This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401190.roa File: AS401190.roa (raw, json) Hash identifier: V37w9ArU709KfJyLmU2qJSMrZzJePbmcmwCe6i9sAl0= Subject key identifier: 8C:A4:21:9B:EB:FB:4F:DA:2B:FC:E0:5A:3A:E8:80:33:51:67:D5:6B Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 7B0D91CF698AB469316BC8225C0E55F3659F5E91 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401190.roa Signing time: Sat 13 Dec 2025 11:58:09 +0000 ROA not before: Sat 13 Dec 2025 11:53:09 +0000 ROA not after: Sat 12 Dec 2026 11:58:09 +0000 asID: 401190 IP address blocks: 91.124.26.0/23 maxlen: 24 91.124.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:0d:91:cf:69:8a:b4:69:31:6b:c8:22:5c:0e:55:f3:65:9f:5e:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 13 11:53:09 2025 GMT Not After : Dec 12 11:58:09 2026 GMT Subject: CN=8CA4219BEBFB4FDA2BFCE05A3AE880335167D56B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7b:72:5e:b2:41:d8:7f:36:e3:4d:fb:cd:a7: 7a:0a:c1:2c:6b:28:0e:ac:fc:c7:fd:14:1b:0c:ac: 0f:18:5c:f5:b8:ec:ca:b2:18:96:55:7b:ff:1a:8d: 3d:84:46:2b:54:25:5f:50:d1:bc:06:42:5d:37:3a: 48:48:73:3a:1f:17:bb:a4:f6:3f:0f:e0:1e:24:e1: 90:39:e3:37:be:78:cf:99:5e:09:8a:a1:00:c0:fc: 45:38:7c:ca:cf:e3:f8:fe:8b:21:71:34:e2:e1:31: 01:18:5a:d8:ac:46:c0:2e:e3:b5:2f:11:c5:e0:ab: ff:4b:bd:ad:35:82:6e:ad:5a:5d:06:b6:cf:40:1c: eb:3e:6a:58:8a:b5:5d:1b:c5:8a:ed:bb:a7:90:08: eb:15:07:1b:47:47:ad:1a:c9:9f:f2:c6:31:3f:9b: 7d:e0:d4:b2:4c:77:62:53:d7:26:7b:54:b2:43:3d: 0c:84:e3:82:d6:ec:b2:85:06:10:78:51:18:0e:c8: 1e:53:ce:ce:36:60:51:fb:0c:d9:64:94:bc:4a:54: bf:27:11:44:22:c7:67:77:81:05:e1:12:04:c1:0b: 31:32:3c:3a:fe:37:d5:5d:28:9e:00:da:e4:70:9d: 7c:58:4d:54:6d:a6:d8:b9:e2:c5:c0:4f:6d:09:e1: 9f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A4:21:9B:EB:FB:4F:DA:2B:FC:E0:5A:3A:E8:80:33:51:67:D5:6B X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401190.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.124.26.0-91.124.29.255 Signature Algorithm: sha256WithRSAEncryption 9d:6c:58:1b:b2:a1:dd:4b:7c:35:f5:fe:48:94:c5:d6:d6:5e: 88:f9:4b:d8:80:5c:e9:f3:e1:f4:bf:54:27:47:2a:05:32:cd: 69:6b:0b:8e:8e:c5:81:c8:6e:ee:f1:7a:b2:b9:37:f1:6c:c6: 5c:ab:14:6e:3e:84:81:5c:0b:70:63:4c:a1:4d:ca:dc:e2:6b: 98:fa:03:70:a0:94:7b:f3:ed:5c:f2:d1:18:64:a6:d4:e5:60: 97:9f:e2:76:a7:8f:0e:2a:cd:cc:fb:74:b7:39:1f:67:52:d2: 10:bd:12:b0:c0:1f:85:f6:3e:87:df:6e:cf:62:8a:b5:e7:02: 47:6e:24:21:9b:74:26:38:25:22:2e:73:76:0f:d4:a0:32:40: 3b:1c:53:81:f4:ad:76:c5:41:43:c6:4f:4e:2a:ec:82:c2:59: 86:f6:e4:fc:c0:6e:db:ca:29:ab:4b:1e:4d:5a:1f:ab:db:07: 45:7b:a1:15:2c:9b:19:b9:1d:4b:d2:d3:8e:07:ac:99:06:85: 7c:17:0e:e6:cf:19:22:bf:12:fa:f9:ec:eb:e5:64:b5:ca:0d: d9:3c:8c:3f:ce:a5:50:6b:d1:e9:42:5c:50:a5:24:b2:8d:58: 10:8f:b8:ce:c7:d4:01:f2:a3:69:38:b7:b8:c8:42:e6:83:54: 2d:54:97:f4 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUew2Rz2mKtGkxa8giXA5V82WfXpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMTMxMTUzMDlaFw0yNjEyMTIxMTU4MDlaMDMxMTAvBgNV BAMTKDhDQTQyMTlCRUJGQjRGREEyQkZDRTA1QTNBRTg4MDMzNTE2N0Q1NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHe3JeskHYfzbjTfvNp3oKwSxr KA6s/Mf9FBsMrA8YXPW47MqyGJZVe/8ajT2ERitUJV9Q0bwGQl03OkhIczofF7uk 9j8P4B4k4ZA54ze+eM+ZXgmKoQDA/EU4fMrP4/j+iyFxNOLhMQEYWtisRsAu47Uv EcXgq/9Lva01gm6tWl0Gts9AHOs+aliKtV0bxYrtu6eQCOsVBxtHR60ayZ/yxjE/ m33g1LJMd2JT1yZ7VLJDPQyE44LW7LKFBhB4URgOyB5Tzs42YFH7DNlklLxKVL8n EUQix2d3gQXhEgTBCzEyPDr+N9VdKJ4A2uRwnXxYTVRtpti54sXAT20J4Z+XAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUjKQhm+v7T9or/OBaOuiAM1Fn1WswHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDAxMTkwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFb fBoDBAFbfBwwDQYJKoZIhvcNAQELBQADggEBAJ1sWBuyod1LfDX1/kiUxdbWXoj5 S9iAXOnz4fS/VCdHKgUyzWlrC46OxYHIbu7xerK5N/FsxlyrFG4+hIFcC3BjTKFN ytzia5j6A3CglHvz7Vzy0RhkptTlYJef4nanjw4qzcz7dLc5H2dS0hC9ErDAH4X2 Poffbs9iirXnAkduJCGbdCY4JSIuc3YP1KAyQDscU4H0rXbFQUPGT04q7ILCWYb2 5PzAbtvKKatLHk1aH6vbB0V7oRUsmxm5HUvS044HrJkGhXwXDubPGSK/Evr57Ovl ZLXKDdk8jD/OpVBr0elCXFClJLKNWBCPuM7H1AHyo2k4t7jIQuaDVC1Ul/Q= -----END CERTIFICATE-----Generated at Mon Dec 15 15:33:42 2025 by rpki-client