This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197537.roa File: AS197537.roa (raw, json) Hash identifier: 4WVaLsWh6zTs51P/Jn+bhO7pjvp4O12GeYan71aq2Fk= Subject key identifier: 8A:F5:00:46:0C:67:87:07:D3:05:8C:CD:B2:41:18:14:AE:F0:A9:86 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 65F23A56FC702BB897D78516CD440FEF60FBE544 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197537.roa Signing time: Fri 12 Dec 2025 09:15:26 +0000 ROA not before: Fri 12 Dec 2025 09:10:26 +0000 ROA not after: Fri 11 Dec 2026 09:15:26 +0000 asID: 197537 IP address blocks: 92.112.23.0/24 maxlen: 24 95.135.136.0/24 maxlen: 24 95.135.145.0/24 maxlen: 24 95.135.146.0/24 maxlen: 24 95.135.147.0/24 maxlen: 24 95.135.152.0/24 maxlen: 24 95.135.169.0/24 maxlen: 24 95.135.170.0/24 maxlen: 24 95.135.172.0/24 maxlen: 24 95.135.174.0/24 maxlen: 24 95.135.177.0/24 maxlen: 24 95.135.188.0/24 maxlen: 24 95.135.211.0/24 maxlen: 24 95.135.216.0/24 maxlen: 24 95.135.220.0/24 maxlen: 24 95.135.226.0/24 maxlen: 24 95.135.227.0/24 maxlen: 24 95.135.231.0/24 maxlen: 24 95.135.236.0/24 maxlen: 24 95.135.243.0/24 maxlen: 24 95.135.247.0/24 maxlen: 24 178.94.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 13:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f2:3a:56:fc:70:2b:b8:97:d7:85:16:cd:44:0f:ef:60:fb:e5:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 12 09:10:26 2025 GMT Not After : Dec 11 09:15:26 2026 GMT Subject: CN=8AF500460C678707D3058CCDB2411814AEF0A986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:38:15:ad:6a:75:31:41:e2:15:a2:c4:40:8f: 0b:bf:60:87:4a:ff:df:58:2f:ae:db:96:59:8c:e7: 9c:7c:a9:f1:62:5f:a1:8f:a6:e8:09:4a:bd:8c:a8: 26:ed:81:b1:6f:47:a3:72:42:3d:9b:02:c0:87:69: 29:ea:e2:80:ce:7c:98:b0:e5:22:cc:9e:a3:14:3c: 28:cf:cf:b6:4c:bf:5c:98:87:d3:a4:72:c5:ad:33: a5:bb:27:af:df:c2:9f:2a:cc:f9:66:19:cd:50:f4: fe:e0:4d:c6:2f:1f:90:ce:8c:be:f9:7f:76:70:27: e8:dd:d7:a7:7f:ad:6e:ee:9d:8b:f0:2d:e6:fe:5a: 35:7d:e0:f2:ae:c9:03:ad:ea:39:6f:9e:b0:9a:c0: 93:b8:16:0a:dc:d0:15:62:c9:e7:c0:92:28:dd:db: af:03:6b:ba:8c:3f:b3:51:24:36:14:23:d1:1e:4a: d4:26:c0:70:6d:2b:2d:27:f4:e4:b8:c8:bc:ab:ec: ec:08:73:36:c6:13:89:62:1b:0c:d2:cb:f8:9f:2f: 1b:9a:5a:b6:6f:36:cb:81:ce:52:49:1a:17:20:3e: 99:c5:bf:f5:60:fb:0d:37:94:fc:82:6e:01:00:da: 8e:b9:a1:22:0d:ae:64:c8:40:72:fc:10:9f:4c:71: 6b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F5:00:46:0C:67:87:07:D3:05:8C:CD:B2:41:18:14:AE:F0:A9:86 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS197537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.112.23.0/24 95.135.136.0/24 95.135.145.0-95.135.147.255 95.135.152.0/24 95.135.169.0-95.135.170.255 95.135.172.0/24 95.135.174.0/24 95.135.177.0/24 95.135.188.0/24 95.135.211.0/24 95.135.216.0/24 95.135.220.0/24 95.135.226.0/23 95.135.231.0/24 95.135.236.0/24 95.135.243.0/24 95.135.247.0/24 178.94.142.0/24 Signature Algorithm: sha256WithRSAEncryption 94:bd:71:30:6f:a8:cd:b9:bf:97:bd:ba:a6:fe:13:01:40:00: 25:48:63:71:c2:f5:42:d3:57:62:34:09:62:fc:cb:81:4f:db: 75:6b:01:4b:44:17:84:3a:02:d7:da:a2:cf:45:22:00:8f:33: 3d:c2:a9:5f:49:33:a0:3b:93:e2:c1:73:96:f9:44:a8:c6:04: 35:e9:b7:2a:88:9d:a8:0d:3e:03:a1:71:ab:83:dc:b5:3a:ec: 90:43:7a:ca:fb:88:cf:36:db:23:91:9b:c6:46:61:81:36:ba: 15:3a:64:c0:e5:78:c6:13:ab:3c:54:84:93:63:ee:fc:49:5a: b1:91:f8:9c:7c:d6:34:0c:1d:4d:e3:50:34:0c:79:8d:04:17: b6:ae:49:a9:d5:96:19:49:23:24:ff:72:69:4c:6f:0e:39:63: 81:3c:ae:2f:73:7a:f3:6c:e5:8d:10:db:2c:c7:4b:cf:6d:bb: 3b:c9:77:45:1b:dd:4e:d7:83:93:7d:df:5a:16:7c:8e:df:ba: a1:db:a9:6c:45:62:f6:45:25:19:ff:27:be:3d:bb:79:fc:29: c5:4d:67:7c:c3:e1:28:63:e8:01:32:9a:71:a5:99:c9:1f:67: 4c:4a:0f:fd:07:62:44:3c:71:00:92:95:ae:cd:31:d2:dc:7f: 6d:c4:0a:61 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgIUZfI6VvxwK7iX14UWzUQP72D75UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMTIwOTEwMjZaFw0yNjEyMTEwOTE1MjZaMDMxMTAvBgNV BAMTKDhBRjUwMDQ2MEM2Nzg3MDdEMzA1OENDREIyNDExODE0QUVGMEE5ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOBWtanUxQeIVosRAjwu/YIdK /99YL67bllmM55x8qfFiX6GPpugJSr2MqCbtgbFvR6NyQj2bAsCHaSnq4oDOfJiw 5SLMnqMUPCjPz7ZMv1yYh9OkcsWtM6W7J6/fwp8qzPlmGc1Q9P7gTcYvH5DOjL75 f3ZwJ+jd16d/rW7unYvwLeb+WjV94PKuyQOt6jlvnrCawJO4Fgrc0BViyefAkijd 268Da7qMP7NRJDYUI9EeStQmwHBtKy0n9OS4yLyr7OwIczbGE4liGwzSy/ifLxua WrZvNsuBzlJJGhcgPpnFv/Vg+w03lPyCbgEA2o65oSINrmTIQHL8EJ9McWstAgMB AAGjggKEMIICgDAdBgNVHQ4EFgQUivUARgxnhwfTBYzNskEYFK7wqYYwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTk3NTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTCBggQCAAEwfAME AFxwFwMEAF+HiDAMAwQAX4eRAwQCX4eQAwQAX4eYMAwDBABfh6kDBABfh6oDBABf h6wDBABfh64DBABfh7EDBABfh7wDBABfh9MDBABfh9gDBABfh9wDBAFfh+IDBABf h+cDBABfh+wDBABfh/MDBABfh/cDBACyXo4wDQYJKoZIhvcNAQELBQADggEBAJS9 cTBvqM25v5e9uqb+EwFAACVIY3HC9ULTV2I0CWL8y4FP23VrAUtEF4Q6Atfaos9F IgCPMz3CqV9JM6A7k+LBc5b5RKjGBDXptyqInagNPgOhcauD3LU67JBDesr7iM82 2yORm8ZGYYE2uhU6ZMDleMYTqzxUhJNj7vxJWrGR+Jx81jQMHU3jUDQMeY0EF7au SanVlhlJIyT/cmlMbw45Y4E8ri9zevNs5Y0Q2yzHS89tuzvJd0Ub3U7Xg5N931oW fI7fuqHbqWxFYvZFJRn/J749u3n8KcVNZ3zD4Shj6AEymnGlmckfZ0xKD/0HYkQ8 cQCSla7NMdLcf23ECmE= -----END CERTIFICATE-----Generated at Sun Dec 14 00:02:34 2025 by rpki-client