This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS147003.roa File: AS147003.roa (raw, json) Hash identifier: fxs4ed264GGUrTEuP5lzebQnsmDOTSH6nlC9IVuG318= Subject key identifier: 65:6F:61:69:B7:4A:7C:01:06:4E:0F:89:1B:B2:3B:B4:8A:B5:BE:7A Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 658DB0AB5C6D0571027AF40E4BFD8A57F0A956B0 Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS147003.roa Signing time: Wed 17 Dec 2025 16:55:32 +0000 ROA not before: Wed 17 Dec 2025 16:50:32 +0000 ROA not after: Wed 16 Dec 2026 16:55:32 +0000 asID: 147003 IP address blocks: 84.54.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:8d:b0:ab:5c:6d:05:71:02:7a:f4:0e:4b:fd:8a:57:f0:a9:56:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Dec 17 16:50:32 2025 GMT Not After : Dec 16 16:55:32 2026 GMT Subject: CN=656F6169B74A7C01064E0F891BB23BB48AB5BE7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5c:ef:6c:e1:c8:cc:40:19:3d:1b:4d:97:d0: 42:aa:6e:91:72:b4:ed:cc:b1:9e:aa:d1:c3:9b:8c: 78:49:e8:a3:f3:86:1b:89:9a:86:7f:ec:c7:23:e5: ae:b9:fa:6a:f4:ae:93:36:a8:92:cd:2e:e9:24:a7: a0:8f:60:3d:d2:ce:7d:28:29:8d:d2:f6:b8:b0:5e: c5:1e:c0:fd:df:21:10:7b:e8:e4:fb:19:11:2d:90: 52:ee:5a:05:d6:a1:e3:3d:27:05:48:41:8e:32:1b: 57:fc:56:b7:d8:47:20:35:48:06:19:9c:d2:97:1f: f6:0e:ac:b9:a2:cb:71:28:d7:7c:19:01:98:8c:5f: ad:cb:76:de:30:6b:b1:4a:ab:fd:01:50:07:6e:5c: ff:7e:13:0f:69:34:67:21:bb:1e:9b:ac:8b:13:29: 98:f8:0d:79:60:1d:9d:c1:bb:8c:29:ad:0b:c8:d6: 2e:08:59:71:c9:42:a4:ee:0b:a8:4f:0f:39:27:4b: 77:8a:74:8c:a3:40:00:ce:c3:af:ad:74:ae:48:c1: e7:f3:f2:9e:30:d3:ad:65:62:df:46:12:27:a7:d8: 7c:df:aa:c1:03:8f:ad:9a:8a:a2:4a:e2:29:0b:aa: 04:17:50:98:76:63:67:c7:8f:04:de:c6:a0:3f:f7: 6f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6F:61:69:B7:4A:7C:01:06:4E:0F:89:1B:B2:3B:B4:8A:B5:BE:7A X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS147003.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.0.0/23 Signature Algorithm: sha256WithRSAEncryption 00:b3:4c:93:09:77:37:19:a1:cf:c6:0b:20:79:0d:df:30:62: 5a:24:c4:77:0f:15:3a:5b:8f:06:79:19:b5:7d:83:02:de:4f: 47:d0:25:0e:c3:ee:10:bb:f8:3d:fa:e7:51:e9:d6:d2:c4:0a: d1:ee:ee:b9:5a:2c:e8:87:3b:e0:67:e6:a1:ea:c0:46:e9:ab: 12:10:6a:ef:95:8b:d5:9b:32:64:08:1a:4d:c9:16:a1:f6:d8: f9:2a:00:78:5a:50:d7:8a:4d:c8:f6:b7:0b:ae:7b:40:e6:26: 8d:6e:8f:48:5e:10:82:1f:2b:62:cf:12:7d:d0:ad:a9:6c:8c: 40:55:1a:a0:02:c5:23:c2:ad:db:c6:fe:b6:24:53:4c:04:66: 12:b2:07:87:bd:44:59:9a:00:dd:72:50:21:1d:ca:cf:57:08: 99:83:a2:3c:2f:3a:81:59:15:0f:34:bc:c3:8a:d0:74:9f:3e: 3f:7d:60:f9:67:95:e7:17:7e:db:50:3d:4d:39:00:59:de:2f: 66:d9:33:ef:ae:df:ad:23:6f:8a:ec:84:eb:07:92:6d:49:ca: ae:8f:ec:5b:f0:a6:bf:3a:0e:12:3e:cf:27:c5:a0:02:c7:d4: fe:33:36:8b:ca:d3:92:5b:d2:14:40:ea:2c:d9:14:88:83:03: a6:2f:50:02 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUZY2wq1xtBXECevQOS/2KV/CpVrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNTEyMTcxNjUwMzJaFw0yNjEyMTYxNjU1MzJaMDMxMTAvBgNV BAMTKDY1NkY2MTY5Qjc0QTdDMDEwNjRFMEY4OTFCQjIzQkI0OEFCNUJFN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNXO9s4cjMQBk9G02X0EKqbpFy tO3MsZ6q0cObjHhJ6KPzhhuJmoZ/7Mcj5a65+mr0rpM2qJLNLukkp6CPYD3Szn0o KY3S9riwXsUewP3fIRB76OT7GREtkFLuWgXWoeM9JwVIQY4yG1f8VrfYRyA1SAYZ nNKXH/YOrLmiy3Eo13wZAZiMX63Ldt4wa7FKq/0BUAduXP9+Ew9pNGchux6brIsT KZj4DXlgHZ3Bu4wprQvI1i4IWXHJQqTuC6hPDzknS3eKdIyjQADOw6+tdK5Iwefz 8p4w061lYt9GEien2HzfqsEDj62aiqJK4ikLqgQXUJh2Y2fHjwTexqA/92/XAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUZW9habdKfAEGTg+JG7I7tIq1vnowHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMTQ3MDAzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVDYA MA0GCSqGSIb3DQEBCwUAA4IBAQAAs0yTCXc3GaHPxgsgeQ3fMGJaJMR3DxU6W48G eRm1fYMC3k9H0CUOw+4Qu/g9+udR6dbSxArR7u65WizohzvgZ+ah6sBG6asSEGrv lYvVmzJkCBpNyRah9tj5KgB4WlDXik3I9rcLrntA5iaNbo9IXhCCHytizxJ90K2p bIxAVRqgAsUjwq3bxv62JFNMBGYSsgeHvURZmgDdclAhHcrPVwiZg6I8LzqBWRUP NLzDitB0nz4/fWD5Z5XnF37bUD1NOQBZ3i9m2TPvrt+tI2+K7ITrB5JtScquj+xb 8Ka/Og4SPs8nxaACx9T+MzaLytOSW9IUQOos2RSIgwOmL1AC -----END CERTIFICATE-----Generated at Wed Dec 17 18:09:28 2025 by rpki-client