This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS57152.roa
File: AS57152.roa (raw, json)
Hash identifier: 8MoBG7DCmEgzqa+jX5u+7AyfyB5vet7BE9C17GPViWw=
Subject key identifier: 9F:19:29:33:A1:34:E0:B2:49:06:13:0E:6B:C1:0B:E0:37:7B:D9:F8
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 297229F328E7DD75271AFD01106653805DD7F3DF
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS57152.roa
Signing time: Thu 27 Nov 2025 09:27:47 +0000
ROA not before: Thu 27 Nov 2025 09:22:47 +0000
ROA not after: Thu 26 Nov 2026 09:27:47 +0000
asID: 57152
IP address blocks: 93.190.8.0/24 maxlen: 24
93.190.9.0/24 maxlen: 24
93.190.10.0/24 maxlen: 24
93.190.11.0/24 maxlen: 24
193.32.184.0/24 maxlen: 24
193.32.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:72:29:f3:28:e7:dd:75:27:1a:fd:01:10:66:53:80:5d:d7:f3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Nov 27 09:22:47 2025 GMT
Not After : Nov 26 09:27:47 2026 GMT
Subject: CN=9F192933A134E0B24906130E6BC10BE0377BD9F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:3d:7a:39:b4:c7:a6:94:f0:63:39:db:b5:
1e:bb:35:30:74:58:54:4f:4b:cd:f9:02:cf:c1:6d:
3e:d6:18:1a:9b:8b:91:81:d8:d0:f6:b9:d0:52:66:
03:47:c7:65:3c:7f:39:72:8f:d2:98:16:80:bf:cf:
ab:ab:26:2b:56:18:6f:46:8b:45:43:0b:2e:49:46:
69:ae:60:88:94:70:e5:40:4f:cb:15:04:92:9a:35:
b2:40:58:31:fe:2a:96:87:46:45:dc:44:7a:6c:3d:
4f:44:5e:eb:81:ae:63:66:80:3c:30:ed:64:ef:d6:
6a:01:97:68:c3:2d:fa:1f:fa:0e:83:ff:5b:b5:bb:
3e:4f:83:f8:f1:59:2b:2d:5e:26:c3:cf:e8:a0:71:
c0:f6:6d:3f:03:a3:91:0c:2d:ed:cd:0f:a6:3a:c3:
02:5a:5c:9e:26:ec:ae:eb:0b:f5:1b:d3:e7:57:29:
be:f6:3a:59:80:bd:d8:af:b3:63:94:d4:f4:2a:7c:
e7:30:47:a1:02:a8:78:ba:e3:8b:d6:ae:e9:ad:ef:
48:a8:a6:26:22:3c:95:e7:94:b3:9f:40:7c:11:66:
ff:a0:64:8d:40:d0:23:ba:27:ad:e9:75:5c:2f:81:
e2:02:bf:5d:32:29:b8:fe:19:04:6e:01:54:ab:3f:
25:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:19:29:33:A1:34:E0:B2:49:06:13:0E:6B:C1:0B:E0:37:7B:D9:F8
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS57152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.8.0/22
193.32.184.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:61:6b:4f:4f:be:d3:9c:d9:5d:db:fd:4a:af:b8:3e:6d:cf:
76:6f:e2:f8:ba:b8:1a:b8:0e:76:64:70:8a:31:49:d0:f8:ae:
55:1b:da:87:21:e7:e4:4b:dc:dc:23:ed:95:5f:71:8b:a4:88:
2b:44:c2:b8:d1:bc:99:1c:54:05:89:d5:06:da:28:b0:7f:04:
44:0a:90:20:f2:e2:e4:7f:d2:4d:de:44:1d:21:4a:95:62:1c:
88:d3:cb:24:58:23:63:9d:23:71:24:73:c4:50:25:a0:aa:f6:
70:5a:23:a0:08:6f:69:75:60:c0:d7:cd:9e:c3:23:78:de:94:
fc:1d:50:25:e9:53:7d:1d:26:49:4f:9a:d7:dc:88:eb:d0:01:
62:c2:d8:16:56:8f:9b:a1:38:03:0a:26:2d:7d:22:cd:44:84:
a2:70:40:a7:b6:ff:d4:85:24:32:3d:f8:f3:73:a5:26:ec:44:
86:49:74:84:61:c5:26:4c:68:b8:23:f8:18:02:f1:41:8e:7d:
d9:f1:d5:ac:00:c3:72:33:a9:ce:86:f4:fa:57:c2:c6:75:48:
8b:42:bf:7f:f8:86:71:90:58:71:74:68:c7:52:2a:99:f9:83:
c4:40:01:6d:7b:69:38:eb:89:c0:b1:85:c5:c5:c1:82:45:7b:
70:2a:b9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:15:20 2025 by rpki-client