This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401776.roa File: AS401776.roa (raw, json) Hash identifier: NA7gjAgrEvcYCt8DeaNrZmPKN2JPutR50my3KIhplPo= Subject key identifier: CF:CB:26:F1:B3:BA:6F:AF:F5:81:76:A2:D5:4B:0F:8C:52:A6:9E:85 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 55F6A6FB4C15360E99434D6E39C28CAFF3E7A7D9 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401776.roa Signing time: Thu 04 Dec 2025 03:47:40 +0000 ROA not before: Thu 04 Dec 2025 03:42:40 +0000 ROA not after: Thu 03 Dec 2026 03:47:40 +0000 asID: 401776 IP address blocks: 46.202.32.0/24 maxlen: 24 46.203.33.0/24 maxlen: 24 46.203.72.0/24 maxlen: 24 46.203.81.0/24 maxlen: 24 46.203.135.0/24 maxlen: 24 92.113.208.0/24 maxlen: 24 95.134.143.0/24 maxlen: 24 95.135.58.0/24 maxlen: 24 95.135.164.0/24 maxlen: 24 95.135.192.0/24 maxlen: 24 178.92.22.0/24 maxlen: 24 178.92.103.0/24 maxlen: 24 178.94.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f6:a6:fb:4c:15:36:0e:99:43:4d:6e:39:c2:8c:af:f3:e7:a7:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 4 03:42:40 2025 GMT Not After : Dec 3 03:47:40 2026 GMT Subject: CN=CFCB26F1B3BA6FAFF58176A2D54B0F8C52A69E85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:78:83:5b:e9:55:54:e1:ae:8a:54:b4:48:ff: e9:55:ae:9f:db:e1:84:d6:76:dc:4d:34:fa:c2:04: 9d:93:25:bb:c4:b4:8e:bb:19:2c:3a:a8:7c:16:47: 9e:3c:dc:14:c6:c2:c4:1f:46:1f:b7:54:2e:9f:59: c6:8d:c4:d4:bf:03:eb:82:0f:4e:ca:d5:48:fb:3d: 0d:ae:9a:16:07:7e:3e:3e:93:f4:11:e5:f8:91:42: da:e8:9a:bd:cf:28:ba:35:8d:ab:cf:e1:80:8e:81: 60:d0:8c:74:83:e8:fb:c6:17:66:07:bc:5d:d3:e8: 89:e1:b8:30:1d:07:5d:7b:77:6f:b5:54:bf:06:86: eb:7a:4a:55:12:5a:54:28:6d:c4:b9:59:c2:d3:93: d4:92:9d:8a:00:a8:81:e8:7a:97:20:d5:c4:fe:be: 06:0b:b7:c9:95:8e:08:bf:b5:ec:89:65:e2:1c:d3: 3e:35:67:e6:90:3c:71:6f:13:26:5f:1c:08:6c:77: ea:71:a3:63:f0:a3:1b:39:5b:10:ad:81:cd:d7:9b: 1c:c8:5f:43:12:6e:f7:32:c7:2d:25:8d:96:13:5e: b1:cc:bb:46:31:46:d2:26:a7:c5:cc:e0:ef:af:ab: 37:31:8e:54:42:84:99:38:7d:af:f3:cf:40:60:16: 51:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CB:26:F1:B3:BA:6F:AF:F5:81:76:A2:D5:4B:0F:8C:52:A6:9E:85 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401776.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.202.32.0/24 46.203.33.0/24 46.203.72.0/24 46.203.81.0/24 46.203.135.0/24 92.113.208.0/24 95.134.143.0/24 95.135.58.0/24 95.135.164.0/24 95.135.192.0/24 178.92.22.0/24 178.92.103.0/24 178.94.140.0/22 Signature Algorithm: sha256WithRSAEncryption 79:19:b4:10:0a:fa:47:e3:5e:f4:24:ca:c7:9b:e5:13:f0:f6: e3:58:a5:4c:8a:74:ef:fd:37:85:e0:b4:39:26:75:8c:e0:f1: ef:db:2a:9c:2a:34:b0:00:04:aa:f2:5c:b7:8c:86:4e:76:63: bf:ba:e9:e7:b3:52:5f:66:2f:fc:ae:0a:b3:eb:34:96:88:d8: 3a:9e:99:f9:43:d6:88:27:ec:89:08:4f:d9:96:3d:f4:54:12: bd:38:d1:da:ec:94:07:00:4d:96:f9:07:8e:83:ce:ac:7a:60: 30:63:0a:e8:31:02:23:0b:1c:e3:18:2f:bf:ae:2e:a1:95:0a: 80:c4:53:4e:1a:3f:25:d0:ac:ea:7b:03:13:8f:42:28:62:0c: 7f:3e:01:26:62:b8:5b:dd:7f:0e:a6:61:30:8f:fc:71:4e:a7: 2a:2f:10:a5:5a:42:0d:ae:f9:76:55:43:f8:7d:ca:da:2a:b9: b0:be:be:0f:18:90:8e:ae:73:1b:af:0b:dc:f7:1b:45:a3:32: d4:b6:e1:a8:a6:29:36:ad:e2:71:30:f4:37:62:23:dd:2a:e5: 49:16:5b:f7:90:18:f4:66:a4:17:29:52:3a:ab:a1:f2:dc:de: 38:0c:3e:b3:db:76:9c:c5:b7:c8:7b:e4:49:f2:25:8f:13:24: d6:b6:87:29 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUVfam+0wVNg6ZQ01uOcKMr/Pnp9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMDQwMzQyNDBaFw0yNjEyMDMwMzQ3NDBaMDMxMTAvBgNV BAMTKENGQ0IyNkYxQjNCQTZGQUZGNTgxNzZBMkQ1NEIwRjhDNTJBNjlFODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCieINb6VVU4a6KVLRI/+lVrp/b 4YTWdtxNNPrCBJ2TJbvEtI67GSw6qHwWR5483BTGwsQfRh+3VC6fWcaNxNS/A+uC D07K1Uj7PQ2umhYHfj4+k/QR5fiRQtromr3PKLo1javP4YCOgWDQjHSD6PvGF2YH vF3T6InhuDAdB117d2+1VL8Ghut6SlUSWlQobcS5WcLTk9SSnYoAqIHoepcg1cT+ vgYLt8mVjgi/teyJZeIc0z41Z+aQPHFvEyZfHAhsd+pxo2Pwoxs5WxCtgc3XmxzI X0MSbvcyxy0ljZYTXrHMu0YxRtImp8XM4O+vqzcxjlRChJk4fa/zz0BgFlHBAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUz8sm8bO6b6/1gXai1UsPjFKmnoUwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDAxNzc2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQALsog AwQALsshAwQALstIAwQALstRAwQALsuHAwQAXHHQAwQAX4aPAwQAX4c6AwQAX4ek AwQAX4fAAwQAslwWAwQAslxnAwQCsl6MMA0GCSqGSIb3DQEBCwUAA4IBAQB5GbQQ CvpH4170JMrHm+UT8PbjWKVMinTv/TeF4LQ5JnWM4PHv2yqcKjSwAASq8ly3jIZO dmO/uunns1JfZi/8rgqz6zSWiNg6npn5Q9aIJ+yJCE/Zlj30VBK9ONHa7JQHAE2W +QeOg86semAwYwroMQIjCxzjGC+/ri6hlQqAxFNOGj8l0KzqewMTj0IoYgx/PgEm Yrhb3X8OpmEwj/xxTqcqLxClWkINrvl2VUP4fcraKrmwvr4PGJCOrnMbrwvc9xtF ozLUtuGopik2reJxMPQ3YiPdKuVJFlv3kBj0ZqQXKVI6q6Hy3N44DD6z23acxbfI e+RJ8iWPEyTWtocp -----END CERTIFICATE-----Generated at Sat Dec 6 17:31:35 2025 by rpki-client