This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13335.roa File: AS13335.roa (raw, json) Hash identifier: Wk0OZK+2Ax4MOGXBXid/hkjvkwOkfOw/LRUnwrR4mWA= Subject key identifier: B5:1F:0B:B8:FF:3C:84:91:3B:EA:82:0B:5F:95:DB:F5:8D:09:88:51 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 24DEFB449E11E33E54A7AB39E070AE21E18EBD0F Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13335.roa Signing time: Wed 03 Dec 2025 05:02:31 +0000 ROA not before: Wed 03 Dec 2025 04:57:31 +0000 ROA not after: Wed 02 Dec 2026 05:02:31 +0000 asID: 13335 IP address blocks: 91.124.127.0/24 maxlen: 24 178.94.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:de:fb:44:9e:11:e3:3e:54:a7:ab:39:e0:70:ae:21:e1:8e:bd:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 3 04:57:31 2025 GMT Not After : Dec 2 05:02:31 2026 GMT Subject: CN=B51F0BB8FF3C84913BEA820B5F95DBF58D098851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:da:a9:ca:32:dc:b4:1d:26:a5:81:cd:b0:72: 22:22:11:35:c3:08:e0:15:6f:04:c8:4d:72:f9:5c: e2:99:27:44:73:f4:0a:fb:24:9d:82:59:a7:d5:e3: 2a:e7:3b:97:c0:62:9c:b1:c8:90:d5:31:10:4d:e0: a7:ff:36:2c:02:a2:33:dc:5d:37:76:a9:42:cf:33: d4:2e:b3:1a:2f:b3:cc:97:cc:ef:82:68:e5:aa:88: 2a:6c:97:cd:d3:6f:51:6e:90:9d:91:20:0d:a9:39: c6:3e:38:ec:8d:e9:60:7f:4f:d5:af:35:41:f3:04: 1a:1d:29:26:37:21:be:01:c8:9b:ec:3b:ab:ef:f1: 0c:02:a1:60:26:3f:da:4f:67:2b:85:cb:28:1f:b7: 35:dc:b7:68:cf:89:52:94:2a:8a:73:ce:52:a0:a6: 48:43:03:5e:93:3a:0b:c7:2c:b6:dd:f4:16:70:54: ac:c9:da:cf:4f:bf:9f:6e:13:87:a7:88:47:51:44: 82:2e:0b:f4:fb:24:61:78:30:e2:ab:9a:8f:b1:86: de:52:c5:e3:b8:e2:a9:eb:da:77:d4:af:a5:bf:31: ab:bb:ae:88:9d:3b:ca:c2:22:5b:d8:5e:86:5f:81: cf:b5:d5:ac:2a:8d:05:c7:1e:4f:8b:0a:3b:2e:16: 8f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1F:0B:B8:FF:3C:84:91:3B:EA:82:0B:5F:95:DB:F5:8D:09:88:51 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS13335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.124.127.0/24 178.94.249.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:22:af:ed:78:b2:0b:5b:f1:4f:03:31:ea:27:86:fc:de:7d: ce:c7:f4:3c:ee:1d:ba:b2:cf:65:89:cc:cf:e4:66:04:93:11: e5:46:94:d2:32:74:11:55:80:31:62:17:ec:39:e1:f5:62:b4: 9d:f7:1a:2b:39:a3:f7:24:7d:45:b2:62:3f:d7:fa:a1:ad:cb: 4f:28:d3:b7:ed:a8:57:ce:98:88:92:c3:0b:2a:f1:ce:17:57: 52:84:03:d3:ec:fd:7a:93:f1:f7:f8:d9:e3:b6:86:f1:0f:15: 17:f6:69:a6:c3:a9:8d:0d:b1:0a:77:ec:e3:f2:86:d4:41:32: 5b:36:79:1e:63:b6:4a:f0:c6:ce:89:bc:17:79:83:9e:53:af: 0d:75:b8:63:d1:70:52:f2:5c:44:08:db:b0:df:09:53:70:25: 3f:8c:1f:0b:1c:7f:fd:c2:21:60:b7:39:62:58:db:9e:e7:8c: 24:09:c5:2e:dc:67:c2:67:2f:bc:63:99:de:ff:c1:20:83:82: 01:b7:e2:24:1a:83:54:56:d2:4e:d4:a8:23:ec:87:52:fc:70: f9:83:ea:b0:b0:ac:a7:41:99:d6:5d:95:c2:df:83:74:a7:6e: f1:69:11:c6:9f:6d:54:e9:3c:1a:e6:56:68:cc:97:d4:52:de: 54:70:cd:58 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUJN77RJ4R4z5Up6s54HCuIeGOvQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMDMwNDU3MzFaFw0yNjEyMDIwNTAyMzFaMDMxMTAvBgNV BAMTKEI1MUYwQkI4RkYzQzg0OTEzQkVBODIwQjVGOTVEQkY1OEQwOTg4NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC22qnKMty0HSalgc2wciIiETXD COAVbwTITXL5XOKZJ0Rz9Ar7JJ2CWafV4yrnO5fAYpyxyJDVMRBN4Kf/NiwCojPc XTd2qULPM9Qusxovs8yXzO+CaOWqiCpsl83Tb1FukJ2RIA2pOcY+OOyN6WB/T9Wv NUHzBBodKSY3Ib4ByJvsO6vv8QwCoWAmP9pPZyuFyygftzXct2jPiVKUKopzzlKg pkhDA16TOgvHLLbd9BZwVKzJ2s9Pv59uE4eniEdRRIIuC/T7JGF4MOKrmo+xht5S xeO44qnr2nfUr6W/Mau7roidO8rCIlvYXoZfgc+11awqjQXHHk+LCjsuFo+zAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUtR8LuP88hJE76oILX5Xb9Y0JiFEwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTMzMzUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABbfH8D BACyXvkwDQYJKoZIhvcNAQELBQADggEBAJwir+14sgtb8U8DMeonhvzefc7H9Dzu Hbqyz2WJzM/kZgSTEeVGlNIydBFVgDFiF+w54fVitJ33Gis5o/ckfUWyYj/X+qGt y08o07ftqFfOmIiSwwsq8c4XV1KEA9Ps/XqT8ff42eO2hvEPFRf2aabDqY0NsQp3 7OPyhtRBMls2eR5jtkrwxs6JvBd5g55Trw11uGPRcFLyXEQI27DfCVNwJT+MHwsc f/3CIWC3OWJY257njCQJxS7cZ8JnL7xjmd7/wSCDggG34iQag1RW0k7UqCPsh1L8 cPmD6rCwrKdBmdZdlcLfg3SnbvFpEcafbVTpPBrmVmjMl9RS3lRwzVg= -----END CERTIFICATE-----Generated at Sat Dec 20 14:38:25 2025 by rpki-client