This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa File: AS401776.roa (raw, json) Hash identifier: pHYqm3mgMtJ+trxaKlI33ck05dQHLXWdGVqiw9XgLVc= Subject key identifier: F5:7C:2A:62:B4:B6:D7:01:E6:E9:7E:B6:AC:D9:DB:9A:5F:AC:2F:F4 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 210F6746A52C6945D6A023B223DFECB8A37495 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa Signing time: Fri 05 Dec 2025 13:49:00 +0000 ROA not before: Fri 05 Dec 2025 13:44:00 +0000 ROA not after: Fri 04 Dec 2026 13:49:00 +0000 asID: 401776 IP address blocks: 140.150.156.0/24 maxlen: 24 143.14.75.0/24 maxlen: 24 143.14.241.0/24 maxlen: 24 146.103.35.0/24 maxlen: 24 147.79.16.0/24 maxlen: 24 150.241.131.0/24 maxlen: 24 155.117.63.0/24 maxlen: 24 167.148.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0f:67:46:a5:2c:69:45:d6:a0:23:b2:23:df:ec:b8:a3:74:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 5 13:44:00 2025 GMT Not After : Dec 4 13:49:00 2026 GMT Subject: CN=F57C2A62B4B6D701E6E97EB6ACD9DB9A5FAC2FF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:07:92:f0:14:8f:82:3a:c2:91:d7:bb:83:e9: 60:fc:9f:3a:e0:ad:e6:e5:3d:22:9a:67:53:cc:15: c6:cf:f7:1e:a8:29:0e:c6:da:24:5c:dc:cb:c0:0c: 4b:e3:8b:33:00:9e:7c:57:9b:0e:31:9a:13:26:18: 41:d7:17:56:05:dd:5d:45:1f:15:f6:1e:37:ac:f8: 77:4f:f0:02:42:9d:df:0e:9c:52:e3:26:f3:48:75: d0:fe:72:47:22:8a:c6:ad:7a:42:29:36:6c:ee:36: b3:74:5b:76:27:1c:f0:ea:04:8d:9d:78:5e:12:26: 26:6a:a5:b5:84:f0:83:9a:55:ed:6f:0b:ca:a0:35: 66:d6:c3:c8:a2:62:b5:b6:19:2d:59:25:85:78:22: 8e:b0:06:07:c1:d7:d0:c2:b7:80:92:47:95:7c:0b: 32:fa:cf:99:5a:df:82:a3:08:c4:cd:f7:bb:2a:bd: ee:cc:67:bf:aa:3b:6e:fc:09:5c:75:47:4a:38:46: 47:94:eb:8f:28:40:90:52:af:3b:38:cf:8b:91:b8: ef:ce:9b:1f:80:c7:44:b3:1e:6a:4c:9f:69:7d:2b: 14:5a:92:05:19:ee:59:1a:42:92:78:36:1a:9a:65: ac:de:80:ec:61:94:ec:97:8e:b6:cc:da:2e:0a:a5: 3e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7C:2A:62:B4:B6:D7:01:E6:E9:7E:B6:AC:D9:DB:9A:5F:AC:2F:F4 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.150.156.0/24 143.14.75.0/24 143.14.241.0/24 146.103.35.0/24 147.79.16.0/24 150.241.131.0/24 155.117.63.0/24 167.148.175.0/24 Signature Algorithm: sha256WithRSAEncryption 20:af:5a:8d:30:68:b9:ad:b9:a2:44:aa:f6:fa:ac:32:8c:e7: 4a:3c:ff:ee:a6:35:f2:4f:f0:70:5c:62:e3:89:9c:98:f1:bb: 68:3f:89:90:0d:4e:ab:78:f9:f9:f1:83:df:95:ff:3f:4e:a9: ff:51:0d:84:1b:02:73:35:75:5b:08:be:db:4c:cf:67:3f:d9: 08:8a:05:82:cd:eb:42:73:26:9c:77:51:a8:de:39:86:26:8b: 34:d5:9a:bd:04:0a:59:ae:e3:a9:2b:c9:08:10:2d:f6:10:b4: 88:c5:80:eb:0a:e2:c5:be:7e:d4:a5:68:0d:ff:e1:c2:73:db: 9d:a0:29:5a:37:9b:84:97:e5:7f:5f:22:5a:92:d1:52:97:71: fe:b4:4f:38:0a:7b:72:51:c0:6f:32:88:12:a0:38:85:9f:76: 9b:13:d7:cf:39:80:48:28:c5:2b:43:a4:34:04:53:75:43:ab: c0:66:15:27:0a:dd:76:d3:1c:11:f4:50:a2:64:de:bd:70:fb: 71:e1:45:48:40:e0:d9:05:c3:23:70:0e:2c:61:ce:a4:75:83: ed:4a:7d:59:9d:35:6f:32:5b:13:82:db:40:16:1c:3a:b2:26: 1e:44:2f:94:17:05:4e:f0:91:d2:5b:dc:f3:5c:40:4d:8b:e4: 30:6e:18:aa -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgITIQ9nRqUsaUXWoCOyI9/suKN0lTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg0ZmMzMzZiZjlmM2RlNWNlNDE0MTRiZDE5NzE5NDVmNGIy NDZiZmNjMB4XDTI1MTIwNTEzNDQwMFoXDTI2MTIwNDEzNDkwMFowMzExMC8GA1UE AxMoRjU3QzJBNjJCNEI2RDcwMUU2RTk3RUI2QUNEOURCOUE1RkFDMkZGNDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALMHkvAUj4I6wpHXu4PpYPyfOuCt 5uU9IppnU8wVxs/3HqgpDsbaJFzcy8AMS+OLMwCefFebDjGaEyYYQdcXVgXdXUUf FfYeN6z4d0/wAkKd3w6cUuMm80h10P5yRyKKxq16Qik2bO42s3Rbdicc8OoEjZ14 XhImJmqltYTwg5pV7W8LyqA1ZtbDyKJitbYZLVklhXgijrAGB8HX0MK3gJJHlXwL MvrPmVrfgqMIxM33uyq97sxnv6o7bvwJXHVHSjhGR5TrjyhAkFKvOzjPi5G4786b H4DHRLMeakyfaX0rFFqSBRnuWRpCkng2GpplrN6A7GGU7JeOtszaLgqlPokCAwEA AaOCAjQwggIwMB0GA1UdDgQWBBT1fCpitLbXAebpfras2duaX6wv9DAfBgNVHSME GDAWgBRPwza/nz3lzkFBS9GXGUX0ska/zDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS8wOWJlM2FhZS1hZWExLTQxZGMtYjFiOS05NWFjNTkxODI0 NGQvMC80RkMzMzZCRjlGM0RFNUNFNDE0MTRCRDE5NzE5NDVGNEIyNDZCRkNDLmNy bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvVDhNMnY1ODk1YzVCUVV2Umx4bEY5TEpH djh3LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00 MWRjLWIxYjktOTVhYzU5MTgyNDRkLzAvQVM0MDE3NzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwSQYIKwYBBQUHAQcBAf8EOjA4MDYEAgABMDADBACMlpwD BACPDksDBACPDvEDBACSZyMDBACTTxADBACW8YMDBACbdT8DBACnlK8wDQYJKoZI hvcNAQELBQADggEBACCvWo0waLmtuaJEqvb6rDKM50o8/+6mNfJP8HBcYuOJnJjx u2g/iZANTqt4+fnxg9+V/z9Oqf9RDYQbAnM1dVsIvttMz2c/2QiKBYLN60JzJpx3 UajeOYYmizTVmr0EClmu46kryQgQLfYQtIjFgOsK4sW+ftSlaA3/4cJz252gKVo3 m4SX5X9fIlqS0VKXcf60TzgKe3JRwG8yiBKgOIWfdpsT1885gEgoxStDpDQEU3VD q8BmFScK3XbTHBH0UKJk3r1w+3HhRUhA4NkFwyNwDixhzqR1g+1KfVmdNW8yWxOC 20AWHDqyJh5EL5QXBU7wkdJb3PNcQE2L5DBuGKo= -----END CERTIFICATE-----Generated at Sat Dec 6 16:01:50 2025 by rpki-client