This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS33659.roa File: AS33659.roa (raw, json) Hash identifier: F/OZn+BLqcqk5+WBrFB4sGrWaIOufOw6JgrG3uxvwBg= Subject key identifier: CE:11:15:8C:CF:AF:F3:A5:6A:87:84:71:3C:88:70:7D:29:FD:41:CB Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 10352C3017AF92AEC9858B18E68FDBE787423648 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS33659.roa Signing time: Sat 01 Nov 2025 00:08:35 +0000 ROA not before: Sat 01 Nov 2025 00:03:35 +0000 ROA not after: Sat 31 Oct 2026 00:08:35 +0000 asID: 33659 IP address blocks: 178.93.77.0/24 maxlen: 24 178.93.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 12:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:35:2c:30:17:af:92:ae:c9:85:8b:18:e6:8f:db:e7:87:42:36:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Nov 1 00:03:35 2025 GMT Not After : Oct 31 00:08:35 2026 GMT Subject: CN=CE11158CCFAFF3A56A8784713C88707D29FD41CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:85:6d:d7:22:bf:38:61:e9:8e:12:65:16:f5: b2:e2:a6:07:cd:8d:c4:a8:45:e1:34:b8:90:45:df: aa:39:91:ab:07:ba:ac:9d:cb:44:c2:92:e0:18:4c: 55:96:35:1f:35:90:72:52:80:ba:f1:75:68:77:3b: 16:c5:31:21:e8:9f:63:88:f6:a3:b0:ef:07:22:41: 6c:12:15:3f:82:4d:c1:13:5c:83:0b:99:c2:e8:41: a8:32:8d:81:0c:e0:33:39:24:89:88:e5:ca:f0:d0: fa:35:ac:63:62:35:35:98:5a:08:10:9c:30:ea:5d: f9:6a:25:5a:bf:f4:9c:55:52:be:26:d6:51:52:20: 2d:95:0c:e9:19:13:d9:60:98:27:d3:72:f1:e2:fd: 49:c4:7e:b5:57:3e:84:9f:ab:0e:4c:99:f2:c1:98: 35:a9:be:3b:b8:ac:01:0c:7f:8f:92:a8:cb:47:9c: 8d:ac:ed:1f:2a:a9:70:97:75:11:90:48:05:d4:c7: ca:2b:e9:a0:78:d2:64:0e:56:7e:60:f1:ce:81:ce: 18:4f:ab:c4:2e:27:4b:95:95:92:44:82:55:33:5e: 05:0c:92:ca:7a:54:a6:07:3c:52:e6:c3:81:10:10: 1b:81:ee:a4:ac:3c:b4:10:fb:43:88:b3:4c:0b:90: a7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:11:15:8C:CF:AF:F3:A5:6A:87:84:71:3C:88:70:7D:29:FD:41:CB X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS33659.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.93.77.0/24 178.93.115.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:a3:81:bf:2e:0e:bb:3f:e3:a3:fb:78:40:de:eb:57:7b:1f: 9f:4d:0a:76:17:34:27:1d:51:fc:84:6f:9f:82:d1:96:0b:1b: 9d:b1:cd:37:4c:43:5e:f4:23:35:8f:ea:8b:8f:bc:6d:31:71: 56:02:c8:45:6d:78:09:77:74:c2:d6:5a:a4:ab:3f:08:1f:46: 66:31:f1:19:9e:58:70:da:b4:a7:de:55:a7:f5:d9:aa:e3:70: c5:a4:c5:7c:0e:e8:3a:6e:52:0b:a8:61:cc:61:d1:09:f0:aa: 9a:29:18:21:3b:1f:87:e2:fd:33:3c:2f:5e:8d:22:d7:b0:ad: af:c2:b2:74:d8:de:5f:3b:37:08:0f:b4:96:9b:d3:66:55:33: 5c:ab:0f:c0:86:fe:c9:84:cf:5a:16:72:54:b0:dc:97:7a:d3: 1f:70:ba:ef:ef:2c:a8:95:99:6c:e5:39:2d:c7:0a:66:70:b4: aa:e3:b8:96:16:2e:05:17:dc:4f:62:6b:8a:f4:ae:b5:71:7a: 3e:12:1c:8f:26:50:b2:23:9e:68:3e:87:6c:35:3f:01:97:db: 6d:ea:a6:f5:20:0d:87:39:c1:e5:81:60:90:d9:04:6b:f6:96: 28:d7:ec:d0:74:b7:ff:e3:00:5d:ff:c3:8c:46:6f:02:d0:e9: e2:a7:b1:c6 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUEDUsMBevkq7JhYsY5o/b54dCNkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTExMDEwMDAzMzVaFw0yNjEwMzEwMDA4MzVaMDMxMTAvBgNV BAMTKENFMTExNThDQ0ZBRkYzQTU2QTg3ODQ3MTNDODg3MDdEMjlGRDQxQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhW3XIr84YemOEmUW9bLipgfN jcSoReE0uJBF36o5kasHuqydy0TCkuAYTFWWNR81kHJSgLrxdWh3OxbFMSHon2OI 9qOw7wciQWwSFT+CTcETXIMLmcLoQagyjYEM4DM5JImI5crw0Po1rGNiNTWYWggQ nDDqXflqJVq/9JxVUr4m1lFSIC2VDOkZE9lgmCfTcvHi/UnEfrVXPoSfqw5MmfLB mDWpvju4rAEMf4+SqMtHnI2s7R8qqXCXdRGQSAXUx8or6aB40mQOVn5g8c6BzhhP q8QuJ0uVlZJEglUzXgUMksp6VKYHPFLmw4EQEBuB7qSsPLQQ+0OIs0wLkKcvAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUzhEVjM+v86Vqh4RxPIhwfSn9QcswHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMzM2NTkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACyXU0D BACyXXMwDQYJKoZIhvcNAQELBQADggEBAHqjgb8uDrs/46P7eEDe61d7H59NCnYX NCcdUfyEb5+C0ZYLG52xzTdMQ170IzWP6ouPvG0xcVYCyEVteAl3dMLWWqSrPwgf RmYx8RmeWHDatKfeVaf12arjcMWkxXwO6DpuUguoYcxh0QnwqpopGCE7H4fi/TM8 L16NItewra/CsnTY3l87NwgPtJab02ZVM1yrD8CG/smEz1oWclSw3Jd60x9wuu/v LKiVmWzlOS3HCmZwtKrjuJYWLgUX3E9ia4r0rrVxej4SHI8mULIjnmg+h2w1PwGX 223qpvUgDYc5weWBYJDZBGv2lijX7NB0t//jAF3/w4xGbwLQ6eKnscY= -----END CERTIFICATE-----Generated at Sun Dec 7 22:58:17 2025 by rpki-client