This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS39855.roa File: AS39855.roa (raw, json) Hash identifier: IsvQuHbANwDN0hAuLMkAL58f8AJj+NL1oHEQZjXQF0Q= Subject key identifier: 39:73:A6:8F:30:97:97:D6:F7:C9:83:E4:67:60:E2:79:F7:16:10:68 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 24EE2598CC26418C6C3F9FF3CD8F38D34103E888 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS39855.roa Signing time: Mon 29 Dec 2025 13:28:30 +0000 ROA not before: Mon 29 Dec 2025 13:23:30 +0000 ROA not after: Mon 28 Dec 2026 13:28:30 +0000 asID: 39855 IP address blocks: 91.124.160.0/24 maxlen: 24 91.124.161.0/24 maxlen: 24 91.124.162.0/24 maxlen: 24 91.124.163.0/24 maxlen: 24 95.135.156.0/24 maxlen: 24 95.135.157.0/24 maxlen: 24 95.135.158.0/24 maxlen: 24 95.135.159.0/24 maxlen: 24 178.93.100.0/24 maxlen: 24 178.93.101.0/24 maxlen: 24 178.93.102.0/24 maxlen: 24 178.93.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 15:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ee:25:98:cc:26:41:8c:6c:3f:9f:f3:cd:8f:38:d3:41:03:e8:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 29 13:23:30 2025 GMT Not After : Dec 28 13:28:30 2026 GMT Subject: CN=3973A68F309797D6F7C983E46760E279F7161068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:85:3a:0f:40:56:c7:c8:9c:10:37:32:01:29: c2:9b:d9:82:fd:e4:27:eb:a5:2c:5e:8a:06:ca:d7: 37:a7:ff:a8:31:b2:b6:1b:54:a7:23:21:27:18:5f: 7b:56:25:f9:8c:bd:a8:34:c3:c3:f6:ca:09:11:07: f2:22:25:72:5f:dd:5b:72:fb:6e:4f:01:df:a1:23: 57:83:79:9e:b5:58:0e:de:23:98:d3:a9:27:7a:9e: af:5a:0a:15:62:a4:69:e2:cf:70:10:d3:ed:6b:83: 55:6d:67:e1:49:63:57:b5:92:0d:87:65:bb:bc:38: 89:4e:9b:1f:8e:f9:e6:cb:f5:3d:d1:92:0f:cf:a4: 75:be:56:53:42:f7:45:7d:f5:c2:d8:f6:41:4e:d9: a9:92:9f:8e:10:9e:c4:b5:d8:8b:8c:74:f1:7f:0d: 32:1a:cf:4b:9a:39:a4:10:4c:ee:e8:ed:83:e9:1c: ad:5c:cd:8b:e1:d4:82:33:9c:ab:77:a1:ac:03:1d: c7:03:27:66:c6:87:33:65:21:9d:75:90:79:d6:e4: 35:a1:8b:05:95:73:0e:7a:b4:a4:66:82:e2:00:94: 2f:76:b4:cb:df:9a:05:14:de:ec:57:ab:a8:e6:7d: f3:45:0a:ee:70:a5:b7:e1:a0:ee:af:b8:de:56:69: 67:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:73:A6:8F:30:97:97:D6:F7:C9:83:E4:67:60:E2:79:F7:16:10:68 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS39855.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.124.160.0/22 95.135.156.0/22 178.93.100.0/22 Signature Algorithm: sha256WithRSAEncryption ac:0c:2f:b2:02:71:f8:fa:99:73:81:c5:0c:98:e3:9e:bb:a1: bd:e6:9b:17:74:27:5c:79:1c:58:17:07:c2:26:9a:6c:bb:c7: d6:4f:26:51:15:2a:a5:b1:0e:cd:97:3f:d7:6c:d7:64:64:b8: 41:1f:4d:3f:20:a0:92:2d:89:7b:30:12:53:b4:04:ea:76:92: f1:47:d3:be:62:32:3a:a6:98:dd:e3:52:03:30:e2:de:23:1f: 14:75:bc:4a:d5:cb:29:d3:a8:f9:fa:14:ce:08:ff:de:5e:f8: a8:87:69:7f:34:02:b1:64:08:f9:12:95:a9:37:fe:7f:0d:cb: 9d:4b:5a:34:26:60:1c:cb:f4:72:01:99:9f:1b:1f:06:cd:8e: 43:5f:10:c3:82:f9:43:d0:b2:55:12:42:13:b5:ce:0c:3d:63: 43:fd:b1:4b:72:d5:e0:98:59:36:0c:11:19:9d:52:ef:42:c0: 7d:d4:ce:2c:50:4e:d5:6f:5c:4b:44:65:95:67:ea:35:07:0f: 32:57:dd:cd:48:03:34:83:3c:e1:12:d1:c9:a1:c1:fb:af:b2: 8e:8d:92:1a:4f:f3:ee:a7:49:82:24:fc:63:dc:e9:46:0f:78: 81:5b:4d:c5:a7:20:3e:c6:c9:24:e1:f5:7c:87:16:86:6c:1f: f2:c8:54:07 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUJO4lmMwmQYxsP5/zzY8400ED6IgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMjkxMzIzMzBaFw0yNjEyMjgxMzI4MzBaMDMxMTAvBgNV BAMTKDM5NzNBNjhGMzA5Nzk3RDZGN0M5ODNFNDY3NjBFMjc5RjcxNjEwNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCahToPQFbHyJwQNzIBKcKb2YL9 5CfrpSxeigbK1zen/6gxsrYbVKcjIScYX3tWJfmMvag0w8P2ygkRB/IiJXJf3Vty +25PAd+hI1eDeZ61WA7eI5jTqSd6nq9aChVipGniz3AQ0+1rg1VtZ+FJY1e1kg2H Zbu8OIlOmx+O+ebL9T3Rkg/PpHW+VlNC90V99cLY9kFO2amSn44QnsS12IuMdPF/ DTIaz0uaOaQQTO7o7YPpHK1czYvh1IIznKt3oawDHccDJ2bGhzNlIZ11kHnW5DWh iwWVcw56tKRmguIAlC92tMvfmgUU3uxXq6jmffNFCu5wpbfhoO6vuN5WaWdFAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUOXOmjzCXl9b3yYPkZ2DiefcWEGgwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMzk4NTUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAJbfKAD BAJfh5wDBAKyXWQwDQYJKoZIhvcNAQELBQADggEBAKwML7ICcfj6mXOBxQyY4567 ob3mmxd0J1x5HFgXB8Immmy7x9ZPJlEVKqWxDs2XP9ds12RkuEEfTT8goJItiXsw ElO0BOp2kvFH075iMjqmmN3jUgMw4t4jHxR1vErVyynTqPn6FM4I/95e+KiHaX80 ArFkCPkSlak3/n8Ny51LWjQmYBzL9HIBmZ8bHwbNjkNfEMOC+UPQslUSQhO1zgw9 Y0P9sUty1eCYWTYMERmdUu9CwH3UzixQTtVvXEtEZZVn6jUHDzJX3c1IAzSDPOES 0cmhwfuvso6NkhpP8+6nSYIk/GPc6UYPeIFbTcWnID7GySTh9XyHFoZsH/LIVAc= -----END CERTIFICATE-----Generated at Thu Jan 15 23:25:06 2026 by rpki-client