This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401776.roa File: AS401776.roa (raw, json) Hash identifier: 1XjDrLHEJegVPRFKz5TYvKtr1mU069fLNyUJkeIupn4= Subject key identifier: B3:E5:56:0D:73:A8:81:0B:BC:35:98:D7:03:09:30:2E:6F:E7:99:2F Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 0B53E35B182CFD4C011C67526FB03745D3CD6856 Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401776.roa Signing time: Fri 23 Jan 2026 11:35:28 +0000 ROA not before: Fri 23 Jan 2026 11:30:28 +0000 ROA not after: Fri 22 Jan 2027 11:35:28 +0000 asID: 401776 IP address blocks: 46.236.209.0/24 maxlen: 24 82.139.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:53:e3:5b:18:2c:fd:4c:01:1c:67:52:6f:b0:37:45:d3:cd:68:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Jan 23 11:30:28 2026 GMT Not After : Jan 22 11:35:28 2027 GMT Subject: CN=B3E5560D73A8810BBC3598D70309302E6FE7992F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d9:88:cb:89:d7:27:03:16:e5:1b:53:d5:15: 64:17:f7:2b:2e:8e:77:0f:87:c5:dc:57:a9:d0:91: 88:85:3a:d1:b3:2c:5c:43:9a:8f:b3:ef:26:9e:2a: fe:75:07:55:f1:0f:7a:2d:14:1f:7c:a6:66:1a:15: b2:35:bf:8e:15:b8:56:96:3e:68:c7:f8:ef:b0:0f: af:c2:f9:3b:8c:0e:4c:d0:44:64:70:2f:db:51:8a: 86:ca:0b:b7:1f:f8:96:11:ef:11:72:31:8e:4c:f6: 27:89:49:8d:64:60:16:4b:a7:30:32:41:c9:0d:83: 78:4c:0f:a4:98:41:7e:b0:86:a6:f5:71:9d:65:9e: 48:be:00:d0:29:5e:c3:fe:d1:6b:69:ed:01:9e:76: f7:a2:d5:c7:cf:65:a2:19:e5:60:43:f3:83:c2:8f: 32:38:25:49:b4:ae:d6:fc:d4:30:1e:0c:8e:f0:c9: 5e:91:c1:32:8f:29:01:b5:cf:76:e7:36:46:29:72: 24:60:f2:2d:e2:13:f4:7a:1d:c0:ee:9f:7d:3c:31: 1e:91:e5:b4:e2:1b:e5:67:6b:a9:f5:f8:29:9a:1c: 96:d7:8d:b1:e4:45:17:aa:5c:6f:24:ef:15:8c:7e: c7:a0:80:89:e6:08:2e:45:46:b9:b5:b6:4e:9e:f6: fe:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E5:56:0D:73:A8:81:0B:BC:35:98:D7:03:09:30:2E:6F:E7:99:2F X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401776.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.236.209.0/24 82.139.233.0/24 Signature Algorithm: sha256WithRSAEncryption 06:f6:b5:a5:b0:7d:15:57:c1:99:62:10:04:48:2b:53:39:8a: f3:ce:c3:00:37:6c:60:76:ac:09:71:be:41:cc:23:72:64:43: 9e:9c:f7:97:ef:8a:b0:5d:e7:8c:f7:f3:87:bc:ae:b8:b1:01: 8d:27:31:25:0f:c6:a5:b9:4a:e3:c5:9a:bd:d0:94:cf:cd:0b: 25:46:8f:af:16:6f:ad:c0:28:fb:7f:4e:cb:dd:43:35:e5:cf: c6:49:42:d3:f0:4c:fc:28:09:c1:37:24:e5:3b:b7:20:eb:64: 18:9d:0a:79:cd:2a:5c:ed:0a:77:b9:37:19:22:de:5b:1f:e3: ab:54:0b:a2:0a:7c:b5:f0:e8:53:4c:5b:ca:95:7a:44:83:3a: f1:ee:cf:0a:96:ff:ac:cb:d4:79:73:d8:98:7b:62:7d:44:64: e1:b8:b0:3a:af:0a:f5:04:e6:22:cb:dd:1d:ac:60:e9:e9:a8: 77:54:8a:d4:65:71:09:72:07:ed:d3:ff:4c:c9:3c:4d:ed:75: 42:f6:c8:15:b2:5b:5e:14:77:b3:27:fa:83:84:ae:43:cf:b8: 04:26:b5:8c:b6:da:b6:81:b3:3e:73:34:5a:b4:fb:b8:01:17: 0b:1b:17:0b:4f:5d:3d:f6:ec:a2:22:d1:75:3d:08:63:f0:83: cf:f9:76:13 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUC1PjWxgs/UwBHGdSb7A3RdPNaFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNjAxMjMxMTMwMjhaFw0yNzAxMjIxMTM1MjhaMDMxMTAvBgNV BAMTKEIzRTU1NjBENzNBODgxMEJCQzM1OThENzAzMDkzMDJFNkZFNzk5MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk2YjLidcnAxblG1PVFWQX9ysu jncPh8XcV6nQkYiFOtGzLFxDmo+z7yaeKv51B1XxD3otFB98pmYaFbI1v44VuFaW PmjH+O+wD6/C+TuMDkzQRGRwL9tRiobKC7cf+JYR7xFyMY5M9ieJSY1kYBZLpzAy QckNg3hMD6SYQX6whqb1cZ1lnki+ANApXsP+0Wtp7QGedvei1cfPZaIZ5WBD84PC jzI4JUm0rtb81DAeDI7wyV6RwTKPKQG1z3bnNkYpciRg8i3iE/R6HcDun308MR6R 5bTiG+Vna6n1+CmaHJbXjbHkRReqXG8k7xWMfseggInmCC5FRrm1tk6e9v6PAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUs+VWDXOogQu8NZjXAwkwLm/nmS8wHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTNDAxNzc2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALuzR AwQAUovpMA0GCSqGSIb3DQEBCwUAA4IBAQAG9rWlsH0VV8GZYhAESCtTOYrzzsMA N2xgdqwJcb5BzCNyZEOenPeX74qwXeeM9/OHvK64sQGNJzElD8aluUrjxZq90JTP zQslRo+vFm+twCj7f07L3UM15c/GSULT8Ez8KAnBNyTlO7cg62QYnQp5zSpc7Qp3 uTcZIt5bH+OrVAuiCny18OhTTFvKlXpEgzrx7s8Klv+sy9R5c9iYe2J9RGThuLA6 rwr1BOYiy90drGDp6ah3VIrUZXEJcgft0/9MyTxN7XVC9sgVslteFHezJ/qDhK5D z7gEJrWMttq2gbM+czRatPu4ARcLGxcLT1099uyiItF1PQhj8IPP+XYT -----END CERTIFICATE-----Generated at Sun Jan 25 11:50:31 2026 by rpki-client