This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7843.roa
File: AS7843.roa (raw, json)
Hash identifier: l2zOtpBldAUm1ehoEmnPWB1mOF1d+Vos26M/MFcaZp4=
Subject key identifier: 59:23:B0:4D:92:63:C4:8A:AA:8F:B7:DF:6F:26:F6:52:6F:DF:D4:43
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 39321CDD398CFC404739001C4DB592B1FD98D378
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7843.roa
Signing time: Mon 12 Jan 2026 14:56:24 +0000
ROA not before: Mon 12 Jan 2026 14:51:24 +0000
ROA not after: Mon 11 Jan 2027 14:56:24 +0000
asID: 7843
IP address blocks: 92.113.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Jan 2026 16:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:32:1c:dd:39:8c:fc:40:47:39:00:1c:4d:b5:92:b1:fd:98:d3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 12 14:51:24 2026 GMT
Not After : Jan 11 14:56:24 2027 GMT
Subject: CN=5923B04D9263C48AAA8FB7DF6F26F6526FDFD443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:06:eb:48:04:8c:13:1f:9c:8b:c6:4c:77:68:
25:c6:c9:13:cc:1e:88:9e:78:63:0b:fb:fb:4f:fb:
77:cb:81:5b:27:b2:97:89:0e:61:35:86:15:67:e3:
92:66:7e:e9:8b:da:ac:42:db:85:30:79:27:2b:54:
ac:8b:b6:93:f0:df:d4:e6:53:06:8f:23:83:e2:e4:
46:d1:c7:52:94:2d:cf:35:71:a4:43:c4:3b:61:34:
46:8e:a4:a4:59:c4:ce:a5:3f:52:82:8b:7d:35:22:
52:f5:35:84:ec:f1:fa:0f:07:a4:0f:27:a1:7e:c2:
c4:22:2b:2c:42:aa:9d:c1:b2:75:ad:f2:ff:2c:c3:
33:9a:42:7d:eb:47:51:fc:7a:b6:54:bb:73:2f:cc:
5a:9b:0a:8c:2c:9c:6e:0a:1f:10:62:e1:fd:c1:1f:
ed:87:a3:f7:71:44:44:2f:8b:3d:d9:94:5a:5b:09:
d6:2b:a6:83:e2:8c:35:f1:a2:b3:9d:4b:6d:87:a5:
ee:c5:07:91:c2:50:98:87:89:ff:81:60:cc:0d:cc:
a4:b0:40:6e:a4:b0:f8:a0:fd:3f:09:08:e2:cb:ee:
fa:8e:93:ed:14:2f:0a:2c:96:74:95:4c:97:b0:0d:
b7:28:f5:43:c4:ef:8c:a8:f6:4f:38:8f:cc:9f:49:
ff:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:23:B0:4D:92:63:C4:8A:AA:8F:B7:DF:6F:26:F6:52:6F:DF:D4:43
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7843.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.0.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e0:29:cc:e8:fa:8e:47:e5:ab:fa:63:0e:65:6c:39:7c:00:
39:2c:b2:d7:8d:30:06:a1:a2:09:3f:59:4f:83:dd:8a:b7:96:
73:a6:78:1c:e4:36:af:32:01:6e:8c:e3:be:58:88:94:aa:25:
ba:a7:e5:f5:f6:a1:7f:38:67:4a:21:70:1c:5d:49:9b:c9:32:
37:11:28:48:e9:4a:06:3a:78:58:46:41:b0:85:04:95:1e:a3:
bc:fb:9c:36:2f:fb:73:f2:d4:b6:03:b2:1f:f5:f6:67:9c:0f:
4b:86:0e:cc:f3:7c:35:7a:b9:4b:32:b9:7d:4c:38:a0:90:e9:
9b:cf:db:c2:c2:73:9b:e6:e6:67:7e:eb:29:54:df:05:38:b3:
49:e3:e8:ed:67:23:9b:1a:1f:ea:8e:bc:1e:b8:1b:ba:d1:2d:
ac:c3:cb:5c:7c:d1:dc:c4:42:c4:d4:13:77:f3:71:61:93:15:
ad:58:1f:4a:e0:ae:eb:05:ab:71:d3:50:dd:c7:e8:74:37:8b:
e9:34:de:6b:2b:d4:b7:c5:16:5c:39:df:2f:e3:dc:85:84:d8:
97:0f:dd:3e:98:e4:4a:fc:3e:67:46:93:c9:29:c1:1b:b9:ee:
2c:cc:2c:58:8b:c6:9d:70:6a:51:e7:0f:10:8c:1d:c1:ad:03:
c0:1b:70:9c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUOTIc3TmM/EBHOQAcTbWSsf2Y03gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNjAxMTIxNDUxMjRaFw0yNzAxMTExNDU2MjRaMDMxMTAvBgNV
BAMTKDU5MjNCMDREOTI2M0M0OEFBQThGQjdERjZGMjZGNjUyNkZERkQ0NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWButIBIwTH5yLxkx3aCXGyRPM
HoieeGML+/tP+3fLgVsnspeJDmE1hhVn45JmfumL2qxC24UweScrVKyLtpPw39Tm
UwaPI4Pi5EbRx1KULc81caRDxDthNEaOpKRZxM6lP1KCi301IlL1NYTs8foPB6QP
J6F+wsQiKyxCqp3BsnWt8v8swzOaQn3rR1H8erZUu3MvzFqbCowsnG4KHxBi4f3B
H+2Ho/dxREQviz3ZlFpbCdYrpoPijDXxorOdS22Hpe7FB5HCUJiHif+BYMwNzKSw
QG6ksPig/T8JCOLL7vqOk+0ULwoslnSVTJewDbco9UPE74yo9k84j8yfSf8bAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQUWSOwTZJjxIqqj7ffbyb2Um/f1EMwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNzg0My5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFxxADAN
BgkqhkiG9w0BAQsFAAOCAQEAB+ApzOj6jkflq/pjDmVsOXwAOSyy140wBqGiCT9Z
T4PdireWc6Z4HOQ2rzIBbozjvliIlKoluqfl9fahfzhnSiFwHF1Jm8kyNxEoSOlK
Bjp4WEZBsIUElR6jvPucNi/7c/LUtgOyH/X2Z5wPS4YOzPN8NXq5SzK5fUw4oJDp
m8/bwsJzm+bmZ37rKVTfBTizSePo7Wcjmxof6o68HrgbutEtrMPLXHzR3MRCxNQT
d/NxYZMVrVgfSuCu6wWrcdNQ3cfodDeL6TTeayvUt8UWXDnfL+PchYTYlw/dPpjk
Svw+Z0aTySnBG7nuLMwsWIvGnXBqUecPEIwdwa0DwBtwnA==
-----END CERTIFICATE-----
Generated at Tue Jan 13 01:49:01 2026 by rpki-client