This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS984.roa File: AS984.roa (raw, json) Hash identifier: eQR8F/SPw8nfrCj8a8wTgRQ1VhmflRdV4AZe+acggFQ= Subject key identifier: E0:C7:40:E1:98:B6:E8:1F:48:E8:DF:50:CB:4C:F2:B5:CB:07:87:11 Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 1576D5D97AEEF603A5C8978E082A61B44828711A Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS984.roa Signing time: Wed 05 Nov 2025 06:16:39 +0000 ROA not before: Wed 05 Nov 2025 06:11:39 +0000 ROA not after: Wed 04 Nov 2026 06:16:39 +0000 asID: 984 IP address blocks: 46.236.252.0/24 maxlen: 24 82.139.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 01:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:76:d5:d9:7a:ee:f6:03:a5:c8:97:8e:08:2a:61:b4:48:28:71:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Nov 5 06:11:39 2025 GMT Not After : Nov 4 06:16:39 2026 GMT Subject: CN=E0C740E198B6E81F48E8DF50CB4CF2B5CB078711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ff:e5:38:17:8c:f9:ea:55:a7:84:51:5d:96: 11:53:0b:86:dd:4d:d8:de:59:92:ef:60:55:c2:f6: 99:43:ab:89:a5:52:0a:97:79:0d:d8:58:65:e4:b5: 97:86:90:9f:93:dc:a1:02:f0:57:46:64:5c:13:ea: 72:a7:cf:8b:35:6f:24:a3:11:8f:a0:52:93:1c:ae: 16:1c:d3:e4:db:da:d7:93:4c:b3:3c:90:bc:88:8a: 31:5d:96:6c:a9:90:c7:31:e9:8d:49:be:a8:d2:a9: 53:ec:f1:fd:60:a4:06:6e:bb:55:fe:65:81:dc:a6: 70:40:4d:ba:c0:7e:57:33:70:4f:d7:1b:f6:a2:83: fb:3b:24:7b:1b:4d:f7:c6:78:25:53:0b:fd:25:c0: 43:eb:71:cf:05:d8:65:76:04:e2:77:0c:aa:30:51: 82:7d:0e:3b:bd:ac:47:0b:72:6e:26:d1:c7:88:f3: 8b:b4:f9:59:f1:13:61:16:cd:3b:b7:ab:9e:35:0a: b8:c1:35:40:38:1c:4e:29:2a:8d:90:03:68:3d:d0: 58:c3:8b:48:86:3b:60:37:3a:8e:6f:ef:44:cd:10: 01:83:33:8b:70:64:46:95:52:d5:06:21:25:f3:ba: 42:50:19:56:56:db:a9:1a:d2:c8:0d:76:af:44:2a: e1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C7:40:E1:98:B6:E8:1F:48:E8:DF:50:CB:4C:F2:B5:CB:07:87:11 X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS984.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.236.252.0/24 82.139.194.0/24 Signature Algorithm: sha256WithRSAEncryption 83:69:0b:d3:b3:ab:61:f1:e1:3c:b1:3f:4f:13:ee:fe:ba:a5: ce:16:f8:d9:0a:8e:1d:9f:cc:77:48:64:dc:42:3d:1a:69:fc: 41:95:e9:ac:47:46:e4:79:b6:3f:b4:6e:b8:c7:12:b3:67:7b: 6f:69:ac:f7:cd:bc:d9:24:13:05:6e:cd:89:ee:5e:d5:cb:57: 3c:a9:a4:ac:09:fb:ec:0d:73:e8:5b:98:d7:4c:00:1e:65:f3: 5e:f2:01:ec:e7:bb:09:e9:e0:b3:65:48:51:56:97:33:6d:d5: 31:db:b0:3a:c3:fc:03:13:b6:c8:a0:32:25:9e:81:6f:9f:9d: 95:87:0b:80:83:ba:e2:89:19:16:b1:81:1a:87:9d:de:a1:30: 66:57:00:46:e7:a4:62:df:d3:20:55:d8:cf:b8:13:b6:38:18: e7:6a:61:ab:b2:a9:34:b6:54:04:9e:cd:13:9d:ba:07:5c:51: 15:c2:c1:2b:e5:d2:70:02:67:19:8a:b4:d1:bd:e6:08:4a:e0: a6:93:39:88:c8:cf:8f:0e:04:36:da:1e:46:ba:f6:8b:7e:db: 02:71:79:3b:20:56:d4:56:f5:ce:c0:6d:da:ca:c2:77:80:c9: 39:0d:7c:ea:6c:16:6a:95:d8:09:9f:62:d1:f3:c6:34:c3:c2: 42:6c:61:2f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUFXbV2Xru9gOlyJeOCCphtEgocRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNTExMDUwNjExMzlaFw0yNjExMDQwNjE2MzlaMDMxMTAvBgNV BAMTKEUwQzc0MEUxOThCNkU4MUY0OEU4REY1MENCNENGMkI1Q0IwNzg3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//+U4F4z56lWnhFFdlhFTC4bd TdjeWZLvYFXC9plDq4mlUgqXeQ3YWGXktZeGkJ+T3KEC8FdGZFwT6nKnz4s1bySj EY+gUpMcrhYc0+Tb2teTTLM8kLyIijFdlmypkMcx6Y1JvqjSqVPs8f1gpAZuu1X+ ZYHcpnBATbrAflczcE/XG/aig/s7JHsbTffGeCVTC/0lwEPrcc8F2GV2BOJ3DKow UYJ9Dju9rEcLcm4m0ceI84u0+VnxE2EWzTu3q541CrjBNUA4HE4pKo2QA2g90FjD i0iGO2A3Oo5v70TNEAGDM4twZEaVUtUGISXzukJQGVZW26ka0sgNdq9EKuFBAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU4MdA4Zi26B9I6N9Qy0zytcsHhxEwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTOTg0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALuz8AwQA UovCMA0GCSqGSIb3DQEBCwUAA4IBAQCDaQvTs6th8eE8sT9PE+7+uqXOFvjZCo4d n8x3SGTcQj0aafxBlemsR0bkebY/tG64xxKzZ3tvaaz3zbzZJBMFbs2J7l7Vy1c8 qaSsCfvsDXPoW5jXTAAeZfNe8gHs57sJ6eCzZUhRVpczbdUx27A6w/wDE7bIoDIl noFvn52VhwuAg7riiRkWsYEah53eoTBmVwBG56Ri39MgVdjPuBO2OBjnamGrsqk0 tlQEns0TnboHXFEVwsEr5dJwAmcZirTRveYISuCmkzmIyM+PDgQ22h5GuvaLftsC cXk7IFbUVvXOwG3aysJ3gMk5DXzqbBZqldgJn2LR88Y0w8JCbGEv -----END CERTIFICATE-----Generated at Wed Dec 3 16:40:19 2025 by rpki-client