This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS984.roa File: AS984.roa (raw, json) Hash identifier: 31PV1Q7wX6i9AvCM4S9fLi8zDOTwwloQCn3qrIlJhj0= Subject key identifier: 2F:0A:09:5B:14:06:EA:1D:4B:69:D8:6D:AA:F6:DE:B0:56:23:C5:DD Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 5AC767A94CBF1EBAB534CDB368F6417D29B05638 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS984.roa Signing time: Mon 01 Dec 2025 05:41:41 +0000 ROA not before: Mon 01 Dec 2025 05:36:41 +0000 ROA not after: Mon 30 Nov 2026 05:41:41 +0000 asID: 984 IP address blocks: 140.233.173.0/24 maxlen: 24 143.14.114.0/24 maxlen: 24 143.14.218.0/24 maxlen: 24 148.135.193.0/24 maxlen: 24 150.241.228.0/24 maxlen: 24 155.117.79.0/24 maxlen: 24 155.117.186.0/24 maxlen: 24 155.117.240.0/24 maxlen: 24 155.117.254.0/24 maxlen: 24 162.141.36.0/24 maxlen: 24 162.141.96.0/24 maxlen: 24 168.222.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 11:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c7:67:a9:4c:bf:1e:ba:b5:34:cd:b3:68:f6:41:7d:29:b0:56:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 1 05:36:41 2025 GMT Not After : Nov 30 05:41:41 2026 GMT Subject: CN=2F0A095B1406EA1D4B69D86DAAF6DEB05623C5DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:41:58:c1:69:1f:7b:c4:80:c8:16:1e:3f:2b: aa:4f:52:ff:2d:0e:84:88:3c:db:dd:85:e6:c0:f9: f4:e2:90:15:f6:43:24:86:81:ed:5c:43:0c:6f:fd: b5:f7:e9:b1:34:ea:04:7b:57:cc:b2:d8:3a:71:76: 27:74:b8:ef:55:4f:a9:de:66:db:2e:1f:96:3c:f3: 3d:31:90:58:ce:4d:f0:03:be:82:a6:69:7d:4f:1f: 5f:ea:00:24:a4:45:aa:84:ea:fb:94:19:4b:11:4d: 48:b0:d2:26:6a:e0:9e:65:21:a8:07:5d:b1:04:38: a8:17:f7:5b:93:ae:b2:2d:dc:20:80:c6:1b:f7:ca: 37:f3:7d:fe:2f:f8:91:1b:d8:82:0f:8d:ad:e2:5b: 6c:4e:ea:f8:21:78:da:2f:01:e1:8c:86:7f:92:29: 07:0d:23:cf:57:b3:5e:7d:82:cb:73:48:3c:86:04: 3f:7a:e6:86:fd:29:f5:1f:58:ec:61:0b:84:8e:a0: b9:06:02:7c:ad:5e:da:04:31:be:d3:a6:46:8e:ee: d4:40:d7:71:b9:27:49:29:e5:56:f1:fb:22:e5:1e: 7f:94:91:70:2f:6f:29:63:9c:45:8f:9c:8c:3e:f5: 7e:a3:1e:37:88:6e:5c:f4:18:b8:f7:a7:38:02:93: 8e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0A:09:5B:14:06:EA:1D:4B:69:D8:6D:AA:F6:DE:B0:56:23:C5:DD X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS984.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.233.173.0/24 143.14.114.0/24 143.14.218.0/24 148.135.193.0/24 150.241.228.0/24 155.117.79.0/24 155.117.186.0/24 155.117.240.0/24 155.117.254.0/24 162.141.36.0/24 162.141.96.0/24 168.222.63.0/24 Signature Algorithm: sha256WithRSAEncryption a9:bf:22:61:69:5c:78:9c:30:8e:e0:c0:c5:81:62:5f:67:db: df:b3:58:4d:b0:a6:ac:42:b5:e8:11:37:62:0c:ae:cd:8d:0d: 26:2a:57:0e:34:fd:3f:fe:22:48:39:65:38:5c:48:ad:de:4e: 36:08:55:80:71:9e:24:67:37:81:e2:3d:3c:ec:12:c2:42:4b: c6:fe:6f:ca:16:49:b7:53:c9:15:ad:77:0d:f0:2f:7e:75:47: 66:50:ec:5f:11:fc:3e:10:6a:1f:4a:59:6b:86:b1:e9:e8:74: 5d:7d:e4:83:33:75:5d:df:ab:9a:25:ae:6d:89:dc:6d:4f:46: e3:c3:e1:65:50:05:98:a5:cc:e2:53:76:11:c2:82:ff:f8:5a: 2b:4b:44:6a:e9:a6:f5:8e:59:5f:e5:c8:15:aa:e9:f5:f1:a0: 09:e0:77:22:21:e5:a6:d3:89:23:50:c4:d4:5c:82:0f:b1:55: ac:3d:76:54:af:4e:75:0e:f6:e0:c0:93:30:32:23:6f:9c:c8: c3:b4:33:65:74:b1:69:1c:09:ad:90:5a:82:9a:50:b6:4e:43: e1:55:c0:84:5d:4d:a0:72:23:e1:78:b1:fc:d9:10:c9:44:67: e7:88:35:19:d7:c0:bb:79:d8:46:ba:e2:e8:d7:f0:0a:e2:7c: 56:8b:12:ba -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUWsdnqUy/Hrq1NM2zaPZBfSmwVjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMDEwNTM2NDFaFw0yNjExMzAwNTQxNDFaMDMxMTAvBgNV BAMTKDJGMEEwOTVCMTQwNkVBMUQ0QjY5RDg2REFBRjZERUIwNTYyM0M1REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmQVjBaR97xIDIFh4/K6pPUv8t DoSIPNvdhebA+fTikBX2QySGge1cQwxv/bX36bE06gR7V8yy2Dpxdid0uO9VT6ne ZtsuH5Y88z0xkFjOTfADvoKmaX1PH1/qACSkRaqE6vuUGUsRTUiw0iZq4J5lIagH XbEEOKgX91uTrrIt3CCAxhv3yjfzff4v+JEb2IIPja3iW2xO6vgheNovAeGMhn+S KQcNI89Xs159gstzSDyGBD965ob9KfUfWOxhC4SOoLkGAnytXtoEMb7TpkaO7tRA 13G5J0kp5Vbx+yLlHn+UkXAvbyljnEWPnIw+9X6jHjeIblz0GLj3pzgCk45zAgMB AAGjggJJMIICRTAdBgNVHQ4EFgQULwoJWxQG6h1LadhtqvbesFYjxd0wHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTOTg0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAjOmtAwQA jw5yAwQAjw7aAwQAlIfBAwQAlvHkAwQAm3VPAwQAm3W6AwQAm3XwAwQAm3X+AwQA oo0kAwQAoo1gAwQAqN4/MA0GCSqGSIb3DQEBCwUAA4IBAQCpvyJhaVx4nDCO4MDF gWJfZ9vfs1hNsKasQrXoETdiDK7NjQ0mKlcONP0//iJIOWU4XEit3k42CFWAcZ4k ZzeB4j087BLCQkvG/m/KFkm3U8kVrXcN8C9+dUdmUOxfEfw+EGofSllrhrHp6HRd feSDM3Vd36uaJa5tidxtT0bjw+FlUAWYpcziU3YRwoL/+ForS0Rq6ab1jllf5cgV qun18aAJ4HciIeWm04kjUMTUXIIPsVWsPXZUr051DvbgwJMwMiNvnMjDtDNldLFp HAmtkFqCmlC2TkPhVcCEXU2gciPheLH82RDJRGfniDUZ18C7edhGuuLo1/AK4nxW ixK6 -----END CERTIFICATE-----Generated at Wed Dec 3 16:39:42 2025 by rpki-client