This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS397067.roa File: AS397067.roa (raw, json) Hash identifier: l6U5BWJrK/aafOwmyQ+xbp1PQLmDqb0bnKdwPfaT4PE= Subject key identifier: BB:65:8A:CD:E3:51:42:C2:BA:55:F4:85:33:71:CE:65:23:E0:0E:D9 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 217F39B69667C031CCAAF21A5E333227C9FAD106 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS397067.roa Signing time: Sat 22 Nov 2025 17:19:34 +0000 ROA not before: Sat 22 Nov 2025 17:14:34 +0000 ROA not after: Sat 21 Nov 2026 17:19:34 +0000 asID: 397067 IP address blocks: 91.124.177.0/24 maxlen: 24 178.95.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 18:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:7f:39:b6:96:67:c0:31:cc:aa:f2:1a:5e:33:32:27:c9:fa:d1:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Nov 22 17:14:34 2025 GMT Not After : Nov 21 17:19:34 2026 GMT Subject: CN=BB658ACDE35142C2BA55F4853371CE6523E00ED9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d2:9e:ef:04:8f:92:ea:64:45:5d:da:e4:ee: f6:11:29:81:6b:b9:ce:38:ec:72:b5:3b:27:83:1a: a0:43:11:bd:d8:01:27:4c:9a:8a:e4:93:e1:89:3e: a3:17:cf:ba:b7:9a:10:a4:88:17:b1:bb:38:cc:ff: dd:7e:87:b3:9a:62:bb:e3:3d:ce:9d:af:9f:60:6d: 8c:1b:9d:33:98:d9:7b:d1:7b:82:41:52:94:c6:d7: e1:09:7d:cc:d2:33:82:0b:e2:6a:24:36:8d:f8:b2: 77:89:3b:b1:8e:af:fc:14:86:e5:40:03:7f:7d:83: c6:16:ba:5a:58:86:b6:40:df:c8:13:af:a5:2c:18: 65:b5:16:72:f3:6a:7d:73:e6:30:b0:16:7a:ce:fd: 3f:8f:7f:24:3e:78:7b:d7:0d:35:51:cc:af:b5:19: 1c:61:f6:8c:66:ad:a0:9b:d5:c4:d3:d6:98:ca:25: 45:c5:47:18:09:52:54:a1:29:38:64:b3:4e:8f:e2: 93:10:1d:54:3e:e6:26:94:1e:20:72:0a:55:a2:a5: 83:78:1a:cc:9b:07:d8:82:61:38:c8:d8:45:4b:a6: 1a:b5:95:88:07:df:a3:b0:35:a4:7a:f1:1e:be:4b: f7:a4:de:63:23:5e:c9:fa:bb:5b:18:bb:37:c8:74: 52:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:65:8A:CD:E3:51:42:C2:BA:55:F4:85:33:71:CE:65:23:E0:0E:D9 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS397067.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.124.177.0/24 178.95.148.0/23 Signature Algorithm: sha256WithRSAEncryption 75:c1:db:bb:70:d3:d2:e6:07:d1:68:8a:26:d8:92:0c:4e:ad: 7a:f8:70:3f:6d:94:83:94:01:c9:0d:ff:aa:53:09:f6:3e:8f: fe:70:b7:b2:96:9d:23:4b:74:31:dd:e9:3e:05:74:e3:85:bb: 4f:da:ae:cf:67:89:20:58:b6:6b:f9:dc:55:4b:ec:94:a9:a7: 2e:8e:6a:27:98:ca:8a:86:98:11:75:45:d5:06:a6:7b:af:47: 72:c2:57:15:2f:67:b5:55:ae:62:25:e7:41:d0:86:35:bd:c7: 02:0d:72:f2:6a:29:be:52:ef:eb:09:af:c4:1e:3c:0c:b5:72: 73:6c:e7:da:9a:38:c0:54:e8:73:56:eb:1e:64:82:a5:b1:ee: 37:50:7a:e3:4e:f4:0b:8e:04:6c:bb:de:92:d2:81:fb:04:51: 64:10:ee:c1:38:5f:6f:4d:37:1e:d6:6d:3c:e1:d2:e8:4e:62: b1:e9:8e:58:6b:4d:21:9f:be:c0:6b:73:2a:9c:48:9c:9a:fe: 3c:d4:f3:c8:dc:cf:48:28:ec:b6:ee:c6:c9:79:4a:90:38:21: 16:90:61:e7:1d:ac:d2:8a:71:92:53:05:48:78:1d:1e:29:dd: 95:e7:a6:ba:61:15:d9:f6:9a:62:a6:f8:39:ba:21:39:6c:ed: 13:59:c9:fc -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUIX85tpZnwDHMqvIaXjMyJ8n60QYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTExMjIxNzE0MzRaFw0yNjExMjExNzE5MzRaMDMxMTAvBgNV BAMTKEJCNjU4QUNERTM1MTQyQzJCQTU1RjQ4NTMzNzFDRTY1MjNFMDBFRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM0p7vBI+S6mRFXdrk7vYRKYFr uc447HK1OyeDGqBDEb3YASdMmorkk+GJPqMXz7q3mhCkiBexuzjM/91+h7OaYrvj Pc6dr59gbYwbnTOY2XvRe4JBUpTG1+EJfczSM4IL4mokNo34sneJO7GOr/wUhuVA A399g8YWulpYhrZA38gTr6UsGGW1FnLzan1z5jCwFnrO/T+PfyQ+eHvXDTVRzK+1 GRxh9oxmraCb1cTT1pjKJUXFRxgJUlShKThks06P4pMQHVQ+5iaUHiByClWipYN4 GsybB9iCYTjI2EVLphq1lYgH36OwNaR68R6+S/ek3mMjXsn6u1sYuzfIdFJ5AgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUu2WKzeNRQsK6VfSFM3HOZSPgDtkwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMzk3MDY3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW3yx AwQBsl+UMA0GCSqGSIb3DQEBCwUAA4IBAQB1wdu7cNPS5gfRaIom2JIMTq16+HA/ bZSDlAHJDf+qUwn2Po/+cLeylp0jS3Qx3ek+BXTjhbtP2q7PZ4kgWLZr+dxVS+yU qacujmonmMqKhpgRdUXVBqZ7r0dywlcVL2e1Va5iJedB0IY1vccCDXLyaim+Uu/r Ca/EHjwMtXJzbOfamjjAVOhzVuseZIKlse43UHrjTvQLjgRsu96S0oH7BFFkEO7B OF9vTTce1m084dLoTmKx6Y5Ya00hn77Aa3MqnEicmv481PPI3M9IKOy27sbJeUqQ OCEWkGHnHazSinGSUwVIeB0eKd2V56a6YRXZ9ppipvg5uiE5bO0TWcn8 -----END CERTIFICATE-----Generated at Sun Nov 23 09:35:27 2025 by rpki-client