This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42689.roa File: AS42689.roa (raw, json) Hash identifier: Yr9fGYkDLFaB+q4nLNTS4UX/db7jXKnPqN8xLg9U+bw= Subject key identifier: C9:8E:8B:EC:C1:25:C1:B8:33:FC:72:C0:1B:90:47:AC:28:7D:97:31 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 656E4C59E464AF61F049DEA109958C9AD52DB1FB Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42689.roa Signing time: Sun 16 Nov 2025 00:57:42 +0000 ROA not before: Sun 16 Nov 2025 00:52:42 +0000 ROA not after: Sun 15 Nov 2026 00:57:42 +0000 asID: 42689 IP address blocks: 46.202.28.0/24 maxlen: 24 46.202.52.0/24 maxlen: 24 91.124.4.0/24 maxlen: 24 91.124.5.0/24 maxlen: 24 91.124.25.0/24 maxlen: 24 91.124.53.0/24 maxlen: 24 91.124.56.0/24 maxlen: 24 91.124.61.0/24 maxlen: 24 91.124.193.0/24 maxlen: 24 91.124.218.0/24 maxlen: 24 91.124.239.0/24 maxlen: 24 91.124.240.0/24 maxlen: 24 91.124.254.0/24 maxlen: 24 95.134.77.0/24 maxlen: 24 95.134.86.0/24 maxlen: 24 95.134.87.0/24 maxlen: 24 95.134.149.0/24 maxlen: 24 178.92.228.0/24 maxlen: 24 178.92.248.0/24 maxlen: 24 178.94.54.0/24 maxlen: 24 178.94.68.0/24 maxlen: 24 178.94.123.0/24 maxlen: 24 178.95.11.0/24 maxlen: 24 178.95.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:6e:4c:59:e4:64:af:61:f0:49:de:a1:09:95:8c:9a:d5:2d:b1:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Nov 16 00:52:42 2025 GMT Not After : Nov 15 00:57:42 2026 GMT Subject: CN=C98E8BECC125C1B833FC72C01B9047AC287D9731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1f:9d:a2:20:1e:37:93:9d:f2:fe:0b:49:1b: af:02:97:1c:57:7a:19:a2:b4:cc:03:3d:19:da:98: 8b:1e:b8:53:98:22:93:32:1f:a1:d5:bd:96:23:7d: c6:b2:98:ef:db:07:b0:c4:cb:f3:15:33:cd:8e:cb: 09:e5:fb:33:64:1f:11:c7:48:56:bd:a9:a4:ce:36: 67:54:ab:b2:ec:9b:1b:41:72:c6:63:7a:b8:17:2e: f1:d4:6b:58:b8:3b:24:ce:54:9e:1d:9a:7a:6f:e8: 2b:41:92:ff:1c:b3:c3:a2:05:bb:f5:d6:4e:52:5d: 37:d7:c6:90:b9:5d:41:d1:eb:d7:8d:49:d8:2a:bb: 5c:8d:b0:25:12:d5:2e:05:3c:1e:93:4e:b5:21:56: 0a:49:fb:7d:25:ac:51:ae:9d:d9:ab:13:fb:88:26: 7c:66:66:30:39:f9:7d:e9:58:46:1f:7c:67:56:96: 80:06:d6:95:05:15:34:68:97:8a:76:91:74:bd:1b: bf:81:bf:d0:9a:c2:43:90:58:4a:4c:9b:b9:93:50: a4:ff:da:b8:a8:00:e4:fe:2a:91:79:e7:12:4f:ca: fa:af:cd:bd:ab:6f:6c:ce:fc:bc:e8:d5:dd:f7:e3: e0:b6:e6:f1:35:80:d6:0d:41:26:7f:91:dc:c5:ee: 32:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8E:8B:EC:C1:25:C1:B8:33:FC:72:C0:1B:90:47:AC:28:7D:97:31 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS42689.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.202.28.0/24 46.202.52.0/24 91.124.4.0/23 91.124.25.0/24 91.124.53.0/24 91.124.56.0/24 91.124.61.0/24 91.124.193.0/24 91.124.218.0/24 91.124.239.0-91.124.240.255 91.124.254.0/24 95.134.77.0/24 95.134.86.0/23 95.134.149.0/24 178.92.228.0/24 178.92.248.0/24 178.94.54.0/24 178.94.68.0/24 178.94.123.0/24 178.95.11.0/24 178.95.21.0/24 Signature Algorithm: sha256WithRSAEncryption 00:c7:77:d6:a5:39:6a:bb:9f:55:7d:26:da:57:71:70:88:77: e3:5a:3b:9e:3e:16:28:9b:15:51:52:2f:6f:f0:cc:9f:25:f3: 75:d3:a8:19:7b:db:40:5d:8b:a7:6d:5c:bc:89:55:58:ca:9a: 51:b2:08:a6:23:4b:96:e3:76:76:d5:f3:da:11:8f:2a:bb:61: f6:64:67:13:29:89:3c:aa:50:62:55:f2:50:77:90:f5:ec:89: a9:de:97:8f:66:da:36:8e:4a:ea:b5:60:37:f8:9d:f5:b5:4d: 4a:6d:50:7d:f5:70:a0:fe:88:dc:8f:18:7e:4f:dd:47:c7:4e: 2b:3c:63:79:3d:94:bf:16:c3:18:32:ff:3d:10:85:c2:00:2f: a9:ef:0b:32:ac:c1:47:40:c4:b1:59:a4:e4:7d:88:ac:e8:1e: c2:30:27:ba:e3:98:d4:56:01:6f:06:e4:21:bf:15:a6:bb:2c: 46:77:b2:94:65:ee:48:88:1d:7d:9e:47:05:9d:d2:6b:ff:ec: a0:d4:bf:91:76:74:ce:df:80:81:4f:78:45:5e:84:ac:61:30: b8:d1:73:64:88:64:3d:fb:74:06:5b:de:2f:36:a7:18:6d:5d: 32:2d:10:0c:d9:fe:3b:23:bb:36:d5:cf:1b:41:1c:5d:11:a9: 18:33:39:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUZW5MWeRkr2HwSd6hCZWMmtUtsfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTExMTYwMDUyNDJaFw0yNjExMTUwMDU3NDJaMDMxMTAvBgNV BAMTKEM5OEU4QkVDQzEyNUMxQjgzM0ZDNzJDMDFCOTA0N0FDMjg3RDk3MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoH52iIB43k53y/gtJG68ClxxX ehmitMwDPRnamIseuFOYIpMyH6HVvZYjfcaymO/bB7DEy/MVM82Oywnl+zNkHxHH SFa9qaTONmdUq7LsmxtBcsZjergXLvHUa1i4OyTOVJ4dmnpv6CtBkv8cs8OiBbv1 1k5SXTfXxpC5XUHR69eNSdgqu1yNsCUS1S4FPB6TTrUhVgpJ+30lrFGundmrE/uI JnxmZjA5+X3pWEYffGdWloAG1pUFFTRol4p2kXS9G7+Bv9CawkOQWEpMm7mTUKT/ 2rioAOT+KpF55xJPyvqvzb2rb2zO/Lzo1d334+C25vE1gNYNQSZ/kdzF7jJ9AgMB AAGjggKOMIICijAdBgNVHQ4EFgQUyY6L7MElwbgz/HLAG5BHrCh9lzEwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDI2ODkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwgaMGCCsGAQUFBwEHAQH/BIGTMIGQMIGNBAIAATCBhgME AC7KHAMEAC7KNAMEAVt8BAMEAFt8GQMEAFt8NQMEAFt8OAMEAFt8PQMEAFt8wQME AFt82jAMAwQAW3zvAwQAW3zwAwQAW3z+AwQAX4ZNAwQBX4ZWAwQAX4aVAwQAslzk AwQAslz4AwQAsl42AwQAsl5EAwQAsl57AwQAsl8LAwQAsl8VMA0GCSqGSIb3DQEB CwUAA4IBAQAAx3fWpTlqu59VfSbaV3FwiHfjWjuePhYomxVRUi9v8MyfJfN106gZ e9tAXYunbVy8iVVYyppRsgimI0uW43Z21fPaEY8qu2H2ZGcTKYk8qlBiVfJQd5D1 7Imp3pePZto2jkrqtWA3+J31tU1KbVB99XCg/ojcjxh+T91Hx04rPGN5PZS/FsMY Mv89EIXCAC+p7wsyrMFHQMSxWaTkfYis6B7CMCe645jUVgFvBuQhvxWmuyxGd7KU Ze5IiB19nkcFndJr/+yg1L+RdnTO34CBT3hFXoSsYTC40XNkiGQ9+3QGW94vNqcY bV0yLRAM2f47I7s21c8bQRxdEakYMzny -----END CERTIFICATE-----Generated at Sat Dec 6 12:45:44 2025 by rpki-client