This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393942.roa File: AS393942.roa (raw, json) Hash identifier: sTmftqCdh7yXvpZZvx+y2SKFEYPU6q8rrO4F+IDIT2w= Subject key identifier: EB:5A:88:D6:AB:42:48:C2:D6:88:A3:79:65:3C:D8:D2:90:93:0D:62 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 796354BB6A424BBA2ECE7747762E5686FD13517C Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393942.roa Signing time: Fri 28 Nov 2025 00:02:20 +0000 ROA not before: Thu 27 Nov 2025 23:57:20 +0000 ROA not after: Fri 27 Nov 2026 00:02:20 +0000 asID: 393942 IP address blocks: 140.150.233.0/24 maxlen: 24 145.223.67.0/24 maxlen: 24 146.103.29.0/24 maxlen: 24 155.117.99.0/24 maxlen: 24 155.117.217.0/24 maxlen: 24 167.148.163.0/24 maxlen: 24 168.222.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:63:54:bb:6a:42:4b:ba:2e:ce:77:47:76:2e:56:86:fd:13:51:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 27 23:57:20 2025 GMT Not After : Nov 27 00:02:20 2026 GMT Subject: CN=EB5A88D6AB4248C2D688A379653CD8D290930D62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f9:78:3f:73:d3:df:d2:90:4e:c1:5d:7d:10: 94:c1:41:38:ee:d5:f6:3d:8c:d0:06:d8:4c:38:c8: b5:90:84:3b:fc:79:66:b8:c1:98:87:ec:3d:44:f3: 07:5a:84:1c:9c:64:f6:f3:f1:48:02:dc:0e:8d:96: df:39:9c:9a:e9:a5:8e:dc:2f:c7:22:b0:47:f6:00: fb:5d:d9:db:db:70:23:c4:95:42:6c:23:bd:4b:4b: 9a:05:82:11:1a:20:ca:14:8e:ab:25:9b:f0:fd:f4: fa:66:89:6f:37:f2:e2:01:97:7d:88:3b:8c:61:a3: bb:ca:85:33:c2:af:b3:6b:e7:a0:89:9e:53:51:7e: 65:ff:8d:4b:ef:c0:05:d7:88:87:e5:b3:dc:b0:92: d2:66:ec:1a:f5:ba:13:dd:5b:f3:1a:b9:4f:d2:13: 71:a4:a4:c9:fa:3a:e5:a4:03:ed:e6:15:2e:bf:0a: d8:61:c0:84:31:ae:92:39:7e:21:97:8c:bf:19:5b: c2:a0:3e:e9:d5:af:dc:88:75:23:1d:d2:30:19:66: d1:b5:21:8a:39:1e:a0:17:89:31:b8:7a:82:fe:a8: 21:69:e5:b6:ec:58:94:d7:ec:79:12:18:1b:af:d0: 44:e7:4b:de:ad:e1:7b:38:44:1e:20:65:e4:c0:8d: 27:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5A:88:D6:AB:42:48:C2:D6:88:A3:79:65:3C:D8:D2:90:93:0D:62 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS393942.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.150.233.0/24 145.223.67.0/24 146.103.29.0/24 155.117.99.0/24 155.117.217.0/24 167.148.163.0/24 168.222.6.0/24 Signature Algorithm: sha256WithRSAEncryption 35:73:d7:9c:ad:bb:03:d2:d6:62:24:8a:de:3a:0d:44:16:cf: d0:0a:f7:8c:59:09:8f:75:2d:1f:2b:00:65:c5:0f:65:2b:d6: f3:24:b7:47:9d:9a:a7:78:9e:45:bb:1b:47:03:ff:fc:0d:05: 62:c2:7f:e7:c0:b9:2c:e4:ac:e3:aa:e4:3a:24:9d:21:87:23: 71:48:6e:2e:74:4e:2f:71:fd:a0:18:90:22:44:58:53:dd:af: 2f:04:9b:cb:ab:c5:77:cf:20:07:38:91:e5:11:67:9a:e1:7d: ee:b3:c3:6d:8a:69:e6:1e:6a:fb:5f:06:76:fc:4f:c8:ce:4d: 37:2f:3c:80:f7:d4:be:bc:e9:b4:f0:30:9f:07:4d:98:be:8a: 45:21:ce:3e:39:2b:42:18:2a:b0:03:69:78:8c:47:c9:66:11: 6b:f7:c5:62:26:d4:7e:56:fc:cf:a6:58:c9:00:53:c8:11:f2: 6c:7c:92:9a:5c:8b:38:5b:f2:5f:12:36:38:71:01:fe:43:f2: 5f:a4:fa:0f:4b:ca:68:66:35:2d:30:91:83:02:1f:bb:db:48: 1f:46:97:74:31:e7:da:6f:62:0a:9d:4e:b3:74:53:77:91:16: 5b:5b:f4:1a:cd:61:24:e8:3a:dc:25:3c:13:79:cb:22:e4:79: a9:19:ba:ac -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUeWNUu2pCS7ouzndHdi5Whv0TUXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMjcyMzU3MjBaFw0yNjExMjcwMDAyMjBaMDMxMTAvBgNV BAMTKEVCNUE4OEQ2QUI0MjQ4QzJENjg4QTM3OTY1M0NEOEQyOTA5MzBENjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo+Xg/c9Pf0pBOwV19EJTBQTju 1fY9jNAG2Ew4yLWQhDv8eWa4wZiH7D1E8wdahBycZPbz8UgC3A6Nlt85nJrppY7c L8cisEf2APtd2dvbcCPElUJsI71LS5oFghEaIMoUjqslm/D99PpmiW838uIBl32I O4xho7vKhTPCr7Nr56CJnlNRfmX/jUvvwAXXiIfls9ywktJm7Br1uhPdW/MauU/S E3GkpMn6OuWkA+3mFS6/CthhwIQxrpI5fiGXjL8ZW8KgPunVr9yIdSMd0jAZZtG1 IYo5HqAXiTG4eoL+qCFp5bbsWJTX7HkSGBuv0ETnS96t4Xs4RB4gZeTAjScrAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQU61qI1qtCSMLWiKN5ZTzY0pCTDWIwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzkzOTQyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAjJbp AwQAkd9DAwQAkmcdAwQAm3VjAwQAm3XZAwQAp5SjAwQAqN4GMA0GCSqGSIb3DQEB CwUAA4IBAQA1c9ecrbsD0tZiJIreOg1EFs/QCveMWQmPdS0fKwBlxQ9lK9bzJLdH nZqneJ5FuxtHA//8DQViwn/nwLks5KzjquQ6JJ0hhyNxSG4udE4vcf2gGJAiRFhT 3a8vBJvLq8V3zyAHOJHlEWea4X3us8NtimnmHmr7XwZ2/E/Izk03LzyA99S+vOm0 8DCfB02YvopFIc4+OStCGCqwA2l4jEfJZhFr98ViJtR+VvzPpljJAFPIEfJsfJKa XIs4W/JfEjY4cQH+Q/JfpPoPS8poZjUtMJGDAh+720gfRpd0Mefab2IKnU6zdFN3 kRZbW/QazWEk6DrcJTwTecsi5HmpGbqs -----END CERTIFICATE-----Generated at Sat Dec 6 18:26:26 2025 by rpki-client