This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS396356.roa File: AS396356.roa (raw, json) Hash identifier: DAMFwLPAhhvVbUc0FC8bNblAQQVHd/Six/d+Yo+t84g= Subject key identifier: 9F:D5:AC:93:18:03:DC:45:E2:6E:2B:B7:0C:E2:D5:BB:3A:A3:49:C6 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 414E27F336AA55130107AB4D8C227FFE2DC95D07 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS396356.roa Signing time: Mon 05 Jan 2026 14:33:56 +0000 ROA not before: Mon 05 Jan 2026 14:28:56 +0000 ROA not after: Mon 04 Jan 2027 14:33:56 +0000 asID: 396356 IP address blocks: 46.202.4.0/22 maxlen: 24 46.202.20.0/22 maxlen: 24 46.202.108.0/22 maxlen: 24 46.203.8.0/22 maxlen: 24 46.203.64.0/22 maxlen: 24 46.203.218.0/24 maxlen: 24 46.203.224.0/24 maxlen: 24 46.203.226.0/24 maxlen: 24 46.203.228.0/24 maxlen: 24 46.203.229.0/24 maxlen: 24 46.203.230.0/24 maxlen: 24 46.203.231.0/24 maxlen: 24 46.203.232.0/24 maxlen: 24 91.124.184.0/24 maxlen: 24 92.112.155.0/24 maxlen: 24 92.112.160.0/24 maxlen: 24 92.112.161.0/24 maxlen: 24 92.112.162.0/24 maxlen: 24 92.112.163.0/24 maxlen: 24 92.112.165.0/24 maxlen: 24 92.112.166.0/24 maxlen: 24 92.112.167.0/24 maxlen: 24 92.112.201.0/24 maxlen: 24 92.113.129.0/24 maxlen: 24 92.113.133.0/24 maxlen: 24 92.113.134.0/24 maxlen: 24 92.113.135.0/24 maxlen: 24 92.113.138.0/24 maxlen: 24 92.113.139.0/24 maxlen: 24 92.113.140.0/24 maxlen: 24 92.113.141.0/24 maxlen: 24 92.113.231.0/24 maxlen: 24 92.113.236.0/24 maxlen: 24 92.113.241.0/24 maxlen: 24 92.113.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:4e:27:f3:36:aa:55:13:01:07:ab:4d:8c:22:7f:fe:2d:c9:5d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Jan 5 14:28:56 2026 GMT Not After : Jan 4 14:33:56 2027 GMT Subject: CN=9FD5AC931803DC45E26E2BB70CE2D5BB3AA349C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d9:de:75:8b:44:44:65:f0:85:e1:a3:ba:1e: f3:d0:f6:fb:22:e7:43:9c:1a:ac:40:e6:0d:9e:f8: 02:9f:ff:69:67:0f:f7:2a:10:70:2c:67:5a:ee:e7: 6e:07:75:92:9c:65:f8:54:6d:ee:80:42:92:99:b7: 19:b9:96:c0:f0:c8:85:7d:9c:45:8d:1a:de:af:ef: 30:e2:18:e7:55:6d:28:10:0e:07:56:4e:47:83:47: ca:3a:bf:9b:09:1a:7c:a2:1e:a4:81:b5:e1:e3:85: 98:46:62:fb:fb:5a:21:1c:13:92:15:a3:df:a8:16: b2:80:1a:5c:67:02:b0:e0:bc:b5:56:7a:0d:ec:19: ac:d2:40:01:47:3a:ba:ef:5a:bc:2e:ea:a9:91:5e: 06:3e:e9:de:a1:3d:12:aa:27:fa:af:3e:0f:67:ac: b7:da:fd:07:fb:98:b5:5a:32:8c:a5:da:95:68:10: 34:05:6f:9e:5a:b0:b0:82:d4:2e:27:34:1f:d3:87: f4:0b:58:3a:5d:3d:d7:bc:f5:81:4e:4e:48:5f:a4: 66:c9:90:5c:b1:01:f6:09:cc:4b:4c:e3:1f:7a:f4: 84:c1:1d:4a:97:b0:4b:7e:51:c6:0c:5b:f9:7c:5c: 33:e9:41:39:e8:96:e1:7c:6a:af:02:a4:2d:f0:18: 01:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D5:AC:93:18:03:DC:45:E2:6E:2B:B7:0C:E2:D5:BB:3A:A3:49:C6 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS396356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.202.4.0/22 46.202.20.0/22 46.202.108.0/22 46.203.8.0/22 46.203.64.0/22 46.203.218.0/24 46.203.224.0/24 46.203.226.0/24 46.203.228.0-46.203.232.255 91.124.184.0/24 92.112.155.0/24 92.112.160.0/22 92.112.165.0-92.112.167.255 92.112.201.0/24 92.113.129.0/24 92.113.133.0-92.113.135.255 92.113.138.0-92.113.141.255 92.113.231.0/24 92.113.236.0/24 92.113.241.0/24 92.113.246.0/24 Signature Algorithm: sha256WithRSAEncryption 86:f3:df:4f:55:50:5f:44:ac:50:17:b4:f6:aa:cd:6c:02:2e: fe:b1:9d:a1:ea:71:60:6f:28:fd:e8:73:55:bb:1f:78:05:aa: 58:0c:ef:34:a3:25:69:a1:7f:fd:2d:a6:62:e6:ff:b8:e9:c1: 31:61:bd:b8:e1:e8:15:40:6f:9c:ac:a5:43:ae:ad:2e:5e:d4: 31:f2:48:c8:04:a9:fa:60:d8:1b:7b:8b:38:dd:41:f4:24:c5: 5d:19:e8:ce:4e:ac:3d:a2:d3:d5:66:b5:65:41:35:ab:59:2f: c2:2c:b8:fe:9a:65:c7:df:aa:0d:62:f2:58:95:a2:da:a9:ae: 55:bb:a3:2b:50:fa:7f:5e:bb:29:e6:3c:f2:2f:5c:50:c9:79: f3:6b:0e:29:84:7b:59:72:1c:8b:d5:13:93:f0:c8:37:7b:7b: 17:c3:4b:98:6f:94:80:04:22:fc:dc:4b:d2:13:b5:dc:69:9a: 9f:d0:3f:fd:f7:82:21:89:26:6f:97:6e:c2:18:26:7a:7a:be: 8e:27:b8:c2:4b:cb:c2:12:3c:a6:8f:82:e8:b4:06:17:83:08: b8:7e:84:1c:da:72:8e:bd:d2:f6:22:b1:2d:b3:7a:49:aa:fc: 53:d8:80:d0:ae:67:7c:46:65:1c:7f:32:c6:5c:d0:5a:1f:bc: 49:2f:ad:70 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUQU4n8zaqVRMBB6tNjCJ//i3JXQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNjAxMDUxNDI4NTZaFw0yNzAxMDQxNDMzNTZaMDMxMTAvBgNV BAMTKDlGRDVBQzkzMTgwM0RDNDVFMjZFMkJCNzBDRTJENUJCM0FBMzQ5QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc2d51i0REZfCF4aO6HvPQ9vsi 50OcGqxA5g2e+AKf/2lnD/cqEHAsZ1ru524HdZKcZfhUbe6AQpKZtxm5lsDwyIV9 nEWNGt6v7zDiGOdVbSgQDgdWTkeDR8o6v5sJGnyiHqSBteHjhZhGYvv7WiEcE5IV o9+oFrKAGlxnArDgvLVWeg3sGazSQAFHOrrvWrwu6qmRXgY+6d6hPRKqJ/qvPg9n rLfa/Qf7mLVaMoyl2pVoEDQFb55asLCC1C4nNB/Th/QLWDpdPde89YFOTkhfpGbJ kFyxAfYJzEtM4x969ITBHUqXsEt+UcYMW/l8XDPpQTnoluF8aq8CpC3wGAGBAgMB AAGjggKnMIICozAdBgNVHQ4EFgQUn9WskxgD3EXibiu3DOLVuzqjScYwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMzk2MzU2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBpQQCAAEwgZ4D BAIuygQDBAIuyhQDBAIuymwDBAIuywgDBAIuy0ADBAAuy9oDBAAuy+ADBAAuy+Iw DAMEAi7L5AMEAC7L6AMEAFt8uAMEAFxwmwMEAlxwoDAMAwQAXHClAwQDXHCgAwQA XHDJAwQAXHGBMAwDBABccYUDBANccYAwDAMEAVxxigMEAVxxjAMEAFxx5wMEAFxx 7AMEAFxx8QMEAFxx9jANBgkqhkiG9w0BAQsFAAOCAQEAhvPfT1VQX0SsUBe09qrN bAIu/rGdoepxYG8o/ehzVbsfeAWqWAzvNKMlaaF//S2mYub/uOnBMWG9uOHoFUBv nKylQ66tLl7UMfJIyASp+mDYG3uLON1B9CTFXRnozk6sPaLT1Wa1ZUE1q1kvwiy4 /pplx9+qDWLyWJWi2qmuVbujK1D6f167KeY88i9cUMl582sOKYR7WXIci9UTk/DI N3t7F8NLmG+UgAQi/NxL0hO13Gman9A//feCIYkmb5duwhgmenq+jie4wkvLwhI8 po+C6LQGF4MIuH6EHNpyjr3S9iKxLbN6Sar8U9iA0K5nfEZlHH8yxlzQWh+8SS+t cA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:30 2026 by rpki-client