This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
File: AS984.roa (raw, json)
Hash identifier: isnll22qVl+7E/UReObBu4hZFmk/6+45mqrFCMF7UCM=
Subject key identifier: B8:16:43:D0:15:A6:F1:08:5E:56:11:3A:6F:E1:46:0E:8B:04:C5:7F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 630CBDBB5A519EA472932703EF31F518D183EF27
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
Signing time: Fri 12 Dec 2025 04:13:51 +0000
ROA not before: Fri 12 Dec 2025 04:08:51 +0000
ROA not after: Fri 11 Dec 2026 04:13:51 +0000
asID: 984
IP address blocks: 91.124.84.0/24 maxlen: 24
92.112.106.0/24 maxlen: 24
95.134.61.0/24 maxlen: 24
95.134.112.0/24 maxlen: 24
178.92.199.0/24 maxlen: 24
178.92.207.0/24 maxlen: 24
178.93.76.0/24 maxlen: 24
178.95.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:0c:bd:bb:5a:51:9e:a4:72:93:27:03:ef:31:f5:18:d1:83:ef:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Dec 12 04:08:51 2025 GMT
Not After : Dec 11 04:13:51 2026 GMT
Subject: CN=B81643D015A6F1085E56113A6FE1460E8B04C57F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cf:fa:c7:9d:5c:6d:90:79:90:d8:84:81:4d:
4c:c3:c2:e3:62:56:71:33:04:bf:e5:7f:53:c4:d3:
af:a7:85:01:70:20:be:a9:fa:41:fd:66:07:db:36:
6f:a6:fb:24:44:e2:99:22:e1:53:62:e6:0c:d5:b6:
35:2b:b3:f3:8d:0d:2f:a0:f9:21:ee:e9:41:b5:38:
b3:ec:ad:bd:b2:a9:11:97:83:56:10:af:4f:2d:64:
d0:14:99:52:b9:1e:32:16:41:c9:ec:7d:cb:0a:fb:
74:3e:d2:ec:21:4d:c2:c1:c2:70:da:7d:f7:c6:51:
53:94:ce:1f:63:34:6d:02:e0:96:04:a5:4c:3c:55:
69:47:7d:05:0b:d1:9f:4d:21:6b:e9:a5:a1:27:8a:
0c:07:fb:44:75:98:a1:d0:1c:cc:7e:be:ed:d3:a8:
65:2e:12:32:3c:3e:18:40:a9:1e:e4:8e:e9:25:6e:
d5:c9:cf:cc:60:47:55:39:aa:d4:30:03:82:01:2b:
03:b0:3d:df:26:00:fe:a2:e3:0d:67:23:84:09:1c:
e6:d0:6a:c2:06:97:55:a5:40:0f:75:f0:42:67:3d:
d6:a4:90:f8:59:e1:92:6e:1b:b1:42:71:ad:fd:0a:
c1:b0:1d:c0:e0:e3:93:18:49:8a:c2:b5:af:1d:7c:
dc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:16:43:D0:15:A6:F1:08:5E:56:11:3A:6F:E1:46:0E:8B:04:C5:7F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS984.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.84.0/24
92.112.106.0/24
95.134.61.0/24
95.134.112.0/24
178.92.199.0/24
178.92.207.0/24
178.93.76.0/24
178.95.140.0/22
Signature Algorithm: sha256WithRSAEncryption
86:b5:99:6e:e2:09:c8:fe:38:2b:72:77:f4:f5:f8:73:e7:98:
b1:27:6b:10:4d:6c:5a:37:58:42:8d:71:4a:a0:b1:db:19:d5:
14:7e:5d:53:48:bd:ec:c4:28:77:bf:91:b3:e2:da:fe:e6:9a:
c2:29:4b:b2:14:67:9a:96:e6:47:ec:f0:e1:46:76:da:36:b4:
6f:c4:d9:e1:60:d3:66:c7:ce:c3:7a:f6:f4:0c:f9:78:02:12:
d3:38:04:b4:2f:b8:b3:ca:d9:a5:9c:e4:8d:0f:72:e6:2e:44:
35:ad:5d:05:0c:2c:84:db:af:cc:74:8f:c3:cb:97:af:4e:10:
ee:77:b5:b5:2c:47:32:a2:c0:cc:c2:ef:25:95:11:f9:92:d0:
04:9d:13:f0:14:a4:47:20:13:a1:82:b4:19:0b:64:d2:ee:e8:
d4:37:9d:f1:6a:d0:de:c4:41:3f:09:8a:e0:1e:ed:26:98:7b:
05:e7:7c:c2:fb:55:94:3a:4d:93:37:3d:6f:e5:bf:9a:05:da:
75:24:af:6d:d1:0f:24:c4:c6:f7:b1:27:86:f7:3a:69:74:a2:
b6:34:de:60:3b:3e:10:f5:c5:64:db:e4:05:18:41:0e:ee:07:
0f:4f:ce:9d:b8:39:7a:23:b6:a2:d2:22:a2:19:9f:fd:85:0b:
dd:cf:b2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:51:34 2025 by rpki-client