This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa File: AS14618.roa (raw, json) Hash identifier: AoO3ViSI9uiqhotT1oijEhenObi8eNXeVyqikKsxZ8A= Subject key identifier: D9:3E:4E:45:59:AB:AC:AA:41:14:C2:DF:16:E9:ED:FA:AF:A3:0C:B3 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 6641C5DA746F4F85F95E15BAFE3D5784607A8D2E Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa Signing time: Tue 02 Dec 2025 07:43:08 +0000 ROA not before: Tue 02 Dec 2025 07:38:08 +0000 ROA not after: Tue 01 Dec 2026 07:43:08 +0000 asID: 14618 IP address blocks: 91.124.34.0/24 maxlen: 24 91.124.38.0/24 maxlen: 24 91.124.131.0/24 maxlen: 24 91.124.133.0/24 maxlen: 24 91.124.217.0/24 maxlen: 24 92.112.51.0/24 maxlen: 24 92.112.58.0/24 maxlen: 24 92.112.61.0/24 maxlen: 24 92.112.74.0/24 maxlen: 24 92.112.75.0/24 maxlen: 24 92.113.49.0/24 maxlen: 24 92.113.50.0/24 maxlen: 24 92.113.51.0/24 maxlen: 24 92.113.52.0/24 maxlen: 24 92.113.53.0/24 maxlen: 24 92.113.100.0/24 maxlen: 24 178.92.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:41:c5:da:74:6f:4f:85:f9:5e:15:ba:fe:3d:57:84:60:7a:8d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 2 07:38:08 2025 GMT Not After : Dec 1 07:43:08 2026 GMT Subject: CN=D93E4E4559ABACAA4114C2DF16E9EDFAAFA30CB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:40:72:b4:02:c8:e3:c3:e4:59:d6:48:e2:46: 9c:dc:b4:c8:46:1d:82:81:1a:40:8f:e5:e3:bd:05: 87:e2:51:b7:33:f4:df:d4:ef:d8:95:0e:f8:33:04: 7d:25:5f:56:e3:d3:df:db:07:cb:e9:e6:ee:91:79: 8a:aa:5b:1f:ba:67:70:08:99:dc:d7:db:01:74:72: c4:0e:59:71:ba:87:0f:56:cb:75:72:88:a6:ee:91: 86:c2:54:18:68:b4:b5:7f:bf:a4:d9:83:b4:9e:ca: b9:3b:f8:b3:32:da:d5:7a:15:38:a8:2f:d6:46:d9: 55:bf:7f:cd:66:25:d0:1c:1a:42:d7:a0:02:6c:24: 5f:ce:5c:51:06:2e:42:bb:09:3d:46:45:25:6c:a2: ec:e2:f2:72:34:1d:95:58:3c:b4:de:a1:79:f6:e6: 01:b5:21:f9:53:f1:8a:2e:26:af:38:a2:24:d0:2d: f3:78:ec:f1:ac:34:68:6b:80:38:f6:68:48:21:a5: 3f:4f:e6:78:ab:d9:8d:6e:30:ee:1c:89:6a:f9:3a: 84:3f:cf:9a:34:b5:76:8c:01:3f:ed:17:24:2b:ce: 8c:6e:a9:74:9c:a2:37:c6:f2:3b:20:67:6c:1a:25: 2c:42:ec:7c:57:20:84:af:9c:2e:f2:3b:ba:89:92: 5a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3E:4E:45:59:AB:AC:AA:41:14:C2:DF:16:E9:ED:FA:AF:A3:0C:B3 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS14618.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.124.34.0/24 91.124.38.0/24 91.124.131.0/24 91.124.133.0/24 91.124.217.0/24 92.112.51.0/24 92.112.58.0/24 92.112.61.0/24 92.112.74.0/23 92.113.49.0-92.113.53.255 92.113.100.0/24 178.92.101.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:ab:10:2c:ec:04:be:78:a4:c2:b9:e7:b4:82:0d:f6:75:9f: f1:70:09:d1:5a:1a:2d:a6:58:3e:ef:a3:9f:2b:e2:24:a9:c8: 42:49:1c:74:a1:fa:04:c1:57:6d:40:5f:2f:e8:ab:38:23:8e: 85:dc:14:33:6c:36:69:6d:28:09:42:de:3f:b7:08:8d:8c:d6: 2d:ff:8d:43:2d:81:fd:cf:15:8d:be:fa:54:7c:55:99:58:19: f7:2f:51:00:01:ea:99:84:7f:ca:b0:ff:48:bd:c0:08:76:dc: e1:f1:02:44:c8:66:05:35:f1:e4:c5:13:0e:a0:ac:24:15:1d: bc:25:78:97:b1:2c:6d:87:0e:e2:07:96:35:22:e3:24:d7:07: 91:15:5c:46:6f:b7:1f:3b:17:c4:91:f1:a0:5b:80:64:86:bf: 0f:c8:0c:fb:fc:9f:c2:bd:93:74:74:84:23:74:9a:97:39:79: cf:46:37:df:2d:8c:a4:2b:23:80:c2:ea:8b:a0:75:bc:29:bb: c0:51:53:72:5c:37:e9:1d:db:99:cd:7c:a6:dc:2d:24:a5:0b: 3f:6b:e4:c4:20:a1:69:99:f4:12:df:99:19:f9:6a:34:4f:8a: 29:9e:e4:38:2b:26:50:56:6f:39:c9:4a:17:a7:2a:73:6f:83: 4b:71:98:7e -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUZkHF2nRvT4X5XhW6/j1XhGB6jS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMDIwNzM4MDhaFw0yNjEyMDEwNzQzMDhaMDMxMTAvBgNV BAMTKEQ5M0U0RTQ1NTlBQkFDQUE0MTE0QzJERjE2RTlFREZBQUZBMzBDQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjQHK0Asjjw+RZ1kjiRpzctMhG HYKBGkCP5eO9BYfiUbcz9N/U79iVDvgzBH0lX1bj09/bB8vp5u6ReYqqWx+6Z3AI mdzX2wF0csQOWXG6hw9Wy3VyiKbukYbCVBhotLV/v6TZg7Seyrk7+LMy2tV6FTio L9ZG2VW/f81mJdAcGkLXoAJsJF/OXFEGLkK7CT1GRSVsouzi8nI0HZVYPLTeoXn2 5gG1IflT8YouJq84oiTQLfN47PGsNGhrgDj2aEghpT9P5nir2Y1uMO4ciWr5OoQ/ z5o0tXaMAT/tFyQrzoxuqXScojfG8jsgZ2waJSxC7HxXIISvnC7yO7qJklo5AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQU2T5ORVmrrKpBFMLfFunt+q+jDLMwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTQ2MTgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwaQYIKwYBBQUHAQcBAf8EWjBYMFYEAgABMFADBABbfCID BABbfCYDBABbfIMDBABbfIUDBABbfNkDBABccDMDBABccDoDBABccD0DBAFccEow DAMEAFxxMQMEAVxxNAMEAFxxZAMEALJcZTANBgkqhkiG9w0BAQsFAAOCAQEAKqsQ LOwEvnikwrnntIIN9nWf8XAJ0VoaLaZYPu+jnyviJKnIQkkcdKH6BMFXbUBfL+ir OCOOhdwUM2w2aW0oCULeP7cIjYzWLf+NQy2B/c8Vjb76VHxVmVgZ9y9RAAHqmYR/ yrD/SL3ACHbc4fECRMhmBTXx5MUTDqCsJBUdvCV4l7EsbYcO4geWNSLjJNcHkRVc Rm+3HzsXxJHxoFuAZIa/D8gM+/yfwr2TdHSEI3Salzl5z0Y33y2MpCsjgMLqi6B1 vCm7wFFTclw36R3bmc18ptwtJKULP2vkxCChaZn0Et+ZGflqNE+KKZ7kOCsmUFZv OclKF6cqc2+DS3GYfg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:36:32 2025 by rpki-client