This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS29802.roa File: AS29802.roa (raw, json) Hash identifier: se/Dzys8pPLcSzENXolb/RCjda8xdnbW40ghS4hWAXk= Subject key identifier: DA:2A:C8:6F:2B:CB:ED:82:C1:55:8D:6F:0B:B1:68:3A:D4:2F:9C:E4 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 35CB6C80763810798E3C95A048E1B0B319198564 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS29802.roa Signing time: Mon 01 Dec 2025 00:13:28 +0000 ROA not before: Mon 01 Dec 2025 00:08:28 +0000 ROA not after: Mon 30 Nov 2026 00:13:28 +0000 asID: 29802 IP address blocks: 46.202.232.0/22 maxlen: 24 46.202.240.0/22 maxlen: 24 46.203.108.0/22 maxlen: 24 46.203.116.0/22 maxlen: 24 46.203.128.0/22 maxlen: 24 46.203.140.0/22 maxlen: 24 46.203.198.0/24 maxlen: 24 46.203.201.0/24 maxlen: 24 46.203.206.0/24 maxlen: 24 46.203.209.0/24 maxlen: 24 91.124.130.0/24 maxlen: 24 92.112.134.0/24 maxlen: 24 92.112.136.0/24 maxlen: 24 92.112.139.0/24 maxlen: 24 92.112.145.0/24 maxlen: 24 92.112.148.0/24 maxlen: 24 92.112.150.0/24 maxlen: 24 92.112.168.0/24 maxlen: 24 92.112.169.0/24 maxlen: 24 92.112.173.0/24 maxlen: 24 92.112.174.0/24 maxlen: 24 92.112.203.0/24 maxlen: 24 92.113.83.0/24 maxlen: 24 92.113.103.0/24 maxlen: 24 92.113.162.0/24 maxlen: 24 92.113.232.0/24 maxlen: 24 92.113.233.0/24 maxlen: 24 92.113.237.0/24 maxlen: 24 92.113.238.0/24 maxlen: 24 92.113.242.0/24 maxlen: 24 92.113.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:cb:6c:80:76:38:10:79:8e:3c:95:a0:48:e1:b0:b3:19:19:85:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 1 00:08:28 2025 GMT Not After : Nov 30 00:13:28 2026 GMT Subject: CN=DA2AC86F2BCBED82C1558D6F0BB1683AD42F9CE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c4:4d:71:0c:7b:d5:80:64:b5:fe:38:d4:7e: b8:9d:54:00:17:76:29:8e:14:f0:4e:73:7f:44:45: cc:83:82:ef:b9:29:8e:d4:54:73:e8:38:be:94:fd: 9d:c6:75:83:56:06:e4:b5:41:56:8b:99:c4:62:6c: 0b:d0:a0:56:84:37:87:cd:72:3d:32:58:c6:a2:6f: a8:9e:f0:8e:57:f8:57:26:42:f3:b3:85:e2:51:aa: ef:dc:ac:d5:ee:e3:6b:df:6f:bc:5e:89:46:a3:e5: 92:d7:bb:85:85:df:d1:d2:73:da:e3:51:ed:36:95: f5:c0:64:b7:c7:66:19:23:0f:91:1f:be:6d:a3:40: 28:c6:0a:bb:42:97:a4:7e:5d:c4:ef:36:c4:a8:ac: b0:20:db:c8:62:ea:c0:cd:db:15:31:de:85:06:ad: e6:83:41:4b:b5:65:c5:64:3b:0c:21:81:29:d1:e6: 85:6c:58:9c:87:d7:96:ef:a2:fd:93:be:c6:88:1e: 1e:cd:77:77:ae:eb:69:de:49:dc:68:34:cf:ff:0c: 94:33:e7:c0:26:08:ab:ee:73:ca:f5:93:74:51:a1: ff:bd:5e:95:20:a2:27:59:9e:d7:4b:d8:eb:75:75: 1b:61:b6:61:bb:fe:6c:db:2b:6a:7a:33:bd:09:7f: d4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2A:C8:6F:2B:CB:ED:82:C1:55:8D:6F:0B:B1:68:3A:D4:2F:9C:E4 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS29802.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.202.232.0/22 46.202.240.0/22 46.203.108.0/22 46.203.116.0/22 46.203.128.0/22 46.203.140.0/22 46.203.198.0/24 46.203.201.0/24 46.203.206.0/24 46.203.209.0/24 91.124.130.0/24 92.112.134.0/24 92.112.136.0/24 92.112.139.0/24 92.112.145.0/24 92.112.148.0/24 92.112.150.0/24 92.112.168.0/23 92.112.173.0-92.112.174.255 92.112.203.0/24 92.113.83.0/24 92.113.103.0/24 92.113.162.0/24 92.113.232.0/23 92.113.237.0-92.113.238.255 92.113.242.0/23 Signature Algorithm: sha256WithRSAEncryption 84:3c:ab:75:81:4c:a3:4d:99:35:49:e9:17:e3:e6:c5:96:8e: f6:06:22:1b:1d:17:24:43:04:13:e9:1b:d8:6d:f6:39:b4:b5: b4:b9:ad:5f:45:f0:83:fa:de:36:9d:43:08:41:70:ce:ab:42: 32:40:3b:72:52:81:1b:df:1e:a1:63:b1:d4:65:e8:7a:88:b9: 12:69:c0:0f:a3:91:b5:c5:29:32:3d:83:c9:f8:39:73:f5:28: 5c:8b:c4:8a:9e:05:af:59:5c:f2:c3:ed:5f:74:94:3b:2b:9b: 95:f2:14:f6:f9:b1:f5:b8:91:aa:35:15:52:d4:2d:2b:b5:2b: 22:5a:1e:57:45:84:dc:71:02:04:08:e2:ea:8d:d1:7a:68:e5: 69:96:f2:68:b3:9b:c1:f6:d0:77:7d:dd:28:d7:76:c4:71:8d: 0e:90:b5:5a:b6:a5:55:79:09:fc:7b:a5:35:4a:73:d4:08:1e: 52:7d:12:90:bf:c6:59:1d:e9:8d:0f:87:3c:d6:84:17:5a:91: 59:c9:a7:c8:76:15:14:3a:bb:e1:84:7b:97:ae:33:25:48:ea: ff:8c:64:df:c2:01:67:ed:e5:25:53:37:c1:89:82:67:8f:91: 58:ed:9b:fd:e3:0b:b6:f6:c1:4f:c1:47:0d:c2:ff:88:92:a3: fb:b2:4f:d2 -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgIUNctsgHY4EHmOPJWgSOGwsxkZhWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMDEwMDA4MjhaFw0yNjExMzAwMDEzMjhaMDMxMTAvBgNV BAMTKERBMkFDODZGMkJDQkVEODJDMTU1OEQ2RjBCQjE2ODNBRDQyRjlDRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3xE1xDHvVgGS1/jjUfridVAAX dimOFPBOc39ERcyDgu+5KY7UVHPoOL6U/Z3GdYNWBuS1QVaLmcRibAvQoFaEN4fN cj0yWMaib6ie8I5X+FcmQvOzheJRqu/crNXu42vfb7xeiUaj5ZLXu4WF39HSc9rj Ue02lfXAZLfHZhkjD5Efvm2jQCjGCrtCl6R+XcTvNsSorLAg28hi6sDN2xUx3oUG reaDQUu1ZcVkOwwhgSnR5oVsWJyH15bvov2TvsaIHh7Nd3eu62neSdxoNM//DJQz 58AmCKvuc8r1k3RRof+9XpUgoidZntdL2Ot1dRthtmG7/mzbK2p6M70Jf9TNAgMB AAGjggK0MIICsDAdBgNVHQ4EFgQU2irIbyvL7YLBVY1vC7FoOtQvnOQwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjk4MDIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwgckGCCsGAQUFBwEHAQH/BIG5MIG2MIGzBAIAATCBrAME Ai7K6AMEAi7K8AMEAi7LbAMEAi7LdAMEAi7LgAMEAi7LjAMEAC7LxgMEAC7LyQME AC7LzgMEAC7L0QMEAFt8ggMEAFxwhgMEAFxwiAMEAFxwiwMEAFxwkQMEAFxwlAME AFxwlgMEAVxwqDAMAwQAXHCtAwQAXHCuAwQAXHDLAwQAXHFTAwQAXHFnAwQAXHGi AwQBXHHoMAwDBABcce0DBABcce4DBAFccfIwDQYJKoZIhvcNAQELBQADggEBAIQ8 q3WBTKNNmTVJ6Rfj5sWWjvYGIhsdFyRDBBPpG9ht9jm0tbS5rV9F8IP63jadQwhB cM6rQjJAO3JSgRvfHqFjsdRl6HqIuRJpwA+jkbXFKTI9g8n4OXP1KFyLxIqeBa9Z XPLD7V90lDsrm5XyFPb5sfW4kao1FVLULSu1KyJaHldFhNxxAgQI4uqN0Xpo5WmW 8mizm8H20Hd93SjXdsRxjQ6QtVq2pVV5Cfx7pTVKc9QIHlJ9EpC/xlkd6Y0PhzzW hBdakVnJp8h2FRQ6u+GEe5euMyVI6v+MZN/CAWft5SVTN8GJgmePkVjtm/3jC7b2 wU/BRw3C/4iSo/uyT9I= -----END CERTIFICATE-----Generated at Mon Dec 8 16:18:40 2025 by rpki-client