This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS48011.roa
File: AS48011.roa (raw, json)
Hash identifier: Vybuz1RBGVy6/+25CylyyNGqIoMgmgnM89o94px/iS8=
Subject key identifier: CD:09:DF:EE:D9:A9:50:F4:13:9B:52:37:7D:B1:D7:31:1D:AE:8E:B3
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 50C4A64A42FEFE3330C94986BDE92FDD3C847713
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS48011.roa
Signing time: Mon 05 Jan 2026 19:55:33 +0000
ROA not before: Mon 05 Jan 2026 19:50:33 +0000
ROA not after: Mon 04 Jan 2027 19:55:33 +0000
asID: 48011
IP address blocks: 5.133.124.0/23 maxlen: 23
5.133.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c4:a6:4a:42:fe:fe:33:30:c9:49:86:bd:e9:2f:dd:3c:84:77:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jan 5 19:50:33 2026 GMT
Not After : Jan 4 19:55:33 2027 GMT
Subject: CN=CD09DFEED9A950F4139B52377DB1D7311DAE8EB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:d4:c0:c1:a0:00:c1:db:bc:23:55:3d:36:
85:07:d5:df:15:ca:2f:50:dc:93:88:53:16:17:fd:
46:a9:19:f0:26:70:ee:2f:4f:3d:01:f0:90:d3:f1:
e9:a4:26:77:09:72:e0:85:dc:b2:ef:09:ec:d4:e1:
d9:16:75:6f:6d:f2:0e:70:b3:9d:f7:25:82:cb:25:
fa:c2:03:31:92:3a:e2:24:aa:33:55:29:33:82:79:
2a:ff:3c:96:9c:7a:54:cc:12:9e:38:35:73:0d:a4:
f2:83:62:91:c4:de:87:e6:e5:81:6c:ca:e7:a9:fb:
eb:f9:2e:a9:d6:4b:ba:62:40:d9:e9:52:41:56:1e:
c8:d9:4d:1b:3f:6d:6f:c8:57:10:ae:36:66:8e:ec:
f7:19:10:8b:8e:43:05:37:8f:76:ff:2e:45:28:63:
06:b6:88:32:cb:cf:8b:70:10:53:b6:9c:20:d9:bf:
06:c9:63:45:96:de:49:06:79:23:d5:04:65:16:fe:
3c:b4:ca:3c:e3:25:da:00:c1:dd:b4:cd:ae:0d:c0:
ef:be:d7:a3:bf:eb:2c:4c:f2:11:23:1e:cc:34:84:
1f:a9:44:cb:4c:bb:29:d2:fb:33:c4:52:f7:cd:79:
05:b0:ac:33:41:a2:e5:e5:36:24:92:f5:06:b9:97:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:09:DF:EE:D9:A9:50:F4:13:9B:52:37:7D:B1:D7:31:1D:AE:8E:B3
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS48011.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.124.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:45:d0:45:7a:4d:4e:0d:52:e3:b0:03:f9:50:5d:6d:68:ef:
b1:71:33:4d:a9:8b:e1:18:3d:81:4c:bd:ed:9b:b4:ae:59:ee:
00:bd:fb:b1:49:a8:b2:4a:b1:88:5e:ec:6d:c7:03:10:6e:3b:
34:55:30:7a:74:1c:41:b0:6a:77:e5:01:96:e2:b5:c0:c1:08:
97:85:76:de:0d:db:b6:77:30:65:26:e3:77:32:dc:a9:86:9b:
41:f6:5f:0b:50:70:b4:c1:5c:16:63:75:49:fb:5f:19:24:18:
a8:2a:01:de:d5:14:ab:8a:93:f0:7c:e7:c4:71:05:3b:21:aa:
13:0e:29:a4:9a:df:12:31:16:3e:3a:5f:dd:fd:34:d7:48:ed:
25:38:a7:10:69:cf:02:51:c0:fd:c2:ac:87:1f:9c:81:94:51:
b6:c6:c5:02:25:86:2b:0d:bc:cc:bc:4d:39:e6:7e:9b:f8:41:
b7:8e:73:c7:fd:b4:d3:79:c3:1a:5e:40:55:5a:07:33:4a:b8:
9e:00:d1:65:29:5e:60:ac:53:10:ab:06:d8:41:d8:a1:4a:b0:
c7:be:d4:b9:4c:fc:ae:f1:cd:0c:2e:c3:fc:9e:21:cf:f9:34:
8c:66:a4:2f:67:a2:f3:e9:50:2b:60:88:2f:1a:59:fe:d1:b4:
b7:12:7b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:51:51 2026 by rpki-client