This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS39855.roa File: AS39855.roa (raw, json) Hash identifier: PMTmQkn+6Bz2tEMdvFRhbRs11kOe9CR2ztq3LOmlxBA= Subject key identifier: 7F:F1:38:CA:64:77:97:32:9A:31:0F:74:4A:B2:58:53:14:33:B7:C7 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 5A7F4993225FCB86691E0CF4B91523D94DEC3A8C Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS39855.roa Signing time: Mon 10 Nov 2025 13:56:11 +0000 ROA not before: Mon 10 Nov 2025 13:51:11 +0000 ROA not after: Mon 09 Nov 2026 13:56:11 +0000 asID: 39855 IP address blocks: 91.124.160.0/24 maxlen: 24 91.124.161.0/24 maxlen: 24 91.124.162.0/24 maxlen: 24 91.124.163.0/24 maxlen: 24 92.113.0.0/24 maxlen: 24 95.135.156.0/24 maxlen: 24 95.135.157.0/24 maxlen: 24 95.135.158.0/24 maxlen: 24 95.135.159.0/24 maxlen: 24 178.93.100.0/24 maxlen: 24 178.93.101.0/24 maxlen: 24 178.93.102.0/24 maxlen: 24 178.93.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 02 Dec 2025 00:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:7f:49:93:22:5f:cb:86:69:1e:0c:f4:b9:15:23:d9:4d:ec:3a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Nov 10 13:51:11 2025 GMT Not After : Nov 9 13:56:11 2026 GMT Subject: CN=7FF138CA647797329A310F744AB258531433B7C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:97:06:8a:d5:3d:2e:74:46:1a:de:56:b2:be: f3:83:67:fd:60:90:6c:e4:08:12:d2:78:39:51:09: b7:bf:25:8e:f0:00:f7:06:6f:d5:30:e8:14:76:dd: 00:d1:9a:09:6c:dd:49:a8:c7:59:ce:09:dd:10:8f: 70:10:99:5c:c4:c9:66:88:18:2e:9c:54:4c:21:78: ef:31:83:51:b3:23:01:47:41:cc:b5:a9:1f:06:5f: 73:c0:fd:00:09:45:39:7a:33:b9:fb:4e:71:4a:08: c2:70:f6:bc:5e:4f:83:c9:f8:6a:a2:62:ba:63:4d: 63:15:63:0b:06:02:8b:33:1e:6d:3f:8d:7d:2e:fc: b9:b1:a2:b7:47:c5:19:75:6e:e7:cb:9c:8d:6f:8d: c9:e5:0c:3f:26:44:7e:98:08:3b:6d:a9:df:11:98: 92:48:8f:66:15:46:ef:53:38:9b:99:a0:f3:1c:72: 4a:e7:e6:ff:f6:95:91:a6:c4:95:34:d6:61:75:ae: 88:85:a1:10:be:93:eb:b2:c9:6e:1a:5b:66:f0:9d: a8:04:31:43:6e:6f:e1:01:29:0b:8d:1c:bb:cd:ff: 06:63:a4:86:7b:61:38:b4:7b:e3:8b:27:2a:9b:fd: 20:ba:d8:43:c2:66:b9:47:2e:99:83:6e:40:05:79: c6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F1:38:CA:64:77:97:32:9A:31:0F:74:4A:B2:58:53:14:33:B7:C7 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS39855.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.124.160.0/22 92.113.0.0/24 95.135.156.0/22 178.93.100.0/22 Signature Algorithm: sha256WithRSAEncryption 77:e0:12:0e:4b:98:c3:95:bf:f5:8e:16:fc:99:48:ae:c4:25: 46:4d:09:16:47:8e:36:93:4a:22:4f:2b:4f:10:cb:61:b7:27: 5e:4c:b8:bd:41:06:c2:b3:fa:5e:55:c2:53:63:be:da:1f:15: 61:11:20:b6:36:f6:f1:40:d2:ec:b4:58:1a:76:b6:ee:17:7f: 28:a0:70:cd:7b:20:95:e7:16:73:dc:55:3e:e0:5b:ae:28:25: 1d:dd:ce:47:fa:ac:8b:08:1b:2c:7a:0c:50:7a:71:ae:bc:3e: 68:78:fb:4c:de:d7:a7:58:50:4b:c6:b6:c6:51:5f:9c:e8:f6: d5:2e:8b:d8:d1:1c:cd:d3:dc:3f:92:fa:c4:51:d1:3f:b1:01: 2d:f8:d8:06:89:62:ac:19:36:11:1c:7d:80:6f:2c:c5:0a:34: e0:93:bb:55:4d:60:6c:28:93:9f:29:79:44:2c:9a:98:53:b0: a6:bf:9f:93:88:fb:c2:93:2f:b4:96:be:a5:ea:84:e6:d7:7f: f4:8f:f6:d2:a9:b7:fd:e9:b7:9d:80:fb:f4:d7:4a:3a:82:d0: c3:6b:6d:39:17:04:c4:04:64:52:53:f9:62:c3:1d:ee:31:f4: 62:2f:3f:01:17:04:16:9e:21:95:c4:8e:97:2e:f1:3b:fb:53: ec:f3:33:84 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgIUWn9JkyJfy4ZpHgz0uRUj2U3sOowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTExMTAxMzUxMTFaFw0yNjExMDkxMzU2MTFaMDMxMTAvBgNV BAMTKDdGRjEzOENBNjQ3Nzk3MzI5QTMxMEY3NDRBQjI1ODUzMTQzM0I3QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPlwaK1T0udEYa3layvvODZ/1g kGzkCBLSeDlRCbe/JY7wAPcGb9Uw6BR23QDRmgls3Umox1nOCd0Qj3AQmVzEyWaI GC6cVEwheO8xg1GzIwFHQcy1qR8GX3PA/QAJRTl6M7n7TnFKCMJw9rxeT4PJ+Gqi YrpjTWMVYwsGAoszHm0/jX0u/LmxordHxRl1bufLnI1vjcnlDD8mRH6YCDttqd8R mJJIj2YVRu9TOJuZoPMcckrn5v/2lZGmxJU01mF1roiFoRC+k+uyyW4aW2bwnagE MUNub+EBKQuNHLvN/wZjpIZ7YTi0e+OLJyqb/SC62EPCZrlHLpmDbkAFecZDAgMB AAGjggIbMIICFzAdBgNVHQ4EFgQUf/E4ymR3lzKaMQ90SrJYUxQzt8cwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMzk4NTUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAJbfKAD BABccQADBAJfh5wDBAKyXWQwDQYJKoZIhvcNAQELBQADggEBAHfgEg5LmMOVv/WO FvyZSK7EJUZNCRZHjjaTSiJPK08Qy2G3J15MuL1BBsKz+l5VwlNjvtofFWERILY2 9vFA0uy0WBp2tu4XfyigcM17IJXnFnPcVT7gW64oJR3dzkf6rIsIGyx6DFB6ca68 Pmh4+0ze16dYUEvGtsZRX5zo9tUui9jRHM3T3D+S+sRR0T+xAS342AaJYqwZNhEc fYBvLMUKNOCTu1VNYGwok58peUQsmphTsKa/n5OI+8KTL7SWvqXqhObXf/SP9tKp t/3pt52A+/TXSjqC0MNrbTkXBMQEZFJT+WLDHe4x9GIvPwEXBBaeIZXEjpcu8Tv7 U+zzM4Q= -----END CERTIFICATE-----Generated at Mon Dec 1 07:56:27 2025 by rpki-client