This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3356.roa File: AS3356.roa (raw, json) Hash identifier: kb7+IxAvPq5Jxj6VoS3Eey+GhLHPoo1G6F44+H8mE1Y= Subject key identifier: 98:C7:25:01:95:51:12:79:F6:69:6E:E5:2F:5C:1E:37:16:2F:C7:C7 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: A0004C0B9FF15CF5BE76432C13AE63D8AD894C Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3356.roa Signing time: Wed 26 Nov 2025 16:03:24 +0000 ROA not before: Wed 26 Nov 2025 15:58:24 +0000 ROA not after: Wed 25 Nov 2026 16:03:24 +0000 asID: 3356 IP address blocks: 46.202.16.0/22 maxlen: 24 46.202.24.0/22 maxlen: 24 46.202.61.0/24 maxlen: 24 46.202.66.0/24 maxlen: 24 46.202.70.0/24 maxlen: 24 46.202.75.0/24 maxlen: 24 46.202.104.0/22 maxlen: 24 46.202.112.0/22 maxlen: 24 46.202.120.0/22 maxlen: 24 46.203.24.0/22 maxlen: 24 46.203.48.0/22 maxlen: 24 46.203.68.0/22 maxlen: 24 46.203.153.0/24 maxlen: 24 92.112.1.0/24 maxlen: 24 92.112.4.0/24 maxlen: 24 92.112.14.0/24 maxlen: 24 92.112.64.0/24 maxlen: 24 92.112.84.0/24 maxlen: 24 92.112.86.0/24 maxlen: 24 92.112.90.0/24 maxlen: 24 92.112.94.0/24 maxlen: 24 92.112.110.0/24 maxlen: 24 92.113.156.0/24 maxlen: 24 92.113.157.0/24 maxlen: 24 92.113.163.0/24 maxlen: 24 92.113.164.0/24 maxlen: 24 92.113.165.0/24 maxlen: 24 92.113.168.0/24 maxlen: 24 92.113.225.0/24 maxlen: 24 92.113.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 12:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a0:00:4c:0b:9f:f1:5c:f5:be:76:43:2c:13:ae:63:d8:ad:89:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Nov 26 15:58:24 2025 GMT Not After : Nov 25 16:03:24 2026 GMT Subject: CN=98C7250195511279F6696EE52F5C1E37162FC7C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:21:11:da:a9:c6:04:04:a8:fd:a6:78:31:0a: 64:99:3d:95:81:bc:27:1a:9a:45:9c:dd:3e:91:16: 3a:27:f2:b2:57:2a:c7:cc:11:71:9c:12:9f:b8:d3: 3b:2b:ef:1a:06:a7:3c:03:08:28:52:66:bb:a1:8b: c1:d6:07:1f:70:1c:df:33:c8:88:14:71:9d:02:ce: 64:0e:dd:f3:f7:4f:b0:7d:13:b2:5b:59:af:aa:34: ec:ae:6e:b3:5c:66:f8:2d:ce:69:f7:15:3a:de:00: 46:0e:a7:c1:83:cd:66:33:e1:7d:fd:99:f2:79:b1: d7:76:43:66:49:d1:86:4b:c7:fe:8e:86:4e:0d:58: 45:2c:e5:4a:58:75:81:a3:31:97:59:da:1f:7f:e6: e5:5b:a9:f1:92:33:b2:41:8a:4f:1c:e9:6f:f6:d8: cc:48:34:e4:d0:55:c3:00:63:58:a6:08:15:e9:7b: 00:b4:21:73:6c:f6:1e:f5:5b:66:a3:52:01:ab:d0: 4f:d7:b7:0f:2e:d2:62:2b:b4:96:6d:7d:7f:03:20: 92:d3:83:03:68:8a:59:61:7a:72:46:52:f8:ac:c4: fb:d0:45:2e:09:cc:17:7a:77:1f:2b:30:4e:32:7d: b0:c9:09:99:a4:59:62:e5:91:4a:4f:1d:fb:53:5c: f3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C7:25:01:95:51:12:79:F6:69:6E:E5:2F:5C:1E:37:16:2F:C7:C7 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS3356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.202.16.0/22 46.202.24.0/22 46.202.61.0/24 46.202.66.0/24 46.202.70.0/24 46.202.75.0/24 46.202.104.0/22 46.202.112.0/22 46.202.120.0/22 46.203.24.0/22 46.203.48.0/22 46.203.68.0/22 46.203.153.0/24 92.112.1.0/24 92.112.4.0/24 92.112.14.0/24 92.112.64.0/24 92.112.84.0/24 92.112.86.0/24 92.112.90.0/24 92.112.94.0/24 92.112.110.0/24 92.113.156.0/23 92.113.163.0-92.113.165.255 92.113.168.0/24 92.113.225.0-92.113.226.255 Signature Algorithm: sha256WithRSAEncryption 49:b3:a0:d6:ff:39:7e:47:ed:e5:25:9a:b3:e2:81:4d:0a:c3: 95:04:b4:64:ad:12:1b:46:58:9d:38:fa:3f:80:75:cd:6c:d3: 39:f0:98:46:c7:94:77:89:fe:77:75:2b:ed:fc:e8:ea:bd:c0: fb:57:51:0d:f1:0e:76:41:d4:3e:2e:b2:91:57:46:7b:41:b6: 91:08:b1:eb:e8:04:52:5e:d5:3a:d1:7a:d7:1c:77:6d:f6:72: 32:ec:bb:85:43:fd:12:58:16:6e:7d:a6:e3:50:71:8a:ae:f4: e2:c9:1e:3b:84:ce:66:ed:1a:50:73:ee:45:75:bc:67:9f:48: 3c:c9:ed:9d:73:4e:be:e4:a4:8f:da:aa:98:91:30:25:b4:49: 0e:9c:97:d7:29:48:f1:bc:b3:98:71:e1:a6:2a:bd:61:cb:8a: 57:d2:17:6f:e7:01:5e:74:fd:2c:5d:b9:fa:d6:51:6a:5a:b5: 4f:42:89:d4:dc:01:e6:1a:e6:c0:e8:f9:63:32:43:3c:f5:83: 82:cb:ce:51:43:dc:7e:8c:3e:59:e6:0a:e6:47:31:f8:5c:3b: e4:dc:6f:27:72:88:f4:12:78:51:ee:bb:b2:fe:e3:fa:47:68: 3a:92:cd:46:bb:8c:9b:98:29:b4:95:38:2d:f6:52:32:72:2d: 89:cf:95:a5 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgIUAKAATAuf8Vz1vnZDLBOuY9itiUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTExMjYxNTU4MjRaFw0yNjExMjUxNjAzMjRaMDMxMTAvBgNV BAMTKDk4QzcyNTAxOTU1MTEyNzlGNjY5NkVFNTJGNUMxRTM3MTYyRkM3QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlIRHaqcYEBKj9pngxCmSZPZWB vCcamkWc3T6RFjon8rJXKsfMEXGcEp+40zsr7xoGpzwDCChSZruhi8HWBx9wHN8z yIgUcZ0CzmQO3fP3T7B9E7JbWa+qNOyubrNcZvgtzmn3FTreAEYOp8GDzWYz4X39 mfJ5sdd2Q2ZJ0YZLx/6Ohk4NWEUs5UpYdYGjMZdZ2h9/5uVbqfGSM7JBik8c6W/2 2MxINOTQVcMAY1imCBXpewC0IXNs9h71W2ajUgGr0E/Xtw8u0mIrtJZtfX8DIJLT gwNoillhenJGUvisxPvQRS4JzBd6dx8rME4yfbDJCZmkWWLlkUpPHftTXPOpAgMB AAGjggKzMIICrzAdBgNVHQ4EFgQUmMclAZVREnn2aW7lL1weNxYvx8cwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMzM1Ni5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCByQYIKwYBBQUHAQcBAf8EgbkwgbYwgbMEAgABMIGsAwQC LsoQAwQCLsoYAwQALso9AwQALspCAwQALspGAwQALspLAwQCLspoAwQCLspwAwQC Lsp4AwQCLssYAwQCLsswAwQCLstEAwQALsuZAwQAXHABAwQAXHAEAwQAXHAOAwQA XHBAAwQAXHBUAwQAXHBWAwQAXHBaAwQAXHBeAwQAXHBuAwQBXHGcMAwDBABccaMD BAFccaQDBABccagwDAMEAFxx4QMEAFxx4jANBgkqhkiG9w0BAQsFAAOCAQEASbOg 1v85fkft5SWas+KBTQrDlQS0ZK0SG0ZYnTj6P4B1zWzTOfCYRseUd4n+d3Ur7fzo 6r3A+1dRDfEOdkHUPi6ykVdGe0G2kQix6+gEUl7VOtF61xx3bfZyMuy7hUP9ElgW bn2m41Bxiq704skeO4TOZu0aUHPuRXW8Z59IPMntnXNOvuSkj9qqmJEwJbRJDpyX 1ylI8byzmHHhpiq9YcuKV9IXb+cBXnT9LF25+tZRalq1T0KJ1NwB5hrmwOj5YzJD PPWDgsvOUUPcfow+WeYK5kcx+Fw75NxvJ3KI9BJ4Ue67sv7j+kdoOpLNRruMm5gp tJU4LfZSMnItic+VpQ== -----END CERTIFICATE-----Generated at Mon Dec 8 04:07:41 2025 by rpki-client