This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS23679.roa File: AS23679.roa (raw, json) Hash identifier: SjO0yQ81jAZDBMXgqh84riiuX/nxxXKmPEHDBD6CP7s= Subject key identifier: B7:25:43:13:37:5C:1D:23:5B:7A:ED:E5:EE:CB:1C:93:E0:7F:C9:F2 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 63EFC2F82B6C4E957659E81D381743BA88169246 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS23679.roa Signing time: Fri 26 Dec 2025 09:55:32 +0000 ROA not before: Fri 26 Dec 2025 09:50:32 +0000 ROA not after: Fri 25 Dec 2026 09:55:32 +0000 asID: 23679 IP address blocks: 91.124.132.0/24 maxlen: 24 91.124.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ef:c2:f8:2b:6c:4e:95:76:59:e8:1d:38:17:43:ba:88:16:92:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 26 09:50:32 2025 GMT Not After : Dec 25 09:55:32 2026 GMT Subject: CN=B7254313375C1D235B7AEDE5EECB1C93E07FC9F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:cd:74:67:17:9c:9b:a1:74:25:24:bf:56: 8b:eb:a6:91:5d:1b:d4:b6:73:f5:6a:83:3b:56:06: 62:01:ac:9c:68:75:a2:63:d2:92:82:5c:ab:ba:73: c9:66:6a:f7:f8:2c:4f:9d:78:9f:33:2f:73:c7:09: 85:7b:52:33:d3:c1:31:b1:8d:62:82:dc:ff:2f:b5: 93:f7:39:72:b3:2a:4f:09:88:ef:2d:64:fc:09:b4: c1:7d:34:5e:48:de:65:11:a7:ea:92:59:22:7f:58: dc:e2:11:a2:cb:8d:14:50:48:62:8a:52:a2:30:a3: 70:21:9d:76:1d:c0:24:8a:fb:8b:4e:7b:cb:7c:de: 20:db:16:ad:38:43:45:05:ff:43:a2:be:6e:9f:11: ec:72:0a:51:4f:ef:bf:f6:25:78:91:59:22:65:a0: 5a:32:05:e0:6c:54:87:46:49:35:ce:dc:f4:e2:70: 09:78:06:48:8f:60:ac:f5:88:0a:84:b9:a7:0c:84: 66:6c:92:b9:c6:12:eb:bd:c4:a7:95:5c:6b:cf:1a: 15:b9:6d:f8:c9:a2:74:af:7a:c7:cb:32:bd:94:65: d7:39:a9:34:37:40:f6:c4:37:59:2c:1f:3a:6e:d3: f0:76:f2:92:05:65:65:c3:a3:90:56:85:12:54:19: 27:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:25:43:13:37:5C:1D:23:5B:7A:ED:E5:EE:CB:1C:93:E0:7F:C9:F2 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS23679.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.124.132.0/24 91.124.138.0/24 Signature Algorithm: sha256WithRSAEncryption 70:ce:66:28:34:13:45:95:0e:df:a8:13:4c:fd:ff:62:19:3d: 8c:df:80:9a:4f:94:8e:de:d5:90:b3:a2:0b:eb:85:cb:aa:7e: f1:87:0b:82:b0:9f:4f:5b:31:5d:68:02:ec:26:60:53:6c:70: 13:ac:13:02:c4:73:a5:0d:c9:a6:09:5d:ac:6c:c6:d5:a6:bb: b6:87:53:c1:55:1c:88:a4:5b:56:fc:e9:51:0b:67:3f:26:00: a2:da:6c:ed:0f:8c:79:29:96:bc:d2:93:03:6b:3f:e6:66:1d: 18:42:15:ab:fa:27:c1:00:e7:90:44:dc:a9:e8:85:db:f7:ba: 8e:69:1e:ce:51:3c:8b:23:b2:bc:a9:0e:de:d9:4f:ba:3d:95: 9f:56:8b:be:c5:9b:4e:d2:f8:40:71:27:fe:1e:11:f6:85:e4: 80:c1:49:5a:07:0e:d5:e4:f8:01:96:1e:61:02:5d:5e:f2:b8: 5f:38:67:d4:6c:73:63:ca:74:42:14:e3:12:57:d4:7c:af:5b: 15:37:34:d5:b8:a0:09:09:04:0b:2e:c9:94:c8:6b:53:24:ad: 75:c4:26:c5:b0:6b:a5:8e:22:fb:1a:27:e9:91:34:4a:2d:ef: d5:df:af:b3:29:87:61:4e:06:5d:37:e6:39:20:b6:1f:a6:46: a8:40:1b:a1 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUY+/C+CtsTpV2WegdOBdDuogWkkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMjYwOTUwMzJaFw0yNjEyMjUwOTU1MzJaMDMxMTAvBgNV BAMTKEI3MjU0MzEzMzc1QzFEMjM1QjdBRURFNUVFQ0IxQzkzRTA3RkM5RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCztc10Zxecm6F0JSS/VovrppFd G9S2c/VqgztWBmIBrJxodaJj0pKCXKu6c8lmavf4LE+deJ8zL3PHCYV7UjPTwTGx jWKC3P8vtZP3OXKzKk8JiO8tZPwJtMF9NF5I3mURp+qSWSJ/WNziEaLLjRRQSGKK UqIwo3AhnXYdwCSK+4tOe8t83iDbFq04Q0UF/0Oivm6fEexyClFP77/2JXiRWSJl oFoyBeBsVIdGSTXO3PTicAl4BkiPYKz1iAqEuacMhGZskrnGEuu9xKeVXGvPGhW5 bfjJonSvesfLMr2UZdc5qTQ3QPbEN1ksHzpu0/B28pIFZWXDo5BWhRJUGSd3AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUtyVDEzdcHSNbeu3l7ssck+B/yfIwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjM2Nzkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABbfIQD BABbfIowDQYJKoZIhvcNAQELBQADggEBAHDOZig0E0WVDt+oE0z9/2IZPYzfgJpP lI7e1ZCzogvrhcuqfvGHC4Kwn09bMV1oAuwmYFNscBOsEwLEc6UNyaYJXaxsxtWm u7aHU8FVHIikW1b86VELZz8mAKLabO0PjHkplrzSkwNrP+ZmHRhCFav6J8EA55BE 3Knohdv3uo5pHs5RPIsjsrypDt7ZT7o9lZ9Wi77Fm07S+EBxJ/4eEfaF5IDBSVoH DtXk+AGWHmECXV7yuF84Z9Rsc2PKdEIU4xJX1HyvWxU3NNW4oAkJBAsuyZTIa1Mk rXXEJsWwa6WOIvsaJ+mRNEot79Xfr7Mph2FOBl035jkgth+mRqhAG6E= -----END CERTIFICATE-----Generated at Sat Dec 27 01:38:20 2025 by rpki-client