This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS984.roa File: AS984.roa (raw, json) Hash identifier: zhWQYooyAxzS9XfJPTayqjgqARfn2aqbN4u0LlChi7g= Subject key identifier: 46:D1:3E:2E:98:B6:F2:B3:C9:45:74:F2:C0:9E:ED:D6:F5:82:F0:61 Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9 Certificate serial: 3279CF697E0040427781061D63C2B52C4A82C3D6 Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS984.roa Signing time: Fri 12 Dec 2025 04:13:39 +0000 ROA not before: Fri 12 Dec 2025 04:08:39 +0000 ROA not after: Fri 11 Dec 2026 04:13:39 +0000 asID: 984 IP address blocks: 141.11.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 14:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:79:cf:69:7e:00:40:42:77:81:06:1d:63:c2:b5:2c:4a:82:c3:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9 Validity Not Before: Dec 12 04:08:39 2025 GMT Not After : Dec 11 04:13:39 2026 GMT Subject: CN=46D13E2E98B6F2B3C94574F2C09EEDD6F582F061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f1:f3:03:06:b3:39:6d:75:c5:cb:d3:7f:15: 89:7f:54:b4:0f:20:20:7c:91:f6:35:12:63:5f:55: 3c:10:b3:56:d4:6f:f3:6e:05:c0:51:87:b4:85:90: b9:25:d9:d7:1d:cb:04:b0:15:85:19:aa:84:85:fb: 60:ec:6c:c5:5a:5d:a0:d1:48:78:42:15:f8:d8:73: 03:18:51:f8:51:94:37:ab:d6:d9:52:93:a3:58:fe: c6:ec:36:17:c6:28:91:c0:7a:97:13:44:e2:ed:1e: 18:53:0f:60:e3:f8:b7:b5:d3:41:8e:b5:73:ab:2f: 5d:52:63:45:3a:13:5d:47:45:76:30:83:ba:6a:e0: 61:f2:06:93:f5:c0:7f:6f:44:42:d8:f9:58:6e:33: 9b:c2:c3:41:bd:ee:03:3d:e3:04:4b:ae:cb:b6:27: 12:91:fb:6e:93:7b:1c:b1:44:84:d2:64:29:58:85: db:14:6c:c5:b5:0f:97:ff:86:c0:ab:5f:4f:13:fa: 8d:03:10:ff:cf:4a:c6:cd:b3:c5:b1:eb:cd:81:59: 29:0b:a4:ff:58:5f:3b:9e:91:ff:b8:2f:63:bf:7c: 18:44:49:06:db:97:63:6b:d4:d0:f0:b3:ab:c6:c3: 75:f2:98:cc:57:48:05:cc:f2:aa:60:3d:b6:a7:c2: 88:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D1:3E:2E:98:B6:F2:B3:C9:45:74:F2:C0:9E:ED:D6:F5:82:F0:61 X509v3 Authority Key Identifier: keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS984.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.11.140.0/24 Signature Algorithm: sha256WithRSAEncryption 40:7a:df:2b:a7:97:66:a4:14:ed:2c:7a:0a:13:8a:df:b2:0f: d9:d4:eb:d7:93:20:32:96:ef:d4:42:8b:6c:88:5d:61:db:2e: 87:c5:54:74:fa:43:22:3a:e8:ff:de:a6:2f:39:0f:82:bd:f6: 21:5f:9c:63:bf:f5:c1:93:39:99:ef:3b:7d:96:af:15:c4:62: 9d:1b:c5:c5:f1:91:6b:5a:a0:5f:f4:6f:6d:ef:30:19:d6:cc: 95:28:a0:5c:7e:95:99:5c:d5:5d:b5:c9:d8:dd:5e:d5:2a:c0: a9:bd:a4:5f:03:c3:20:26:55:08:5c:02:32:12:e5:09:99:1d: a9:84:88:1a:8a:23:55:b7:82:06:ee:f9:35:cb:8a:24:ab:68: 03:50:2d:d9:b2:0a:8d:5c:ce:fc:de:3f:a4:b9:8b:01:ce:f2: 05:21:53:c1:5b:44:b0:39:ec:7b:3c:1a:27:a9:76:04:38:d5: 59:51:2a:f2:0d:ab:ae:7e:bc:a5:9d:91:83:31:a7:58:35:72: a0:66:29:c4:2c:a3:b8:e2:b9:f6:65:e5:45:82:dc:60:99:7f: e5:cb:9b:3d:59:d9:ce:c1:0b:35:0b:97:1f:e7:36:97:44:05: 79:64:65:9c:50:2c:c1:10:a8:8c:f3:89:08:0f:66:08:dc:4c: 20:96:0d:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgIUMnnPaX4AQEJ3gQYdY8K1LEqCw9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw ODI4ZWNhOTAeFw0yNTEyMTIwNDA4MzlaFw0yNjEyMTEwNDEzMzlaMDMxMTAvBgNV BAMTKDQ2RDEzRTJFOThCNkYyQjNDOTQ1NzRGMkMwOUVFREQ2RjU4MkYwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe8fMDBrM5bXXFy9N/FYl/VLQP ICB8kfY1EmNfVTwQs1bUb/NuBcBRh7SFkLkl2dcdywSwFYUZqoSF+2DsbMVaXaDR SHhCFfjYcwMYUfhRlDer1tlSk6NY/sbsNhfGKJHAepcTROLtHhhTD2Dj+Le100GO tXOrL11SY0U6E11HRXYwg7pq4GHyBpP1wH9vRELY+VhuM5vCw0G97gM94wRLrsu2 JxKR+26TexyxRITSZClYhdsUbMW1D5f/hsCrX08T+o0DEP/PSsbNs8Wx682BWSkL pP9YXzuekf+4L2O/fBhESQbbl2Nr1NDws6vGw3XymMxXSAXM8qpgPbanwojZAgMB AAGjggIHMIICAzAdBgNVHQ4EFgQURtE+Lpi28rPJRXTywJ7t1vWC8GEwHwYDVR0j BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5 ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn bzdLay5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTOTg0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjQuMMA0G CSqGSIb3DQEBCwUAA4IBAQBAet8rp5dmpBTtLHoKE4rfsg/Z1OvXkyAylu/UQots iF1h2y6HxVR0+kMiOuj/3qYvOQ+CvfYhX5xjv/XBkzmZ7zt9lq8VxGKdG8XF8ZFr WqBf9G9t7zAZ1syVKKBcfpWZXNVdtcnY3V7VKsCpvaRfA8MgJlUIXAIyEuUJmR2p hIgaiiNVt4IG7vk1y4okq2gDUC3ZsgqNXM783j+kuYsBzvIFIVPBW0SwOex7PBon qXYEONVZUSryDauufrylnZGDMadYNXKgZinELKO44rn2ZeVFgtxgmX/ly5s9WdnO wQs1C5cf5zaXRAV5ZGWcUCzBEKiM84kID2YI3Ewglg1x -----END CERTIFICATE-----Generated at Sun Jan 18 04:26:24 2026 by rpki-client