This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS48678.roa File: AS48678.roa (raw, json) Hash identifier: O3GNe75GrjcTbq6nGPZKpzz+BcIpdZxKmGwnT0xayjU= Subject key identifier: 1F:85:35:AB:22:A8:D4:DC:00:73:F2:02:CC:70:71:99:EF:D8:9D:D0 Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 79B415DB192914FC1E847207BC60C2E9F9D66735 Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS48678.roa Signing time: Tue 16 Dec 2025 20:54:19 +0000 ROA not before: Tue 16 Dec 2025 20:49:19 +0000 ROA not after: Tue 15 Dec 2026 20:54:19 +0000 asID: 48678 IP address blocks: 91.198.66.0/24 maxlen: 24 193.111.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b4:15:db:19:29:14:fc:1e:84:72:07:bc:60:c2:e9:f9:d6:67:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Dec 16 20:49:19 2025 GMT Not After : Dec 15 20:54:19 2026 GMT Subject: CN=1F8535AB22A8D4DC0073F202CC707199EFD89DD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:32:1c:2a:e2:79:7f:64:8f:5a:27:9e:c2:76: 7c:24:ce:b0:08:c5:3b:29:a0:d7:ad:b3:f3:78:d5: fd:30:40:1f:94:c9:21:60:f3:44:8c:5d:66:ec:1f: 49:2a:3b:95:e6:41:be:74:86:43:54:62:ed:9b:15: b9:41:62:46:a3:5b:a7:0c:e4:2e:70:83:e4:a6:5c: f5:29:ca:4e:54:50:d1:ec:63:c8:a5:88:8b:5b:36: 3b:63:7c:37:7e:95:28:fe:d0:7b:fb:27:46:f1:48: 59:75:3b:2a:b2:62:b2:f8:1e:40:ed:e7:20:b6:0f: 39:fe:94:b7:77:29:7e:1c:75:89:bb:c3:d0:62:95: c3:a3:42:c3:9f:32:0c:e1:a0:6b:ce:0a:91:79:f7: 9d:d6:1b:88:cc:08:ab:50:97:22:0d:11:52:26:92: bc:1b:61:e0:0d:e3:c4:12:35:47:7f:19:5d:8e:6d: 18:54:8c:e5:21:1b:8f:0e:35:04:16:5c:e2:0d:64: 57:da:25:78:dd:69:b6:18:00:d2:5c:c2:1c:2d:ff: 69:d5:31:69:76:4c:c9:03:63:80:be:7e:9a:30:93: 5e:97:cf:7c:dd:60:8b:04:d1:d8:ec:26:86:ac:85: 69:18:34:79:58:b0:19:0b:8e:f3:5a:a1:14:03:ac: fd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:85:35:AB:22:A8:D4:DC:00:73:F2:02:CC:70:71:99:EF:D8:9D:D0 X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS48678.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.66.0/24 193.111.125.0/24 Signature Algorithm: sha256WithRSAEncryption a5:f7:1b:00:2f:d9:32:35:e1:73:ed:30:88:ac:be:fd:4c:16: 99:03:62:26:c1:13:23:b2:84:80:85:96:28:a7:2d:af:26:39: 8a:d5:a5:65:79:26:63:d1:66:5b:19:e4:cb:43:d5:e5:f3:ba: 89:14:78:43:cc:a9:43:5c:21:28:41:87:34:13:2a:d7:69:4f: f2:9d:b5:85:a3:88:5d:81:f1:14:ac:e4:dd:38:eb:c6:c1:7d: 5a:8a:de:79:76:c4:15:57:72:dc:f6:86:f4:f0:f5:48:c6:e5: 96:e3:26:cc:ba:60:0d:ab:b4:5b:37:fa:75:7c:ce:8e:e1:80: a2:31:bb:c8:76:ce:ea:c8:61:93:4a:bb:dd:70:d4:e6:eb:aa: f8:4b:53:22:b8:0e:c1:6d:34:c5:03:59:ee:e4:5b:c1:b3:40: 66:ae:94:b1:68:18:46:86:94:83:34:c1:b6:85:3a:ac:49:36: 86:a0:01:ef:90:38:14:1f:63:b3:d8:7c:a4:42:00:18:e9:1f: d2:b1:d3:45:bb:0d:d2:0b:c0:c7:fe:72:05:9b:59:9f:5f:a7: 40:69:d6:a3:c7:ee:11:e2:bb:88:92:0a:40:87:cd:e2:82:f6: 59:c0:68:b5:b7:0c:a3:f8:75:6f:91:22:1c:1b:ca:f9:fa:ca: 2a:85:d3:8a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUebQV2xkpFPwehHIHvGDC6fnWZzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNTEyMTYyMDQ5MTlaFw0yNjEyMTUyMDU0MTlaMDMxMTAvBgNV BAMTKDFGODUzNUFCMjJBOEQ0REMwMDczRjIwMkNDNzA3MTk5RUZEODlERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwMhwq4nl/ZI9aJ57CdnwkzrAI xTspoNets/N41f0wQB+UySFg80SMXWbsH0kqO5XmQb50hkNUYu2bFblBYkajW6cM 5C5wg+SmXPUpyk5UUNHsY8iliItbNjtjfDd+lSj+0Hv7J0bxSFl1OyqyYrL4HkDt 5yC2Dzn+lLd3KX4cdYm7w9BilcOjQsOfMgzhoGvOCpF5953WG4jMCKtQlyINEVIm krwbYeAN48QSNUd/GV2ObRhUjOUhG48ONQQWXOINZFfaJXjdabYYANJcwhwt/2nV MWl2TMkDY4C+fpowk16Xz3zdYIsE0djsJoashWkYNHlYsBkLjvNaoRQDrP1lAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUH4U1qyKo1NwAc/ICzHBxme/YndAwHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTNDg2Nzgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABbxkID BADBb30wDQYJKoZIhvcNAQELBQADggEBAKX3GwAv2TI14XPtMIisvv1MFpkDYibB EyOyhICFliinLa8mOYrVpWV5JmPRZlsZ5MtD1eXzuokUeEPMqUNcIShBhzQTKtdp T/KdtYWjiF2B8RSs5N0468bBfVqK3nl2xBVXctz2hvTw9UjG5ZbjJsy6YA2rtFs3 +nV8zo7hgKIxu8h2zurIYZNKu91w1ObrqvhLUyK4DsFtNMUDWe7kW8GzQGaulLFo GEaGlIM0wbaFOqxJNoagAe+QOBQfY7PYfKRCABjpH9Kx00W7DdILwMf+cgWbWZ9f p0Bp1qPH7hHiu4iSCkCHzeKC9lnAaLW3DKP4dW+RIhwbyvn6yiqF04o= -----END CERTIFICATE-----Generated at Tue Dec 16 22:34:59 2025 by rpki-client