This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393942.roa File: AS393942.roa (raw, json) Hash identifier: B1xw+oLnD8g9gxtzdEMYs58OTJKxumISU9GOEu2QwtI= Subject key identifier: F4:43:34:BD:EC:BA:A1:01:C6:03:A3:2D:33:F7:2F:7F:D2:46:39:C5 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 6FF8CC8DA51B91B62E4BA85C98542B9C864576E2 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393942.roa Signing time: Sat 24 Jan 2026 02:37:35 +0000 ROA not before: Sat 24 Jan 2026 02:32:35 +0000 ROA not after: Sat 23 Jan 2027 02:37:35 +0000 asID: 393942 IP address blocks: 140.150.233.0/24 maxlen: 24 145.223.67.0/24 maxlen: 24 146.103.29.0/24 maxlen: 24 155.117.217.0/24 maxlen: 24 167.148.163.0/24 maxlen: 24 168.222.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f8:cc:8d:a5:1b:91:b6:2e:4b:a8:5c:98:54:2b:9c:86:45:76:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 24 02:32:35 2026 GMT Not After : Jan 23 02:37:35 2027 GMT Subject: CN=F44334BDECBAA101C603A32D33F72F7FD24639C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:67:0a:f7:24:b8:51:cb:93:4a:ef:cc:9a:ec: fa:2f:fd:84:37:02:ed:cb:28:47:90:3e:60:dd:16: 14:9a:df:e6:5c:89:be:8e:38:12:2f:b2:b0:00:f3: 0a:bf:85:7f:03:08:14:d9:19:8e:50:b4:88:81:93: 33:9a:ed:19:54:4c:d4:5c:a7:1d:ea:3b:52:d8:c0: c9:cb:17:f6:c4:6a:41:cf:9c:5d:51:2d:e4:a3:05: 8d:9f:6e:92:0e:66:1c:2d:78:3e:7b:9b:b4:5e:cb: 62:b8:31:ac:71:9a:ed:42:9b:f5:d5:74:3a:72:d8: 0e:be:0e:ed:5e:98:cf:8e:11:27:50:ff:06:63:48: 65:98:83:a0:2b:4e:9c:b1:40:e8:37:0a:ef:ee:c6: e1:22:fa:1c:96:4d:bc:e8:71:c5:fd:75:61:3a:b5: 82:45:f6:ec:39:6f:53:aa:14:59:3d:f3:14:5a:79: c2:94:45:ad:fb:b5:ef:b0:b0:a0:45:31:40:68:5d: 92:65:7e:57:b7:23:9a:ca:e5:2a:93:4d:f6:5e:ec: cc:c4:64:c6:7e:d5:83:bb:1b:c2:3e:d1:ce:ae:f4: ae:fb:38:d6:21:9a:58:b2:f7:07:44:36:72:12:96: ed:71:ee:bf:f5:46:a9:40:62:02:d9:0d:24:e1:33: 18:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:43:34:BD:EC:BA:A1:01:C6:03:A3:2D:33:F7:2F:7F:D2:46:39:C5 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393942.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.150.233.0/24 145.223.67.0/24 146.103.29.0/24 155.117.217.0/24 167.148.163.0/24 168.222.6.0/24 Signature Algorithm: sha256WithRSAEncryption 12:9d:7d:5f:2c:ce:1c:86:cf:e0:8f:bb:74:08:10:1b:1b:3c: f5:21:25:ef:7e:4d:1b:87:f6:64:64:92:42:8a:85:72:6d:57: 7c:f3:a6:db:46:eb:d1:08:eb:e9:94:2e:15:18:74:74:a1:ed: 7e:cf:2b:28:02:5a:5a:de:cc:8c:29:ed:8d:3b:59:65:4e:f1: 17:6f:77:77:e6:8d:55:d2:87:0c:be:75:a7:0f:55:a4:15:0f: a3:7a:13:4f:f1:70:20:2e:d7:d9:a1:d8:8e:c7:f0:f2:8a:11: e4:f2:0f:06:14:af:3a:c8:d3:f1:8c:3b:ae:d2:1b:f8:e3:71: e1:bc:56:df:75:78:4c:a0:1b:a5:df:8d:4a:55:97:08:94:0a: fa:a3:22:dc:8e:ca:16:ca:7f:85:ca:db:26:c5:0b:ae:e2:51: e1:dd:c9:14:4b:20:1a:ad:e8:c4:c8:dc:f1:f5:ea:59:ec:42: e4:eb:2f:86:b0:05:19:8c:c1:ad:13:0c:82:d2:99:5b:35:e6: 72:d6:fd:b6:25:b9:23:36:83:56:4a:59:3f:d7:ce:4d:cd:2f: 6a:17:dc:04:27:7b:83:62:29:ee:06:87:f8:29:b5:bc:d5:4c: 72:c4:36:5a:2c:63:03:41:45:73:cd:73:47:ab:28:c0:52:a1: c8:23:6e:d2 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUb/jMjaUbkbYuS6hcmFQrnIZFduIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMjQwMjMyMzVaFw0yNzAxMjMwMjM3MzVaMDMxMTAvBgNV BAMTKEY0NDMzNEJERUNCQUExMDFDNjAzQTMyRDMzRjcyRjdGRDI0NjM5QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtZwr3JLhRy5NK78ya7Pov/YQ3 Au3LKEeQPmDdFhSa3+Zcib6OOBIvsrAA8wq/hX8DCBTZGY5QtIiBkzOa7RlUTNRc px3qO1LYwMnLF/bEakHPnF1RLeSjBY2fbpIOZhwteD57m7Rey2K4Maxxmu1Cm/XV dDpy2A6+Du1emM+OESdQ/wZjSGWYg6ArTpyxQOg3Cu/uxuEi+hyWTbzoccX9dWE6 tYJF9uw5b1OqFFk98xRaecKURa37te+wsKBFMUBoXZJlfle3I5rK5SqTTfZe7MzE ZMZ+1YO7G8I+0c6u9K77ONYhmliy9wdENnISlu1x7r/1RqlAYgLZDSThMxgFAgMB AAGjggIoMIICJDAdBgNVHQ4EFgQU9EM0vey6oQHGA6MtM/cvf9JGOcUwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzkzOTQyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAjJbp AwQAkd9DAwQAkmcdAwQAm3XZAwQAp5SjAwQAqN4GMA0GCSqGSIb3DQEBCwUAA4IB AQASnX1fLM4chs/gj7t0CBAbGzz1ISXvfk0bh/ZkZJJCioVybVd886bbRuvRCOvp lC4VGHR0oe1+zysoAlpa3syMKe2NO1llTvEXb3d35o1V0ocMvnWnD1WkFQ+jehNP 8XAgLtfZodiOx/DyihHk8g8GFK86yNPxjDuu0hv443HhvFbfdXhMoBul341KVZcI lAr6oyLcjsoWyn+FytsmxQuu4lHh3ckUSyAarejEyNzx9epZ7ELk6y+GsAUZjMGt EwyC0plbNeZy1v22JbkjNoNWSlk/185NzS9qF9wEJ3uDYinuBof4KbW81UxyxDZa LGMDQUVzzXNHqyjAUqHII27S -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:25 2026 by rpki-client