This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS54252.roa File: AS54252.roa (raw, json) Hash identifier: q8XPkJrjHvUc17hbIKTuS2ipBhysCgtXpB5EIQSBd0M= Subject key identifier: F9:80:81:95:67:62:B5:1F:2B:41:29:1D:74:EF:37:0E:17:A9:A3:E4 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 498CC1A9C2D27A76D2AA53C46DBCA65F8BBE34D3 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS54252.roa Signing time: Thu 15 Jan 2026 00:06:38 +0000 ROA not before: Thu 15 Jan 2026 00:01:38 +0000 ROA not after: Thu 14 Jan 2027 00:06:38 +0000 asID: 54252 IP address blocks: 143.14.188.0/24 maxlen: 24 147.79.2.0/24 maxlen: 24 150.241.136.0/24 maxlen: 24 155.117.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:8c:c1:a9:c2:d2:7a:76:d2:aa:53:c4:6d:bc:a6:5f:8b:be:34:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 15 00:01:38 2026 GMT Not After : Jan 14 00:06:38 2027 GMT Subject: CN=F98081956762B51F2B41291D74EF370E17A9A3E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:da:70:84:66:d4:b4:45:23:f0:e2:b6:59:f6: ce:01:a9:a5:fc:45:f1:d8:8a:36:d1:a9:0d:ce:87: 86:87:81:fa:e8:11:41:1c:29:f0:11:ca:f6:c0:81: 93:f4:fc:9d:ab:14:a5:54:a7:13:78:17:b9:58:b7: b4:5a:7d:8a:62:4b:2a:08:cc:26:53:61:d5:28:6e: 9e:d6:0e:27:28:36:57:38:06:91:74:4b:c8:97:78: f6:57:62:16:8f:e6:ad:8e:6e:22:85:9a:f3:83:1c: d8:50:fa:f8:be:4d:7e:ba:28:f0:1a:68:fa:3b:9a: a9:74:b7:04:7d:a8:6c:60:00:1e:45:3e:ec:3b:2b: e4:7f:8f:31:96:d7:fb:9a:f9:16:0a:ff:f0:fb:d8: 2b:4a:4d:31:2f:8c:8f:2a:66:21:4e:3b:ad:ea:d9: a6:ba:98:19:d0:d2:b9:bb:f7:3b:d6:42:97:61:fd: c2:62:47:03:5e:cf:04:a8:9a:bc:20:2b:fc:32:57: d4:c0:08:15:c1:ee:fc:b6:3d:f0:94:81:d5:6c:fc: e3:3a:27:db:2b:8a:0b:0a:98:bf:9a:50:64:79:73: 73:6d:b7:df:f4:60:1e:7d:0e:70:6b:69:2c:0f:d3: e0:2f:07:fd:0d:21:e8:d2:29:22:96:31:bc:c2:9d: 09:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:80:81:95:67:62:B5:1F:2B:41:29:1D:74:EF:37:0E:17:A9:A3:E4 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS54252.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.14.188.0/24 147.79.2.0/24 150.241.136.0/24 155.117.81.0/24 Signature Algorithm: sha256WithRSAEncryption 19:65:b5:67:4f:2a:c9:c3:5b:5a:7a:10:42:72:76:de:bd:9d: 31:64:36:f4:e4:9b:98:51:a3:7d:19:c5:4f:be:48:32:9e:02: c0:d9:eb:45:ba:34:4e:ab:07:58:70:a8:fb:9a:91:11:7f:c0: 4c:6a:1a:c5:da:00:9a:24:40:1f:b5:20:e2:c9:df:23:90:4a: 32:68:44:46:a1:ca:66:ed:84:f5:fb:fd:f1:eb:aa:44:54:65: d8:04:c0:06:bc:47:1e:a1:ed:3e:40:22:f3:9c:7d:95:3d:ce: 81:c2:30:cb:3d:00:95:37:7b:f2:ae:13:e0:f7:54:d5:e4:54: 31:55:09:72:75:74:52:ce:77:af:de:0d:bd:91:05:ed:30:a3: dd:ed:89:b2:a1:45:e2:cd:1b:7d:6c:9a:02:ed:38:85:ea:16: 34:9b:b3:2b:2a:0e:49:8c:39:54:3b:4c:e5:0f:02:00:bd:da: 91:a1:c5:f3:29:b1:d8:d8:28:84:b1:53:1a:bc:85:a0:b1:17: 1e:2e:f5:a9:36:b0:15:36:c7:c5:f9:63:bb:ca:62:57:58:bb: 47:08:fe:45:da:07:6b:5c:11:dd:85:14:89:73:51:5b:9b:b5: f5:ce:a0:78:ae:8c:84:06:6b:ed:3d:e5:6b:09:e0:b1:11:a1: fa:4a:44:8e -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgIUSYzBqcLSenbSqlPEbbymX4u+NNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMTUwMDAxMzhaFw0yNzAxMTQwMDA2MzhaMDMxMTAvBgNV BAMTKEY5ODA4MTk1Njc2MkI1MUYyQjQxMjkxRDc0RUYzNzBFMTdBOUEzRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ2nCEZtS0RSPw4rZZ9s4BqaX8 RfHYijbRqQ3Oh4aHgfroEUEcKfARyvbAgZP0/J2rFKVUpxN4F7lYt7RafYpiSyoI zCZTYdUobp7WDicoNlc4BpF0S8iXePZXYhaP5q2ObiKFmvODHNhQ+vi+TX66KPAa aPo7mql0twR9qGxgAB5FPuw7K+R/jzGW1/ua+RYK//D72CtKTTEvjI8qZiFOO63q 2aa6mBnQ0rm79zvWQpdh/cJiRwNezwSomrwgK/wyV9TACBXB7vy2PfCUgdVs/OM6 J9srigsKmL+aUGR5c3Ntt9/0YB59DnBraSwP0+AvB/0NIejSKSKWMbzCnQmLAgMB AAGjggIbMIICFzAdBgNVHQ4EFgQU+YCBlWditR8rQSkddO83Dhepo+QwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNTQyNTIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBACPDrwD BACTTwIDBACW8YgDBACbdVEwDQYJKoZIhvcNAQELBQADggEBABlltWdPKsnDW1p6 EEJydt69nTFkNvTkm5hRo30ZxU++SDKeAsDZ60W6NE6rB1hwqPuakRF/wExqGsXa AJokQB+1IOLJ3yOQSjJoREahymbthPX7/fHrqkRUZdgEwAa8Rx6h7T5AIvOcfZU9 zoHCMMs9AJU3e/KuE+D3VNXkVDFVCXJ1dFLOd6/eDb2RBe0wo93tibKhReLNG31s mgLtOIXqFjSbsysqDkmMOVQ7TOUPAgC92pGhxfMpsdjYKISxUxq8haCxFx4u9ak2 sBU2x8X5Y7vKYldYu0cI/kXaB2tcEd2FFIlzUVubtfXOoHiujIQGa+095WsJ4LER ofpKRI4= -----END CERTIFICATE-----Generated at Sun Jan 25 07:29:18 2026 by rpki-client