This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202846.roa File: AS202846.roa (raw, json) Hash identifier: YU2goKe0F7yFjTDZSb7NTtcJXIcm/zZ4Tbuf8opdp8o= Subject key identifier: 80:AA:20:9C:AA:5C:01:40:CA:77:4E:07:C7:11:D8:92:CF:EA:BF:D9 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 6E6278A9917F352BB108A7DFC53A9E4BDE5C2512 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202846.roa Signing time: Tue 16 Dec 2025 05:23:15 +0000 ROA not before: Tue 16 Dec 2025 05:18:15 +0000 ROA not after: Tue 15 Dec 2026 05:23:15 +0000 asID: 202846 IP address blocks: 147.79.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:62:78:a9:91:7f:35:2b:b1:08:a7:df:c5:3a:9e:4b:de:5c:25:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 16 05:18:15 2025 GMT Not After : Dec 15 05:23:15 2026 GMT Subject: CN=80AA209CAA5C0140CA774E07C711D892CFEABFD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:48:54:1e:81:7c:08:fd:0f:d2:4f:f9:d9:e5: ef:b0:87:87:f6:a9:d8:32:6a:9f:fd:35:27:8d:48: 3b:89:4e:53:45:9c:3a:fc:8b:1f:38:13:a7:63:88: a9:ff:5e:51:af:d0:44:15:eb:9d:c3:0c:e5:18:e2: 2f:7b:3d:f0:aa:f8:de:da:3f:87:fe:ae:7a:4b:db: 52:43:dd:37:9d:f8:72:07:34:42:12:2d:9c:87:9a: 34:23:51:de:3b:ef:16:66:f6:3b:5b:5b:c8:c6:93: 2f:88:e2:de:ad:ae:5d:70:9f:51:93:cd:f7:3c:f2: b1:69:8f:f1:c9:8e:86:19:12:7b:6c:fb:f0:56:4f: 6a:bd:8d:1d:c4:bd:13:7e:6a:2f:a2:55:73:55:dd: 40:dd:7a:62:c2:7b:b2:ac:5b:66:48:67:02:9a:0e: 91:e7:71:04:da:df:bf:16:d4:21:26:1a:bd:cf:11: 89:d2:2d:49:cd:52:8d:7f:7e:33:1f:95:99:4d:44: 6d:91:7c:71:82:71:1d:19:09:66:db:76:60:2c:a4: ea:d8:66:fc:75:28:39:bb:2d:0c:b9:90:34:28:d6: 83:7d:42:45:11:4f:f7:90:22:95:8e:c8:a0:51:a7: 88:83:24:17:bb:bf:38:aa:75:3c:40:9a:e1:27:38: ac:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:AA:20:9C:AA:5C:01:40:CA:77:4E:07:C7:11:D8:92:CF:EA:BF:D9 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202846.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.79.1.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:b4:f4:c4:c6:23:96:7c:f6:15:44:af:b4:e3:80:2f:d9:f6: 0a:8d:1a:e4:49:5d:f9:c2:6e:a7:91:be:e0:0e:6e:7f:57:a7: 95:4d:58:dc:7e:be:d3:72:11:91:19:ae:08:72:a2:6c:71:f0: 7c:c8:ba:c4:cd:7b:64:37:41:40:8b:44:b4:9c:ab:76:63:de: 13:2b:2f:c7:32:e0:a5:64:a0:cd:df:7b:2a:34:60:b3:ec:1c: 21:c3:0f:58:5c:6c:d2:c4:38:cd:a4:7f:04:77:14:10:eb:14: ae:5e:e0:06:d4:37:99:e1:48:9b:56:cd:86:1f:41:71:19:9a: 79:13:0a:42:86:f2:b4:cf:75:e9:50:d3:48:22:65:80:b4:3a: 27:c3:35:49:49:fa:32:21:e0:0a:4c:9a:ff:dc:3a:99:88:c1: 7c:79:e3:9e:26:19:8c:99:e4:48:81:d0:e9:18:69:0c:15:89: 6d:49:33:0a:68:a3:c6:51:bf:2a:02:95:96:fd:97:d7:a5:ae: fb:5e:02:b8:1a:d4:34:8d:b0:db:76:0d:d3:df:ca:84:27:d2: 2d:c2:45:4d:32:16:73:2e:f9:6f:c8:4e:24:08:a8:73:d2:bb: e3:ab:41:82:54:fe:ce:22:5d:63:36:20:f3:16:f3:e7:65:d3: 29:c5:b3:b0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUbmJ4qZF/NSuxCKffxTqeS95cJRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMTYwNTE4MTVaFw0yNjEyMTUwNTIzMTVaMDMxMTAvBgNV BAMTKDgwQUEyMDlDQUE1QzAxNDBDQTc3NEUwN0M3MTFEODkyQ0ZFQUJGRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeSFQegXwI/Q/ST/nZ5e+wh4f2 qdgyap/9NSeNSDuJTlNFnDr8ix84E6djiKn/XlGv0EQV653DDOUY4i97PfCq+N7a P4f+rnpL21JD3Ted+HIHNEISLZyHmjQjUd477xZm9jtbW8jGky+I4t6trl1wn1GT zfc88rFpj/HJjoYZEnts+/BWT2q9jR3EvRN+ai+iVXNV3UDdemLCe7KsW2ZIZwKa DpHncQTa378W1CEmGr3PEYnSLUnNUo1/fjMflZlNRG2RfHGCcR0ZCWbbdmAspOrY Zvx1KDm7LQy5kDQo1oN9QkURT/eQIpWOyKBRp4iDJBe7vziqdTxAmuEnOKwBAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUgKognKpcAUDKd04HxxHYks/qv9kwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjAyODQ2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk08B MA0GCSqGSIb3DQEBCwUAA4IBAQAetPTExiOWfPYVRK+044Av2fYKjRrkSV35wm6n kb7gDm5/V6eVTVjcfr7TchGRGa4IcqJscfB8yLrEzXtkN0FAi0S0nKt2Y94TKy/H MuClZKDN33sqNGCz7Bwhww9YXGzSxDjNpH8EdxQQ6xSuXuAG1DeZ4UibVs2GH0Fx GZp5EwpChvK0z3XpUNNIImWAtDonwzVJSfoyIeAKTJr/3DqZiMF8eeOeJhmMmeRI gdDpGGkMFYltSTMKaKPGUb8qApWW/ZfXpa77XgK4GtQ0jbDbdg3T38qEJ9ItwkVN MhZzLvlvyE4kCKhz0rvjq0GCVP7OIl1jNiDzFvPnZdMpxbOw -----END CERTIFICATE-----Generated at Fri Dec 19 21:20:45 2025 by rpki-client