This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS984.roa File: AS984.roa (raw, json) Hash identifier: +25dGt3cNB3dPoBhs2JNl5PnwLRigJwxjqTXmp8WDko= Subject key identifier: 3D:96:73:91:98:0C:2E:A0:36:40:7C:5D:2F:0A:26:47:0C:93:69:54 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 6533E504C9CC22EBBE3AAE30007CA6787744E0E7 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS984.roa Signing time: Mon 12 Jan 2026 03:52:38 +0000 ROA not before: Mon 12 Jan 2026 03:47:38 +0000 ROA not after: Mon 11 Jan 2027 03:52:38 +0000 asID: 984 IP address blocks: 140.150.153.0/24 maxlen: 24 143.14.218.0/24 maxlen: 24 150.241.239.0/24 maxlen: 24 155.117.79.0/24 maxlen: 24 155.117.186.0/24 maxlen: 24 155.117.254.0/24 maxlen: 24 162.141.96.0/24 maxlen: 24 168.222.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 19:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:33:e5:04:c9:cc:22:eb:be:3a:ae:30:00:7c:a6:78:77:44:e0:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 12 03:47:38 2026 GMT Not After : Jan 11 03:52:38 2027 GMT Subject: CN=3D967391980C2EA036407C5D2F0A26470C936954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e1:31:5f:a0:ee:3f:f6:89:c2:78:8b:7b:26: ea:76:1e:07:4d:5c:05:93:e0:c0:52:6d:6a:cd:04: 07:06:69:cb:8b:f1:69:03:31:a1:85:ef:62:72:18: 97:2d:06:64:77:b4:ac:6d:a9:8f:3d:e8:9a:3b:9e: 19:48:37:82:89:3e:cb:6a:4b:d1:ae:9b:71:4b:2a: e3:1f:8f:9c:90:cc:e0:41:3d:a6:33:45:38:bd:9a: f5:0e:7c:84:79:b4:5c:ea:7b:a2:3f:20:9d:35:15: 57:c4:e7:8d:fb:ec:a9:7a:3b:e1:b0:1d:9d:b8:2a: a3:21:0a:cf:2c:61:ab:a5:5b:17:a2:c6:31:3a:d8: 19:da:5a:23:f3:13:1c:3e:c0:c1:4a:ac:c6:f7:f0: 0e:e4:2c:8b:44:75:9d:58:8f:19:fa:ab:ef:1f:14: 90:32:9e:c9:8d:73:2f:6f:2b:f6:9e:9c:3e:55:5a: aa:20:f4:cf:38:6c:08:78:b8:f5:c1:fe:d9:98:73: a5:22:58:b1:0c:54:9e:c7:ea:81:01:58:32:2c:b8: 22:3a:4d:7e:cd:e7:8d:14:4f:57:0e:46:d3:44:04: 63:2e:1b:b1:95:59:41:1f:db:c3:c2:62:cc:d6:5b: 08:c9:e0:cb:14:9e:90:a9:41:6e:5b:6d:9d:32:db: fe:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:96:73:91:98:0C:2E:A0:36:40:7C:5D:2F:0A:26:47:0C:93:69:54 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS984.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.150.153.0/24 143.14.218.0/24 150.241.239.0/24 155.117.79.0/24 155.117.186.0/24 155.117.254.0/24 162.141.96.0/24 168.222.63.0/24 Signature Algorithm: sha256WithRSAEncryption 84:e2:a7:fa:1a:a3:5d:dc:89:96:50:95:0e:cc:24:a7:b1:10: 83:45:f2:42:4f:9d:eb:e6:e6:51:88:aa:e6:1d:e5:09:4a:6c: 02:e5:1f:5f:7d:19:7a:08:72:df:2a:87:b4:b7:30:96:0f:43: 2f:fb:fb:f4:11:34:25:13:ec:44:17:d7:53:89:ce:bb:da:5c: 2a:5c:7f:6a:eb:6a:a2:ad:75:44:b5:ab:eb:4e:60:99:1d:10: b0:0d:ce:69:86:26:96:11:27:0d:49:cc:11:9d:7c:90:97:ce: 96:78:57:64:9b:0e:2e:82:c8:85:f2:d1:5d:dd:88:64:70:c4: dc:50:fd:08:31:fa:a0:f0:44:a1:16:38:ea:01:18:0d:be:46: 76:82:b6:7c:bb:4a:6d:73:74:dc:d8:ff:e4:19:40:6a:41:63: 47:7c:6c:d4:7a:74:f0:79:98:9f:20:5b:83:26:ca:04:19:78: a8:ba:97:0d:ba:11:3b:8f:3a:66:5b:a7:4c:54:cf:b4:de:00: 40:0f:5c:fa:35:50:c6:bc:90:f3:17:15:db:c4:11:b9:2c:6b: c1:90:a4:06:ee:38:ca:d3:48:ae:01:f5:11:71:41:58:36:e0: c1:04:c7:66:83:a5:3e:bc:f4:fc:d5:31:82:95:11:fb:d8:be: a8:45:c4:73 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUZTPlBMnMIuu+Oq4wAHymeHdE4OcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMTIwMzQ3MzhaFw0yNzAxMTEwMzUyMzhaMDMxMTAvBgNV BAMTKDNEOTY3MzkxOTgwQzJFQTAzNjQwN0M1RDJGMEEyNjQ3MEM5MzY5NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm4TFfoO4/9onCeIt7Jup2HgdN XAWT4MBSbWrNBAcGacuL8WkDMaGF72JyGJctBmR3tKxtqY896Jo7nhlIN4KJPstq S9Gum3FLKuMfj5yQzOBBPaYzRTi9mvUOfIR5tFzqe6I/IJ01FVfE54377Kl6O+Gw HZ24KqMhCs8sYaulWxeixjE62BnaWiPzExw+wMFKrMb38A7kLItEdZ1Yjxn6q+8f FJAynsmNcy9vK/aenD5VWqog9M84bAh4uPXB/tmYc6UiWLEMVJ7H6oEBWDIsuCI6 TX7N540UT1cORtNEBGMuG7GVWUEf28PCYszWWwjJ4MsUnpCpQW5bbZ0y2/5DAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUPZZzkZgMLqA2QHxdLwomRwyTaVQwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTOTg0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAjJaZAwQA jw7aAwQAlvHvAwQAm3VPAwQAm3W6AwQAm3X+AwQAoo1gAwQAqN4/MA0GCSqGSIb3 DQEBCwUAA4IBAQCE4qf6GqNd3ImWUJUOzCSnsRCDRfJCT53r5uZRiKrmHeUJSmwC 5R9ffRl6CHLfKoe0tzCWD0Mv+/v0ETQlE+xEF9dTic672lwqXH9q62qirXVEtavr TmCZHRCwDc5phiaWEScNScwRnXyQl86WeFdkmw4ugsiF8tFd3YhkcMTcUP0IMfqg 8EShFjjqARgNvkZ2grZ8u0ptc3Tc2P/kGUBqQWNHfGzUenTweZifIFuDJsoEGXio upcNuhE7jzpmW6dMVM+03gBAD1z6NVDGvJDzFxXbxBG5LGvBkKQG7jjK00iuAfUR cUFYNuDBBMdmg6U+vPT81TGClRH72L6oRcRz -----END CERTIFICATE-----Generated at Sun Jan 18 04:29:18 2026 by rpki-client