This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS399641.roa File: AS399641.roa (raw, json) Hash identifier: 4f2lTuMIr4fMj94O2QfoD3cgCgDEdbkPddN0vBS1HYE= Subject key identifier: C9:78:4C:95:FB:5B:24:AE:58:67:96:E3:68:21:9F:3C:EE:5B:23:6D Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 0A106A5096A675E6F1FB4B693B2961817478096A Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS399641.roa Signing time: Fri 02 Jan 2026 00:55:33 +0000 ROA not before: Fri 02 Jan 2026 00:50:33 +0000 ROA not after: Fri 01 Jan 2027 00:55:33 +0000 asID: 399641 IP address blocks: 192.166.115.0/24 maxlen: 24 193.176.55.0/24 maxlen: 24 195.20.98.0/24 maxlen: 24 195.206.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:10:6a:50:96:a6:75:e6:f1:fb:4b:69:3b:29:61:81:74:78:09:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Jan 2 00:50:33 2026 GMT Not After : Jan 1 00:55:33 2027 GMT Subject: CN=C9784C95FB5B24AE586796E368219F3CEE5B236D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:82:a5:ac:55:db:9d:f8:07:c3:41:6a:55:9b: ed:70:4a:81:68:2c:47:ae:9a:b0:0d:e9:9c:17:85: 80:7c:aa:b5:b4:ba:58:39:f7:39:62:d3:46:07:68: 39:dd:8c:66:93:10:34:44:b8:b9:67:c6:f1:fd:ba: 0e:1a:74:d6:8f:e1:9d:5a:81:58:3f:3a:4f:3d:67: 0e:62:02:bb:05:fb:6b:13:6a:bc:10:12:b6:e4:2c: 3d:2b:13:ef:8b:b6:59:cb:42:d3:23:8e:59:c3:15: 5b:f4:e2:3f:c6:95:e6:e4:01:bf:b4:18:57:90:19: 14:95:b3:99:ff:0e:a9:10:d9:a0:2a:7f:7f:e3:80: 9d:99:61:0d:80:f3:1d:d7:86:b7:9a:67:ca:c2:71: 05:55:7d:16:af:6d:45:05:57:0f:78:17:a1:e2:62: 90:64:3d:b6:b5:60:b5:9c:05:78:b7:ca:82:a7:52: 4c:e6:a1:f8:39:9b:4a:c8:5e:c3:cd:0d:4e:61:53: f2:ed:e7:af:dc:ee:ca:22:ef:82:09:bd:9b:c3:6b: 20:a0:5b:69:40:6d:a4:e5:4e:4f:f0:11:4f:9c:8e: a9:f7:32:da:86:15:e6:b8:18:e1:ec:55:33:88:33: d6:ab:8a:dd:ef:3b:b2:1b:d0:4b:a7:96:42:4b:dc: c2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:78:4C:95:FB:5B:24:AE:58:67:96:E3:68:21:9F:3C:EE:5B:23:6D X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS399641.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.166.115.0/24 193.176.55.0/24 195.20.98.0/24 195.206.231.0/24 Signature Algorithm: sha256WithRSAEncryption 38:23:1e:57:0e:ed:e4:43:00:25:ee:e3:5a:57:68:ae:a1:af: 07:63:b0:d7:ac:5f:05:6e:a4:19:e3:68:b7:d3:ea:be:79:be: 20:ea:57:ec:26:58:ed:33:3d:6b:4a:4f:58:ed:4c:98:84:26: 9f:70:cc:c2:51:eb:5b:f5:0c:f5:97:e0:42:7c:14:30:20:f2: bf:8e:67:20:4e:ba:98:f4:0b:0e:c0:0e:2e:de:88:21:b3:69: 17:eb:cc:ae:27:62:ea:a8:53:9a:07:ef:fb:72:28:29:c9:53: 38:42:05:ab:3f:ef:24:40:5f:04:40:dd:3f:4b:f4:6e:e4:93: 08:5e:4e:3f:c3:ed:49:0d:4f:b2:2e:2c:47:0a:41:fe:24:bf: 6d:31:8e:c9:12:78:c2:4b:b3:de:14:b5:09:b8:18:33:eb:a5: f0:b1:49:92:14:7f:ed:da:ca:99:88:00:cb:18:26:0c:3e:34: 83:d9:04:2c:1b:4b:29:93:5f:4c:7e:87:bb:4e:22:aa:19:ee: 11:c1:97:6e:40:34:0a:07:8e:13:5c:30:35:b8:ed:dd:32:a7: 71:ee:e7:cd:fb:64:ff:6e:cd:37:ac:82:42:4f:89:c3:b5:c4: 7a:20:d1:35:09:06:8a:74:4f:39:8b:6f:f8:26:d3:dc:53:c7: 0d:2b:3b:d3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUChBqUJamdebx+0tpOylhgXR4CWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNjAxMDIwMDUwMzNaFw0yNzAxMDEwMDU1MzNaMDMxMTAvBgNV BAMTKEM5Nzg0Qzk1RkI1QjI0QUU1ODY3OTZFMzY4MjE5RjNDRUU1QjIzNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/gqWsVdud+AfDQWpVm+1wSoFo LEeumrAN6ZwXhYB8qrW0ulg59zli00YHaDndjGaTEDREuLlnxvH9ug4adNaP4Z1a gVg/Ok89Zw5iArsF+2sTarwQErbkLD0rE++LtlnLQtMjjlnDFVv04j/GlebkAb+0 GFeQGRSVs5n/DqkQ2aAqf3/jgJ2ZYQ2A8x3XhreaZ8rCcQVVfRavbUUFVw94F6Hi YpBkPba1YLWcBXi3yoKnUkzmofg5m0rIXsPNDU5hU/Lt56/c7soi74IJvZvDayCg W2lAbaTlTk/wEU+cjqn3MtqGFea4GOHsVTOIM9arit3vO7Ib0EunlkJL3MJnAgMB AAGjggIcMIICGDAdBgNVHQ4EFgQUyXhMlftbJK5YZ5bjaCGfPO5bI20wHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMzk5NjQxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwKZz AwQAwbA3AwQAwxRiAwQAw87nMA0GCSqGSIb3DQEBCwUAA4IBAQA4Ix5XDu3kQwAl 7uNaV2iuoa8HY7DXrF8FbqQZ42i30+q+eb4g6lfsJljtMz1rSk9Y7UyYhCafcMzC Uetb9Qz1l+BCfBQwIPK/jmcgTrqY9AsOwA4u3oghs2kX68yuJ2LqqFOaB+/7cigp yVM4QgWrP+8kQF8EQN0/S/Ru5JMIXk4/w+1JDU+yLixHCkH+JL9tMY7JEnjCS7Pe FLUJuBgz66XwsUmSFH/t2sqZiADLGCYMPjSD2QQsG0spk19Mfoe7TiKqGe4RwZdu QDQKB44TXDA1uO3dMqdx7ufN+2T/bs03rIJCT4nDtcR6INE1CQaKdE85i2/4JtPc U8cNKzvT -----END CERTIFICATE-----Generated at Sun Jan 25 16:58:03 2026 by rpki-client