This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS134667.roa File: AS134667.roa (raw, json) Hash identifier: g+cEsEq6/DX/LvxukmmQ9e+ifnpkCC3ts/ZIWixoE8U= Subject key identifier: 00:96:15:A2:10:EF:BA:49:CF:72:BB:91:80:02:24:6E:EB:1E:1E:A1 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 0181135B9DBCFABD7DBEA11976F8A4E6DA4357FC Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS134667.roa Signing time: Wed 26 Nov 2025 10:26:52 +0000 ROA not before: Wed 26 Nov 2025 10:21:52 +0000 ROA not after: Wed 25 Nov 2026 10:26:52 +0000 asID: 134667 IP address blocks: 92.113.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Nov 2025 08:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:81:13:5b:9d:bc:fa:bd:7d:be:a1:19:76:f8:a4:e6:da:43:57:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Nov 26 10:21:52 2025 GMT Not After : Nov 25 10:26:52 2026 GMT Subject: CN=009615A210EFBA49CF72BB918002246EEB1E1EA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:90:30:22:07:42:ec:27:91:c0:1f:a5:31:db: e7:89:1f:49:43:83:61:88:82:52:5a:fc:cb:30:35: 28:f8:73:9e:3d:89:08:22:f1:7e:7d:a5:42:2e:93: 24:8d:67:da:05:d7:2d:f5:9f:d0:8c:f1:2b:e4:68: 91:c9:f8:14:56:0e:c2:13:dc:40:c8:f4:d1:87:24: e5:7a:08:05:63:e2:cc:01:c3:53:37:29:30:af:f4: f2:a9:93:4c:2e:3a:46:d1:a2:55:36:b7:ba:e2:33: 4a:07:79:95:cc:bc:e7:67:68:b0:e5:60:ac:09:40: 25:23:c2:14:4b:6a:d5:91:15:06:bb:da:b7:10:cf: d7:b1:a3:74:0a:66:e6:29:b0:8e:10:5a:e9:fa:44: 8a:e3:6b:3b:68:47:62:ff:33:19:30:b0:03:b7:44: de:3c:ae:2c:17:41:a3:63:f8:01:81:12:69:64:d3: d3:eb:4b:36:24:c1:06:ce:da:e6:b4:35:35:77:58: 4e:c7:d2:cc:07:aa:15:79:8d:a5:13:51:ef:db:32: 94:df:14:20:ce:7d:78:f2:86:68:94:85:03:4c:4d: 5d:c3:a8:ce:e7:51:c2:b2:fb:5d:c8:e1:c6:42:4b: 64:96:36:04:32:57:60:45:ce:ad:e7:1c:c0:61:19: 82:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:96:15:A2:10:EF:BA:49:CF:72:BB:91:80:02:24:6E:EB:1E:1E:A1 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS134667.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.113.124.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:b8:9e:9e:a2:b0:68:d4:b4:6b:c0:ad:88:c3:df:6b:0f:13: 60:74:19:ce:86:c1:b5:11:fb:15:6d:eb:79:95:39:87:c8:52: 7e:c6:da:74:ba:fc:ff:40:3b:c7:35:2b:1f:8a:5f:1e:cc:7a: e0:5f:d7:33:56:15:8e:4c:81:bd:3a:3c:6c:df:be:d4:9a:77: 0c:0c:ec:2e:24:f2:e8:d8:90:c5:6a:8b:15:78:e8:14:a0:85: 43:6f:5c:20:94:ee:3d:e0:db:0a:4c:6d:10:71:7f:5f:16:25: ed:35:1b:e5:b6:2a:17:3b:c0:5f:ad:29:59:81:5d:cf:61:fc: 49:92:b0:1d:1b:5a:fe:e0:87:7e:12:78:dc:07:59:d0:2d:aa: 19:38:7c:c5:f2:03:c7:8c:4f:35:0c:0a:d3:c2:c8:e7:0c:47: 63:3a:e5:39:ad:72:96:8f:d4:91:13:b7:e6:a1:c2:46:51:b5: f6:25:3b:f1:b3:15:8d:ad:68:5a:ce:70:47:8b:fb:25:6f:15: fe:b0:bd:bf:ce:33:b0:fa:5f:90:72:25:c0:93:1d:77:0d:50: dc:da:37:26:4d:84:48:cd:13:71:5f:80:57:d6:67:c8:58:47: 24:76:5b:a7:8d:35:67:8c:49:1c:67:07:1e:f7:30:9c:bb:6c: 89:6d:8d:30 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUAYETW528+r19vqEZdvik5tpDV/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTExMjYxMDIxNTJaFw0yNjExMjUxMDI2NTJaMDMxMTAvBgNV BAMTKDAwOTYxNUEyMTBFRkJBNDlDRjcyQkI5MTgwMDIyNDZFRUIxRTFFQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCakDAiB0LsJ5HAH6Ux2+eJH0lD g2GIglJa/MswNSj4c549iQgi8X59pUIukySNZ9oF1y31n9CM8SvkaJHJ+BRWDsIT 3EDI9NGHJOV6CAVj4swBw1M3KTCv9PKpk0wuOkbRolU2t7riM0oHeZXMvOdnaLDl YKwJQCUjwhRLatWRFQa72rcQz9exo3QKZuYpsI4QWun6RIrjaztoR2L/MxkwsAO3 RN48riwXQaNj+AGBEmlk09PrSzYkwQbO2ua0NTV3WE7H0swHqhV5jaUTUe/bMpTf FCDOfXjyhmiUhQNMTV3DqM7nUcKy+13I4cZCS2SWNgQyV2BFzq3nHMBhGYKjAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUAJYVohDvuknPcruRgAIkbuseHqEwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTM0NjY3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXHF8 MA0GCSqGSIb3DQEBCwUAA4IBAQBOuJ6eorBo1LRrwK2Iw99rDxNgdBnOhsG1EfsV bet5lTmHyFJ+xtp0uvz/QDvHNSsfil8ezHrgX9czVhWOTIG9Ojxs377UmncMDOwu JPLo2JDFaosVeOgUoIVDb1wglO494NsKTG0QcX9fFiXtNRvltioXO8BfrSlZgV3P YfxJkrAdG1r+4Id+EnjcB1nQLaoZOHzF8gPHjE81DArTwsjnDEdjOuU5rXKWj9SR E7fmocJGUbX2JTvxsxWNrWhaznBHi/slbxX+sL2/zjOw+l+QciXAkx13DVDc2jcm TYRIzRNxX4BX1mfIWEckdlunjTVnjEkcZwce9zCcu2yJbY0w -----END CERTIFICATE-----Generated at Wed Nov 26 13:18:05 2025 by rpki-client