This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS47509.roa File: AS47509.roa (raw, json) Hash identifier: 23yEHyJNPvkdShfs0Sgy/df9GKWTPNfN9JMbUw7iFoE= Subject key identifier: 2F:75:EB:1E:6F:54:27:51:F6:17:CF:64:85:03:90:B9:3F:1B:11:0F Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 2F0B3E7632CA0C5ECF9A0C9FFE5621FDD6F57240 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS47509.roa Signing time: Tue 06 Jan 2026 01:00:43 +0000 ROA not before: Tue 06 Jan 2026 00:55:43 +0000 ROA not after: Tue 05 Jan 2027 01:00:43 +0000 asID: 47509 IP address blocks: 2a14:7581:900::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0b:3e:76:32:ca:0c:5e:cf:9a:0c:9f:fe:56:21:fd:d6:f5:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 6 00:55:43 2026 GMT Not After : Jan 5 01:00:43 2027 GMT Subject: CN=2F75EB1E6F542751F617CF64850390B93F1B110F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:69:11:2c:8b:53:cb:7e:3d:66:7b:17:07:31: d5:16:02:6a:f9:cd:8b:1d:1e:c7:bd:61:d8:90:1a: 0f:97:b2:05:90:19:b6:a7:2d:3d:8c:9e:3a:bc:48: bf:ab:58:a2:20:87:f9:72:7c:be:7d:94:07:69:0b: 0d:0e:4a:38:34:21:f1:d0:6e:e4:51:00:48:47:f2: 50:db:c2:6a:4b:46:4f:74:69:1b:7e:82:e6:4f:f8: 80:11:11:26:8c:d2:f7:93:cc:40:c5:3d:f0:34:3d: 98:3e:45:68:50:cc:b5:f7:c3:0c:a3:19:8e:ba:8b: 28:6c:ce:2d:55:f4:d5:d5:88:1c:21:42:bd:9c:ff: d3:9c:7e:25:99:da:b9:95:30:87:5e:6a:b9:0e:76: e9:70:58:95:24:9a:ff:ac:f6:ef:77:b4:76:78:05: 22:8b:46:9a:04:b5:36:8b:ab:d0:d8:62:6a:48:1e: 3b:f5:08:33:b3:d0:d7:b3:c0:6b:a9:ee:12:41:d9: 0f:98:cc:85:e3:8b:3e:b1:12:66:95:70:25:7d:65: 29:63:23:ff:dd:d2:e8:cf:60:a3:49:35:3f:f9:e9: a8:00:f1:e1:13:9d:96:db:a9:09:4d:02:70:b8:50: 18:20:38:78:3a:27:d4:46:fa:4d:90:e1:ab:a3:8d: 6b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:75:EB:1E:6F:54:27:51:F6:17:CF:64:85:03:90:B9:3F:1B:11:0F X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS47509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:900::/40 Signature Algorithm: sha256WithRSAEncryption 78:9e:3e:15:6f:68:2a:0f:50:84:d3:5e:27:f5:f0:87:56:13: 7b:c2:c5:03:f2:a7:50:98:60:eb:dd:f1:04:65:a4:93:8b:ff: a7:12:b2:e0:1e:f0:48:d7:e6:dd:dc:a4:4e:72:31:7c:10:a0: 7e:4d:b6:54:71:ed:40:a7:b8:e4:d7:8b:b3:32:94:ce:60:a4: 32:15:1a:a5:81:e0:56:20:6b:ba:59:02:08:56:94:20:f9:42: 91:66:22:d7:78:6e:e6:08:8d:b0:eb:4e:e7:98:d9:d5:6e:7b: d3:83:0d:3f:53:94:74:f5:c2:8a:b0:0e:bc:2f:ff:93:61:25: 8a:d3:f4:39:c9:2b:3b:0a:77:43:68:52:59:38:60:87:65:31: df:87:ab:ac:e6:41:bd:0e:94:e4:b8:88:8d:10:10:48:9c:5d: 63:4e:52:90:36:10:2e:31:1b:0a:d9:0e:1e:6f:cf:5a:09:68: ca:da:63:3e:76:d8:46:ab:4d:b8:36:02:a2:15:97:0d:78:f6: 46:e6:f4:a3:48:db:e0:c8:ca:e5:68:5e:19:d9:73:64:92:75: cf:be:d7:5f:b7:d5:21:3b:d2:39:ae:c9:1f:c4:47:e3:85:24: a4:dc:50:f7:69:8d:44:f1:fc:eb:7f:ae:57:50:42:45:c8:fd: c1:5f:e5:65 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIULws+djLKDF7Pmgyf/lYh/db1ckAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMDYwMDU1NDNaFw0yNzAxMDUwMTAwNDNaMDMxMTAvBgNV BAMTKDJGNzVFQjFFNkY1NDI3NTFGNjE3Q0Y2NDg1MDM5MEI5M0YxQjExMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMaREsi1PLfj1mexcHMdUWAmr5 zYsdHse9YdiQGg+XsgWQGbanLT2Mnjq8SL+rWKIgh/lyfL59lAdpCw0OSjg0IfHQ buRRAEhH8lDbwmpLRk90aRt+guZP+IARESaM0veTzEDFPfA0PZg+RWhQzLX3wwyj GY66iyhszi1V9NXViBwhQr2c/9OcfiWZ2rmVMIdearkOdulwWJUkmv+s9u93tHZ4 BSKLRpoEtTaLq9DYYmpIHjv1CDOz0NezwGup7hJB2Q+YzIXjiz6xEmaVcCV9ZSlj I//d0ujPYKNJNT/56agA8eETnZbbqQlNAnC4UBggOHg6J9RG+k2Q4aujjWsnAgMB AAGjggILMIICBzAdBgNVHQ4EFgQUL3XrHm9UJ1H2F89khQOQuT8bEQ8wHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTNDc1MDkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqFHWB CTANBgkqhkiG9w0BAQsFAAOCAQEAeJ4+FW9oKg9QhNNeJ/Xwh1YTe8LFA/KnUJhg 693xBGWkk4v/pxKy4B7wSNfm3dykTnIxfBCgfk22VHHtQKe45NeLszKUzmCkMhUa pYHgViBrulkCCFaUIPlCkWYi13hu5giNsOtO55jZ1W5704MNP1OUdPXCirAOvC// k2ElitP0OckrOwp3Q2hSWThgh2Ux34errOZBvQ6U5LiIjRAQSJxdY05SkDYQLjEb CtkOHm/PWgloytpjPnbYRqtNuDYCohWXDXj2Rub0o0jb4MjK5WheGdlzZJJ1z77X X7fVITvSOa7JH8RH44UkpNxQ92mNRPH863+uV1BCRcj9wV/lZQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:58 2026 by rpki-client