This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS33659.roa File: AS33659.roa (raw, json) Hash identifier: NTLbpcQNs5RZLBo3+oMlhFKxjgyBNhlJwPD27YrmK+c= Subject key identifier: 21:9B:2D:92:D0:3D:37:BD:00:90:98:E6:14:8D:1F:8A:3E:EE:A3:89 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 0A86F9BEEFBFA2105A3A1DDDBA0C783D8D499130 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS33659.roa Signing time: Thu 18 Dec 2025 07:48:04 +0000 ROA not before: Thu 18 Dec 2025 07:43:04 +0000 ROA not after: Thu 17 Dec 2026 07:48:04 +0000 asID: 33659 IP address blocks: 178.93.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:86:f9:be:ef:bf:a2:10:5a:3a:1d:dd:ba:0c:78:3d:8d:49:91:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 18 07:43:04 2025 GMT Not After : Dec 17 07:48:04 2026 GMT Subject: CN=219B2D92D03D37BD009098E6148D1F8A3EEEA389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fe:0b:f4:ac:21:6a:7b:41:f8:b7:3c:7b:fc: 01:ed:4e:14:e9:fc:9d:ec:89:46:5b:5c:6f:c8:73: 63:7a:f5:79:bc:5c:a6:fd:5c:2f:27:e3:09:3c:6d: f4:17:b7:13:ba:f3:79:32:84:4c:59:d8:8e:4d:53: 17:12:43:bb:fa:57:f1:9d:32:5b:d4:03:31:7a:dd: 49:13:8b:01:bc:5b:88:cc:36:90:f4:e5:17:d1:20: b7:ba:4b:47:d7:df:97:8c:5d:b9:3c:92:b9:aa:37: 9b:67:fd:ce:01:92:a7:f5:41:94:aa:56:c5:63:1d: 6a:f8:67:41:f3:75:aa:36:98:57:fd:95:c3:4e:7e: 54:3a:e0:90:89:d3:78:36:d6:ce:2d:14:10:62:72: 35:24:6b:7f:46:35:3f:28:c8:b7:31:e9:cc:2e:e1: a7:49:8b:25:11:16:b0:96:90:57:8e:87:40:30:0a: 2a:18:eb:5d:3e:b2:eb:26:5b:8a:18:fb:79:c1:8e: bb:f6:2d:85:7d:29:87:82:23:2f:59:53:0a:d1:65: 57:ce:6a:75:09:63:39:7d:b5:57:16:9e:ca:4a:7c: 69:65:55:a7:51:4b:6f:a7:9b:0b:5f:d8:2f:71:2f: 72:b2:41:8e:65:bf:62:33:d3:42:54:df:63:0d:0a: bf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9B:2D:92:D0:3D:37:BD:00:90:98:E6:14:8D:1F:8A:3E:EE:A3:89 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS33659.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.93.115.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:c9:d5:a7:47:26:13:41:f6:17:75:80:b1:77:4c:5a:a3:64: fa:8c:81:a3:77:91:af:7d:29:15:bd:d2:da:2d:be:7d:22:35: 6f:f8:b5:ec:4a:d4:cd:9b:d3:3d:c8:96:62:f8:6b:4d:6c:9c: 80:46:13:4f:4d:65:1e:7e:09:79:6a:16:5a:84:af:56:bf:0c: 91:af:7e:30:68:cd:70:c4:ba:b7:37:0e:e4:97:7b:77:7a:8e: be:b0:ec:25:a5:ab:f6:b6:f5:98:91:29:d5:3e:d4:23:8a:17: d4:95:4a:cf:f6:ba:e3:f7:3d:b3:26:90:e3:b6:a6:a7:ca:92: 4b:b9:3c:d9:32:44:da:e4:23:74:08:ab:22:e2:b0:f8:aa:e5: 18:96:19:15:06:e6:c0:c7:8a:55:9d:72:29:ab:79:c5:63:a0: 85:e1:49:fb:48:7b:cb:84:f2:20:00:48:c4:87:72:ef:16:9a: db:a0:50:7e:16:7d:8c:a8:dc:6e:4b:f7:27:b0:9b:de:7c:4f: aa:46:cc:87:a0:04:c6:06:62:e0:8b:1b:19:3f:f4:04:74:1f: 4f:c6:82:4d:ad:19:c9:7d:f4:18:15:8f:47:99:1e:7c:cd:c9: 72:7c:2f:89:34:0a:11:b8:be:e8:20:29:7d:a3:05:e5:97:49: a7:08:58:1a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUCob5vu+/ohBaOh3dugx4PY1JkTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMTgwNzQzMDRaFw0yNjEyMTcwNzQ4MDRaMDMxMTAvBgNV BAMTKDIxOUIyRDkyRDAzRDM3QkQwMDkwOThFNjE0OEQxRjhBM0VFRUEzODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ/gv0rCFqe0H4tzx7/AHtThTp /J3siUZbXG/Ic2N69Xm8XKb9XC8n4wk8bfQXtxO683kyhExZ2I5NUxcSQ7v6V/Gd MlvUAzF63UkTiwG8W4jMNpD05RfRILe6S0fX35eMXbk8krmqN5tn/c4Bkqf1QZSq VsVjHWr4Z0Hzdao2mFf9lcNOflQ64JCJ03g21s4tFBBicjUka39GNT8oyLcx6cwu 4adJiyURFrCWkFeOh0AwCioY610+susmW4oY+3nBjrv2LYV9KYeCIy9ZUwrRZVfO anUJYzl9tVcWnspKfGllVadRS2+nmwtf2C9xL3KyQY5lv2Iz00JU32MNCr+xAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUIZstktA9N70AkJjmFI0fij7uo4kwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMzM2NTkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACyXXMw DQYJKoZIhvcNAQELBQADggEBAD3J1adHJhNB9hd1gLF3TFqjZPqMgaN3ka99KRW9 0totvn0iNW/4texK1M2b0z3IlmL4a01snIBGE09NZR5+CXlqFlqEr1a/DJGvfjBo zXDEurc3DuSXe3d6jr6w7CWlq/a29ZiRKdU+1COKF9SVSs/2uuP3PbMmkOO2pqfK kku5PNkyRNrkI3QIqyLisPiq5RiWGRUG5sDHilWdcimrecVjoIXhSftIe8uE8iAA SMSHcu8WmtugUH4WfYyo3G5L9yewm958T6pGzIegBMYGYuCLGxk/9AR0H0/Ggk2t Gcl99BgVj0eZHnzNyXJ8L4k0ChG4vuggKX2jBeWXSacIWBo= -----END CERTIFICATE-----Generated at Sat Dec 20 14:38:21 2025 by rpki-client