This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13347.roa File: AS13347.roa (raw, json) Hash identifier: WmTM9a9k06jVNtDEbFzg+5IecePB+ShD1s//8TNZA44= Subject key identifier: C3:10:07:C5:88:F0:BC:CD:5A:60:62:8B:CD:5F:B8:6E:4F:FA:D6:1E Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 29328BAD805D10703E26AFA34644A8D9DAB72B04 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13347.roa Signing time: Wed 07 Jan 2026 00:05:01 +0000 ROA not before: Wed 07 Jan 2026 00:00:01 +0000 ROA not after: Wed 06 Jan 2027 00:05:01 +0000 asID: 13347 IP address blocks: 92.112.32.0/24 maxlen: 24 92.112.33.0/24 maxlen: 24 92.112.34.0/24 maxlen: 24 92.112.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:32:8b:ad:80:5d:10:70:3e:26:af:a3:46:44:a8:d9:da:b7:2b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Jan 7 00:00:01 2026 GMT Not After : Jan 6 00:05:01 2027 GMT Subject: CN=C31007C588F0BCCD5A60628BCD5FB86E4FFAD61E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5d:59:4f:51:a9:2c:1b:2b:82:7f:fe:10:00: 73:29:4c:9b:43:5f:6b:af:8f:18:0d:51:22:b5:c3: be:b2:09:a4:3f:18:cf:f6:76:a0:31:5f:c3:10:4d: a6:4c:f8:de:18:c3:47:58:a2:20:01:f3:e6:cf:ef: 99:82:b6:e2:ed:38:9d:ae:e4:22:3a:05:91:1b:16: 94:7c:da:0b:c7:11:f3:87:0e:7c:d2:e1:0b:a2:1f: 4b:b8:58:dd:76:67:23:8c:90:74:05:94:60:50:af: 1e:1e:d4:3d:14:0d:2a:da:e8:50:ad:b7:d5:b4:3d: 5a:f7:67:80:d2:ff:fe:b9:bc:de:1f:ac:c5:42:8f: 3b:ff:80:b9:bc:e5:bf:23:6e:1f:7b:08:ca:fa:94: 23:4b:57:ce:68:2b:26:09:46:2a:e8:db:dc:6e:4f: 76:f7:a1:6f:c5:d8:0b:14:0c:b1:1c:be:8c:06:1a: 4b:3a:db:87:b3:04:a6:a0:b8:ed:da:6f:d9:d1:c8: cf:3a:7e:dc:20:24:64:86:b3:64:d9:74:ab:c4:2a: c6:9f:b5:93:3a:3a:d4:c5:25:ad:64:5f:03:64:be: e8:1b:13:7c:73:d9:50:3a:de:17:c8:76:51:40:ad: b6:d8:23:50:31:bc:32:c9:43:aa:18:38:9d:9f:79: d5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:10:07:C5:88:F0:BC:CD:5A:60:62:8B:CD:5F:B8:6E:4F:FA:D6:1E X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13347.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.112.32.0/22 Signature Algorithm: sha256WithRSAEncryption 71:42:a6:fc:57:b0:65:1c:1f:0f:73:16:6d:7e:b1:96:18:24: de:ba:6b:2e:17:04:f1:36:3a:21:d3:0e:4a:7c:3a:81:b7:11: ff:6d:70:d1:1a:61:13:a5:9d:46:d5:08:07:54:77:e2:b5:42: 58:19:78:66:2f:5d:21:d6:45:99:7d:74:aa:f4:5a:76:6f:c4: 7b:d6:d8:ea:f9:d3:d6:5a:b6:17:eb:b5:2e:38:eb:dc:7b:d3: 06:22:ce:7d:e8:b4:ec:a5:e6:25:3f:2f:c2:f2:03:37:2a:61: 4c:c9:6e:a2:f0:2d:0d:97:3b:80:fe:70:ed:60:22:d8:a8:f2: cf:80:3b:49:e5:62:df:37:cb:66:7a:99:a9:8f:09:37:ba:d3: d7:9b:ac:cd:9c:da:01:86:47:1f:88:90:ba:71:80:02:58:06: 6d:45:51:b9:26:c6:e1:44:fb:ce:53:81:06:06:82:31:ef:f0: 07:03:24:45:13:df:f4:d0:90:49:6b:0b:b1:f1:9e:59:9a:2c: fb:f9:5a:09:79:ba:01:1d:61:60:0f:3b:30:1d:aa:01:10:4d: c8:ce:bc:94:41:38:0b:64:b7:d8:8e:f1:78:58:34:80:99:6b: 02:1d:0d:83:42:76:a9:20:09:ec:e5:1e:38:ee:bc:29:3d:bd: 08:db:58:e6 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUKTKLrYBdEHA+Jq+jRkSo2dq3KwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNjAxMDcwMDAwMDFaFw0yNzAxMDYwMDA1MDFaMDMxMTAvBgNV BAMTKEMzMTAwN0M1ODhGMEJDQ0Q1QTYwNjI4QkNENUZCODZFNEZGQUQ2MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOXVlPUaksGyuCf/4QAHMpTJtD X2uvjxgNUSK1w76yCaQ/GM/2dqAxX8MQTaZM+N4Yw0dYoiAB8+bP75mCtuLtOJ2u 5CI6BZEbFpR82gvHEfOHDnzS4QuiH0u4WN12ZyOMkHQFlGBQrx4e1D0UDSra6FCt t9W0PVr3Z4DS//65vN4frMVCjzv/gLm85b8jbh97CMr6lCNLV85oKyYJRiro29xu T3b3oW/F2AsUDLEcvowGGks624ezBKaguO3ab9nRyM86ftwgJGSGs2TZdKvEKsaf tZM6OtTFJa1kXwNkvugbE3xz2VA63hfIdlFArbbYI1AxvDLJQ6oYOJ2fedV1AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUwxAHxYjwvM1aYGKLzV+4bk/61h4wHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTMzNDcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJccCAw DQYJKoZIhvcNAQELBQADggEBAHFCpvxXsGUcHw9zFm1+sZYYJN66ay4XBPE2OiHT Dkp8OoG3Ef9tcNEaYROlnUbVCAdUd+K1QlgZeGYvXSHWRZl9dKr0WnZvxHvW2Or5 09ZathfrtS4469x70wYizn3otOyl5iU/L8LyAzcqYUzJbqLwLQ2XO4D+cO1gItio 8s+AO0nlYt83y2Z6mamPCTe609ebrM2c2gGGRx+IkLpxgAJYBm1FUbkmxuFE+85T gQYGgjHv8AcDJEUT3/TQkElrC7HxnlmaLPv5Wgl5ugEdYWAPOzAdqgEQTcjOvJRB OAtkt9iO8XhYNICZawIdDYNCdqkgCezlHjjuvCk9vQjbWOY= -----END CERTIFICATE-----Generated at Tue Jan 20 19:20:13 2026 by rpki-client