This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS59432.roa File: AS59432.roa (raw, json) Hash identifier: Nj4KmlG20zwNSaaINVf5zBcXxZ5bsvoYALGdIfa3Yjs= Subject key identifier: 41:97:84:52:E8:4D:EB:DD:4B:7A:0A:07:30:B2:49:5B:CD:52:7D:1C Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 247E1639ACEB31DABEFED76D673E8EECCEB5589C Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS59432.roa Signing time: Thu 22 Jan 2026 10:36:01 +0000 ROA not before: Thu 22 Jan 2026 10:31:01 +0000 ROA not after: Thu 21 Jan 2027 10:36:01 +0000 asID: 59432 IP address blocks: 143.14.133.0/24 maxlen: 24 155.117.137.0/24 maxlen: 24 167.148.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:7e:16:39:ac:eb:31:da:be:fe:d7:6d:67:3e:8e:ec:ce:b5:58:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 22 10:31:01 2026 GMT Not After : Jan 21 10:36:01 2027 GMT Subject: CN=41978452E84DEBDD4B7A0A0730B2495BCD527D1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:86:1a:69:7f:b3:c8:5b:28:d6:1f:10:94:35: c3:d7:54:0e:d5:39:bb:39:bd:01:e6:71:64:c1:60: fa:4b:18:d5:cd:b5:ed:8d:47:bc:8a:67:04:6f:d2: c1:83:7c:7b:a2:d9:87:49:ca:f2:88:fe:5d:a3:b7: ee:12:7f:eb:f6:5f:c2:09:9a:2d:95:8d:27:d2:9c: 02:aa:d7:0f:ec:cb:eb:96:62:1e:4e:d0:be:91:73: e1:78:e6:e4:39:29:c7:ce:86:41:23:89:ac:c5:bb: ee:34:78:ae:c2:c3:0a:ef:ae:dc:74:2a:cc:b7:b6: 01:f5:1e:89:58:f9:37:cf:e9:95:9d:96:51:ca:40: 16:4a:e7:cd:e8:3b:95:44:2e:9a:96:06:a3:2e:3f: c9:10:83:1e:50:02:ef:30:7e:bf:52:4c:67:d7:1e: c6:d7:8e:46:a4:3c:de:30:19:c8:fc:f9:44:c0:d0: 14:b5:6e:93:7b:f6:be:35:ee:2c:bc:f6:c8:13:85: 07:19:40:18:d3:ba:bf:d4:ba:48:b3:fa:63:da:50: 1d:57:cc:ca:93:ce:f2:37:9d:9d:c3:8a:b1:6c:7f: 25:ad:ca:97:2f:9b:54:7f:59:26:7e:3d:98:7d:25: 8a:2f:7e:d2:f1:93:24:6e:ac:c7:0a:ce:35:06:36: f6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:97:84:52:E8:4D:EB:DD:4B:7A:0A:07:30:B2:49:5B:CD:52:7D:1C X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS59432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.14.133.0/24 155.117.137.0/24 167.148.181.0/24 Signature Algorithm: sha256WithRSAEncryption 43:df:89:fe:24:a1:be:0c:c4:3c:5b:f7:36:f4:08:c1:9f:90: 24:13:da:af:10:57:0a:69:b4:24:65:d6:ad:6b:2e:01:cc:e8: 53:4c:15:8f:cc:0a:79:cb:b8:bd:97:8a:d2:06:a9:27:b0:dc: cb:38:a5:05:e0:2f:59:aa:0e:e8:11:0f:b0:0c:60:71:c8:4d: fb:97:a2:1d:50:1a:39:1e:61:67:a4:4e:d2:58:78:60:72:92: 1b:6f:f2:6d:ba:56:a6:88:ef:6f:39:52:99:ab:86:51:3e:e2: cf:7a:c5:d7:80:ed:bd:db:eb:f7:d9:a9:1b:0f:31:f4:11:97: d6:ca:f2:ec:65:cc:b5:c7:5d:b5:6b:42:8b:f8:eb:e0:24:a4: 4c:e2:6d:01:d0:6b:34:bb:48:ed:c7:07:ad:6d:f8:30:7b:fa: a3:2c:af:71:50:ff:26:f1:27:c9:18:8a:40:86:e8:b8:9e:fe: 43:7f:9c:76:de:22:ed:95:12:42:d2:80:4d:90:73:91:4d:b9: 13:d9:3f:63:11:f4:c3:a2:49:0c:91:da:3d:21:a3:1c:da:93: 27:a6:de:94:99:95:cc:6d:c4:2a:ab:9f:8d:bf:0b:96:e8:3a: 38:4c:61:98:0f:7b:c7:96:40:11:bc:ec:1b:24:01:4f:4d:21: ec:3a:d4:7b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUJH4WOazrMdq+/tdtZz6O7M61WJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMjIxMDMxMDFaFw0yNzAxMjExMDM2MDFaMDMxMTAvBgNV BAMTKDQxOTc4NDUyRTg0REVCREQ0QjdBMEEwNzMwQjI0OTVCQ0Q1MjdEMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1hhppf7PIWyjWHxCUNcPXVA7V Obs5vQHmcWTBYPpLGNXNte2NR7yKZwRv0sGDfHui2YdJyvKI/l2jt+4Sf+v2X8IJ mi2VjSfSnAKq1w/sy+uWYh5O0L6Rc+F45uQ5KcfOhkEjiazFu+40eK7Cwwrvrtx0 Ksy3tgH1HolY+TfP6ZWdllHKQBZK583oO5VELpqWBqMuP8kQgx5QAu8wfr9STGfX HsbXjkakPN4wGcj8+UTA0BS1bpN79r417iy89sgThQcZQBjTur/Uukiz+mPaUB1X zMqTzvI3nZ3DirFsfyWtypcvm1R/WSZ+PZh9JYovftLxkyRurMcKzjUGNvbtAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUQZeEUuhN691LegoHMLJJW81SfRwwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNTk0MzIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACPDoUD BACbdYkDBACnlLUwDQYJKoZIhvcNAQELBQADggEBAEPfif4kob4MxDxb9zb0CMGf kCQT2q8QVwpptCRl1q1rLgHM6FNMFY/MCnnLuL2XitIGqSew3Ms4pQXgL1mqDugR D7AMYHHITfuXoh1QGjkeYWekTtJYeGBykhtv8m26VqaI7285UpmrhlE+4s96xdeA 7b3b6/fZqRsPMfQRl9bK8uxlzLXHXbVrQov46+AkpEzibQHQazS7SO3HB61t+DB7 +qMsr3FQ/ybxJ8kYikCG6Lie/kN/nHbeIu2VEkLSgE2Qc5FNuRPZP2MR9MOiSQyR 2j0hoxzakyem3pSZlcxtxCqrn42/C5boOjhMYZgPe8eWQBG87BskAU9NIew61Hs= -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:27 2026 by rpki-client