This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS984.roa File: AS984.roa (raw, json) Hash identifier: 0xMpaePmy1D+taM+4H9i55GBPTeB/a4t9yy3NcENioo= Subject key identifier: F9:0E:85:CD:D3:77:A5:BC:D9:AF:46:D6:5B:6F:18:E6:27:E4:DA:20 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 3F2E4F551D20C4B65B23775CAE67509C80BA5F02 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS984.roa Signing time: Thu 27 Nov 2025 07:23:50 +0000 ROA not before: Thu 27 Nov 2025 07:18:50 +0000 ROA not after: Thu 26 Nov 2026 07:23:50 +0000 asID: 984 IP address blocks: 82.21.7.0/24 maxlen: 24 82.23.163.0/24 maxlen: 24 82.23.248.0/24 maxlen: 24 82.24.16.0/24 maxlen: 24 82.24.79.0/24 maxlen: 24 82.24.123.0/24 maxlen: 24 82.27.3.0/24 maxlen: 24 82.27.117.0/24 maxlen: 24 82.38.4.0/22 maxlen: 24 82.38.44.0/24 maxlen: 24 2a13:9500:8c::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 15:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:2e:4f:55:1d:20:c4:b6:5b:23:77:5c:ae:67:50:9c:80:ba:5f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 27 07:18:50 2025 GMT Not After : Nov 26 07:23:50 2026 GMT Subject: CN=F90E85CDD377A5BCD9AF46D65B6F18E627E4DA20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ad:bf:25:e4:cd:80:50:82:00:88:c6:cc:be: 89:6c:7c:3f:34:bf:2f:ea:15:db:d5:cc:8a:cd:ee: ad:0b:94:87:85:2d:a9:2a:1d:80:55:18:9b:c7:f6: f4:82:bb:ba:75:bd:c7:23:94:c2:f0:4e:7a:e6:0d: 3b:8c:32:e8:4a:d2:40:15:31:41:88:3b:60:f1:cb: dd:e2:f5:c6:02:ba:01:b0:0b:10:ea:a8:a3:c5:6c: 9e:ea:20:fb:82:3f:c7:b0:2d:cf:fa:25:e0:ff:55: f8:28:22:cc:ad:94:aa:a7:89:8e:bd:5a:3b:7a:b0: ef:16:11:fa:d5:e9:3b:f5:3a:ca:c8:a4:29:01:5d: 33:8d:6a:d4:bd:77:bd:d8:02:74:e1:80:2b:f7:ae: ac:6b:42:7b:a9:2b:d7:e4:ff:a2:f0:a8:b8:0e:1d: d1:3c:b0:6c:fb:c0:aa:1a:40:74:24:d6:7e:56:18: 9b:19:b7:dc:a0:8c:22:7a:4f:09:54:25:39:89:52: 74:6d:06:e5:6b:e0:01:87:2f:13:0c:82:64:12:38: 21:04:96:5f:85:c3:19:46:54:ad:ff:ad:89:0e:ec: 52:0b:4c:5f:c1:da:87:df:bb:32:ed:5e:e6:79:ec: 06:ca:2d:b4:d1:92:50:f8:f7:1c:79:1f:55:bf:98: 08:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0E:85:CD:D3:77:A5:BC:D9:AF:46:D6:5B:6F:18:E6:27:E4:DA:20 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS984.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.7.0/24 82.23.163.0/24 82.23.248.0/24 82.24.16.0/24 82.24.79.0/24 82.24.123.0/24 82.27.3.0/24 82.27.117.0/24 82.38.4.0/22 82.38.44.0/24 IPv6: 2a13:9500:8c::/48 Signature Algorithm: sha256WithRSAEncryption 24:ab:48:68:25:93:ae:4b:94:8a:c1:5c:3e:1e:57:c1:27:bf: 3b:f6:ff:51:2d:e4:37:1d:02:e5:8c:86:87:12:2b:e1:69:58: 59:b0:cb:10:7d:27:e5:99:b5:e2:10:10:0d:22:2d:30:f6:fe: c7:ef:da:5f:d7:9a:8c:0d:8d:d1:ad:cf:b4:b8:2e:ec:aa:c7: 14:8f:40:d4:ae:ae:75:2d:e7:7f:ba:8e:09:0c:35:3d:31:55: ea:90:ce:fb:00:fa:7d:82:1c:c5:da:85:1a:41:bc:2f:7d:27: 3a:1b:00:af:71:53:6e:22:17:af:f4:16:50:0d:9d:cd:f3:7e: 3d:f6:11:d8:08:6e:02:b9:44:85:51:0c:dd:6b:8d:b3:05:c0: 27:5a:ee:3e:19:79:77:8a:f4:91:9d:2c:f4:8e:3b:ed:9f:8a: b4:fe:a4:d6:46:cf:72:48:a3:5d:9e:54:81:d3:5a:3a:69:bb: 38:bc:0f:18:4d:0f:f2:ab:82:d8:bc:ec:7a:f9:17:ad:9b:93: 6b:ea:b2:19:75:83:ec:1a:b1:9b:79:8f:6b:5b:81:f4:66:ce: ae:36:93:f6:55:67:05:84:a1:f3:b4:f5:b7:63:72:50:5d:91: 52:88:63:c6:d7:e3:84:61:27:71:bd:cd:b4:f3:7a:70:16:2e: 3a:1c:d3:11 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgIUPy5PVR0gxLZbI3dcrmdQnIC6XwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjcwNzE4NTBaFw0yNjExMjYwNzIzNTBaMDMxMTAvBgNV BAMTKEY5MEU4NUNERDM3N0E1QkNEOUFGNDZENjVCNkYxOEU2MjdFNERBMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9rb8l5M2AUIIAiMbMvolsfD80 vy/qFdvVzIrN7q0LlIeFLakqHYBVGJvH9vSCu7p1vccjlMLwTnrmDTuMMuhK0kAV MUGIO2Dxy93i9cYCugGwCxDqqKPFbJ7qIPuCP8ewLc/6JeD/VfgoIsytlKqniY69 Wjt6sO8WEfrV6Tv1OsrIpCkBXTONatS9d73YAnThgCv3rqxrQnupK9fk/6LwqLgO HdE8sGz7wKoaQHQk1n5WGJsZt9ygjCJ6TwlUJTmJUnRtBuVr4AGHLxMMgmQSOCEE ll+FwxlGVK3/rYkO7FILTF/B2offuzLtXuZ57AbKLbTRklD49xx5H1W/mAijAgMB AAGjggJOMIICSjAdBgNVHQ4EFgQU+Q6FzdN3pbzZr0bWW28Y5ifk2iAwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTOTg0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBCBAIAATA8AwQAUhUHAwQA UhejAwQAUhf4AwQAUhgQAwQAUhhPAwQAUhh7AwQAUhsDAwQAUht1AwQCUiYEAwQA UiYsMA8EAgACMAkDBwAqE5UAAIwwDQYJKoZIhvcNAQELBQADggEBACSrSGglk65L lIrBXD4eV8Envzv2/1Et5DcdAuWMhocSK+FpWFmwyxB9J+WZteIQEA0iLTD2/sfv 2l/XmowNjdGtz7S4LuyqxxSPQNSurnUt53+6jgkMNT0xVeqQzvsA+n2CHMXahRpB vC99JzobAK9xU24iF6/0FlANnc3zfj32EdgIbgK5RIVRDN1rjbMFwCda7j4ZeXeK 9JGdLPSOO+2firT+pNZGz3JIo12eVIHTWjppuzi8DxhND/Krgti87Hr5F62bk2vq shl1g+wasZt5j2tbgfRmzq42k/ZVZwWEofO09bdjclBdkVKIY8bX44RhJ3G9zbTz enAWLjoc0xE= -----END CERTIFICATE-----Generated at Wed Dec 3 16:39:03 2025 by rpki-client