This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48025.roa File: AS48025.roa (raw, json) Hash identifier: ynnlrHI+oWDMh8/kQl8rsxvCGggKI6cd5ky2xbcJXvM= Subject key identifier: 4D:E0:F3:DD:48:61:01:A9:67:4E:ED:48:F3:1F:E4:93:42:D6:EC:C3 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 0B47F2A0EDC23CF227DA234D4A6D1BF9F8AA68B9 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48025.roa Signing time: Wed 03 Dec 2025 08:55:13 +0000 ROA not before: Wed 03 Dec 2025 08:50:13 +0000 ROA not after: Wed 02 Dec 2026 08:55:13 +0000 asID: 48025 IP address blocks: 45.88.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:47:f2:a0:ed:c2:3c:f2:27:da:23:4d:4a:6d:1b:f9:f8:aa:68:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 08:50:13 2025 GMT Not After : Dec 2 08:55:13 2026 GMT Subject: CN=4DE0F3DD486101A9674EED48F31FE49342D6ECC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:87:74:28:47:3c:76:9d:a4:bd:94:0a:0a:1e: 27:c2:2e:7e:f4:cb:ad:6a:97:52:53:a8:7e:37:7c: 79:52:22:78:2a:0d:e5:81:c5:47:bf:cf:26:df:88: de:69:72:58:5c:28:7f:c7:7d:aa:87:8f:95:c8:1c: ca:20:07:c4:93:71:17:c3:c6:bb:40:8a:98:fb:98: f5:58:7f:8c:36:26:2c:42:57:25:63:2c:5c:c5:12: 48:f7:d7:ec:b7:27:8b:d0:9d:d0:c8:1e:28:18:25: 59:48:bc:75:9c:fd:25:56:6b:c8:72:64:6a:b9:7a: ec:13:94:8e:98:bf:dd:4d:db:ab:52:9a:cb:da:9d: 9f:6b:7d:2a:91:4e:f8:3c:fa:e8:0e:f3:30:38:1a: f4:9d:06:6d:1e:1d:08:a6:59:de:fd:b0:b4:29:d1: 54:5a:2c:f6:57:8a:ea:36:72:9e:ec:67:c0:0f:0e: 0b:43:97:3c:7e:f9:78:1f:7a:f6:aa:7a:8c:13:35: da:9c:f8:3e:60:6e:77:ff:0e:c7:50:67:97:89:df: 33:e0:22:51:51:63:4d:76:f4:6e:07:9f:f4:77:2f: d6:7e:fc:ed:46:e7:18:7b:56:72:a1:ba:04:86:0c: 90:dd:ad:9e:b5:a0:20:61:bd:70:41:73:8c:01:54: 4f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E0:F3:DD:48:61:01:A9:67:4E:ED:48:F3:1F:E4:93:42:D6:EC:C3 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48025.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.96.0/24 Signature Algorithm: sha256WithRSAEncryption 87:26:b6:43:84:ed:21:60:af:99:fb:b5:46:71:86:99:13:2b: 0a:51:25:f7:8c:f8:5d:be:c2:44:e4:f6:07:33:6c:d5:3f:f3: e6:b1:d7:8f:bc:12:81:b1:98:1c:e3:56:b5:61:17:d7:2d:ea: 65:d4:2b:ba:a7:6c:50:59:5b:6f:1d:03:38:71:31:c4:43:48: 06:6e:71:d6:a8:41:52:77:33:26:e6:f1:7e:81:a4:37:70:6b: 22:a1:18:32:ad:6f:24:a7:96:85:a0:5f:29:13:d0:b1:bc:b2: 0d:9c:f7:24:01:32:f5:f5:c5:df:7e:8c:a2:6b:25:99:31:09: ee:8f:2c:27:7a:14:7a:1e:4c:aa:a8:50:0e:20:ff:3e:38:14: 31:fb:85:89:de:a4:a8:87:27:48:e4:40:91:bc:d8:74:0d:75: 98:32:94:89:2d:41:e5:e9:98:4a:b1:52:55:74:f2:09:6c:3b: 5e:52:40:dd:fb:af:19:bc:e6:42:3b:14:fa:67:cb:7c:9d:b3: c9:1a:6f:4c:f0:a2:de:f2:9c:13:6a:5a:68:1b:ec:65:b0:fd: fe:cd:65:3e:e1:7b:a4:ee:10:3a:71:d6:40:c8:96:21:de:d2: 00:0d:79:f9:ea:b6:7b:fa:16:c9:b3:0a:44:4b:0f:a5:6b:9b: 07:3b:21:ab -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUC0fyoO3CPPIn2iNNSm0b+fiqaLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwODUwMTNaFw0yNjEyMDIwODU1MTNaMDMxMTAvBgNV BAMTKDRERTBGM0RENDg2MTAxQTk2NzRFRUQ0OEYzMUZFNDkzNDJENkVDQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDph3QoRzx2naS9lAoKHifCLn70 y61ql1JTqH43fHlSIngqDeWBxUe/zybfiN5pclhcKH/HfaqHj5XIHMogB8STcRfD xrtAipj7mPVYf4w2JixCVyVjLFzFEkj31+y3J4vQndDIHigYJVlIvHWc/SVWa8hy ZGq5euwTlI6Yv91N26tSmsvanZ9rfSqRTvg8+ugO8zA4GvSdBm0eHQimWd79sLQp 0VRaLPZXiuo2cp7sZ8APDgtDlzx++XgfevaqeowTNdqc+D5gbnf/DsdQZ5eJ3zPg IlFRY0129G4Hn/R3L9Z+/O1G5xh7VnKhugSGDJDdrZ61oCBhvXBBc4wBVE8RAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUTeDz3UhhAalnTu1I8x/kk0LW7MMwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDgwMjUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtWGAw DQYJKoZIhvcNAQELBQADggEBAIcmtkOE7SFgr5n7tUZxhpkTKwpRJfeM+F2+wkTk 9gczbNU/8+ax14+8EoGxmBzjVrVhF9ct6mXUK7qnbFBZW28dAzhxMcRDSAZucdao QVJ3Mybm8X6BpDdwayKhGDKtbySnloWgXykT0LG8sg2c9yQBMvX1xd9+jKJrJZkx Ce6PLCd6FHoeTKqoUA4g/z44FDH7hYnepKiHJ0jkQJG82HQNdZgylIktQeXpmEqx UlV08glsO15SQN37rxm85kI7FPpny3yds8kab0zwot7ynBNqWmgb7GWw/f7NZT7h e6TuEDpx1kDIliHe0gANefnqtnv6FsmzCkRLD6Vrmwc7Ias= -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:56 2025 by rpki-client