This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS207994.roa File: AS207994.roa (raw, json) Hash identifier: Qfe9RarY8vYQ5QrR9TX9zbdpOjWsWHjsoHHOlfAuCcg= Subject key identifier: 77:EC:5A:97:F8:67:BB:10:A0:6A:98:33:DA:CF:C6:90:83:C3:7B:93 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 6AF0C2524E5E1E4FE51F68D6CFB5AC5F229864A0 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS207994.roa Signing time: Fri 12 Dec 2025 16:04:08 +0000 ROA not before: Fri 12 Dec 2025 15:59:08 +0000 ROA not after: Fri 11 Dec 2026 16:04:08 +0000 asID: 207994 IP address blocks: 91.124.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 13:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f0:c2:52:4e:5e:1e:4f:e5:1f:68:d6:cf:b5:ac:5f:22:98:64:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 12 15:59:08 2025 GMT Not After : Dec 11 16:04:08 2026 GMT Subject: CN=77EC5A97F867BB10A06A9833DACFC69083C37B93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fc:34:fd:57:21:39:71:3a:96:50:fc:2a:ce: 15:ea:e5:13:8c:87:ff:1f:9d:ec:77:70:c5:77:92: 05:61:f0:f1:01:93:0e:95:8e:76:90:7c:00:1e:7b: 77:1c:3a:ee:e8:54:fc:81:76:75:3c:4c:73:65:80: c8:03:0b:59:63:88:ee:d2:ca:54:09:4f:e1:a2:93: 6e:39:91:bc:6f:55:91:35:8f:1a:b0:63:d8:af:e4: 94:ec:55:55:8a:d7:03:37:29:a4:66:c9:30:7d:7b: 9b:90:7c:e8:6a:92:4f:da:1d:3e:bc:ba:cb:c0:d2: ff:69:6a:d9:2a:01:a5:04:69:e0:45:6b:77:69:45: df:88:5b:02:b2:0e:ce:16:2c:29:66:ac:a0:8d:73: 4b:f4:05:38:46:de:4e:d1:2d:64:2e:f6:46:04:88: 80:0d:30:07:1d:e4:29:ae:04:14:63:0a:11:2a:53: bf:1f:4f:e7:60:fb:cd:d5:ea:d4:c0:18:52:86:73: 29:48:e4:5f:0e:a3:81:1c:92:b0:b3:5a:45:cf:21: 22:d7:8f:13:3c:a6:4c:c5:08:d7:c2:df:b6:d9:4d: 60:d7:ea:09:1f:92:4c:fe:cf:69:c0:71:11:8d:c7: b6:e1:4d:ca:92:92:94:f4:8d:84:2c:54:ef:a3:0c: 51:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:EC:5A:97:F8:67:BB:10:A0:6A:98:33:DA:CF:C6:90:83:C3:7B:93 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS207994.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.124.98.0/24 Signature Algorithm: sha256WithRSAEncryption 78:32:f3:85:b7:1c:fa:6c:29:86:cc:20:cd:76:ba:c2:15:e5: 6c:af:a5:d6:77:14:6e:12:fb:28:3b:5e:69:25:72:0f:57:a5: 94:94:e4:b3:7d:05:de:82:31:24:61:66:7d:72:68:df:b1:07: 51:d6:10:0e:34:2d:b2:7e:6d:2e:5a:f8:80:a2:f0:9c:89:0e: 89:81:06:b1:17:89:c9:fc:99:8c:93:60:2d:ab:94:bf:ac:65: f8:fc:e6:cb:cf:47:98:c8:91:b5:a8:2d:6a:d5:27:bb:d7:72: e3:2c:80:a9:37:dc:4e:43:c5:20:88:26:6c:3f:b7:bd:b4:0f: d7:f7:5a:96:55:f0:92:01:a6:31:8b:e8:51:53:6e:14:11:7c: 88:c1:cf:46:56:6b:15:dc:24:e5:4a:05:7a:27:dd:65:55:3b: ea:73:71:47:20:b8:be:ef:ca:30:21:8f:f7:47:04:0a:0c:90: d1:df:58:3b:27:c4:ac:17:a0:0f:29:df:ac:29:44:ae:85:1d: 05:51:38:39:c7:fc:f9:d4:c6:29:a9:b2:a4:7b:d0:eb:1d:ef: 65:fa:90:22:61:a1:93:9d:89:15:e3:2a:e1:ba:18:4e:cb:ab: 5e:66:a0:1e:75:82:f3:8b:2e:5f:bd:97:77:29:b5:ec:06:a4: ae:c0:4c:b9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUavDCUk5eHk/lH2jWz7WsXyKYZKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMTIxNTU5MDhaFw0yNjEyMTExNjA0MDhaMDMxMTAvBgNV BAMTKDc3RUM1QTk3Rjg2N0JCMTBBMDZBOTgzM0RBQ0ZDNjkwODNDMzdCOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI/DT9VyE5cTqWUPwqzhXq5ROM h/8fnex3cMV3kgVh8PEBkw6VjnaQfAAee3ccOu7oVPyBdnU8THNlgMgDC1ljiO7S ylQJT+Gik245kbxvVZE1jxqwY9iv5JTsVVWK1wM3KaRmyTB9e5uQfOhqkk/aHT68 usvA0v9patkqAaUEaeBFa3dpRd+IWwKyDs4WLClmrKCNc0v0BThG3k7RLWQu9kYE iIANMAcd5CmuBBRjChEqU78fT+dg+83V6tTAGFKGcylI5F8Oo4EckrCzWkXPISLX jxM8pkzFCNfC37bZTWDX6gkfkkz+z2nAcRGNx7bhTcqSkpT0jYQsVO+jDFFJAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUd+xal/hnuxCgapgz2s/GkIPDe5MwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjA3OTk0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW3xi MA0GCSqGSIb3DQEBCwUAA4IBAQB4MvOFtxz6bCmGzCDNdrrCFeVsr6XWdxRuEvso O15pJXIPV6WUlOSzfQXegjEkYWZ9cmjfsQdR1hAONC2yfm0uWviAovCciQ6JgQax F4nJ/JmMk2Atq5S/rGX4/ObLz0eYyJG1qC1q1Se713LjLICpN9xOQ8UgiCZsP7e9 tA/X91qWVfCSAaYxi+hRU24UEXyIwc9GVmsV3CTlSgV6J91lVTvqc3FHILi+78ow IY/3RwQKDJDR31g7J8SsF6APKd+sKUSuhR0FUTg5x/z51MYpqbKke9DrHe9l+pAi YaGTnYkV4yrhuhhOy6teZqAedYLziy5fvZd3KbXsBqSuwEy5 -----END CERTIFICATE-----Generated at Sat Dec 13 21:57:35 2025 by rpki-client