This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138195.roa File: AS138195.roa (raw, json) Hash identifier: UJW0mrzC5KclHOFmo9NL1ZpL8uQopBSOdyPy4u0Z6dc= Subject key identifier: 84:B2:92:13:83:EB:E4:A8:DD:17:0A:AC:3E:48:22:6B:82:53:20:8E Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 2626506CCBF40A73928E8C87DEBDCD575F7E0D76 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138195.roa Signing time: Fri 23 Jan 2026 01:23:16 +0000 ROA not before: Fri 23 Jan 2026 01:18:16 +0000 ROA not after: Fri 22 Jan 2027 01:23:16 +0000 asID: 138195 IP address blocks: 143.14.82.0/23 maxlen: 23 143.14.143.0/24 maxlen: 24 162.141.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:26:50:6c:cb:f4:0a:73:92:8e:8c:87:de:bd:cd:57:5f:7e:0d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 23 01:18:16 2026 GMT Not After : Jan 22 01:23:16 2027 GMT Subject: CN=84B2921383EBE4A8DD170AAC3E48226B8253208E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e1:1d:b9:d9:d0:0e:ac:c5:f2:97:e3:ce:7b: a3:8c:5d:99:79:41:6e:6b:ee:8d:6f:7f:1c:59:25: 07:07:8a:e3:e2:3b:25:e3:9f:fd:55:74:dc:cb:83: c0:83:54:26:aa:d7:f2:d4:0c:b8:7b:58:e6:52:87: b8:9a:61:80:9b:53:1b:ec:8f:4d:32:02:97:f1:4b: a1:3c:3e:9b:9b:0c:97:cf:3c:42:da:60:34:54:d2: 87:91:40:50:05:be:be:90:0e:8d:87:93:91:0d:22: 32:78:6d:f5:84:71:1a:7b:d0:56:82:39:65:5b:01: c8:cd:6c:11:08:b8:8b:56:06:5d:fb:c3:b9:89:11: b2:37:9d:65:4d:9f:75:f2:1d:d7:1d:7c:68:e9:71: 50:72:ef:76:0d:8a:5d:56:ff:60:ef:0f:8c:75:21: cf:b0:fd:5c:17:5b:f0:63:64:a9:6a:25:4e:a7:20: b3:80:32:22:8e:c2:72:a6:22:c0:47:ea:62:c5:76: 7e:af:82:fd:83:a4:13:0b:d9:dd:7b:92:9f:14:5b: 0f:06:f8:3b:77:bb:4e:02:6a:61:f8:ed:85:de:6d: 53:45:09:ff:99:09:c2:0b:6e:d2:e6:94:0e:b3:82: 80:6d:c4:2a:18:84:d9:4f:76:7c:6f:4f:b7:60:65: 56:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B2:92:13:83:EB:E4:A8:DD:17:0A:AC:3E:48:22:6B:82:53:20:8E X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138195.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.14.82.0/23 143.14.143.0/24 162.141.84.0/22 Signature Algorithm: sha256WithRSAEncryption 09:15:a1:67:20:f4:e5:4f:59:8a:86:2b:81:42:59:dc:df:45: af:eb:4a:fc:42:8d:9f:b9:c0:ff:cb:b2:08:a8:e2:26:56:94: fd:b0:be:85:73:59:13:cb:92:a8:ba:a5:42:e7:90:dd:cf:d1: 67:40:bf:bf:a7:ed:d0:71:38:43:70:0b:0e:78:a5:81:5a:b2: c9:76:4a:25:6a:42:ae:91:e7:1e:a4:fb:22:75:f4:b6:d9:df: 50:de:8c:21:ac:1f:93:ac:23:d3:85:81:4c:d1:f8:82:f6:70: 6d:93:e8:c2:49:23:34:6d:14:a9:77:74:98:45:a5:98:09:57: cd:e2:91:b4:ae:18:49:be:11:e0:de:aa:eb:4a:0f:a8:9a:13: 21:99:81:e4:91:aa:fe:cf:f6:83:17:ae:06:8d:87:94:98:9d: 9e:a9:a6:cb:06:39:c4:5a:71:34:3b:38:72:2f:e6:64:e3:be: 90:bf:26:ef:68:2b:80:8f:51:3a:90:f6:9e:a4:91:b3:92:3a: 9e:19:9a:fd:da:b1:ae:54:e0:d0:8a:b5:82:b3:cd:ee:dd:c3: 76:55:09:83:bb:4f:66:07:a9:7b:d3:a1:dc:3b:b2:f5:ea:7f: ec:90:a0:4c:d3:0a:3f:8f:5f:84:8a:3b:0d:f8:78:c8:31:c1: 06:b4:f5:a3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUJiZQbMv0CnOSjoyH3r3NV19+DXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMjMwMTE4MTZaFw0yNzAxMjIwMTIzMTZaMDMxMTAvBgNV BAMTKDg0QjI5MjEzODNFQkU0QThERDE3MEFBQzNFNDgyMjZCODI1MzIwOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk4R252dAOrMXyl+POe6OMXZl5 QW5r7o1vfxxZJQcHiuPiOyXjn/1VdNzLg8CDVCaq1/LUDLh7WOZSh7iaYYCbUxvs j00yApfxS6E8PpubDJfPPELaYDRU0oeRQFAFvr6QDo2Hk5ENIjJ4bfWEcRp70FaC OWVbAcjNbBEIuItWBl37w7mJEbI3nWVNn3XyHdcdfGjpcVBy73YNil1W/2DvD4x1 Ic+w/VwXW/BjZKlqJU6nILOAMiKOwnKmIsBH6mLFdn6vgv2DpBML2d17kp8UWw8G +Dt3u04CamH47YXebVNFCf+ZCcILbtLmlA6zgoBtxCoYhNlPdnxvT7dgZVaRAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUhLKSE4Pr5KjdFwqsPkgia4JTII4wHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTM4MTk1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBjw5S AwQAjw6PAwQCoo1UMA0GCSqGSIb3DQEBCwUAA4IBAQAJFaFnIPTlT1mKhiuBQlnc 30Wv60r8Qo2fucD/y7IIqOImVpT9sL6Fc1kTy5KouqVC55Ddz9FnQL+/p+3QcThD cAsOeKWBWrLJdkolakKukecepPsidfS22d9Q3owhrB+TrCPThYFM0fiC9nBtk+jC SSM0bRSpd3SYRaWYCVfN4pG0rhhJvhHg3qrrSg+omhMhmYHkkar+z/aDF64GjYeU mJ2eqabLBjnEWnE0OzhyL+Zk476QvybvaCuAj1E6kPaepJGzkjqeGZr92rGuVODQ irWCs83u3cN2VQmDu09mB6l706HcO7L16n/skKBM0wo/j1+EijsN+HjIMcEGtPWj -----END CERTIFICATE-----Generated at Sun Jan 25 10:33:16 2026 by rpki-client