This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399486.roa File: AS399486.roa (raw, json) Hash identifier: SAFuanWBar47UaNBunZfXBgTkpaz3PXqW3ZU0xUit6M= Subject key identifier: 7C:68:AA:F6:F7:31:FA:75:C6:4D:2D:67:A1:7A:59:11:3E:3E:45:8F Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 45EB11EC04AD9EEEA2BCB657B0287BA67186DF36 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399486.roa Signing time: Wed 21 Jan 2026 06:00:34 +0000 ROA not before: Wed 21 Jan 2026 05:55:34 +0000 ROA not after: Wed 20 Jan 2027 06:00:34 +0000 asID: 399486 IP address blocks: 155.117.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:eb:11:ec:04:ad:9e:ee:a2:bc:b6:57:b0:28:7b:a6:71:86:df:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 21 05:55:34 2026 GMT Not After : Jan 20 06:00:34 2027 GMT Subject: CN=7C68AAF6F731FA75C64D2D67A17A59113E3E458F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dd:36:0a:24:98:d5:77:36:b4:b4:78:c3:e3: e1:cd:19:88:f5:d2:03:ee:2e:46:aa:2b:14:29:fb: 32:c2:a3:db:ec:bb:09:4b:76:0e:47:c5:7f:a6:aa: 3b:9d:30:79:95:46:68:8c:c8:55:c7:3b:43:59:81: 33:e9:1f:1a:46:36:1a:04:16:c0:d0:43:0c:cb:8d: dc:5f:8a:4c:ad:53:10:34:59:72:55:5f:a5:78:58: 0a:c7:5c:28:37:64:d0:aa:91:bb:83:25:0f:ca:ad: 54:14:0d:d7:5e:88:34:f1:f9:d3:f8:fe:a3:9f:83: a3:10:7d:2c:04:56:70:70:9d:2d:68:18:80:cb:61: 1e:d2:bd:b9:d3:32:c9:dd:d7:35:30:ed:fb:57:51: 91:e6:c5:0a:15:05:d5:37:84:46:ae:de:28:02:37: e5:23:c7:31:ca:6d:76:93:4a:80:cb:a7:be:20:a8: bd:56:b4:61:1f:34:e5:c3:53:f9:93:57:a2:9b:d7: 1a:dc:cf:f1:a8:77:4e:7f:08:01:e5:21:09:43:11: a5:d3:3e:4a:2e:cc:20:74:f3:cf:f6:6e:c0:d9:7a: 22:b8:56:90:50:55:86:74:fa:dd:12:b2:bb:f1:df: 8b:96:2c:90:52:c0:2f:09:a2:6f:0a:16:4f:2d:cf: 12:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:68:AA:F6:F7:31:FA:75:C6:4D:2D:67:A1:7A:59:11:3E:3E:45:8F X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399486.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.117.232.0/24 Signature Algorithm: sha256WithRSAEncryption 42:bc:e3:3d:46:1f:b9:db:41:dd:52:f3:37:15:4e:59:36:60: 20:a0:0f:8b:0e:37:0c:5c:db:9c:05:71:34:cd:dd:35:bc:36: 00:97:bf:c9:34:75:eb:6c:34:d7:f8:b9:66:c4:f8:84:d2:1e: d4:4c:c8:be:fa:0b:5b:c7:3c:c1:27:0c:2b:2b:1a:79:b8:48: 26:13:25:10:32:b6:4e:c0:8a:54:7a:5c:73:43:f9:c4:e2:7b: e3:00:85:b6:88:3b:86:01:fd:1e:7b:20:ae:e2:95:e1:d1:ce: 23:eb:c8:2d:8f:02:9b:df:9b:11:72:34:18:da:55:b8:e2:6f: 6e:33:2b:1d:a9:bd:53:57:88:a9:58:73:68:56:ff:61:0c:2d: 16:4d:c8:2c:7a:04:36:32:33:c4:02:13:28:d4:fe:fb:39:7c: de:79:a2:ef:b1:4b:aa:34:4f:e0:2e:f5:03:76:0f:fc:17:88: e6:50:4a:de:16:6e:05:d4:5d:fe:90:c9:df:0d:2c:59:9f:51: 89:16:a5:2b:c2:6d:8a:34:35:d3:69:2c:db:d7:7e:fa:6b:d5: ee:68:23:4d:4d:8b:dd:03:47:a3:d9:c1:a9:14:f1:90:f2:16: ef:0b:87:d0:0c:2c:10:35:f1:bd:dc:e4:d2:2d:13:c6:50:84: 4a:85:cd:17 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUResR7AStnu6ivLZXsCh7pnGG3zYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMjEwNTU1MzRaFw0yNzAxMjAwNjAwMzRaMDMxMTAvBgNV BAMTKDdDNjhBQUY2RjczMUZBNzVDNjREMkQ2N0ExN0E1OTExM0UzRTQ1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb3TYKJJjVdza0tHjD4+HNGYj1 0gPuLkaqKxQp+zLCo9vsuwlLdg5HxX+mqjudMHmVRmiMyFXHO0NZgTPpHxpGNhoE FsDQQwzLjdxfikytUxA0WXJVX6V4WArHXCg3ZNCqkbuDJQ/KrVQUDddeiDTx+dP4 /qOfg6MQfSwEVnBwnS1oGIDLYR7SvbnTMsnd1zUw7ftXUZHmxQoVBdU3hEau3igC N+UjxzHKbXaTSoDLp74gqL1WtGEfNOXDU/mTV6Kb1xrcz/God05/CAHlIQlDEaXT PkouzCB088/2bsDZeiK4VpBQVYZ0+t0Ssrvx34uWLJBSwC8Jom8KFk8tzxKtAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUfGiq9vcx+nXGTS1noXpZET4+RY8wHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzk5NDg2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAm3Xo MA0GCSqGSIb3DQEBCwUAA4IBAQBCvOM9Rh+520HdUvM3FU5ZNmAgoA+LDjcMXNuc BXE0zd01vDYAl7/JNHXrbDTX+LlmxPiE0h7UTMi++gtbxzzBJwwrKxp5uEgmEyUQ MrZOwIpUelxzQ/nE4nvjAIW2iDuGAf0eeyCu4pXh0c4j68gtjwKb35sRcjQY2lW4 4m9uMysdqb1TV4ipWHNoVv9hDC0WTcgsegQ2MjPEAhMo1P77OXzeeaLvsUuqNE/g LvUDdg/8F4jmUEreFm4F1F3+kMnfDSxZn1GJFqUrwm2KNDXTaSzb1376a9XuaCNN TYvdA0ej2cGpFPGQ8hbvC4fQDCwQNfG93OTSLRPGUIRKhc0X -----END CERTIFICATE-----Generated at Sun Jan 25 10:12:48 2026 by rpki-client