This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16276.roa File: AS16276.roa (raw, json) Hash identifier: 8gOCSZ6/iJtlzwAh66QsRIPS6rsfXl1KTOvL0+PSPO8= Subject key identifier: CE:8A:F2:13:50:3D:9E:B8:83:70:23:7B:23:7E:60:56:EF:89:0C:BD Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 63A6BF4F3F6CFFAC7358B854108C79B943314597 Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16276.roa Signing time: Wed 12 Nov 2025 10:57:50 +0000 ROA not before: Wed 12 Nov 2025 10:52:50 +0000 ROA not after: Wed 11 Nov 2026 10:57:50 +0000 asID: 16276 IP address blocks: 46.236.211.0/24 maxlen: 24 46.236.214.0/24 maxlen: 24 82.139.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a6:bf:4f:3f:6c:ff:ac:73:58:b8:54:10:8c:79:b9:43:31:45:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Nov 12 10:52:50 2025 GMT Not After : Nov 11 10:57:50 2026 GMT Subject: CN=CE8AF213503D9EB88370237B237E6056EF890CBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:42:cf:0d:1f:06:7a:ba:9d:e6:44:a3:72:1e: d6:d5:ca:c0:9f:8b:6e:05:c1:1f:69:73:17:7d:f5: ea:d4:76:a8:33:9e:ee:12:68:ab:db:9f:21:61:8c: 34:df:c7:68:38:63:6a:3a:7c:2e:8e:d9:66:34:ac: 62:db:99:91:5e:4d:6f:da:66:f0:f8:f4:4b:29:97: 07:bc:42:29:8a:21:61:ec:e8:c4:58:67:ff:ea:34: 35:7e:44:a5:a8:9d:e6:ae:fa:26:c8:e6:57:b9:45: f8:68:16:bd:39:18:49:44:43:61:78:0f:8e:7c:67: 3c:fc:02:e1:a8:c3:eb:b6:a9:84:32:7d:b9:da:75: 1a:04:ae:ce:15:16:9e:20:f6:f5:29:b7:27:10:85: ba:b6:53:3f:cb:ac:39:20:fe:a1:d8:39:40:2b:64: fe:9a:44:fe:91:6c:f9:58:f7:54:bd:6c:93:7f:0e: 3c:db:85:21:68:0d:20:9c:b8:0d:8e:68:3d:58:c1: 19:67:80:f4:40:88:5c:e7:ca:0c:e5:3f:3a:90:56: e1:8d:15:ce:4e:14:db:7a:dd:5f:88:e5:03:d6:9c: 6b:a7:28:66:c5:c7:19:96:43:df:03:bd:1a:c8:5d: 87:04:b0:bc:26:60:06:9a:2b:6b:f0:01:fc:23:ad: bd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8A:F2:13:50:3D:9E:B8:83:70:23:7B:23:7E:60:56:EF:89:0C:BD X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16276.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.236.211.0/24 46.236.214.0/24 82.139.215.0/24 Signature Algorithm: sha256WithRSAEncryption 33:64:82:bb:2d:26:18:64:0c:a3:27:dd:11:8e:85:5f:e8:97: e0:87:1a:ef:65:38:27:10:fc:08:04:28:18:34:de:28:f8:28: 16:1e:03:09:ee:a7:68:46:5d:65:ba:1b:87:31:c0:fa:4b:f2: b6:09:e3:97:6e:3d:71:9d:cd:6f:54:e1:5e:c9:d0:97:f6:7d: 95:05:a3:3b:7f:3c:c4:8c:47:9a:de:0d:1d:ab:af:f0:70:34: 5d:d7:11:26:9e:ae:c5:b1:ad:e8:14:16:16:6f:2d:ec:d9:6d: a7:76:34:1c:9f:b6:69:d0:1a:b7:55:d3:8d:2c:03:02:82:7d: 58:38:02:ad:b4:4e:74:99:96:81:5e:29:74:66:0d:76:fb:8a: 37:00:9c:85:3b:0f:57:58:dc:4a:2b:ac:cb:5c:a9:eb:59:17: f2:0d:67:13:61:22:7c:f9:58:8b:5b:fb:71:7f:b7:7c:fe:4a: a7:fb:8a:f1:bf:c1:cc:21:42:a7:d5:ab:50:a8:c6:7f:d9:c6: df:79:08:84:a8:e0:5f:28:48:88:1d:2a:f0:b9:0b:89:91:ea: c3:e8:9c:b1:73:81:59:2a:ca:e9:a5:74:5f:60:de:15:08:b9: 9a:41:df:4d:d4:96:38:53:9a:e2:97:c9:40:43:0a:8f:b4:60: 53:49:71:95 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUY6a/Tz9s/6xzWLhUEIx5uUMxRZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNTExMTIxMDUyNTBaFw0yNjExMTExMDU3NTBaMDMxMTAvBgNV BAMTKENFOEFGMjEzNTAzRDlFQjg4MzcwMjM3QjIzN0U2MDU2RUY4OTBDQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUQs8NHwZ6up3mRKNyHtbVysCf i24FwR9pcxd99erUdqgznu4SaKvbnyFhjDTfx2g4Y2o6fC6O2WY0rGLbmZFeTW/a ZvD49Esplwe8QimKIWHs6MRYZ//qNDV+RKWoneau+ibI5le5RfhoFr05GElEQ2F4 D458Zzz8AuGow+u2qYQyfbnadRoErs4VFp4g9vUptycQhbq2Uz/LrDkg/qHYOUAr ZP6aRP6RbPlY91S9bJN/DjzbhSFoDSCcuA2OaD1YwRlngPRAiFznygzlPzqQVuGN Fc5OFNt63V+I5QPWnGunKGbFxxmWQ98DvRrIXYcEsLwmYAaaK2vwAfwjrb1/AgMB AAGjggIVMIICETAdBgNVHQ4EFgQUzoryE1A9nriDcCN7I35gVu+JDL0wHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMTYyNzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAAu7NMD BAAu7NYDBABSi9cwDQYJKoZIhvcNAQELBQADggEBADNkgrstJhhkDKMn3RGOhV/o l+CHGu9lOCcQ/AgEKBg03ij4KBYeAwnup2hGXWW6G4cxwPpL8rYJ45duPXGdzW9U 4V7J0Jf2fZUFozt/PMSMR5reDR2rr/BwNF3XESaersWxregUFhZvLezZbad2NByf tmnQGrdV040sAwKCfVg4Aq20TnSZloFeKXRmDXb7ijcAnIU7D1dY3EorrMtcqetZ F/INZxNhInz5WItb+3F/t3z+Sqf7ivG/wcwhQqfVq1Coxn/Zxt95CISo4F8oSIgd KvC5C4mR6sPonLFzgVkqyumldF9g3hUIuZpB303UljhTmuKXyUBDCo+0YFNJcZU= -----END CERTIFICATE-----Generated at Sat Dec 6 20:54:16 2025 by rpki-client