This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401322.roa
File: AS401322.roa (raw, json)
Hash identifier: uqcQB6YzG9efkvRZJ1U7JD3D7/JAiw0nD+VUdFF99Ow=
Subject key identifier: 25:70:CC:67:5F:F7:20:28:71:AD:BA:C4:A7:D7:1D:C6:FE:8E:FE:38
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 74567802E5489F18A4C55DF2D37CAE065D0EF199
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401322.roa
Signing time: Sat 24 Jan 2026 13:17:34 +0000
ROA not before: Sat 24 Jan 2026 13:12:34 +0000
ROA not after: Sat 23 Jan 2027 13:17:34 +0000
asID: 401322
IP address blocks: 46.236.192.0/24 maxlen: 24
46.236.243.0/24 maxlen: 24
82.139.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:56:78:02:e5:48:9f:18:a4:c5:5d:f2:d3:7c:ae:06:5d:0e:f1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Jan 24 13:12:34 2026 GMT
Not After : Jan 23 13:17:34 2027 GMT
Subject: CN=2570CC675FF7202871ADBAC4A7D71DC6FE8EFE38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:61:34:fd:4f:f4:a9:c6:12:8b:96:ac:e1:c1:
4b:8c:f1:2e:26:fd:bc:6b:fe:bf:94:02:3a:2f:3e:
50:87:43:04:24:b9:98:3d:5d:05:28:c4:0d:e2:94:
cb:1c:07:5f:84:b2:c2:ce:e1:70:e7:76:d9:a0:e9:
22:62:15:c6:bd:e5:be:2d:bb:e1:db:80:59:60:12:
2e:af:b3:37:02:19:90:8f:67:23:c1:33:f3:78:d8:
e6:53:79:ef:1b:31:dd:4e:53:ff:c5:09:34:0a:18:
3b:dd:4d:5e:7d:ea:6e:a4:73:15:6d:49:7b:8f:e5:
5a:aa:1d:02:dd:83:62:af:08:1d:76:fa:d3:43:84:
bc:ed:58:ee:e9:47:ca:cc:93:15:92:96:43:85:7d:
bd:4e:03:f1:84:ae:6e:56:8f:09:0d:0d:49:a8:de:
e4:f4:8b:6d:64:a7:46:40:df:7b:6b:8d:0c:f0:57:
fd:46:86:dd:8d:29:a7:6b:2c:e3:39:f5:a0:a5:ec:
8d:7d:42:05:91:c7:bf:0a:95:fb:a0:60:58:4d:d3:
6e:38:06:6d:ea:f0:0b:0b:22:cf:1b:29:f3:dd:05:
41:42:68:bb:52:fa:e2:1b:06:77:8f:60:85:fd:af:
32:f0:d0:6c:76:dd:44:8d:dd:26:36:11:6b:c7:f0:
39:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:70:CC:67:5F:F7:20:28:71:AD:BA:C4:A7:D7:1D:C6:FE:8E:FE:38
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401322.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.236.192.0/24
46.236.243.0/24
82.139.194.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b1:24:8e:e6:b5:f5:f9:30:42:55:18:cc:be:b8:58:3b:35:
9c:b5:97:78:4e:a7:7a:1c:c4:09:0e:e0:79:6a:d1:70:28:2a:
a6:b7:67:28:c6:01:29:bc:61:ee:c7:9e:6d:03:5a:30:ba:96:
b3:4f:85:c6:fd:5f:37:a2:0a:19:20:da:a8:c3:ae:96:1a:fb:
b3:5d:c7:df:5a:29:69:d3:af:f6:ec:b1:c8:00:ea:e0:1b:40:
a4:79:0c:e2:f9:86:c7:11:79:e1:f5:c8:b3:37:48:a1:10:ac:
ee:21:39:0d:6e:22:51:89:c8:91:d5:c1:6e:2e:26:67:04:26:
e8:3e:16:4e:04:41:ef:11:75:f1:c1:3c:c0:88:4f:e9:e8:09:
80:cd:dc:90:61:1c:a8:90:51:29:b6:7c:cc:f1:cc:04:6e:05:
54:d8:ea:91:ff:2e:5d:e8:c2:7b:1e:06:38:58:c4:50:cd:07:
13:7a:e1:db:39:bf:b3:a7:d8:8d:6c:3a:ac:0b:4c:30:1f:b5:
c3:b0:a9:9c:0b:18:2f:74:9e:51:e5:e0:25:91:3f:2e:2f:8a:
5e:ec:e9:e7:ed:b1:c0:eb:1f:bc:c0:34:ee:36:98:53:2e:5e:
18:d9:6d:08:e0:c5:2b:35:ff:4a:09:bb:87:3e:d8:af:e6:e0:
c1:98:b9:a4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUdFZ4AuVInxikxV3y03yuBl0O8ZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx
ZWUyOGExYjAeFw0yNjAxMjQxMzEyMzRaFw0yNzAxMjMxMzE3MzRaMDMxMTAvBgNV
BAMTKDI1NzBDQzY3NUZGNzIwMjg3MUFEQkFDNEE3RDcxREM2RkU4RUZFMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeYTT9T/SpxhKLlqzhwUuM8S4m
/bxr/r+UAjovPlCHQwQkuZg9XQUoxA3ilMscB1+EssLO4XDndtmg6SJiFca95b4t
u+HbgFlgEi6vszcCGZCPZyPBM/N42OZTee8bMd1OU//FCTQKGDvdTV596m6kcxVt
SXuP5VqqHQLdg2KvCB12+tNDhLztWO7pR8rMkxWSlkOFfb1OA/GErm5WjwkNDUmo
3uT0i21kp0ZA33trjQzwV/1Ght2NKadrLOM59aCl7I19QgWRx78KlfugYFhN0244
Bm3q8AsLIs8bKfPdBUFCaLtS+uIbBnePYIX9rzLw0Gx23USN3SY2EWvH8DmhAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUJXDMZ1/3IChxrbrEp9cdxv6O/jgwHwYDVR0j
BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1
NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3
aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt
NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTNDAxMzIyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALuzA
AwQALuzzAwQAUovCMA0GCSqGSIb3DQEBCwUAA4IBAQA2sSSO5rX1+TBCVRjMvrhY
OzWctZd4Tqd6HMQJDuB5atFwKCqmt2coxgEpvGHux55tA1owupazT4XG/V83ogoZ
INqow66WGvuzXcffWilp06/27LHIAOrgG0CkeQzi+YbHEXnh9cizN0ihEKzuITkN
biJRiciR1cFuLiZnBCboPhZOBEHvEXXxwTzAiE/p6AmAzdyQYRyokFEptnzM8cwE
bgVU2OqR/y5d6MJ7HgY4WMRQzQcTeuHbOb+zp9iNbDqsC0wwH7XDsKmcCxgvdJ5R
5eAlkT8uL4pe7Onn7bHA6x+8wDTuNphTLl4Y2W0I4MUrNf9KCbuHPtiv5uDBmLmk
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:10:13 2026 by rpki-client