rpki-client