This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199524.roa File: AS199524.roa (raw, json) Hash identifier: RgMKv4Hkpem8YxPXftLrXd4NYPdZ0SNB/jc2KcfWmgc= Subject key identifier: 83:AA:A0:07:A8:02:40:70:DC:90:25:CB:4A:E0:81:31:71:64:60:2B Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 661A61F33390C80F1EB7C33E3A95C7C7F89E9E6E Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199524.roa Signing time: Sat 17 Jan 2026 09:20:15 +0000 ROA not before: Sat 17 Jan 2026 09:15:15 +0000 ROA not after: Sat 16 Jan 2027 09:20:15 +0000 asID: 199524 IP address blocks: 91.124.87.0/24 maxlen: 24 92.113.92.0/24 maxlen: 24 95.135.0.0/24 maxlen: 24 95.135.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:1a:61:f3:33:90:c8:0f:1e:b7:c3:3e:3a:95:c7:c7:f8:9e:9e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Jan 17 09:15:15 2026 GMT Not After : Jan 16 09:20:15 2027 GMT Subject: CN=83AAA007A8024070DC9025CB4AE081317164602B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:56:3a:74:20:be:1f:1a:5b:96:c5:d5:44:4f: 98:39:0f:48:23:4b:cd:5f:6c:b3:19:f6:6e:0a:6b: d3:5c:2b:02:f8:44:35:4a:4f:03:19:ac:62:43:55: 35:91:fb:de:d0:13:d6:3c:e4:de:37:aa:60:b6:cd: d6:20:24:b3:39:c5:a9:31:f3:16:fe:76:07:e5:d8: 44:af:99:7d:69:b6:f1:93:01:ce:42:e4:17:50:07: 0c:d3:fe:3c:f3:68:5b:26:e6:07:e3:56:03:4e:e9: 73:d5:52:6c:1c:42:c0:91:42:34:8f:d7:be:d8:6a: fd:25:17:24:4a:99:58:23:a6:20:ba:86:f9:b2:f0: 72:21:61:e9:c8:4a:a3:43:9f:cd:4d:96:13:21:c1: 6f:a7:50:b7:25:4c:0f:3e:74:4a:69:d6:fd:04:b6: c1:2d:bc:58:c0:df:b6:f3:20:d4:15:dd:34:b1:d2: 2a:79:3f:24:a5:6c:8e:fd:b2:eb:5b:48:d7:f0:a7: 77:92:7e:dc:8a:e7:c7:88:f8:67:d9:5f:83:51:c0: 1e:a8:36:39:12:ed:a4:b4:ba:3c:61:2e:4b:06:af: 24:a5:68:ac:1f:88:7c:44:7d:6a:f1:43:d2:e0:47: 03:ad:d2:03:48:f5:2a:48:50:4f:ec:6a:e6:9a:49: 9e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AA:A0:07:A8:02:40:70:DC:90:25:CB:4A:E0:81:31:71:64:60:2B X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS199524.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.124.87.0/24 92.113.92.0/24 95.135.0.0/23 Signature Algorithm: sha256WithRSAEncryption a0:b4:7f:31:01:05:38:b9:01:aa:f0:22:26:7b:2b:90:ff:eb: 91:24:00:de:0e:fe:75:24:6d:78:f7:13:a6:2e:9b:92:80:e8: 83:04:13:a6:87:fe:73:85:58:d8:47:da:dc:61:cb:3e:7a:8b: 6b:6b:59:30:37:31:9a:e4:0a:a9:2e:15:47:11:3d:7f:23:06: 71:d1:db:51:e5:3f:68:58:f3:4d:ae:26:10:b2:d9:7e:b4:55: 3f:81:c4:36:f8:9e:65:7e:48:a1:b1:ed:ad:bf:c7:16:5f:b1: 7c:05:d1:85:cc:30:67:74:ea:91:71:85:c3:5a:9f:01:a6:ad: 5c:20:2b:ec:53:64:c1:84:47:b2:ef:0a:e1:02:fb:71:b3:c1: 51:89:23:57:1d:5a:fa:8b:99:e8:91:99:9e:76:c6:3b:cc:77: 00:b3:1c:ae:68:dd:aa:29:45:a9:5c:6b:c5:fa:bb:a9:4c:67: 77:df:47:d7:94:71:74:ab:00:5c:9a:1f:2a:2a:71:3c:cb:28: 94:ed:0e:5f:f3:02:e3:32:d5:31:5c:d4:d5:e4:16:93:78:40: 7e:0b:ee:81:51:81:92:c4:fd:12:97:eb:0a:94:1d:c4:c3:60: cf:35:f0:5b:d1:eb:13:14:a3:66:52:5b:e5:f5:9f:a7:a7:e3: 37:26:30:14 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUZhph8zOQyA8et8M+OpXHx/ienm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNjAxMTcwOTE1MTVaFw0yNzAxMTYwOTIwMTVaMDMxMTAvBgNV BAMTKDgzQUFBMDA3QTgwMjQwNzBEQzkwMjVDQjRBRTA4MTMxNzE2NDYwMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClVjp0IL4fGluWxdVET5g5D0gj S81fbLMZ9m4Ka9NcKwL4RDVKTwMZrGJDVTWR+97QE9Y85N43qmC2zdYgJLM5xakx 8xb+dgfl2ESvmX1ptvGTAc5C5BdQBwzT/jzzaFsm5gfjVgNO6XPVUmwcQsCRQjSP 177Yav0lFyRKmVgjpiC6hvmy8HIhYenISqNDn81NlhMhwW+nULclTA8+dEpp1v0E tsEtvFjA37bzINQV3TSx0ip5PySlbI79sutbSNfwp3eSftyK58eI+GfZX4NRwB6o NjkS7aS0ujxhLksGrySlaKwfiHxEfWrxQ9LgRwOt0gNI9SpIUE/sauaaSZ7LAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUg6qgB6gCQHDckCXLSuCBMXFkYCswHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMTk5NTI0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW3xX AwQAXHFcAwQBX4cAMA0GCSqGSIb3DQEBCwUAA4IBAQCgtH8xAQU4uQGq8CImeyuQ /+uRJADeDv51JG149xOmLpuSgOiDBBOmh/5zhVjYR9rcYcs+eotra1kwNzGa5Aqp LhVHET1/IwZx0dtR5T9oWPNNriYQstl+tFU/gcQ2+J5lfkihse2tv8cWX7F8BdGF zDBndOqRcYXDWp8Bpq1cICvsU2TBhEey7wrhAvtxs8FRiSNXHVr6i5nokZmedsY7 zHcAsxyuaN2qKUWpXGvF+rupTGd330fXlHF0qwBcmh8qKnE8yyiU7Q5f8wLjMtUx XNTV5BaTeEB+C+6BUYGSxP0Sl+sKlB3Ew2DPNfBb0esTFKNmUlvl9Z+np+M3JjAU -----END CERTIFICATE-----Generated at Mon Jan 26 06:04:55 2026 by rpki-client