This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42689.roa File: AS42689.roa (raw, json) Hash identifier: te3XrGqkcJAFoDpJhrfLXFiwtnX+mCUnhjoJDSdI+K4= Subject key identifier: F6:6A:AE:E8:15:9E:37:69:8A:C2:A9:73:EC:BF:AA:9A:21:CF:21:2F Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 384AE1ECE74D4D4F1D66913CDE7FDD249839303D Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42689.roa Signing time: Mon 19 Jan 2026 16:16:10 +0000 ROA not before: Mon 19 Jan 2026 16:11:10 +0000 ROA not after: Mon 18 Jan 2027 16:16:10 +0000 asID: 42689 IP address blocks: 143.14.174.0/24 maxlen: 24 155.117.205.0/24 maxlen: 24 155.117.221.0/24 maxlen: 24 162.141.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:4a:e1:ec:e7:4d:4d:4f:1d:66:91:3c:de:7f:dd:24:98:39:30:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 19 16:11:10 2026 GMT Not After : Jan 18 16:16:10 2027 GMT Subject: CN=F66AAEE8159E37698AC2A973ECBFAA9A21CF212F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:4b:a6:e9:75:2f:d5:d2:27:40:c1:58:4d: 1e:93:0a:19:d7:8e:21:d8:e7:53:7a:f0:a8:a7:71: d4:9b:f4:99:d3:91:85:44:bd:4d:7e:0a:25:43:5a: c8:62:0f:77:1e:e5:2e:b5:05:91:49:5e:e9:24:9f: 26:e5:01:bc:38:10:b0:83:d7:94:db:f1:1f:c3:f7: ca:07:f9:65:b2:ab:b3:8c:f2:5e:78:25:c4:8d:05: 1f:bd:18:34:9a:68:bb:d5:81:4d:2b:ce:cd:61:f0: e2:ef:2a:7d:23:ba:a0:32:74:ce:2f:e2:90:72:00: 06:59:ad:90:0f:9e:39:de:bb:8b:71:8f:93:12:25: fb:b6:85:88:3a:3a:a1:37:45:15:d0:63:2f:d5:a0: a3:05:f1:cc:46:d4:0e:ef:48:5e:01:f0:1e:dd:12: 19:77:b5:7f:8b:d6:0d:65:24:c5:67:c7:81:5e:af: 07:5b:31:36:f0:4f:23:47:2b:d9:c3:ef:85:c4:b8: 5d:40:30:27:7e:62:4f:12:32:03:8b:cb:59:23:33: 3b:28:0d:78:e7:73:db:30:59:fb:1e:93:5f:8f:47: a0:b6:fe:46:44:1b:20:9f:37:98:7e:fe:b2:ae:56: c7:52:91:0c:9f:98:31:a6:dd:34:44:a6:b6:41:5e: 00:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6A:AE:E8:15:9E:37:69:8A:C2:A9:73:EC:BF:AA:9A:21:CF:21:2F X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42689.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.14.174.0/24 155.117.205.0/24 155.117.221.0/24 162.141.158.0/24 Signature Algorithm: sha256WithRSAEncryption 76:a9:cd:09:f1:9e:21:71:31:49:80:1d:7d:63:14:b2:64:c8: af:39:f6:07:71:b4:1e:01:b3:68:d6:41:7f:24:5c:ce:ad:4e: 16:4a:10:0c:e5:5e:87:77:91:31:b4:12:14:c3:0f:e5:c0:9f: bd:97:ed:78:52:a6:c8:1d:4e:97:c3:c0:41:dd:42:f5:b2:79: 31:f2:2c:3b:7c:fa:ec:a7:8a:2b:a3:72:3f:e8:55:d3:36:e0: 6b:a8:31:14:42:a8:62:d4:8f:75:d1:78:a0:f1:55:fe:16:12: 09:16:f5:be:5a:fe:17:8b:6d:0e:e8:d7:e5:8f:d1:1f:70:22: 3c:4c:9e:3d:4b:ac:a6:17:e0:53:f2:69:3d:66:cd:83:73:c0: b5:17:dd:c4:4e:b0:16:6d:d3:99:3b:80:4b:f5:e4:5d:90:3a: 89:61:be:e2:8b:ff:b1:fe:99:13:95:2c:f4:af:02:40:cf:04: 6f:64:ad:28:2c:ac:85:50:96:4f:76:2e:a0:f5:00:be:18:12: 8a:39:1d:9e:f6:3b:a4:df:f6:d9:7f:a1:a3:4d:31:2a:ad:03: 6d:30:33:f3:10:ef:ba:38:c2:b6:84:c1:fd:59:78:1a:77:46: f4:ae:7a:d9:67:44:82:2c:ed:39:9f:a0:91:fd:e6:bf:e0:f9: 27:ca:fa:7f -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgIUOErh7OdNTU8dZpE83n/dJJg5MD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMTkxNjExMTBaFw0yNzAxMTgxNjE2MTBaMDMxMTAvBgNV BAMTKEY2NkFBRUU4MTU5RTM3Njk4QUMyQTk3M0VDQkZBQTlBMjFDRjIxMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWLEum6XUv1dInQMFYTR6TChnX jiHY51N68KincdSb9JnTkYVEvU1+CiVDWshiD3ce5S61BZFJXukknyblAbw4ELCD 15Tb8R/D98oH+WWyq7OM8l54JcSNBR+9GDSaaLvVgU0rzs1h8OLvKn0juqAydM4v 4pByAAZZrZAPnjneu4txj5MSJfu2hYg6OqE3RRXQYy/VoKMF8cxG1A7vSF4B8B7d Ehl3tX+L1g1lJMVnx4FerwdbMTbwTyNHK9nD74XEuF1AMCd+Yk8SMgOLy1kjMzso DXjnc9swWfsek1+PR6C2/kZEGyCfN5h+/rKuVsdSkQyfmDGm3TREprZBXgBzAgMB AAGjggIbMIICFzAdBgNVHQ4EFgQU9mqu6BWeN2mKwqlz7L+qmiHPIS8wHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDI2ODkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBACPDq4D BACbdc0DBACbdd0DBACijZ4wDQYJKoZIhvcNAQELBQADggEBAHapzQnxniFxMUmA HX1jFLJkyK859gdxtB4Bs2jWQX8kXM6tThZKEAzlXod3kTG0EhTDD+XAn72X7XhS psgdTpfDwEHdQvWyeTHyLDt8+uyniiujcj/oVdM24GuoMRRCqGLUj3XReKDxVf4W EgkW9b5a/heLbQ7o1+WP0R9wIjxMnj1LrKYX4FPyaT1mzYNzwLUX3cROsBZt05k7 gEv15F2QOolhvuKL/7H+mROVLPSvAkDPBG9krSgsrIVQlk92LqD1AL4YEoo5HZ72 O6Tf9tl/oaNNMSqtA20wM/MQ77o4wraEwf1ZeBp3RvSuetlnRIIs7TmfoJH95r/g +SfK+n8= -----END CERTIFICATE-----Generated at Sun Jan 25 10:12:51 2026 by rpki-client