This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS984.roa File: AS984.roa (raw, json) Hash identifier: bvX6OOOyMcqCpWIWsIinhijCw5E5iVZfmvIb/uG+I8I= Subject key identifier: 17:DE:92:0D:84:39:72:A0:C2:32:32:A2:98:4A:17:AD:7F:76:33:17 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 13372C0A21D32F2F59814EF09786F97CDF376651 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS984.roa Signing time: Sun 11 Jan 2026 06:39:30 +0000 ROA not before: Sun 11 Jan 2026 06:34:30 +0000 ROA not after: Sun 10 Jan 2027 06:39:30 +0000 asID: 984 IP address blocks: 82.21.7.0/24 maxlen: 24 82.22.146.0/24 maxlen: 24 82.23.163.0/24 maxlen: 24 82.23.173.0/24 maxlen: 24 82.23.248.0/24 maxlen: 24 82.24.16.0/24 maxlen: 24 82.27.3.0/24 maxlen: 24 82.27.117.0/24 maxlen: 24 82.38.44.0/24 maxlen: 24 2a13:9500:8c::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 16:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:37:2c:0a:21:d3:2f:2f:59:81:4e:f0:97:86:f9:7c:df:37:66:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 11 06:34:30 2026 GMT Not After : Jan 10 06:39:30 2027 GMT Subject: CN=17DE920D843972A0C23232A2984A17AD7F763317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:74:ab:72:09:70:cb:d9:9d:59:b6:1d:5e:b2: 49:e0:19:85:07:57:ef:92:49:1f:f1:0b:f1:b4:62: 2a:06:42:53:42:e9:b8:cc:d6:b3:27:ce:94:6c:1a: 94:c6:f0:3a:70:09:58:36:96:09:8e:e2:16:37:22: 13:14:d2:e5:f4:c0:8a:6c:9a:31:30:93:05:cd:0a: 27:b4:6d:37:02:63:b5:41:cb:cb:e0:30:b6:b9:1b: af:19:71:85:0c:21:b9:99:60:44:30:20:bd:06:fa: d6:32:8b:ed:06:92:c7:22:10:45:7d:11:02:bd:17: 98:6d:81:34:1c:6e:58:08:8f:bd:44:5f:92:19:f0: b3:f3:7e:f7:7c:14:73:e9:e5:a0:4d:2f:5e:dc:22: e8:a7:50:b1:67:70:77:de:9e:29:57:ec:54:97:b4: 14:3b:78:31:fe:f7:a9:5d:55:ed:42:79:a8:f3:09: 28:c7:3d:eb:e6:9a:3f:67:5a:3d:a3:d4:34:3c:7d: 9f:37:75:dc:7b:5c:ae:b1:ca:82:16:4e:df:84:74: 54:cb:e5:60:16:0b:b5:99:82:8f:9a:96:f3:29:7f: e3:b4:d3:13:95:b6:7d:c2:bc:87:6f:de:48:d6:c4: c2:12:a8:5f:85:74:aa:53:a5:65:e5:36:d1:90:f1: dd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DE:92:0D:84:39:72:A0:C2:32:32:A2:98:4A:17:AD:7F:76:33:17 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS984.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.7.0/24 82.22.146.0/24 82.23.163.0/24 82.23.173.0/24 82.23.248.0/24 82.24.16.0/24 82.27.3.0/24 82.27.117.0/24 82.38.44.0/24 IPv6: 2a13:9500:8c::/48 Signature Algorithm: sha256WithRSAEncryption 50:3f:83:f4:d3:6c:0a:26:1e:a5:96:bc:02:ca:62:26:3d:07: 2d:ca:8b:32:4e:62:00:61:a5:e3:a7:1b:33:c0:61:f8:67:72: 49:53:c7:27:df:60:09:57:b2:68:e0:a5:9b:39:f1:32:b9:60: 00:dd:be:34:e7:32:ed:f5:3e:ed:48:b4:1d:c5:56:8b:22:3f: 2d:78:ff:db:77:d6:20:13:c5:f1:04:df:98:71:ab:67:de:fb: b0:2e:1a:61:30:b4:00:e0:b8:ee:a3:c7:e2:6c:2c:37:23:4a: 6f:a0:06:6f:ca:98:a2:cd:db:f1:9d:95:fb:70:9f:64:53:2d: e7:8b:cf:75:3e:3e:18:08:06:a5:a5:ec:6d:32:87:9a:13:8c: 19:5d:24:eb:e3:97:4b:ce:a7:84:7a:4e:74:ec:24:13:68:dc: a5:9a:e6:90:22:d2:39:77:a7:a5:ef:fa:10:0c:9e:44:60:47: fb:6e:ba:1f:2f:c9:c5:d3:3d:1f:a7:e0:1c:72:98:e3:6d:3b: 64:31:31:5c:0f:68:4c:38:fb:84:19:f1:89:0d:12:d9:00:da: a1:b8:4f:48:80:26:7f:1e:ec:c4:ba:59:d2:a0:f3:61:a1:e6: 0d:6a:57:70:8f:58:a0:7f:e4:e5:82:9e:bb:0d:6d:8e:ab:b8: 54:1b:31:a9 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgIUEzcsCiHTLy9ZgU7wl4b5fN83ZlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMTEwNjM0MzBaFw0yNzAxMTAwNjM5MzBaMDMxMTAvBgNV BAMTKDE3REU5MjBEODQzOTcyQTBDMjMyMzJBMjk4NEExN0FEN0Y3NjMzMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUdKtyCXDL2Z1Zth1eskngGYUH V++SSR/xC/G0YioGQlNC6bjM1rMnzpRsGpTG8DpwCVg2lgmO4hY3IhMU0uX0wIps mjEwkwXNCie0bTcCY7VBy8vgMLa5G68ZcYUMIbmZYEQwIL0G+tYyi+0GksciEEV9 EQK9F5htgTQcblgIj71EX5IZ8LPzfvd8FHPp5aBNL17cIuinULFncHfenilX7FSX tBQ7eDH+96ldVe1CeajzCSjHPevmmj9nWj2j1DQ8fZ83ddx7XK6xyoIWTt+EdFTL 5WAWC7WZgo+alvMpf+O00xOVtn3CvIdv3kjWxMISqF+FdKpTpWXlNtGQ8d0fAgMB AAGjggJIMIICRDAdBgNVHQ4EFgQUF96SDYQ5cqDCMjKimEoXrX92MxcwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTOTg0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA8BAIAATA2AwQAUhUHAwQA UhaSAwQAUhejAwQAUhetAwQAUhf4AwQAUhgQAwQAUhsDAwQAUht1AwQAUiYsMA8E AgACMAkDBwAqE5UAAIwwDQYJKoZIhvcNAQELBQADggEBAFA/g/TTbAomHqWWvALK YiY9By3KizJOYgBhpeOnGzPAYfhncklTxyffYAlXsmjgpZs58TK5YADdvjTnMu31 Pu1ItB3FVosiPy14/9t31iATxfEE35hxq2fe+7AuGmEwtADguO6jx+JsLDcjSm+g Bm/KmKLN2/Gdlftwn2RTLeeLz3U+PhgIBqWl7G0yh5oTjBldJOvjl0vOp4R6TnTs JBNo3KWa5pAi0jl3p6Xv+hAMnkRgR/tuuh8vycXTPR+n4BxymONtO2QxMVwPaEw4 +4QZ8YkNEtkA2qG4T0iAJn8e7MS6WdKg82Gh5g1qV3CPWKB/5OWCnrsNbY6ruFQb Mak= -----END CERTIFICATE-----Generated at Sun Jan 18 04:29:17 2026 by rpki-client