This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138997.roa File: AS138997.roa (raw, json) Hash identifier: 5nQMeQMM7UctErxGioW4gdraOegzIMmYqNitbkMnfeg= Subject key identifier: 80:3B:2E:4C:D5:D3:62:68:12:FC:D4:A3:AA:EB:58:43:EF:4A:92:3B Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 31E854F8368CDD604450B227C0B7395F63AE1078 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138997.roa Signing time: Sat 17 Jan 2026 17:24:41 +0000 ROA not before: Sat 17 Jan 2026 17:19:41 +0000 ROA not after: Sat 16 Jan 2027 17:24:41 +0000 asID: 138997 IP address blocks: 146.103.16.0/23 maxlen: 24 155.117.7.0/24 maxlen: 24 155.117.77.0/24 maxlen: 24 155.117.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e8:54:f8:36:8c:dd:60:44:50:b2:27:c0:b7:39:5f:63:ae:10:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 17 17:19:41 2026 GMT Not After : Jan 16 17:24:41 2027 GMT Subject: CN=803B2E4CD5D3626812FCD4A3AAEB5843EF4A923B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6c:97:72:b6:65:b7:0d:3b:d2:13:f0:0e:c4: 35:98:5e:28:03:11:5c:e7:ac:17:8a:db:dc:79:73: 7a:86:5f:0f:50:99:df:3c:54:ef:d0:52:91:3b:a1: ed:2b:ce:40:c5:ef:e0:42:e0:ec:80:10:71:9c:0d: 7b:55:93:ed:bc:6c:b1:bd:e7:ae:af:85:64:3b:c9: b1:25:ae:dd:7c:55:3a:a8:7e:fd:45:32:7f:a1:cf: 41:47:4c:45:09:a1:3f:4e:25:07:5e:c3:cf:b7:72: fb:59:42:a1:9f:2a:c7:c5:9c:53:ea:1c:a7:99:0f: 42:17:d6:f6:6b:87:59:69:5f:55:7c:b0:ed:a6:6e: 5a:95:ab:65:b5:76:1d:dd:65:41:3f:cc:d1:a3:35: 5f:73:4e:31:85:33:f5:7e:22:f0:23:6a:5f:3a:01: ba:7f:1d:82:49:42:c1:fe:cf:43:63:03:fb:07:2f: f1:68:6a:b7:9d:47:47:24:84:db:9a:25:e4:b2:aa: 74:29:2b:e6:ec:07:b2:b9:74:6b:a7:67:0e:d4:7c: c7:ea:84:fc:69:d6:d1:ea:65:5a:2c:75:cf:e4:29: fb:23:3d:26:82:bb:9c:11:f9:8c:b9:54:34:5b:3b: f0:98:bc:91:b4:59:95:99:a0:33:05:36:2a:04:9f: f5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3B:2E:4C:D5:D3:62:68:12:FC:D4:A3:AA:EB:58:43:EF:4A:92:3B X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138997.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.103.16.0/23 155.117.7.0/24 155.117.77.0/24 155.117.229.0/24 Signature Algorithm: sha256WithRSAEncryption 25:fd:07:ae:6c:c8:ff:64:38:76:03:22:1e:75:8f:52:3f:0d: ac:bf:13:96:3f:3e:c0:e6:df:f0:f2:03:d2:d3:1d:20:70:64: 42:a3:a2:3b:04:7a:e1:03:74:6c:62:62:e1:7d:6b:3f:74:5e: 5f:a5:27:98:39:8d:a3:a8:f0:f9:9f:8a:92:d4:d0:6a:1c:af: 18:0b:1f:4c:93:df:4f:e1:fc:71:5a:42:bf:ac:17:c8:3b:c8: f5:55:43:ae:7f:71:84:71:0a:c6:49:59:51:d0:3e:99:82:34: 29:d6:25:53:b7:4f:69:9c:b2:40:14:6a:65:f3:4c:70:81:16: 61:35:d0:3a:0c:9b:51:d9:15:4d:3f:ee:07:97:89:0b:64:32: 12:0c:36:8b:c4:de:ab:34:22:d4:81:9d:69:f4:09:91:fc:98: 2e:2f:ad:3a:2d:fc:5b:c4:6a:f2:9f:2c:ba:85:f6:8a:ad:41: 1c:85:19:55:2d:18:5a:d3:98:3c:8b:d0:2e:b9:8d:13:30:37: 7a:8f:42:65:6c:b9:12:3a:6d:2e:d3:a2:03:de:3a:b1:71:d9: 82:1b:ba:c4:9b:c5:b3:83:3c:9e:47:6d:b4:83:d1:f0:c4:1f: bc:c5:22:10:57:61:70:d5:15:bf:cd:8e:7f:da:5d:76:c7:ba: e1:bc:f5:5c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUMehU+DaM3WBEULInwLc5X2OuEHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMTcxNzE5NDFaFw0yNzAxMTYxNzI0NDFaMDMxMTAvBgNV BAMTKDgwM0IyRTRDRDVEMzYyNjgxMkZDRDRBM0FBRUI1ODQzRUY0QTkyM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVbJdytmW3DTvSE/AOxDWYXigD EVznrBeK29x5c3qGXw9Qmd88VO/QUpE7oe0rzkDF7+BC4OyAEHGcDXtVk+28bLG9 566vhWQ7ybElrt18VTqofv1FMn+hz0FHTEUJoT9OJQdew8+3cvtZQqGfKsfFnFPq HKeZD0IX1vZrh1lpX1V8sO2mblqVq2W1dh3dZUE/zNGjNV9zTjGFM/V+IvAjal86 Abp/HYJJQsH+z0NjA/sHL/FoaredR0ckhNuaJeSyqnQpK+bsB7K5dGunZw7UfMfq hPxp1tHqZVosdc/kKfsjPSaCu5wR+Yy5VDRbO/CYvJG0WZWZoDMFNioEn/WlAgMB AAGjggIcMIICGDAdBgNVHQ4EFgQUgDsuTNXTYmgS/NSjqutYQ+9KkjswHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTM4OTk3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBkmcQ AwQAm3UHAwQAm3VNAwQAm3XlMA0GCSqGSIb3DQEBCwUAA4IBAQAl/QeubMj/ZDh2 AyIedY9SPw2svxOWPz7A5t/w8gPS0x0gcGRCo6I7BHrhA3RsYmLhfWs/dF5fpSeY OY2jqPD5n4qS1NBqHK8YCx9Mk99P4fxxWkK/rBfIO8j1VUOuf3GEcQrGSVlR0D6Z gjQp1iVTt09pnLJAFGpl80xwgRZhNdA6DJtR2RVNP+4Hl4kLZDISDDaLxN6rNCLU gZ1p9AmR/JguL606LfxbxGrynyy6hfaKrUEchRlVLRha05g8i9AuuY0TMDd6j0Jl bLkSOm0u06ID3jqxcdmCG7rEm8WzgzyeR220g9HwxB+8xSIQV2Fw1RW/zY5/2l12 x7rhvPVc -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:38 2026 by rpki-client