This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS19318.roa File: AS19318.roa (raw, json) Hash identifier: TRyz4QM0wzSydwP9T+rPZeJSDIvi5XT6np6Y4VKQBVI= Subject key identifier: E9:67:DD:1C:44:64:25:A5:21:05:15:A8:77:90:4A:28:11:52:99:50 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 5248C6A8CD9361E797C9B881D9F4C78B34F49DB4 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS19318.roa Signing time: Wed 21 Jan 2026 06:01:46 +0000 ROA not before: Wed 21 Jan 2026 05:56:46 +0000 ROA not after: Wed 20 Jan 2027 06:01:46 +0000 asID: 19318 IP address blocks: 146.103.11.0/24 maxlen: 24 150.241.203.0/24 maxlen: 24 167.148.41.0/24 maxlen: 24 167.148.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:48:c6:a8:cd:93:61:e7:97:c9:b8:81:d9:f4:c7:8b:34:f4:9d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 21 05:56:46 2026 GMT Not After : Jan 20 06:01:46 2027 GMT Subject: CN=E967DD1C446425A5210515A877904A2811529950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ff:c2:32:a7:5e:ae:43:8a:05:02:6c:54:db: 0d:b6:69:98:31:2c:a3:a0:b9:cb:ca:1f:43:ef:0d: 52:e9:3d:49:52:55:03:ba:89:9a:75:a8:b9:55:b3: c5:2f:aa:8a:90:65:52:65:51:46:30:26:64:ce:09: d3:a2:67:02:53:c0:ec:f0:8a:a5:f6:64:eb:93:8f: de:af:d5:8f:15:f2:eb:26:a0:0f:e7:87:dd:1e:ac: 8a:af:29:87:df:f7:17:5b:d4:89:f0:8d:02:67:fe: 87:84:44:19:2c:cb:15:f7:23:04:07:8f:1a:a0:ec: 61:75:04:e6:c7:39:e4:e3:e1:9b:3f:5d:64:75:a9: c7:fc:0c:af:f8:67:c2:f1:d8:f5:0e:0c:21:0f:ea: 32:b8:dc:9a:3d:c8:57:be:8f:67:de:17:23:da:5f: d5:60:7c:a2:85:d0:a7:75:c7:c0:80:13:b4:59:27: 78:cb:7b:17:a8:9d:4f:e8:9b:0b:9c:99:9a:b2:bb: a5:c4:65:05:7a:a2:90:f3:18:09:c2:1a:3c:26:56: e4:ee:c8:9d:1e:0e:d1:1f:61:37:0f:2d:3d:d2:37: 08:c4:24:c1:46:cc:25:60:2f:2d:25:cd:d3:4d:4a: e6:c2:7e:82:24:ce:f9:46:31:4e:ff:1b:fa:4c:85: 42:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:67:DD:1C:44:64:25:A5:21:05:15:A8:77:90:4A:28:11:52:99:50 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS19318.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.103.11.0/24 150.241.203.0/24 167.148.41.0/24 167.148.80.0/21 Signature Algorithm: sha256WithRSAEncryption ba:78:4c:6e:23:9e:95:e9:37:05:45:33:85:02:08:1d:ba:02: 9b:fb:04:92:95:12:59:dc:e0:49:18:ea:38:5e:ef:e2:8a:7f: e2:af:62:98:12:b6:c1:f7:40:83:e3:e3:74:a9:6d:74:8d:b2: c0:7d:45:b1:5d:5a:37:cc:6c:4a:7c:67:e5:54:5a:ed:1f:a1: 05:a2:80:41:91:5b:ef:7d:75:95:a8:fe:94:11:1d:dd:dc:b0: b7:14:24:f6:47:53:2b:ec:05:8c:82:02:bb:3e:c6:e5:51:44: 6a:48:f6:51:a0:c9:89:06:ba:3b:8b:e3:c2:1f:bc:59:91:d5: 93:99:68:43:e1:88:c0:a1:b3:1a:a1:b3:0e:36:68:c9:d0:64: 4b:fe:77:8d:2e:31:68:01:4b:48:fb:d2:9d:42:8d:b7:62:12: 65:e1:7d:49:2b:77:15:8c:fd:5c:52:08:1e:10:77:7e:c6:e9: 91:cc:85:f4:00:42:e2:eb:37:69:f1:46:82:d9:46:b5:ad:8f: ef:32:d9:b2:65:be:17:ab:ed:9a:83:b0:24:d1:ba:13:01:57: b1:f7:e3:ca:ec:5d:47:c0:cc:e7:31:ac:d7:1d:d3:46:4c:3e: 15:44:1a:65:0b:91:fd:58:5a:de:de:7a:bf:a4:f1:fe:c2:a2: 68:6a:9d:7b -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgIUUkjGqM2TYeeXybiB2fTHizT0nbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMjEwNTU2NDZaFw0yNzAxMjAwNjAxNDZaMDMxMTAvBgNV BAMTKEU5NjdERDFDNDQ2NDI1QTUyMTA1MTVBODc3OTA0QTI4MTE1Mjk5NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe/8Iyp16uQ4oFAmxU2w22aZgx LKOgucvKH0PvDVLpPUlSVQO6iZp1qLlVs8UvqoqQZVJlUUYwJmTOCdOiZwJTwOzw iqX2ZOuTj96v1Y8V8usmoA/nh90erIqvKYff9xdb1InwjQJn/oeERBksyxX3IwQH jxqg7GF1BObHOeTj4Zs/XWR1qcf8DK/4Z8Lx2PUODCEP6jK43Jo9yFe+j2feFyPa X9VgfKKF0Kd1x8CAE7RZJ3jLexeonU/omwucmZqyu6XEZQV6opDzGAnCGjwmVuTu yJ0eDtEfYTcPLT3SNwjEJMFGzCVgLy0lzdNNSubCfoIkzvlGMU7/G/pMhUKjAgMB AAGjggIbMIICFzAdBgNVHQ4EFgQU6WfdHERkJaUhBRWod5BKKBFSmVAwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTkzMTgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBACSZwsD BACW8csDBACnlCkDBAOnlFAwDQYJKoZIhvcNAQELBQADggEBALp4TG4jnpXpNwVF M4UCCB26Apv7BJKVElnc4EkY6jhe7+KKf+KvYpgStsH3QIPj43SpbXSNssB9RbFd WjfMbEp8Z+VUWu0foQWigEGRW+99dZWo/pQRHd3csLcUJPZHUyvsBYyCArs+xuVR RGpI9lGgyYkGujuL48IfvFmR1ZOZaEPhiMChsxqhsw42aMnQZEv+d40uMWgBS0j7 0p1CjbdiEmXhfUkrdxWM/VxSCB4Qd37G6ZHMhfQAQuLrN2nxRoLZRrWtj+8y2bJl vher7ZqDsCTRuhMBV7H348rsXUfAzOcxrNcd00ZMPhVEGmULkf1YWt7eer+k8f7C omhqnXs= -----END CERTIFICATE-----Generated at Sun Jan 25 07:29:14 2026 by rpki-client