This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS984.roa File: AS984.roa (raw, json) Hash identifier: 9ATj70EvyOEJUloVaxSnzdXUrBuU3YdN7scbt4sKaSg= Subject key identifier: 77:EE:DC:EB:48:E0:52:D1:74:7F:D1:84:5A:D4:C6:8E:8D:3A:49:FE Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 43054EF802698BF18EB33F1A1E7DEEB6996607C4 Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS984.roa Signing time: Mon 08 Dec 2025 12:14:37 +0000 ROA not before: Mon 08 Dec 2025 12:09:37 +0000 ROA not after: Mon 07 Dec 2026 12:14:37 +0000 asID: 984 IP address blocks: 82.139.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:05:4e:f8:02:69:8b:f1:8e:b3:3f:1a:1e:7d:ee:b6:99:66:07:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Dec 8 12:09:37 2025 GMT Not After : Dec 7 12:14:37 2026 GMT Subject: CN=77EEDCEB48E052D1747FD1845AD4C68E8D3A49FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a6:15:a8:05:a8:51:fa:65:e5:c8:a3:d3:a0: df:39:e7:8a:57:29:b8:59:cf:c2:b1:fa:00:06:08: 9a:78:81:34:3c:0a:d6:c4:3d:a8:46:3c:c3:2f:53: 5c:7a:e1:41:fb:89:1a:6e:0b:7a:df:bc:0e:fb:b1: fa:4a:f6:bd:2e:86:3d:23:7b:c5:3b:fb:b5:cf:1f: 30:a5:00:ed:a6:3c:46:7f:7d:3b:3a:35:0a:a6:e7: a5:08:22:22:53:40:6f:cb:cd:1d:16:98:68:94:e4: 1e:af:8f:3a:2c:b5:0a:00:0a:50:81:bf:30:42:53: 4b:14:b9:08:27:68:4d:e8:b5:4e:55:3e:cb:22:7f: f9:5f:40:56:0a:06:a6:e4:32:36:32:61:f1:38:e6: 80:29:c0:4b:74:b9:5d:6c:30:23:70:6b:db:41:30: 54:83:c0:2b:6d:cd:67:9e:b3:e0:64:ed:b6:5b:85: 37:d4:fb:f9:0d:4c:d5:03:fe:ca:41:c4:aa:7c:b0: 29:a8:b7:9e:76:d1:f6:cd:86:c7:da:43:bc:e1:de: 3a:51:01:e7:da:2d:18:92:b0:b5:7b:0e:b1:20:49: 0b:52:db:b8:4c:76:bf:ba:23:eb:b5:51:59:01:83: c2:62:a0:11:ae:01:7f:e1:c6:95:5a:8d:53:63:60: 61:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:EE:DC:EB:48:E0:52:D1:74:7F:D1:84:5A:D4:C6:8E:8D:3A:49:FE X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS984.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.139.194.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:49:df:d0:0e:89:38:39:8a:e2:58:8a:37:48:65:77:69:19: 1b:53:6c:a6:72:0f:af:f9:44:f5:fa:3d:a2:55:40:30:31:12: b0:ae:66:c7:72:93:18:b4:45:17:53:eb:4f:a3:6d:af:31:61: 52:e1:b0:8a:40:8a:91:e6:c1:88:1e:be:ff:4e:50:93:33:c5: 7f:39:2f:49:7a:35:33:af:67:54:44:62:5c:a2:3f:17:1f:b4: 48:03:1f:79:16:41:be:76:96:0e:5c:2e:8b:ca:b5:0d:65:5b: c8:95:18:49:d9:74:69:3e:62:4e:8c:70:18:9f:2e:71:b1:b9: c7:9a:24:40:9d:a4:48:0a:a5:1c:55:86:f7:5e:6d:1e:c3:61: a8:e0:0e:6d:a5:cb:fc:f6:10:1e:bc:ad:40:9d:24:e0:6e:ce: 99:49:f1:a7:05:65:48:0e:b0:a9:49:d4:a6:d3:fd:f4:41:2b: 61:b3:a8:f4:57:0c:93:ff:b3:4d:46:07:c2:77:0f:c6:c7:4c: 9e:d6:ec:99:e3:90:f5:3e:fe:58:12:a9:de:0a:9b:57:d3:9a: 79:50:4e:6b:8a:22:75:89:07:d6:eb:8e:49:c9:73:68:77:a9: 53:96:e3:9e:76:5c:f1:97:63:60:86:91:3d:f9:83:98:2b:a7: 46:c9:47:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgIUQwVO+AJpi/GOsz8aHn3utplmB8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNTEyMDgxMjA5MzdaFw0yNjEyMDcxMjE0MzdaMDMxMTAvBgNV BAMTKDc3RUVEQ0VCNDhFMDUyRDE3NDdGRDE4NDVBRDRDNjhFOEQzQTQ5RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2phWoBahR+mXlyKPToN8554pX KbhZz8Kx+gAGCJp4gTQ8CtbEPahGPMMvU1x64UH7iRpuC3rfvA77sfpK9r0uhj0j e8U7+7XPHzClAO2mPEZ/fTs6NQqm56UIIiJTQG/LzR0WmGiU5B6vjzostQoAClCB vzBCU0sUuQgnaE3otU5VPssif/lfQFYKBqbkMjYyYfE45oApwEt0uV1sMCNwa9tB MFSDwCttzWees+Bk7bZbhTfU+/kNTNUD/spBxKp8sCmot5520fbNhsfaQ7zh3jpR AefaLRiSsLV7DrEgSQtS27hMdr+6I+u1UVkBg8JioBGuAX/hxpVajVNjYGEFAgMB AAGjggIHMIICAzAdBgNVHQ4EFgQUd+7c60jgUtF0f9GEWtTGjo06Sf4wHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTOTg0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUovCMA0G CSqGSIb3DQEBCwUAA4IBAQAPSd/QDok4OYriWIo3SGV3aRkbU2ymcg+v+UT1+j2i VUAwMRKwrmbHcpMYtEUXU+tPo22vMWFS4bCKQIqR5sGIHr7/TlCTM8V/OS9JejUz r2dURGJcoj8XH7RIAx95FkG+dpYOXC6LyrUNZVvIlRhJ2XRpPmJOjHAYny5xsbnH miRAnaRICqUcVYb3Xm0ew2Go4A5tpcv89hAevK1AnSTgbs6ZSfGnBWVIDrCpSdSm 0/30QSths6j0VwyT/7NNRgfCdw/Gx0ye1uyZ45D1Pv5YEqneCptX05p5UE5riiJ1 iQfW645JyXNod6lTluOedlzxl2NghpE9+YOYK6dGyUfq -----END CERTIFICATE-----Generated at Sat Dec 20 04:23:32 2025 by rpki-client