This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397006.roa File: AS397006.roa (raw, json) Hash identifier: lAr1YEecxG8zCZnmXU1X+fTsnxB6/WHcFNdnVMWRP7E= Subject key identifier: 87:62:B4:2B:5D:0F:95:BA:F1:D0:19:1A:84:A8:F6:64:4A:96:22:50 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 276E8864508C8B92748D1D2F425223425CA0977C Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397006.roa Signing time: Wed 21 Jan 2026 23:55:35 +0000 ROA not before: Wed 21 Jan 2026 23:50:35 +0000 ROA not after: Wed 20 Jan 2027 23:55:35 +0000 asID: 397006 IP address blocks: 150.241.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:6e:88:64:50:8c:8b:92:74:8d:1d:2f:42:52:23:42:5c:a0:97:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 21 23:50:35 2026 GMT Not After : Jan 20 23:55:35 2027 GMT Subject: CN=8762B42B5D0F95BAF1D0191A84A8F6644A962250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:b3:eb:03:51:0d:c4:9a:b0:09:11:aa:5f: d9:22:60:fe:8a:e4:73:3e:74:1d:6d:a2:e5:b4:ba: e3:3e:64:29:42:dd:a2:2a:bd:04:10:99:6a:c9:62: 93:ef:74:ae:bf:d7:c9:1b:9c:c2:e5:28:13:7c:25: a7:6e:29:7a:fb:27:9a:3e:c7:65:d2:b9:24:0e:57: 2a:84:de:83:9a:fc:3b:f9:80:ca:26:47:3e:06:bb: ce:13:9c:c9:fa:63:91:33:20:a2:9a:64:d2:5a:af: 43:64:a9:88:4e:22:3b:49:ce:a1:cb:ac:80:c3:a5: a4:88:b7:f2:ce:1e:e6:2c:35:a9:de:66:ca:b9:8c: a9:8f:1f:e0:7e:18:78:30:58:f5:4e:25:70:11:c7: 90:7c:2e:de:a3:b5:17:6c:7f:42:e3:ac:84:ac:7b: 97:2d:a0:d7:61:33:27:4b:5b:77:00:6b:f2:af:b7: 6a:d8:1e:63:21:4c:1e:ce:90:fd:39:5b:d9:13:5b: 86:5a:33:c1:bd:1d:4a:88:25:87:df:c1:d7:36:16: a4:d4:f0:07:be:93:6c:c4:12:75:bc:3a:4b:24:7d: 0a:0a:3d:6d:ef:4f:0f:3c:d2:0a:9f:75:ba:80:d0: d4:c7:66:c7:75:cc:3c:28:a6:53:81:ce:04:0c:0d: eb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:62:B4:2B:5D:0F:95:BA:F1:D0:19:1A:84:A8:F6:64:4A:96:22:50 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397006.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.241.202.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:ba:76:6d:6d:4c:85:ec:2a:25:d7:f9:2d:3b:26:1e:46:cf: 44:86:bb:dc:9f:12:f5:8f:a3:5e:d6:77:44:c3:d2:cc:83:eb: 1d:b0:ae:fc:a6:3a:a8:cf:f5:f6:9f:aa:7e:73:6d:2d:45:bb: 2f:4a:27:9e:73:7e:44:70:6c:79:63:67:d6:57:df:89:a4:5b: 04:a1:3b:5a:3f:a9:5d:fe:9c:0c:fb:73:d8:ab:bc:6b:40:7b: 9b:ac:2c:5a:ac:e0:44:03:00:40:af:77:0c:ab:5c:35:50:c2: 9b:6b:78:85:7a:65:7c:1d:0e:ef:86:c9:d3:18:17:2e:f7:1f: 56:c4:7b:c3:fe:2c:04:5a:6f:13:60:af:0e:2d:be:cd:3e:bb: 2e:a3:95:a4:0a:51:91:ae:52:3b:f5:48:be:c4:77:74:9b:f1: fa:17:04:37:de:98:d7:a0:7f:14:56:87:37:5d:b7:8a:33:d8: d1:ce:b5:ce:89:5f:63:ff:37:d0:0e:cd:4a:d7:3d:ba:11:b3: 76:99:80:05:17:6e:cf:57:7c:1e:c0:87:4a:c2:8b:df:98:90: 52:5b:2a:29:7f:4f:69:96:43:0e:3b:00:63:5e:18:d8:8a:1f: cb:28:f5:1e:94:66:73:a8:21:ce:36:ca:e4:73:01:a1:49:e2: 2b:7b:a0:cb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUJ26IZFCMi5J0jR0vQlIjQlygl3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMjEyMzUwMzVaFw0yNzAxMjAyMzU1MzVaMDMxMTAvBgNV BAMTKDg3NjJCNDJCNUQwRjk1QkFGMUQwMTkxQTg0QThGNjY0NEE5NjIyNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBRbPrA1ENxJqwCRGqX9kiYP6K 5HM+dB1touW0uuM+ZClC3aIqvQQQmWrJYpPvdK6/18kbnMLlKBN8JaduKXr7J5o+ x2XSuSQOVyqE3oOa/Dv5gMomRz4Gu84TnMn6Y5EzIKKaZNJar0NkqYhOIjtJzqHL rIDDpaSIt/LOHuYsNaneZsq5jKmPH+B+GHgwWPVOJXARx5B8Lt6jtRdsf0LjrISs e5ctoNdhMydLW3cAa/Kvt2rYHmMhTB7OkP05W9kTW4ZaM8G9HUqIJYffwdc2FqTU 8Ae+k2zEEnW8OkskfQoKPW3vTw880gqfdbqA0NTHZsd1zDwoplOBzgQMDev/AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUh2K0K10Plbrx0BkahKj2ZEqWIlAwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzk3MDA2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvHK MA0GCSqGSIb3DQEBCwUAA4IBAQCLunZtbUyF7Col1/ktOyYeRs9EhrvcnxL1j6Ne 1ndEw9LMg+sdsK78pjqoz/X2n6p+c20tRbsvSieec35EcGx5Y2fWV9+JpFsEoTta P6ld/pwM+3PYq7xrQHubrCxarOBEAwBAr3cMq1w1UMKba3iFemV8HQ7vhsnTGBcu 9x9WxHvD/iwEWm8TYK8OLb7NPrsuo5WkClGRrlI79Ui+xHd0m/H6FwQ33pjXoH8U Voc3XbeKM9jRzrXOiV9j/zfQDs1K1z26EbN2mYAFF27PV3wewIdKwovfmJBSWyop f09plkMOOwBjXhjYih/LKPUelGZzqCHONsrkcwGhSeIre6DL -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:38 2026 by rpki-client