This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS30860.roa File: AS30860.roa (raw, json) Hash identifier: 7GjJW36rhZx22TIRGhbdAisY1f4Fzqd+Pmblr+3Qn5s= Subject key identifier: 5E:AC:70:51:96:05:6C:57:95:8A:5A:5B:31:67:D3:12:57:AF:1C:29 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 24D9A1629F6D4092542467FCDEEAAD39588E3071 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS30860.roa Signing time: Thu 11 Dec 2025 10:55:32 +0000 ROA not before: Thu 11 Dec 2025 10:50:32 +0000 ROA not after: Thu 10 Dec 2026 10:55:32 +0000 asID: 30860 IP address blocks: 46.203.159.0/24 maxlen: 24 46.203.186.0/24 maxlen: 24 92.112.135.0/24 maxlen: 24 92.112.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d9:a1:62:9f:6d:40:92:54:24:67:fc:de:ea:ad:39:58:8e:30:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 11 10:50:32 2025 GMT Not After : Dec 10 10:55:32 2026 GMT Subject: CN=5EAC705196056C57958A5A5B3167D31257AF1C29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e7:03:f3:d5:43:8c:b2:48:ea:98:6b:a3:c5: ef:7d:7b:aa:47:31:63:e0:d1:c6:e0:cc:24:b6:3c: a5:61:23:43:68:7d:10:6a:75:ea:cb:42:74:20:04: c3:ea:67:6f:43:76:91:49:ed:d3:45:04:e3:51:5f: 3c:28:61:3a:94:fd:45:ee:db:99:49:a3:d3:7c:cd: e6:41:49:f1:2d:f9:06:86:cd:d2:7f:39:55:7d:4e: b1:f7:0b:cc:1f:22:9d:b2:98:64:a5:a7:a4:00:8f: 76:8e:3e:39:0f:45:df:2b:77:22:f7:24:89:a4:84: 07:73:b4:89:74:cb:c5:be:c0:92:bf:46:aa:d5:40: d8:19:d6:23:53:a7:7a:64:b1:93:e1:9a:03:9b:bb: 44:6d:98:a2:c5:30:6a:d4:93:4e:f6:8a:65:c0:c2: f5:b5:90:14:f0:d4:b6:a4:b1:64:f6:32:a3:e4:e0: 8e:57:e1:4c:31:80:f6:bd:ce:ef:04:23:f8:df:a1: 35:88:bf:42:86:9e:39:a7:d7:eb:e4:bd:b2:2d:41: 92:0a:51:c7:b8:54:19:6c:e1:85:29:d2:a6:62:03: 47:da:09:45:a4:19:b9:0a:d3:8b:28:4d:82:cd:2f: 1b:8f:73:98:51:31:1a:29:78:3a:5c:cc:be:0c:04: fc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AC:70:51:96:05:6C:57:95:8A:5A:5B:31:67:D3:12:57:AF:1C:29 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS30860.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.203.159.0/24 46.203.186.0/24 92.112.135.0/24 92.112.138.0/24 Signature Algorithm: sha256WithRSAEncryption 93:7a:90:dd:09:4f:5c:78:4d:7f:e4:4b:bb:84:bc:0a:a1:c0: 08:f9:8c:a0:38:e4:b8:27:9f:ed:de:bf:44:2b:be:39:5e:b7: 68:37:61:d5:d0:3e:15:94:65:76:3e:c9:ef:1d:9c:c2:b6:ce: 81:10:26:8a:5d:51:5d:bd:57:3f:89:a8:75:70:1f:92:82:a2: b7:4e:b2:74:8d:8c:49:0d:59:89:67:d7:bb:90:0b:01:9f:3e: 5b:6a:6b:45:78:e3:14:27:72:ba:68:b7:a1:a0:78:a7:3a:e6: f0:4b:0a:6c:76:f3:42:47:07:5c:e9:de:5b:50:3e:79:e1:7a: b4:45:fd:1a:86:89:3d:d3:f7:6d:e5:09:ca:f9:86:5e:7b:88: 1c:f0:72:33:ad:fc:25:e5:89:2d:8d:a9:91:a6:60:dd:30:f4: 86:b5:f0:6e:03:13:2b:40:1d:84:32:60:ed:35:2f:0e:3e:28: 49:f0:f7:52:99:2e:dd:8d:a6:06:ca:81:37:d9:2c:f9:56:50: f1:cd:01:45:50:6f:fd:5e:c8:bb:5a:8b:f3:53:6d:5e:63:dc: 50:96:34:33:19:9f:3b:3b:22:9b:c6:92:12:31:2f:3d:b2:e1: 23:17:ea:94:7d:08:87:89:86:65:8a:00:46:8d:06:44:da:fe: e7:07:78:d8 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgIUJNmhYp9tQJJUJGf83uqtOViOMHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMTExMDUwMzJaFw0yNjEyMTAxMDU1MzJaMDMxMTAvBgNV BAMTKDVFQUM3MDUxOTYwNTZDNTc5NThBNUE1QjMxNjdEMzEyNTdBRjFDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5wPz1UOMskjqmGujxe99e6pH MWPg0cbgzCS2PKVhI0NofRBqderLQnQgBMPqZ29DdpFJ7dNFBONRXzwoYTqU/UXu 25lJo9N8zeZBSfEt+QaGzdJ/OVV9TrH3C8wfIp2ymGSlp6QAj3aOPjkPRd8rdyL3 JImkhAdztIl0y8W+wJK/RqrVQNgZ1iNTp3pksZPhmgObu0RtmKLFMGrUk072imXA wvW1kBTw1LaksWT2MqPk4I5X4UwxgPa9zu8EI/jfoTWIv0KGnjmn1+vkvbItQZIK Uce4VBls4YUp0qZiA0faCUWkGbkK04soTYLNLxuPc5hRMRopeDpczL4MBPxxAgMB AAGjggIbMIICFzAdBgNVHQ4EFgQUXqxwUZYFbFeVilpbMWfTElevHCkwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMzA4NjAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAAuy58D BAAuy7oDBABccIcDBABccIowDQYJKoZIhvcNAQELBQADggEBAJN6kN0JT1x4TX/k S7uEvAqhwAj5jKA45Lgnn+3ev0Qrvjlet2g3YdXQPhWUZXY+ye8dnMK2zoEQJopd UV29Vz+JqHVwH5KCordOsnSNjEkNWYln17uQCwGfPltqa0V44xQncrpot6GgeKc6 5vBLCmx280JHB1zp3ltQPnnherRF/RqGiT3T923lCcr5hl57iBzwcjOt/CXliS2N qZGmYN0w9Ia18G4DEytAHYQyYO01Lw4+KEnw91KZLt2NpgbKgTfZLPlWUPHNAUVQ b/1eyLtai/NTbV5j3FCWNDMZnzs7IpvGkhIxLz2y4SMX6pR9CIeJhmWKAEaNBkTa /ucHeNg= -----END CERTIFICATE-----Generated at Mon Dec 22 15:38:45 2025 by rpki-client