This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS138195.roa File: AS138195.roa (raw, json) Hash identifier: 5XbUW4+3s5kuP431DjlYXLo53pk3M9MNWqWdFJkSFZo= Subject key identifier: 44:A4:7F:FF:E0:1F:9D:96:83:AA:B9:E9:B3:7C:71:5B:DB:97:B8:DF Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 3C0958D2AEA94F48AC30D2DE8CA3A21970BC3426 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS138195.roa Signing time: Mon 24 Nov 2025 15:45:44 +0000 ROA not before: Mon 24 Nov 2025 15:40:44 +0000 ROA not after: Mon 23 Nov 2026 15:45:44 +0000 asID: 138195 IP address blocks: 91.124.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 25 Nov 2025 16:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:09:58:d2:ae:a9:4f:48:ac:30:d2:de:8c:a3:a2:19:70:bc:34:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Nov 24 15:40:44 2025 GMT Not After : Nov 23 15:45:44 2026 GMT Subject: CN=44A47FFFE01F9D9683AAB9E9B37C715BDB97B8DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:62:90:32:9f:a9:d3:df:b9:9f:11:e1:f3:56: b3:02:29:67:57:b3:29:ba:d0:e5:8b:f4:ff:de:0b: 4a:2b:d3:49:46:c8:d1:2b:a5:93:69:ab:2f:7e:d7: 31:3c:01:31:6e:b7:01:26:97:9b:db:33:c7:0e:f3: 12:c5:32:05:7f:7d:cd:2d:a2:af:82:79:2b:de:77: bc:26:93:2a:ec:dd:56:88:42:4d:8f:35:9e:fe:e3: fd:35:12:7f:4b:aa:4e:d8:e4:c0:ca:2d:90:41:e8: 0a:0a:a5:98:4d:90:95:e6:f7:d1:54:72:9f:d2:1f: 19:71:da:6f:7e:b8:a9:7b:ca:4e:9e:69:8b:6a:fd: 2c:43:9e:75:3c:52:8b:48:18:28:5d:da:26:b5:2b: c6:8a:05:2e:37:31:f1:89:22:d3:69:e4:2f:56:9d: d6:a5:6b:5e:89:ee:cb:1e:05:25:88:ce:e5:08:1e: 7a:06:dc:03:ff:43:25:57:17:cf:e1:89:fc:43:19: 6e:85:b7:8e:0c:6d:22:6f:9f:d0:4a:fb:0a:7e:e1: 81:4d:c9:6c:fe:95:0f:6f:c4:78:56:a3:9d:d2:12: 14:9a:58:ad:d1:e5:4a:ff:c2:44:d5:54:53:38:f5: bc:de:ab:7f:71:c0:68:16:7c:7e:17:5f:91:b6:f2: 8e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A4:7F:FF:E0:1F:9D:96:83:AA:B9:E9:B3:7C:71:5B:DB:97:B8:DF X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS138195.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.124.116.0/23 Signature Algorithm: sha256WithRSAEncryption 76:63:98:4d:d1:47:86:59:a0:84:72:89:de:fc:e8:99:70:53: 66:2d:17:cd:2a:77:d6:36:4e:84:3c:51:01:fa:0f:5c:37:f3: 1b:a9:2b:3a:64:79:12:51:8a:50:4a:5d:22:6b:ab:99:40:86: d8:8a:7f:63:8b:b3:5d:fd:c2:88:e6:52:dc:51:46:cf:99:55: 9a:7a:23:d3:d5:4d:73:74:f3:4e:f7:25:e9:73:f6:9e:3e:00: 02:93:5e:ae:df:dd:c8:6a:1e:c5:91:96:b0:07:e3:78:26:61: 9b:8b:b9:0b:d2:c0:d4:15:37:01:e4:65:fa:19:11:52:d1:d2: f8:bc:cf:70:5c:9f:de:21:bb:bb:cb:67:2d:48:b7:b3:b2:91: 97:d9:7d:a5:4b:69:8d:f0:ef:bd:32:2d:22:bb:0f:32:81:23: 76:33:b8:8d:f7:d1:0a:80:05:af:de:b4:c6:dd:d0:d8:80:e4: 6e:32:5b:88:b4:11:ce:cc:aa:d5:f6:7a:c9:90:2d:7c:54:05: cd:26:5e:61:30:0d:91:20:03:30:41:3a:ed:a3:1c:1e:4d:db: ff:0f:ec:e5:82:dd:00:a3:b4:2f:44:c8:69:09:44:87:63:c5: 73:32:39:ff:98:c9:4f:68:3d:b2:b3:7f:13:66:81:c4:5b:3b: d9:9b:ef:2e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUPAlY0q6pT0isMNLejKOiGXC8NCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTExMjQxNTQwNDRaFw0yNjExMjMxNTQ1NDRaMDMxMTAvBgNV BAMTKDQ0QTQ3RkZGRTAxRjlEOTY4M0FBQjlFOUIzN0M3MTVCREI5N0I4REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYpAyn6nT37mfEeHzVrMCKWdX sym60OWL9P/eC0or00lGyNErpZNpqy9+1zE8ATFutwEml5vbM8cO8xLFMgV/fc0t oq+CeSved7wmkyrs3VaIQk2PNZ7+4/01En9Lqk7Y5MDKLZBB6AoKpZhNkJXm99FU cp/SHxlx2m9+uKl7yk6eaYtq/SxDnnU8UotIGChd2ia1K8aKBS43MfGJItNp5C9W ndala16J7sseBSWIzuUIHnoG3AP/QyVXF8/hifxDGW6Ft44MbSJvn9BK+wp+4YFN yWz+lQ9vxHhWo53SEhSaWK3R5Ur/wkTVVFM49bzeq39xwGgWfH4XX5G28o7ZAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQURKR//+AfnZaDqrnps3xxW9uXuN8wHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTM4MTk1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW3x0 MA0GCSqGSIb3DQEBCwUAA4IBAQB2Y5hN0UeGWaCEcone/OiZcFNmLRfNKnfWNk6E PFEB+g9cN/MbqSs6ZHkSUYpQSl0ia6uZQIbYin9ji7Nd/cKI5lLcUUbPmVWaeiPT 1U1zdPNO9yXpc/aePgACk16u393Iah7FkZawB+N4JmGbi7kL0sDUFTcB5GX6GRFS 0dL4vM9wXJ/eIbu7y2ctSLezspGX2X2lS2mN8O+9Mi0iuw8ygSN2M7iN99EKgAWv 3rTG3dDYgORuMluItBHOzKrV9nrJkC18VAXNJl5hMA2RIAMwQTrtoxweTdv/D+zl gt0Ao7QvRMhpCUSHY8VzMjn/mMlPaD2ys38TZoHEWzvZm+8u -----END CERTIFICATE-----Generated at Mon Nov 24 19:13:05 2025 by rpki-client