This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205886.roa File: AS205886.roa (raw, json) Hash identifier: IaNw03LVBLC1a54NZ6+DZVIJ1XoXDAoWj4FhtYENQIY= Subject key identifier: 30:89:03:7D:08:52:03:8C:22:03:6C:87:0D:73:A3:CC:73:C0:1C:A1 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 7AE39DCD5FD46F702F8C692C0C8A283C55940789 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205886.roa Signing time: Thu 15 Jan 2026 09:39:32 +0000 ROA not before: Thu 15 Jan 2026 09:34:32 +0000 ROA not after: Thu 14 Jan 2027 09:39:32 +0000 asID: 205886 IP address blocks: 140.150.156.0/24 maxlen: 24 147.79.16.0/24 maxlen: 24 148.135.198.0/24 maxlen: 24 155.117.1.0/24 maxlen: 24 155.117.186.0/24 maxlen: 24 155.117.214.0/24 maxlen: 24 155.117.220.0/24 maxlen: 24 162.141.163.0/24 maxlen: 24 167.148.105.0/24 maxlen: 24 168.222.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e3:9d:cd:5f:d4:6f:70:2f:8c:69:2c:0c:8a:28:3c:55:94:07:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 15 09:34:32 2026 GMT Not After : Jan 14 09:39:32 2027 GMT Subject: CN=3089037D0852038C22036C870D73A3CC73C01CA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:92:ad:d9:83:50:f9:56:a1:8c:ee:f6:3c:96: a0:9f:5d:4b:5e:e7:a5:5d:5c:64:d9:80:5e:1c:41: 3f:0f:31:68:53:8c:3d:64:09:49:a8:34:7e:2f:c8: 9e:6d:c7:49:b6:e5:56:17:19:0a:9c:e0:34:dc:ae: 24:d9:6b:0b:d5:71:bb:4b:9f:21:46:e9:ea:b8:a8: 89:d8:2d:ba:ff:77:51:a1:d4:fd:e1:72:ff:2a:57: 41:d6:4a:d5:8f:1e:72:d5:53:a1:39:5d:63:90:43: de:58:ab:b6:38:19:ff:87:aa:4c:88:1e:4e:14:46: ae:96:84:a5:84:0b:2f:6f:8c:c5:cb:f8:3e:df:b3: 73:cd:16:5c:f0:36:39:ea:4c:a8:f7:b2:c4:24:01: 48:b2:a9:38:e7:43:23:09:3b:84:bb:27:9e:f3:29: b3:00:70:80:9a:cb:2d:3b:58:1e:39:81:57:2b:b1: 70:90:f6:a3:ca:9c:77:b4:cd:37:d8:3d:4f:ec:ea: 50:8f:6d:9d:bc:95:4a:b2:8f:0d:2c:1a:a6:f3:0d: 20:eb:6a:7a:f5:a7:e1:44:de:79:9b:7e:c8:89:47: ea:4b:18:d9:b9:b3:53:4b:fc:69:b7:da:a0:e8:fa: e6:40:4b:13:88:d3:af:43:33:93:7b:fb:ae:48:b1: 12:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:89:03:7D:08:52:03:8C:22:03:6C:87:0D:73:A3:CC:73:C0:1C:A1 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.150.156.0/24 147.79.16.0/24 148.135.198.0/24 155.117.1.0/24 155.117.186.0/24 155.117.214.0/24 155.117.220.0/24 162.141.163.0/24 167.148.105.0/24 168.222.12.0/24 Signature Algorithm: sha256WithRSAEncryption 33:8d:73:fd:ad:37:09:17:4a:f5:38:11:af:7a:e4:03:99:d6: 6f:fa:13:7d:3c:14:92:84:49:ab:32:8c:57:9e:3a:66:c8:e4: ac:ac:5a:da:b2:2c:57:07:3d:a5:cb:3e:a6:97:b2:06:f3:43: 88:93:ef:9a:2f:b6:da:b5:11:a4:0c:98:5f:41:fe:65:87:6d: 6f:2d:04:c0:f4:7e:33:10:49:7a:6c:fc:4c:24:ba:f6:74:6d: 1e:0a:65:ae:d3:28:d4:e3:c3:b3:ce:80:c9:6a:81:2e:ce:a1: 8d:58:0e:f7:af:1b:cc:53:37:97:33:85:87:92:c8:4f:ca:12: ed:94:88:1d:31:df:c6:a5:95:72:a7:75:1d:46:b4:b4:8e:f4: 20:b7:c1:05:1e:0e:59:33:7c:42:5d:30:c6:98:5a:df:f4:7c: d7:de:d0:db:d7:b1:3b:c3:8c:55:45:90:59:fc:8b:4e:24:e7: 85:81:29:9b:7d:ba:4b:49:1f:a5:19:09:9c:cf:03:f6:e5:c4: 93:4f:30:a5:28:1e:50:b0:a3:60:b5:89:27:89:6e:21:cb:3c: 38:a1:8b:9a:ef:09:30:48:be:9f:7c:0d:e2:64:9c:0c:b6:5b: 90:4a:eb:c8:6f:fa:15:f4:a9:28:2f:e4:be:a4:ec:9f:69:11: 21:05:10:d1 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUeuOdzV/Ub3AvjGksDIooPFWUB4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMTUwOTM0MzJaFw0yNzAxMTQwOTM5MzJaMDMxMTAvBgNV BAMTKDMwODkwMzdEMDg1MjAzOEMyMjAzNkM4NzBENzNBM0NDNzNDMDFDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnkq3Zg1D5VqGM7vY8lqCfXUte 56VdXGTZgF4cQT8PMWhTjD1kCUmoNH4vyJ5tx0m25VYXGQqc4DTcriTZawvVcbtL nyFG6eq4qInYLbr/d1Gh1P3hcv8qV0HWStWPHnLVU6E5XWOQQ95Yq7Y4Gf+HqkyI Hk4URq6WhKWECy9vjMXL+D7fs3PNFlzwNjnqTKj3ssQkAUiyqTjnQyMJO4S7J57z KbMAcICayy07WB45gVcrsXCQ9qPKnHe0zTfYPU/s6lCPbZ28lUqyjw0sGqbzDSDr anr1p+FE3nmbfsiJR+pLGNm5s1NL/Gm32qDo+uZASxOI069DM5N7+65IsRIjAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUMIkDfQhSA4wiA2yHDXOjzHPAHKEwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA1ODg2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAjJac AwQAk08QAwQAlIfGAwQAm3UBAwQAm3W6AwQAm3XWAwQAm3XcAwQAoo2jAwQAp5Rp AwQAqN4MMA0GCSqGSIb3DQEBCwUAA4IBAQAzjXP9rTcJF0r1OBGveuQDmdZv+hN9 PBSShEmrMoxXnjpmyOSsrFrasixXBz2lyz6ml7IG80OIk++aL7batRGkDJhfQf5l h21vLQTA9H4zEEl6bPxMJLr2dG0eCmWu0yjU48OzzoDJaoEuzqGNWA73rxvMUzeX M4WHkshPyhLtlIgdMd/GpZVyp3UdRrS0jvQgt8EFHg5ZM3xCXTDGmFrf9HzX3tDb 17E7w4xVRZBZ/ItOJOeFgSmbfbpLSR+lGQmczwP25cSTTzClKB5QsKNgtYkniW4h yzw4oYua7wkwSL6ffA3iZJwMtluQSuvIb/oV9KkoL+S+pOyfaREhBRDR -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:36 2026 by rpki-client