This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS393942.roa File: AS393942.roa (raw, json) Hash identifier: BarA/pkveYhJeZDn/nQOBp+k2TGozJEihAyUgEGW+dM= Subject key identifier: 84:CB:A7:47:F7:34:55:7E:4A:E7:53:D6:63:33:90:F1:B4:8B:6E:FD Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 72C7FEA1D331F78C31A7EF0F2834FCF831E29FF2 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS393942.roa Signing time: Mon 12 Jan 2026 03:36:27 +0000 ROA not before: Mon 12 Jan 2026 03:31:27 +0000 ROA not after: Mon 11 Jan 2027 03:36:27 +0000 asID: 393942 IP address blocks: 95.135.50.0/24 maxlen: 24 178.92.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 15:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c7:fe:a1:d3:31:f7:8c:31:a7:ef:0f:28:34:fc:f8:31:e2:9f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Jan 12 03:31:27 2026 GMT Not After : Jan 11 03:36:27 2027 GMT Subject: CN=84CBA747F734557E4AE753D6633390F1B48B6EFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3c:c3:8c:06:eb:42:07:b6:92:c4:94:81:56: f6:3c:0a:d7:eb:49:1b:4a:fd:81:c3:10:80:c0:73: 76:60:73:2b:20:05:e2:4a:a0:f5:fc:73:f2:fd:08: 5b:42:8c:27:cf:b3:86:63:e0:ef:2a:d2:c6:5b:c7: 37:9a:27:04:e0:e3:da:62:db:1e:56:ae:0f:3c:d8: b9:7f:46:77:bb:66:01:4e:6e:d9:52:80:82:1b:fd: 70:cf:be:a5:26:ee:f2:9e:d9:c6:b0:01:6f:eb:b4: db:23:dc:fe:85:1f:e6:fd:b4:f8:a5:a2:04:36:6a: a1:8c:35:f3:24:1f:a4:ce:fc:72:f0:c9:1a:fe:ba: 8e:74:2b:32:49:39:3a:0d:9c:2e:cd:a2:ad:5b:4b: 2b:d0:95:bf:c7:f0:e6:9a:14:d7:03:23:ff:e7:0f: f1:4c:63:f5:ad:1a:f4:70:26:33:c8:3c:b1:df:eb: 87:9e:9e:b9:0b:b7:1e:85:de:f5:9f:d7:0a:2d:95: ee:f5:71:99:fe:ea:58:63:8f:25:0e:54:84:07:5c: e3:7c:b9:15:45:da:22:f3:24:4f:d6:49:6a:6a:00: 46:29:31:9d:d6:14:5b:00:26:1f:3d:b2:0a:56:83: 11:a5:96:28:16:dc:8e:e4:a8:9b:be:55:63:1f:f0: 91:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CB:A7:47:F7:34:55:7E:4A:E7:53:D6:63:33:90:F1:B4:8B:6E:FD X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS393942.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.135.50.0/24 178.92.117.0/24 Signature Algorithm: sha256WithRSAEncryption 92:76:9d:ed:05:5c:28:a3:47:84:a7:b9:76:e5:e2:f6:37:44: 69:f5:85:c4:f4:b4:6d:c7:23:81:12:98:d3:85:49:10:ce:41: 50:d9:6e:68:5b:88:b7:d2:37:02:a2:71:d3:43:ea:0f:e5:e0: 79:a6:c8:3d:e6:d3:81:e3:f6:48:52:ce:23:cb:06:66:c1:48: be:08:35:8b:89:5b:10:ce:ca:bc:4e:d9:1a:cf:50:4c:c9:5e: 2d:2d:27:21:98:75:60:db:bd:6a:fa:e9:88:6c:eb:18:e6:22: 81:6f:c6:ee:83:06:eb:2d:97:ee:1e:c2:5a:7d:3f:83:b0:c0: 5e:2d:8a:20:73:1b:8c:77:48:09:e0:6a:f8:a3:e1:79:84:8c: 30:c4:62:8d:f8:cf:77:de:c1:60:d9:50:40:df:2c:1d:b7:ce: e5:44:f7:c1:c9:32:0b:bc:3c:d0:70:04:96:8f:e9:d5:fa:ac: 97:53:5d:5d:85:e6:b6:bb:5c:b5:e9:e1:eb:97:16:af:50:28: 8d:2c:cb:5d:a7:05:33:7a:07:1f:b0:2a:ab:92:fb:da:57:ba: b1:01:1e:7d:d8:6b:77:66:4d:24:25:5c:1d:8f:e3:e4:f2:67: 86:45:b0:79:0d:49:8d:67:7c:b8:15:8c:6e:f3:f4:06:93:f4: 95:04:e0:78 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUcsf+odMx94wxp+8PKDT8+DHin/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNjAxMTIwMzMxMjdaFw0yNzAxMTEwMzM2MjdaMDMxMTAvBgNV BAMTKDg0Q0JBNzQ3RjczNDU1N0U0QUU3NTNENjYzMzM5MEYxQjQ4QjZFRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkPMOMButCB7aSxJSBVvY8Ctfr SRtK/YHDEIDAc3ZgcysgBeJKoPX8c/L9CFtCjCfPs4Zj4O8q0sZbxzeaJwTg49pi 2x5Wrg882Ll/Rne7ZgFObtlSgIIb/XDPvqUm7vKe2cawAW/rtNsj3P6FH+b9tPil ogQ2aqGMNfMkH6TO/HLwyRr+uo50KzJJOToNnC7Noq1bSyvQlb/H8OaaFNcDI//n D/FMY/WtGvRwJjPIPLHf64eenrkLtx6F3vWf1wotle71cZn+6lhjjyUOVIQHXON8 uRVF2iLzJE/WSWpqAEYpMZ3WFFsAJh89sgpWgxGlligW3I7kqJu+VWMf8JHTAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUhMunR/c0VX5K51PWYzOQ8bSLbv0wHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMzkzOTQyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX4cy AwQAslx1MA0GCSqGSIb3DQEBCwUAA4IBAQCSdp3tBVwoo0eEp7l25eL2N0Rp9YXE 9LRtxyOBEpjThUkQzkFQ2W5oW4i30jcConHTQ+oP5eB5psg95tOB4/ZIUs4jywZm wUi+CDWLiVsQzsq8Ttkaz1BMyV4tLSchmHVg271q+umIbOsY5iKBb8bugwbrLZfu HsJafT+DsMBeLYogcxuMd0gJ4Gr4o+F5hIwwxGKN+M933sFg2VBA3ywdt87lRPfB yTILvDzQcASWj+nV+qyXU11dhea2u1y16eHrlxavUCiNLMtdpwUzegcfsCqrkvva V7qxAR592Gt3Zk0kJVwdj+Pk8meGRbB5DUmNZ3y4FYxu8/QGk/SVBOB4 -----END CERTIFICATE-----Generated at Thu Jan 15 23:28:54 2026 by rpki-client