This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203771.roa File: AS203771.roa (raw, json) Hash identifier: 3oR51KgW7PaXkRH04/vX2CY6fVn2rPj1cbbC8szOGYU= Subject key identifier: 57:19:B1:69:86:45:EA:94:7F:39:A5:48:59:8B:C9:66:49:18:F6:92 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 0315F35B28507E865783DD8FE0D4921848138BE8 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203771.roa Signing time: Tue 18 Nov 2025 18:01:54 +0000 ROA not before: Tue 18 Nov 2025 17:56:54 +0000 ROA not after: Tue 17 Nov 2026 18:01:54 +0000 asID: 203771 IP address blocks: 91.124.37.0/24 maxlen: 24 92.112.71.0/24 maxlen: 24 95.135.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Nov 2025 09:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:15:f3:5b:28:50:7e:86:57:83:dd:8f:e0:d4:92:18:48:13:8b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Nov 18 17:56:54 2025 GMT Not After : Nov 17 18:01:54 2026 GMT Subject: CN=5719B1698645EA947F39A548598BC9664918F692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:47:e1:03:03:3c:bf:b0:d5:59:af:14:ca:10: 2c:bc:70:3f:e5:17:18:91:ed:b3:bc:ca:1c:55:4f: 9b:d0:e5:23:20:fe:68:19:76:9b:a5:15:3b:05:03: b2:30:51:bb:bb:18:62:de:c4:89:45:3e:29:32:d2: 34:0c:33:81:e2:1f:85:78:fe:ac:3b:ba:77:0a:54: 78:ad:48:52:e5:fb:e9:97:b6:e8:b6:85:32:ef:2d: bd:0f:d3:0f:34:49:82:69:66:00:1b:d8:bd:c8:22: 1a:c7:1d:cd:d4:a8:2f:9e:2a:e0:1a:75:e2:8b:aa: 09:aa:d1:b2:64:87:a6:cf:da:74:6c:a5:ea:07:5d: b1:66:e2:1f:08:e4:16:5b:5a:16:d0:9f:c9:8b:ba: b5:34:b1:2c:74:13:e8:f2:95:c3:ae:53:2e:b0:ad: 22:c1:70:fd:76:b3:5e:75:78:f2:b9:75:a1:be:19: 1d:c8:5e:83:10:c0:9e:db:13:2f:47:48:90:18:c7: 4e:07:63:3a:b7:c8:8c:fb:b6:af:e7:45:4e:e9:41: e6:f2:e6:2b:d7:ab:ed:96:6e:6e:6b:44:e2:97:75: 98:d3:05:d7:e7:2c:03:04:e6:85:d8:45:f8:c5:ef: 26:14:27:b8:a1:14:f9:ee:47:6e:72:1d:07:c7:3d: e2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:19:B1:69:86:45:EA:94:7F:39:A5:48:59:8B:C9:66:49:18:F6:92 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203771.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.124.37.0/24 92.112.71.0/24 95.135.228.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:fb:30:70:3c:7a:be:a1:5b:23:65:49:53:a6:16:03:bd:eb: 36:7b:80:af:92:de:cd:22:6b:b5:09:3a:28:75:ac:a8:88:2c: 4f:4d:96:fc:27:0b:f0:22:84:1b:f2:e4:88:ef:d2:66:03:06: f5:81:1e:98:b3:8e:a5:1c:75:95:d7:89:ef:20:af:23:f7:26: 0b:80:76:9d:20:7a:e7:c3:ad:6c:bc:24:7a:89:52:0c:ee:e3: f5:18:ef:bd:ff:b8:54:69:2c:66:8d:22:94:b3:ee:86:ef:c5: 46:47:34:41:89:bd:16:c8:6e:c2:90:7d:72:94:22:99:02:83: 2e:bc:95:9f:af:e8:67:51:e0:e8:b7:c1:74:7b:11:27:94:aa: 48:b9:d4:08:d9:fc:5d:6d:29:79:9f:32:8b:c4:45:78:2b:2f: fc:0f:26:a8:05:8a:49:05:1a:ac:23:8b:69:8b:af:19:cf:e6: 23:b3:6e:d0:7f:fe:ca:e6:15:de:b8:a4:6f:0a:67:8b:93:16: a8:46:45:b5:c3:18:b5:25:d1:1d:f8:51:11:7d:5f:db:43:43: d9:f8:72:49:64:d0:cb:36:c2:a6:30:39:0a:67:ce:e0:3d:b0: 6f:41:eb:34:c2:89:2f:07:06:ab:cf:93:4b:d9:a7:69:12:22: 82:a7:3b:1c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUAxXzWyhQfoZXg92P4NSSGEgTi+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTExMTgxNzU2NTRaFw0yNjExMTcxODAxNTRaMDMxMTAvBgNV BAMTKDU3MTlCMTY5ODY0NUVBOTQ3RjM5QTU0ODU5OEJDOTY2NDkxOEY2OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKR+EDAzy/sNVZrxTKECy8cD/l FxiR7bO8yhxVT5vQ5SMg/mgZdpulFTsFA7IwUbu7GGLexIlFPiky0jQMM4HiH4V4 /qw7uncKVHitSFLl++mXtui2hTLvLb0P0w80SYJpZgAb2L3IIhrHHc3UqC+eKuAa deKLqgmq0bJkh6bP2nRspeoHXbFm4h8I5BZbWhbQn8mLurU0sSx0E+jylcOuUy6w rSLBcP12s151ePK5daG+GR3IXoMQwJ7bEy9HSJAYx04HYzq3yIz7tq/nRU7pQeby 5ivXq+2Wbm5rROKXdZjTBdfnLAME5oXYRfjF7yYUJ7ihFPnuR25yHQfHPeKRAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUVxmxaYZF6pR/OaVIWYvJZkkY9pIwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjAzNzcxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW3wl AwQAXHBHAwQAX4fkMA0GCSqGSIb3DQEBCwUAA4IBAQCd+zBwPHq+oVsjZUlTphYD ves2e4Cvkt7NImu1CToodayoiCxPTZb8JwvwIoQb8uSI79JmAwb1gR6Ys46lHHWV 14nvIK8j9yYLgHadIHrnw61svCR6iVIM7uP1GO+9/7hUaSxmjSKUs+6G78VGRzRB ib0WyG7CkH1ylCKZAoMuvJWfr+hnUeDot8F0exEnlKpIudQI2fxdbSl5nzKLxEV4 Ky/8DyaoBYpJBRqsI4tpi68Zz+Yjs27Qf/7K5hXeuKRvCmeLkxaoRkW1wxi1JdEd +FERfV/bQ0PZ+HJJZNDLNsKmMDkKZ87gPbBvQes0wokvBwarz5NL2adpEiKCpzsc -----END CERTIFICATE-----Generated at Fri Nov 21 18:07:35 2025 by rpki-client