This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS400810.roa File: AS400810.roa (raw, json) Hash identifier: 0PjU7mvS38dVYbiImlgsIgTxD93PZim05tRy+5Vs3VE= Subject key identifier: 9D:2F:77:4B:8B:11:4B:AB:06:90:F8:E8:C1:83:5E:50:2A:79:7F:EA Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 56FFBDBE0BF151D82FD55C98D9A34445C150B603 Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS400810.roa Signing time: Sat 15 Nov 2025 05:55:11 +0000 ROA not before: Sat 15 Nov 2025 05:50:11 +0000 ROA not after: Sat 14 Nov 2026 05:55:11 +0000 asID: 400810 IP address blocks: 45.153.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ff:bd:be:0b:f1:51:d8:2f:d5:5c:98:d9:a3:44:45:c1:50:b6:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Nov 15 05:50:11 2025 GMT Not After : Nov 14 05:55:11 2026 GMT Subject: CN=9D2F774B8B114BAB0690F8E8C1835E502A797FEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f0:4b:ba:f1:22:ec:8d:79:90:75:93:d5:d2: c8:94:4d:f4:70:9c:0f:02:5d:8f:4c:51:7a:9b:45: 4c:07:95:c7:72:ad:11:97:71:43:d4:d5:eb:01:13: 14:fc:0d:71:f7:88:e9:d4:59:f6:c4:52:a2:ea:9a: c1:3c:97:a8:29:cd:4f:e5:ae:39:db:56:a9:d5:f1: 6d:10:8a:98:7c:9d:e2:79:68:ab:2d:fc:db:ae:3c: 08:3d:ac:fa:01:85:fa:4f:32:a8:43:47:1f:90:b5: c9:73:c4:20:b7:73:66:26:88:68:e8:9b:e2:35:c7: 26:46:e2:50:71:95:63:4c:4b:c7:c0:9a:9f:a5:f8: 27:1d:8e:6e:dc:6d:bb:03:75:b2:60:b8:f9:22:7b: 17:57:5e:cd:c1:0f:40:cc:09:53:de:8f:31:89:fe: 96:b7:70:de:e6:b5:65:dd:7b:63:29:f0:0c:cc:40: 4d:ea:3a:3b:f8:a7:2b:d2:64:5c:70:c6:ab:6c:49: ed:25:df:1b:92:1a:47:02:7f:12:fa:04:5e:21:91: 13:f2:58:65:df:c8:f4:8f:f3:46:67:3b:06:37:d3: f3:07:b8:34:39:4b:d2:35:f7:c2:9d:41:e9:98:65: 79:00:49:1f:52:fd:b7:e9:98:1b:a2:16:a8:cb:e3: 01:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2F:77:4B:8B:11:4B:AB:06:90:F8:E8:C1:83:5E:50:2A:79:7F:EA X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS400810.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.6.0/24 Signature Algorithm: sha256WithRSAEncryption 47:25:de:79:6d:a7:41:61:16:91:4e:63:11:f9:dd:c8:f2:bf: 5c:02:a3:91:16:cc:91:8b:7a:f1:a3:33:76:80:8e:a2:7e:29: a0:b3:25:3a:0e:3f:d3:c0:b8:98:cc:bb:98:c9:92:d3:45:18: 62:27:c3:42:ca:05:94:49:51:40:71:4b:be:54:2c:6d:2f:8f: 16:ca:75:fe:90:a0:9c:63:28:5a:99:c8:72:d8:eb:3c:24:c4: 11:d6:10:e6:54:15:88:88:a8:42:92:f4:be:87:ce:60:da:78: 3c:e8:63:bb:c0:f2:61:43:de:2a:fb:8e:3a:50:26:fc:6b:66: 51:93:3d:d8:da:3b:9d:0d:fa:fc:5a:9b:b0:38:94:dc:14:ce: 7a:60:e1:c5:13:66:6a:42:75:d0:c8:3f:1b:3b:dd:25:63:83: 8c:a5:6b:5f:3f:dd:59:97:18:b9:ec:18:c8:b9:4f:bd:81:58: 19:8e:9a:f2:69:e4:36:42:f6:de:8c:56:ff:98:c7:98:e6:79: 3c:cb:25:a4:cb:f9:c9:8e:9d:d9:90:a7:6f:68:ee:fd:90:ac: 95:62:35:64:b5:53:f8:3a:3e:de:e9:c4:6c:71:33:55:ea:b4: 93:55:aa:63:db:f7:1e:c1:c8:bc:30:ad:6a:e5:0d:40:24:46: 03:bb:04:ee -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUVv+9vgvxUdgv1VyY2aNERcFQtgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNTExMTUwNTUwMTFaFw0yNjExMTQwNTU1MTFaMDMxMTAvBgNV BAMTKDlEMkY3NzRCOEIxMTRCQUIwNjkwRjhFOEMxODM1RTUwMkE3OTdGRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo8Eu68SLsjXmQdZPV0siUTfRw nA8CXY9MUXqbRUwHlcdyrRGXcUPU1esBExT8DXH3iOnUWfbEUqLqmsE8l6gpzU/l rjnbVqnV8W0Qiph8neJ5aKst/NuuPAg9rPoBhfpPMqhDRx+QtclzxCC3c2YmiGjo m+I1xyZG4lBxlWNMS8fAmp+l+Ccdjm7cbbsDdbJguPkiexdXXs3BD0DMCVPejzGJ /pa3cN7mtWXde2Mp8AzMQE3qOjv4pyvSZFxwxqtsSe0l3xuSGkcCfxL6BF4hkRPy WGXfyPSP80ZnOwY30/MHuDQ5S9I198KdQemYZXkASR9S/bfpmBuiFqjL4wHnAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUnS93S4sRS6sGkPjowYNeUCp5f+owHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTNDAwODEwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZkG MA0GCSqGSIb3DQEBCwUAA4IBAQBHJd55badBYRaRTmMR+d3I8r9cAqORFsyRi3rx ozN2gI6ifimgsyU6Dj/TwLiYzLuYyZLTRRhiJ8NCygWUSVFAcUu+VCxtL48WynX+ kKCcYyhamchy2Os8JMQR1hDmVBWIiKhCkvS+h85g2ng86GO7wPJhQ94q+446UCb8 a2ZRkz3Y2judDfr8WpuwOJTcFM56YOHFE2ZqQnXQyD8bO90lY4OMpWtfP91Zlxi5 7BjIuU+9gVgZjpryaeQ2QvbejFb/mMeY5nk8yyWky/nJjp3ZkKdvaO79kKyVYjVk tVP4Oj7e6cRscTNV6rSTVapj2/cewci8MK1q5Q1AJEYDuwTu -----END CERTIFICATE-----Generated at Sat Dec 6 21:32:59 2025 by rpki-client