This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS44547.roa
File: AS44547.roa (raw, json)
Hash identifier: qJFycBjGAL7FwSpfejjEAjlsgw2EUUDxaRqHDKbD/FI=
Subject key identifier: 40:D0:4A:F1:FB:2D:38:32:ED:4B:5F:6E:CC:00:3B:46:31:5F:B0:A3
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 7670D0DFBC8B80B598FCC82A674C9BF25CA1F767
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS44547.roa
Signing time: Fri 07 Nov 2025 10:33:28 +0000
ROA not before: Fri 07 Nov 2025 10:28:28 +0000
ROA not after: Fri 06 Nov 2026 10:33:28 +0000
asID: 44547
IP address blocks: 37.221.76.0/24 maxlen: 24
37.221.77.0/24 maxlen: 24
92.249.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:70:d0:df:bc:8b:80:b5:98:fc:c8:2a:67:4c:9b:f2:5c:a1:f7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Nov 7 10:28:28 2025 GMT
Not After : Nov 6 10:33:28 2026 GMT
Subject: CN=40D04AF1FB2D3832ED4B5F6ECC003B46315FB0A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:33:f7:66:4e:b5:ce:c1:fd:26:40:53:e7:
ba:eb:74:33:ca:89:50:f2:c8:00:d5:a5:78:40:78:
98:97:17:45:aa:4a:72:4d:70:8b:c6:c7:3b:b1:1f:
2c:bb:d5:cc:55:27:03:a4:aa:12:47:8f:7c:fd:8d:
ce:f0:c2:90:7b:19:66:5f:5b:d9:f0:ed:84:49:58:
df:99:1a:a5:50:dc:32:3b:51:cb:c8:e8:a6:c5:2d:
14:ac:3d:34:4d:3f:b3:4a:1a:a2:99:17:a8:91:ab:
45:0f:85:4e:0f:fe:96:d2:2f:a0:de:a3:5c:80:0c:
8e:2b:6f:d7:46:b2:66:94:55:52:a8:d6:49:48:c8:
14:fa:96:e4:c0:30:73:4d:f1:e1:d4:df:b3:f7:ca:
fc:7b:9c:d7:63:88:f1:15:f1:24:bb:55:73:ab:68:
20:ba:0b:53:55:07:94:d0:67:8c:39:87:7a:ee:92:
fe:07:ec:fe:d5:82:f7:17:00:2e:37:7c:24:9e:b0:
b8:f5:a4:ea:e4:3f:82:4c:0e:e5:39:42:e5:ea:96:
48:c7:43:52:1b:f5:2d:e4:8f:9b:05:10:c5:c4:f2:
ee:e6:08:66:b9:58:40:de:de:9a:ee:ea:33:78:21:
c7:35:24:7a:c4:e1:94:71:66:b8:b2:fd:df:2f:ad:
df:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D0:4A:F1:FB:2D:38:32:ED:4B:5F:6E:CC:00:3B:46:31:5F:B0:A3
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS44547.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.76.0/23
92.249.60.0/24
Signature Algorithm: sha256WithRSAEncryption
62:91:7e:d0:bf:6c:a8:35:af:a2:0b:95:ba:2f:b7:57:85:31:
fd:da:f0:b1:ba:65:e9:ce:cf:cb:70:ba:28:4d:d5:d7:e6:a9:
46:62:87:ba:a1:2f:93:25:b9:64:16:72:ef:de:0c:8e:b8:0a:
a3:bd:b9:f2:8e:2c:f9:20:5e:19:5c:ef:e3:f5:aa:22:2f:30:
92:5d:e7:61:b0:3d:0f:45:8e:7c:93:69:b1:61:97:14:8b:e5:
e8:c9:58:c1:7a:c6:c8:f2:47:62:c0:f3:eb:cd:2f:bb:7e:6a:
ed:41:6d:bd:54:b3:4b:b8:73:9b:71:92:b9:cd:31:65:79:13:
a8:61:81:87:73:e1:c6:6f:68:b6:bd:6a:32:ca:b9:18:26:a8:
4f:ad:55:ca:f4:7f:ce:85:2a:1f:9c:fa:c6:6d:63:4b:44:fb:
b4:08:42:34:27:b0:89:cb:06:20:5d:7d:15:a3:32:33:59:d7:
ce:d2:a3:5f:3d:87:f1:4e:60:58:bb:1e:e8:ea:2d:e6:c5:4a:
4c:8e:0b:5f:71:2e:31:3d:e9:ea:23:da:35:0b:fe:3d:04:b5:
05:75:9e:cb:2a:41:59:01:01:c7:6a:d3:ca:1d:1b:13:19:77:
8d:a2:4a:db:25:87:0a:5a:ae:cd:c3:ce:0c:63:93:d6:e1:a8:
a5:65:a7:47
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUdnDQ37yLgLWY/MgqZ0yb8lyh92cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNTExMDcxMDI4MjhaFw0yNjExMDYxMDMzMjhaMDMxMTAvBgNV
BAMTKDQwRDA0QUYxRkIyRDM4MzJFRDRCNUY2RUNDMDAzQjQ2MzE1RkIwQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUzP3Zk61zsH9JkBT57rrdDPK
iVDyyADVpXhAeJiXF0WqSnJNcIvGxzuxHyy71cxVJwOkqhJHj3z9jc7wwpB7GWZf
W9nw7YRJWN+ZGqVQ3DI7UcvI6KbFLRSsPTRNP7NKGqKZF6iRq0UPhU4P/pbSL6De
o1yADI4rb9dGsmaUVVKo1klIyBT6luTAMHNN8eHU37P3yvx7nNdjiPEV8SS7VXOr
aCC6C1NVB5TQZ4w5h3rukv4H7P7VgvcXAC43fCSesLj1pOrkP4JMDuU5QuXqlkjH
Q1Ib9S3kj5sFEMXE8u7mCGa5WEDe3pru6jN4Icc1JHrE4ZRxZriy/d8vrd9PAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUQNBK8fstODLtS19uzAA7RjFfsKMwHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt
NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTNDQ1NDcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAEl3UwD
BABc+TwwDQYJKoZIhvcNAQELBQADggEBAGKRftC/bKg1r6ILlbovt1eFMf3a8LG6
ZenOz8twuihN1dfmqUZih7qhL5MluWQWcu/eDI64CqO9ufKOLPkgXhlc7+P1qiIv
MJJd52GwPQ9FjnyTabFhlxSL5ejJWMF6xsjyR2LA8+vNL7t+au1Bbb1Us0u4c5tx
krnNMWV5E6hhgYdz4cZvaLa9ajLKuRgmqE+tVcr0f86FKh+c+sZtY0tE+7QIQjQn
sInLBiBdfRWjMjNZ187So189h/FOYFi7HujqLebFSkyOC19xLjE96eoj2jUL/j0E
tQV1nssqQVkBAcdq08odGxMZd42iStslhwpars3Dzgxjk9bhqKVlp0c=
-----END CERTIFICATE-----
Generated at Sun Dec 7 09:20:59 2025 by rpki-client