This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7922.roa File: AS7922.roa (raw, json) Hash identifier: mJN/Wqs2RT9O6JqTd9hRksHz6d4kJuIVrQ0bwWgOnuw= Subject key identifier: 4C:71:DA:1A:83:EB:85:16:90:D3:EC:3E:4C:6D:83:A0:3C:64:46:72 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 22A5D7CFB1276FB085BC97437BDD7FAA86CB4507 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7922.roa Signing time: Thu 18 Dec 2025 07:47:56 +0000 ROA not before: Thu 18 Dec 2025 07:42:56 +0000 ROA not after: Thu 17 Dec 2026 07:47:56 +0000 asID: 7922 IP address blocks: 46.202.218.0/24 maxlen: 24 92.113.86.0/24 maxlen: 24 92.113.89.0/24 maxlen: 24 92.113.114.0/24 maxlen: 24 178.93.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a5:d7:cf:b1:27:6f:b0:85:bc:97:43:7b:dd:7f:aa:86:cb:45:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 18 07:42:56 2025 GMT Not After : Dec 17 07:47:56 2026 GMT Subject: CN=4C71DA1A83EB851690D3EC3E4C6D83A03C644672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d9:6e:61:61:43:44:2b:a1:67:3b:12:47:47: 2c:c3:c8:2b:49:15:ef:fa:e6:da:2e:3b:05:b7:84: 92:62:e3:04:9d:b5:53:73:5d:b6:bc:e8:12:eb:be: da:37:fc:49:74:da:ae:c2:52:39:a4:73:a3:c1:b9: 61:fb:07:25:c9:f3:95:ad:c8:d9:93:e5:21:d0:ba: 3a:89:42:92:3c:bd:6c:d0:93:39:81:f4:da:ac:2f: e4:20:c1:02:20:91:8e:86:91:f6:fd:81:54:32:f8: 96:68:4e:1c:26:69:5b:7b:2d:77:8e:97:0b:a6:2b: fa:ec:3f:58:70:72:2f:3b:49:51:28:1f:aa:35:b0: a3:b5:97:32:0c:7f:25:44:53:06:1e:60:e7:5e:a7: 67:27:8e:1d:95:9d:11:e1:fb:c4:08:eb:14:83:a7: f7:e8:46:a6:22:00:2c:b3:53:6c:a7:92:14:41:40: 81:e5:24:f7:e2:b8:a1:ad:6e:cd:4b:bc:15:16:cf: f1:a3:d6:80:b3:85:c4:c8:c6:fe:7a:ed:e2:02:d2: 01:19:d1:f1:d2:5f:7b:2d:51:af:1c:cf:96:b0:92: 55:81:ab:30:b7:7f:62:5b:41:71:e4:fe:ac:cb:59: b5:62:13:7f:b8:db:3e:1c:5c:0b:2a:cf:85:b4:b6: 32:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:71:DA:1A:83:EB:85:16:90:D3:EC:3E:4C:6D:83:A0:3C:64:46:72 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS7922.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.202.218.0/24 92.113.86.0/24 92.113.89.0/24 92.113.114.0/24 178.93.115.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:a4:9f:ab:a0:75:a5:46:ac:bb:08:62:5a:21:08:ed:61:93: d0:1b:08:29:f3:73:2a:94:25:c8:e7:d5:b7:aa:6e:dc:18:a5: 9d:e4:d0:f6:0e:fa:b6:b5:a9:c8:94:4c:90:2a:7b:a0:80:9a: 7f:2c:8c:ab:42:2d:2e:1e:cb:0e:63:3d:75:ef:d5:6d:eb:d5: aa:f9:13:00:01:f4:48:7f:e1:76:24:13:ce:60:ba:3d:86:9e: 19:d4:c7:04:a9:28:9e:be:c5:c8:42:6a:d8:07:e9:2f:f8:c2: 1d:7b:f2:7f:3a:9b:5f:64:3f:3e:d9:2e:91:c3:87:cf:08:ed: c5:be:7d:77:19:0a:42:c4:5c:a1:04:d9:03:de:de:73:d7:ca: 6c:72:fc:62:cf:b6:58:6f:4e:ea:41:da:34:64:f0:64:6d:e4: 57:c7:52:ff:c7:f8:3e:09:be:02:be:34:f1:d0:6d:c2:e4:bc: a5:4b:b0:a2:1e:21:0f:17:eb:f7:d7:05:3b:49:5d:87:de:67: 9a:41:27:8a:9a:20:54:16:2a:e4:e2:bb:4c:63:2f:49:e4:90: 09:e7:14:05:05:32:1c:fb:57:19:1b:46:fe:44:5f:b9:5e:14: ad:bd:6f:44:e2:9d:ef:f4:8f:a5:2f:ef:9e:bc:f5:6b:c8:6a: 4f:e5:85:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUIqXXz7Enb7CFvJdDe91/qobLRQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMTgwNzQyNTZaFw0yNjEyMTcwNzQ3NTZaMDMxMTAvBgNV BAMTKDRDNzFEQTFBODNFQjg1MTY5MEQzRUMzRTRDNkQ4M0EwM0M2NDQ2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd2W5hYUNEK6FnOxJHRyzDyCtJ Fe/65touOwW3hJJi4wSdtVNzXba86BLrvto3/El02q7CUjmkc6PBuWH7ByXJ85Wt yNmT5SHQujqJQpI8vWzQkzmB9NqsL+QgwQIgkY6Gkfb9gVQy+JZoThwmaVt7LXeO lwumK/rsP1hwci87SVEoH6o1sKO1lzIMfyVEUwYeYOdep2cnjh2VnRHh+8QI6xSD p/foRqYiACyzU2ynkhRBQIHlJPfiuKGtbs1LvBUWz/Gj1oCzhcTIxv567eIC0gEZ 0fHSX3stUa8cz5awklWBqzC3f2JbQXHk/qzLWbViE3+42z4cXAsqz4W0tjIRAgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUTHHaGoPrhRaQ0+w+TG2DoDxkRnIwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNzkyMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAC7K2gME AFxxVgMEAFxxWQMEAFxxcgMEALJdczANBgkqhkiG9w0BAQsFAAOCAQEAnaSfq6B1 pUasuwhiWiEI7WGT0BsIKfNzKpQlyOfVt6pu3BilneTQ9g76trWpyJRMkCp7oICa fyyMq0ItLh7LDmM9de/VbevVqvkTAAH0SH/hdiQTzmC6PYaeGdTHBKkonr7FyEJq 2AfpL/jCHXvyfzqbX2Q/PtkukcOHzwjtxb59dxkKQsRcoQTZA97ec9fKbHL8Ys+2 WG9O6kHaNGTwZG3kV8dS/8f4Pgm+Ar408dBtwuS8pUuwoh4hDxfr99cFO0ldh95n mkEnipogVBYq5OK7TGMvSeSQCecUBQUyHPtXGRtG/kRfuV4Urb1vROKd7/SPpS/v nrz1a8hqT+WFsw== -----END CERTIFICATE-----Generated at Sat Dec 20 14:38:27 2025 by rpki-client