This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS139888.roa File: AS139888.roa (raw, json) Hash identifier: cTCbvcjQAViPHcr76eI6AcwZrFzMte4PmQJBnXcUBrc= Subject key identifier: CF:0A:9B:AA:C9:F4:98:8C:E9:61:03:9D:84:F8:89:60:46:D5:1E:74 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 3914197426091C8AEE95950326AA478419C48A46 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS139888.roa Signing time: Tue 06 Jan 2026 01:00:47 +0000 ROA not before: Tue 06 Jan 2026 00:55:47 +0000 ROA not after: Tue 05 Jan 2027 01:00:47 +0000 asID: 139888 IP address blocks: 2a14:7580:e200::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:14:19:74:26:09:1c:8a:ee:95:95:03:26:aa:47:84:19:c4:8a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 6 00:55:47 2026 GMT Not After : Jan 5 01:00:47 2027 GMT Subject: CN=CF0A9BAAC9F4988CE961039D84F8896046D51E74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:25:47:da:20:41:4f:b3:cc:b0:c3:7f:7e:1e: b7:83:00:25:8d:08:3f:59:b9:b2:32:a0:a6:96:25: 84:d9:13:5f:05:ce:b0:09:b4:87:10:07:6a:33:8f: b8:ea:b2:aa:81:ac:eb:b7:e8:d8:ad:2f:dc:cc:22: 28:b4:cb:31:11:5a:3d:fb:17:1a:ea:46:68:c8:e3: 44:62:70:17:e3:e3:6e:ff:c9:42:4a:9b:82:8a:9a: b8:8e:d4:b1:96:83:de:ee:c9:9b:28:bd:70:8b:82: 40:ac:81:b5:0f:b3:29:88:fc:47:b7:f6:44:df:d4: 8e:d6:3e:e4:83:5b:59:8d:2b:4d:8a:7f:61:c4:c0: 8f:6c:d1:be:4b:a8:00:37:b7:fa:13:d1:dd:97:3b: 2b:45:db:1a:11:b8:b1:17:06:bd:ef:7a:11:2a:41: f3:55:a1:06:1b:af:91:57:2f:eb:9d:56:53:7a:38: 92:ce:be:e7:14:e7:c2:f1:29:69:0d:5c:b7:68:73: 6d:e2:00:99:cc:2a:86:1b:f2:bb:0e:f5:da:d8:7f: 27:d8:f6:e1:6d:c6:50:22:3a:72:f4:f4:90:40:9d: f0:5e:19:01:6a:a9:5e:ab:6a:85:9b:6f:4a:95:45: b5:b7:5b:7b:a9:df:7f:ab:cc:7e:df:93:e9:03:67: 17:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0A:9B:AA:C9:F4:98:8C:E9:61:03:9D:84:F8:89:60:46:D5:1E:74 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS139888.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:e200::/40 Signature Algorithm: sha256WithRSAEncryption 56:d6:bf:78:2a:6e:d7:74:eb:a6:23:0f:f1:c8:60:ec:da:aa: 45:21:5b:94:43:e9:9b:19:0d:83:24:dc:3b:69:e5:46:2f:e1: 98:29:1d:a9:7f:bf:dc:8c:ff:b5:c5:98:dc:49:dd:24:5a:0f: 0f:55:88:79:7d:cd:f7:fb:37:df:5c:e5:58:ff:86:ab:85:3d: f2:a5:7a:ec:6c:1b:91:3e:59:c5:ac:2b:90:b0:e1:72:80:0b: 54:d0:42:f8:c6:f0:50:7d:02:e2:cc:1a:4c:0e:46:81:66:a6: dd:bf:7d:74:9e:a2:2e:1a:bf:d8:f4:85:7c:54:38:81:af:f8: 3d:0b:1e:cd:bb:62:36:81:72:35:d7:ca:78:c8:f6:53:ec:b7: 70:6e:f6:d7:39:c2:60:a4:e7:e8:a4:63:0b:de:9d:0c:b6:49: da:d0:f0:13:22:9b:90:23:76:46:23:c2:d5:ff:de:5f:9b:7c: 8f:fa:90:40:88:43:46:c2:62:a3:58:35:b5:c4:56:3d:ae:df: f5:a5:17:c2:e0:50:57:7e:00:b8:77:7a:3b:6a:d0:1c:1c:cb: 6f:78:0f:6e:be:e5:ee:b2:95:7b:6e:1d:6d:5b:b3:32:d7:30: aa:4b:64:2a:e5:68:55:f2:63:ba:07:72:4e:6c:37:93:5e:f7: 94:3e:fb:62 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUORQZdCYJHIrulZUDJqpHhBnEikYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMDYwMDU1NDdaFw0yNzAxMDUwMTAwNDdaMDMxMTAvBgNV BAMTKENGMEE5QkFBQzlGNDk4OENFOTYxMDM5RDg0Rjg4OTYwNDZENTFFNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeJUfaIEFPs8yww39+HreDACWN CD9ZubIyoKaWJYTZE18FzrAJtIcQB2ozj7jqsqqBrOu36NitL9zMIii0yzERWj37 FxrqRmjI40RicBfj427/yUJKm4KKmriO1LGWg97uyZsovXCLgkCsgbUPsymI/Ee3 9kTf1I7WPuSDW1mNK02Kf2HEwI9s0b5LqAA3t/oT0d2XOytF2xoRuLEXBr3vehEq QfNVoQYbr5FXL+udVlN6OJLOvucU58LxKWkNXLdoc23iAJnMKoYb8rsO9drYfyfY 9uFtxlAiOnL09JBAnfBeGQFqqV6raoWbb0qVRbW3W3up33+rzH7fk+kDZxeTAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUzwqbqsn0mIzpYQOdhPiJYEbVHnQwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMTM5ODg4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1 gOIwDQYJKoZIhvcNAQELBQADggEBAFbWv3gqbtd066YjD/HIYOzaqkUhW5RD6ZsZ DYMk3Dtp5UYv4ZgpHal/v9yM/7XFmNxJ3SRaDw9ViHl9zff7N99c5Vj/hquFPfKl euxsG5E+WcWsK5Cw4XKAC1TQQvjG8FB9AuLMGkwORoFmpt2/fXSeoi4av9j0hXxU OIGv+D0LHs27YjaBcjXXynjI9lPst3Bu9tc5wmCk5+ikYwvenQy2SdrQ8BMim5Aj dkYjwtX/3l+bfI/6kECIQ0bCYqNYNbXEVj2u3/WlF8LgUFd+ALh3ejtq0Bwcy294 D26+5e6ylXtuHW1bszLXMKpLZCrlaFXyY7oHck5sN5Ne95Q++2I= -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:01 2026 by rpki-client