This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS150900.roa File: AS150900.roa (raw, json) Hash identifier: 6J6vtAyiNxlyHpdTJ9O0kl6KAquuSLVgMrR+P2vOM3c= Subject key identifier: 2A:4F:EB:79:C2:46:7C:F6:EB:D5:7E:2B:9F:E9:78:86:B5:56:55:B0 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 474A9147B0869BBE503D6DD8D98FBB47C2D69BCC Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS150900.roa Signing time: Mon 19 Jan 2026 16:16:16 +0000 ROA not before: Mon 19 Jan 2026 16:11:16 +0000 ROA not after: Mon 18 Jan 2027 16:16:16 +0000 asID: 150900 IP address blocks: 148.135.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:4a:91:47:b0:86:9b:be:50:3d:6d:d8:d9:8f:bb:47:c2:d6:9b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 19 16:11:16 2026 GMT Not After : Jan 18 16:16:16 2027 GMT Subject: CN=2A4FEB79C2467CF6EBD57E2B9FE97886B55655B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:77:3b:c7:89:4f:63:4f:29:87:9e:b7:fd:b5: ec:82:26:67:d3:f3:f3:98:cf:57:3c:5d:0b:ef:e5: ed:bf:6b:ea:9f:de:ef:ab:16:76:7f:0a:e0:3e:cf: 99:f6:31:2b:b2:74:4e:8b:51:8a:b8:35:9a:64:86: 87:7c:66:39:a2:8e:69:d9:4c:7f:57:d9:32:a8:8f: 18:c9:82:e0:2c:77:7d:c3:fd:e9:3c:d1:be:15:c4: cc:a2:e6:99:26:2f:a1:58:89:3d:1d:9a:2c:8c:1e: 78:a6:87:71:1f:e0:cb:20:06:e2:bc:d2:ba:00:0e: 83:1f:1e:bd:b2:c0:43:a2:22:0c:fe:0c:80:10:45: 7a:ac:a6:dd:f8:ce:a3:70:43:00:25:83:63:a0:83: fb:e7:bf:7b:cc:1b:9c:d6:bf:24:e4:53:0a:1f:11: 8c:06:30:f4:3c:49:e9:dd:24:7f:25:5a:f7:a4:3d: b0:0b:39:70:89:df:d9:25:c6:fe:0a:5b:59:68:63: b6:9d:db:20:b7:bd:89:6e:90:20:4b:20:12:3c:b0: 37:ef:fa:fd:a3:d3:7a:be:a0:1f:22:95:bb:4f:56: 91:d4:ed:37:a2:73:51:01:ed:75:38:04:b3:34:aa: aa:22:66:bc:2b:13:3d:c3:39:fe:6e:20:8c:99:a3: 7b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4F:EB:79:C2:46:7C:F6:EB:D5:7E:2B:9F:E9:78:86:B5:56:55:B0 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS150900.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.135.174.0/24 Signature Algorithm: sha256WithRSAEncryption 78:d0:a8:b4:ef:44:23:21:3c:d8:32:bc:66:ed:4c:0a:7e:0d: 13:b9:03:55:d4:1e:72:85:f4:bb:e5:95:ba:2d:d3:ec:6f:4d: a4:ad:cd:f0:3f:19:f9:9f:db:0c:f4:9b:15:ac:be:77:ad:36: 5d:6b:a5:4e:d8:df:7a:fa:a9:bf:dc:74:5f:de:63:cd:ee:76: 62:a5:d8:c7:e4:6c:9f:29:69:ad:0d:d6:1a:4c:f2:af:0e:e6: 6d:9a:78:81:0c:ac:5c:e5:b0:eb:6c:93:32:22:a0:64:f9:f3: 9f:17:e7:58:82:c2:90:b7:87:23:14:1b:f8:3a:f7:ce:8e:19: 48:8a:33:2e:57:ed:c6:07:f7:cb:b9:80:51:33:90:8d:dd:d0: e1:f7:82:2d:ba:d7:eb:c2:93:8c:4f:cf:2b:85:95:e2:d1:2b: 3c:8b:b2:b4:c6:b2:ca:e8:03:a0:b7:60:90:e1:2c:91:b4:57: e9:3b:b2:8d:58:a8:98:43:2c:95:9d:b6:4a:cb:4c:b8:02:9b: b5:81:e4:50:01:83:b8:6e:78:48:f3:f1:84:08:cb:c1:d3:d6: d8:ae:58:ff:b5:76:26:9e:ec:66:01:b3:b1:1e:34:e5:72:4b: a2:51:d6:31:c7:91:ea:59:a7:67:13:65:6a:c7:34:21:26:44: 95:91:80:31 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUR0qRR7CGm75QPW3Y2Y+7R8LWm8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMTkxNjExMTZaFw0yNzAxMTgxNjE2MTZaMDMxMTAvBgNV BAMTKDJBNEZFQjc5QzI0NjdDRjZFQkQ1N0UyQjlGRTk3ODg2QjU1NjU1QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpdzvHiU9jTymHnrf9teyCJmfT 8/OYz1c8XQvv5e2/a+qf3u+rFnZ/CuA+z5n2MSuydE6LUYq4NZpkhod8ZjmijmnZ TH9X2TKojxjJguAsd33D/ek80b4VxMyi5pkmL6FYiT0dmiyMHnimh3Ef4MsgBuK8 0roADoMfHr2ywEOiIgz+DIAQRXqspt34zqNwQwAlg2Ogg/vnv3vMG5zWvyTkUwof EYwGMPQ8SendJH8lWvekPbALOXCJ39klxv4KW1loY7ad2yC3vYlukCBLIBI8sDfv +v2j03q+oB8ilbtPVpHU7Teic1EB7XU4BLM0qqoiZrwrEz3DOf5uIIyZo3sPAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUKk/recJGfPbr1X4rn+l4hrVWVbAwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTUwOTAwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlIeu MA0GCSqGSIb3DQEBCwUAA4IBAQB40Ki070QjITzYMrxm7UwKfg0TuQNV1B5yhfS7 5ZW6LdPsb02krc3wPxn5n9sM9JsVrL53rTZda6VO2N96+qm/3HRf3mPN7nZipdjH 5GyfKWmtDdYaTPKvDuZtmniBDKxc5bDrbJMyIqBk+fOfF+dYgsKQt4cjFBv4OvfO jhlIijMuV+3GB/fLuYBRM5CN3dDh94ItutfrwpOMT88rhZXi0Ss8i7K0xrLK6AOg t2CQ4SyRtFfpO7KNWKiYQyyVnbZKy0y4Apu1geRQAYO4bnhI8/GECMvB09bYrlj/ tXYmnuxmAbOxHjTlckuiUdYxx5HqWadnE2VqxzQhJkSVkYAx -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:16 2026 by rpki-client