This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS393942.roa File: AS393942.roa (raw, json) Hash identifier: vhMAGkT/z8k0MD5rVNCr0wNJuSAwuf+5bkqiDodSEQY= Subject key identifier: F1:8F:FE:00:91:7B:32:C8:F9:8E:2A:6A:1C:38:AC:9F:3C:CA:95:63 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 23681A9045025562FB2A7AC22E2ACA6A343518F4 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS393942.roa Signing time: Sat 22 Nov 2025 02:07:34 +0000 ROA not before: Sat 22 Nov 2025 02:02:34 +0000 ROA not after: Sat 21 Nov 2026 02:07:34 +0000 asID: 393942 IP address blocks: 178.92.117.0/24 maxlen: 24 178.95.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 02 Dec 2025 00:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:68:1a:90:45:02:55:62:fb:2a:7a:c2:2e:2a:ca:6a:34:35:18:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Nov 22 02:02:34 2025 GMT Not After : Nov 21 02:07:34 2026 GMT Subject: CN=F18FFE00917B32C8F98E2A6A1C38AC9F3CCA9563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:cb:72:50:80:ef:78:cc:b9:cf:e5:c4:30: 4c:5d:bb:b3:73:45:0d:ef:b9:e9:2b:82:e0:40:a6: 59:11:46:05:06:27:d8:38:d6:24:56:74:20:25:52: de:e7:ad:ec:bc:1e:01:81:87:83:e3:7b:85:1d:63: 64:74:3c:3c:09:91:6a:8b:2b:8a:bc:f2:f4:77:0f: f0:e5:28:9c:28:d4:07:c0:8f:a8:96:96:73:b7:41: 98:79:fd:2d:ce:00:2d:ee:90:df:e3:d6:02:14:d1: f2:34:6c:2f:83:3b:b2:89:1a:83:dd:55:09:12:04: 8f:20:bd:83:9e:43:19:05:7a:77:fb:7b:01:3d:d3: 7b:36:3a:d3:0b:f4:99:43:fa:a8:6d:40:b7:2b:c7: d4:08:85:f5:ec:70:b7:6c:14:03:3a:7b:be:f2:a2: 0c:30:0b:bd:21:52:c1:80:2a:7f:d9:50:6b:23:19: 9f:9b:f3:a8:db:c1:5a:e1:72:3f:0f:aa:0b:ff:71: 11:b0:8e:63:5c:5b:fa:bb:10:fc:ee:d4:73:8d:6d: b2:32:6d:96:a9:30:f2:34:04:27:7b:82:7d:0b:8c: 66:9d:2b:9c:c2:86:28:07:02:cb:16:c5:23:a6:7b: 05:d1:bf:68:a7:15:59:41:0a:3b:f1:48:95:63:d2: 71:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8F:FE:00:91:7B:32:C8:F9:8E:2A:6A:1C:38:AC:9F:3C:CA:95:63 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS393942.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.92.117.0/24 178.95.146.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:2d:06:38:17:ef:49:ba:35:d0:6f:19:dd:73:87:57:8d:fe: b7:23:7e:28:04:d6:fa:9f:7b:06:75:9b:ce:c4:ac:f7:fd:f6: 35:34:db:c1:99:4c:12:48:fc:ad:a4:ee:65:07:ba:c7:49:dc: 94:ef:77:59:87:50:37:6a:d3:f8:3b:84:66:3e:66:c3:bf:60: 0e:3b:63:fa:78:74:97:91:12:f5:2d:9b:c8:7c:90:05:35:6f: d9:2f:10:a5:7b:36:04:76:70:7d:2b:fa:b4:c8:ae:e9:33:c2: 14:56:87:b7:7c:f2:b0:73:59:59:4c:9a:3d:c2:b9:2b:18:12: d1:87:67:70:9f:fd:0e:a6:b5:ad:cb:19:a7:db:99:44:a3:79: 99:93:df:1f:f6:de:05:c9:1a:6a:d5:c6:5d:1a:e7:17:29:15: 54:34:b6:96:46:6b:ec:45:7a:cc:1c:6f:f5:77:e3:a6:65:b3: 64:99:b9:bd:3b:af:87:7e:73:f2:7c:95:20:29:c1:30:7c:2f: de:bd:d8:37:f6:9d:84:ca:e9:a6:b2:b1:9f:dd:43:16:6e:b4: 80:0a:82:22:eb:79:30:52:8d:79:9e:b4:c4:09:a5:e5:ca:87: 4e:db:c7:80:af:b3:f8:6b:9e:7d:8f:c1:9e:b2:d4:1e:63:c5: 58:9f:a7:ea -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUI2gakEUCVWL7KnrCLirKajQ1GPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTExMjIwMjAyMzRaFw0yNjExMjEwMjA3MzRaMDMxMTAvBgNV BAMTKEYxOEZGRTAwOTE3QjMyQzhGOThFMkE2QTFDMzhBQzlGM0NDQTk1NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC238tyUIDveMy5z+XEMExdu7Nz RQ3vuekrguBAplkRRgUGJ9g41iRWdCAlUt7nrey8HgGBh4Pje4UdY2R0PDwJkWqL K4q88vR3D/DlKJwo1AfAj6iWlnO3QZh5/S3OAC3ukN/j1gIU0fI0bC+DO7KJGoPd VQkSBI8gvYOeQxkFenf7ewE903s2OtML9JlD+qhtQLcrx9QIhfXscLdsFAM6e77y ogwwC70hUsGAKn/ZUGsjGZ+b86jbwVrhcj8Pqgv/cRGwjmNcW/q7EPzu1HONbbIy bZapMPI0BCd7gn0LjGadK5zChigHAssWxSOmewXRv2inFVlBCjvxSJVj0nFhAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQU8Y/+AJF7Msj5jipqHDisnzzKlWMwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMzkzOTQyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAslx1 AwQAsl+SMA0GCSqGSIb3DQEBCwUAA4IBAQAfLQY4F+9JujXQbxndc4dXjf63I34o BNb6n3sGdZvOxKz3/fY1NNvBmUwSSPytpO5lB7rHSdyU73dZh1A3atP4O4RmPmbD v2AOO2P6eHSXkRL1LZvIfJAFNW/ZLxClezYEdnB9K/q0yK7pM8IUVoe3fPKwc1lZ TJo9wrkrGBLRh2dwn/0OprWtyxmn25lEo3mZk98f9t4FyRpq1cZdGucXKRVUNLaW RmvsRXrMHG/1d+OmZbNkmbm9O6+HfnPyfJUgKcEwfC/evdg39p2EyummsrGf3UMW brSACoIi63kwUo15nrTECaXlyodO28eAr7P4a559j8GestQeY8VYn6fq -----END CERTIFICATE-----Generated at Mon Dec 1 07:54:15 2025 by rpki-client