This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS398547.roa File: AS398547.roa (raw, json) Hash identifier: KQic+i+pH+ptgrnLgNcZiGbgC4oJgPdOOi/rjfjXu9k= Subject key identifier: D7:12:29:47:AF:A4:1F:0B:83:33:E7:F6:B5:92:A8:C5:17:BA:70:CA Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 1A31CC3AF83535F6CE6741EB916AD0C8423CF9D5 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS398547.roa Signing time: Sun 18 Jan 2026 21:12:00 +0000 ROA not before: Sun 18 Jan 2026 21:07:00 +0000 ROA not after: Sun 17 Jan 2027 21:12:00 +0000 asID: 398547 IP address blocks: 167.148.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:31:cc:3a:f8:35:35:f6:ce:67:41:eb:91:6a:d0:c8:42:3c:f9:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 18 21:07:00 2026 GMT Not After : Jan 17 21:12:00 2027 GMT Subject: CN=D7122947AFA41F0B8333E7F6B592A8C517BA70CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bd:5c:e8:01:38:6e:bb:38:30:80:09:b9:02: 9d:47:b4:24:dc:6b:16:e4:3a:e7:af:51:41:e7:6e: 23:ea:b7:5a:24:df:62:eb:ab:b3:a7:d9:98:f4:ae: f4:99:23:b8:b8:24:7e:6f:5a:c3:07:01:44:cf:d5: 81:32:cd:6b:b1:5f:0f:a5:7d:db:01:f1:f8:f5:ab: b1:17:35:aa:2c:98:8c:64:d7:8b:d5:91:64:3c:81: 8b:e0:ba:8b:63:04:0f:4f:4c:14:d9:6c:b1:9f:42: ce:61:cf:a9:8f:e8:8c:eb:2a:89:11:d4:c4:64:7c: 74:36:e1:01:a9:ae:b4:3c:71:3f:d2:92:c7:85:cc: 32:c5:83:a5:0a:38:d0:bb:80:f2:60:db:17:39:d0: 40:4f:66:2a:75:4a:ee:bd:d8:0d:56:2e:15:f1:a5: 37:1f:82:11:f4:15:8c:79:d9:07:25:4e:fb:d1:27: 86:bb:18:2d:ed:40:75:28:fd:1b:13:5b:86:5a:90: e9:c8:49:d2:40:af:fb:25:e8:d2:b9:b8:96:76:e3: 1c:81:db:74:43:7b:55:e8:74:be:cd:b6:9e:d8:e7: e7:ac:1f:c0:be:0f:34:f0:8f:64:70:9a:7e:de:6c: d4:48:89:17:72:17:8a:cd:3b:74:d1:25:8d:6d:c2: 5d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:12:29:47:AF:A4:1F:0B:83:33:E7:F6:B5:92:A8:C5:17:BA:70:CA X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS398547.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.148.0.0/24 Signature Algorithm: sha256WithRSAEncryption 89:98:25:04:0f:d7:38:3b:66:00:01:1a:fe:ea:49:79:e6:21: 79:1e:46:1c:4c:97:b7:fc:af:b1:e2:45:32:e9:bf:15:7a:84: ef:9a:aa:06:37:9c:52:60:37:89:49:4b:ff:4a:b5:53:42:ca: 33:a9:ab:1f:7a:f0:e3:60:3a:a2:ec:5c:fb:0a:97:81:63:87: 69:bd:f8:6a:23:cb:c5:96:8a:52:20:44:dd:46:be:df:20:42: ae:bb:0b:a0:66:bc:fe:eb:5d:51:b7:4c:1f:39:98:b2:9d:c7: ef:7a:68:bd:54:4f:8e:f0:89:12:52:fe:17:f8:3e:66:51:9d: ce:48:18:6d:fe:f3:ab:63:d6:89:6b:f0:ff:2b:15:14:0c:26: 6d:68:8b:cf:19:27:f4:81:dd:30:32:56:33:0e:68:07:60:10: 44:42:0c:38:46:a1:94:f0:52:6a:7e:7a:4b:39:e2:a0:f9:9f: ef:37:7c:e3:28:09:85:a5:91:32:24:c1:91:77:23:ab:d6:ba: 83:1c:25:fb:dd:03:83:c7:ae:72:23:04:87:f8:01:15:58:3f: 29:45:55:6f:8c:67:57:58:b1:09:1d:2e:5c:74:ef:b2:eb:90: cd:72:3a:5a:c5:3b:c2:83:fe:e6:18:b8:c9:19:8b:fd:1b:fc: 71:7c:be:29 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUGjHMOvg1NfbOZ0HrkWrQyEI8+dUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMTgyMTA3MDBaFw0yNzAxMTcyMTEyMDBaMDMxMTAvBgNV BAMTKEQ3MTIyOTQ3QUZBNDFGMEI4MzMzRTdGNkI1OTJBOEM1MTdCQTcwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTvVzoAThuuzgwgAm5Ap1HtCTc axbkOuevUUHnbiPqt1ok32Lrq7On2Zj0rvSZI7i4JH5vWsMHAUTP1YEyzWuxXw+l fdsB8fj1q7EXNaosmIxk14vVkWQ8gYvguotjBA9PTBTZbLGfQs5hz6mP6IzrKokR 1MRkfHQ24QGprrQ8cT/SkseFzDLFg6UKONC7gPJg2xc50EBPZip1Su692A1WLhXx pTcfghH0FYx52QclTvvRJ4a7GC3tQHUo/RsTW4ZakOnISdJAr/sl6NK5uJZ24xyB 23RDe1XodL7Ntp7Y5+esH8C+DzTwj2Rwmn7ebNRIiRdyF4rNO3TRJY1twl2BAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU1xIpR6+kHwuDM+f2tZKoxRe6cMowHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzk4NTQ3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp5QA MA0GCSqGSIb3DQEBCwUAA4IBAQCJmCUED9c4O2YAARr+6kl55iF5HkYcTJe3/K+x 4kUy6b8VeoTvmqoGN5xSYDeJSUv/SrVTQsozqasfevDjYDqi7Fz7CpeBY4dpvfhq I8vFlopSIETdRr7fIEKuuwugZrz+611Rt0wfOZiyncfvemi9VE+O8IkSUv4X+D5m UZ3OSBht/vOrY9aJa/D/KxUUDCZtaIvPGSf0gd0wMlYzDmgHYBBEQgw4RqGU8FJq fnpLOeKg+Z/vN3zjKAmFpZEyJMGRdyOr1rqDHCX73QODx65yIwSH+AEVWD8pRVVv jGdXWLEJHS5cdO+y65DNcjpaxTvCg/7mGLjJGYv9G/xxfL4p -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:27 2026 by rpki-client