This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401838.roa File: AS401838.roa (raw, json) Hash identifier: 3yM4LGuQj9RkaDaWE6WUYYh4kIqIdOZeSH7r2vaouw0= Subject key identifier: DB:9B:C7:B5:1E:E5:4A:04:0D:AA:BE:1F:EF:66:D9:9D:C9:4C:3B:2A Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 069A2C2B1DCE89927B360F5547DEEAAA89ECF984 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401838.roa Signing time: Thu 01 Jan 2026 00:07:11 +0000 ROA not before: Thu 01 Jan 2026 00:02:11 +0000 ROA not after: Thu 31 Dec 2026 00:07:11 +0000 asID: 401838 IP address blocks: 46.203.107.0/24 maxlen: 24 46.203.112.0/24 maxlen: 24 46.203.114.0/24 maxlen: 24 46.203.145.0/24 maxlen: 24 46.203.146.0/24 maxlen: 24 46.203.152.0/24 maxlen: 24 46.203.156.0/24 maxlen: 24 46.203.168.0/24 maxlen: 24 46.203.169.0/24 maxlen: 24 46.203.171.0/24 maxlen: 24 46.203.174.0/24 maxlen: 24 46.203.177.0/24 maxlen: 24 46.203.179.0/24 maxlen: 24 46.203.187.0/24 maxlen: 24 46.203.199.0/24 maxlen: 24 46.203.208.0/24 maxlen: 24 46.203.227.0/24 maxlen: 24 46.203.235.0/24 maxlen: 24 46.203.249.0/24 maxlen: 24 91.124.242.0/24 maxlen: 24 92.112.6.0/24 maxlen: 24 92.112.7.0/24 maxlen: 24 92.112.8.0/24 maxlen: 24 92.112.55.0/24 maxlen: 24 92.112.62.0/24 maxlen: 24 92.112.89.0/24 maxlen: 24 92.112.142.0/24 maxlen: 24 92.113.4.0/24 maxlen: 24 92.113.6.0/24 maxlen: 24 92.113.9.0/24 maxlen: 24 92.113.15.0/24 maxlen: 24 92.113.40.0/24 maxlen: 24 95.134.114.0/23 maxlen: 24 95.134.166.0/23 maxlen: 24 95.134.184.0/24 maxlen: 24 95.134.186.0/23 maxlen: 24 95.134.193.0/24 maxlen: 24 95.134.204.0/24 maxlen: 24 95.134.206.0/24 maxlen: 24 95.134.221.0/24 maxlen: 24 95.134.223.0/24 maxlen: 24 95.135.61.0/24 maxlen: 24 95.135.72.0/24 maxlen: 24 178.92.76.0/23 maxlen: 24 178.92.180.0/22 maxlen: 24 178.92.252.0/23 maxlen: 24 178.93.192.0/22 maxlen: 24 178.94.167.0/24 maxlen: 24 178.94.191.0/24 maxlen: 24 178.94.244.0/22 maxlen: 24 178.95.60.0/22 maxlen: 24 178.95.77.0/24 maxlen: 24 178.95.82.0/24 maxlen: 24 178.95.172.0/23 maxlen: 24 178.95.230.0/24 maxlen: 24 178.95.236.0/24 maxlen: 24 178.95.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:9a:2c:2b:1d:ce:89:92:7b:36:0f:55:47:de:ea:aa:89:ec:f9:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Jan 1 00:02:11 2026 GMT Not After : Dec 31 00:07:11 2026 GMT Subject: CN=DB9BC7B51EE54A040DAABE1FEF66D99DC94C3B2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:29:8e:6e:06:b5:8d:a1:82:4d:0c:7d:37:83: c5:14:4a:9d:dd:ad:d7:ea:a3:9c:60:b2:45:4e:3b: 13:cb:bd:4e:27:96:f1:38:0a:6a:d5:21:d2:fe:0e: 8c:1c:7e:4d:7f:b3:e7:66:5b:af:01:a3:7b:a7:15: 06:56:bf:4e:39:14:27:32:f2:e7:f9:1b:c7:a2:96: 01:83:7a:f2:e9:00:26:00:3a:00:6c:a5:09:b8:73: f6:95:0f:cf:48:de:3e:4c:25:bf:6b:7b:21:b4:cd: ba:09:0b:94:16:7e:11:d9:70:a0:9f:c0:05:1c:0c: 73:8f:4f:c4:51:b2:7e:e2:2d:ad:33:1f:9d:73:07: c7:76:48:f4:4c:11:f6:7c:f5:60:d3:12:c9:1b:7e: ce:99:81:9f:29:bd:6d:73:b3:70:c0:93:70:7e:8a: d7:be:3a:d3:21:a2:f7:67:ad:aa:f8:af:ce:78:2d: 60:42:a9:e9:eb:c0:f9:4f:c6:5e:51:e2:79:b5:93: 8c:06:52:c9:07:ce:08:25:57:9b:ef:5e:02:74:22: f3:d9:bf:2b:ea:5a:c1:09:c0:1d:31:48:67:2b:bc: f0:7c:b3:e5:54:08:df:92:f7:fb:16:a8:2a:12:a8: cc:08:c0:ae:b3:9a:7b:59:e7:63:06:c0:03:00:8b: 96:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9B:C7:B5:1E:E5:4A:04:0D:AA:BE:1F:EF:66:D9:9D:C9:4C:3B:2A X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.203.107.0/24 46.203.112.0/24 46.203.114.0/24 46.203.145.0-46.203.146.255 46.203.152.0/24 46.203.156.0/24 46.203.168.0/23 46.203.171.0/24 46.203.174.0/24 46.203.177.0/24 46.203.179.0/24 46.203.187.0/24 46.203.199.0/24 46.203.208.0/24 46.203.227.0/24 46.203.235.0/24 46.203.249.0/24 91.124.242.0/24 92.112.6.0-92.112.8.255 92.112.55.0/24 92.112.62.0/24 92.112.89.0/24 92.112.142.0/24 92.113.4.0/24 92.113.6.0/24 92.113.9.0/24 92.113.15.0/24 92.113.40.0/24 95.134.114.0/23 95.134.166.0/23 95.134.184.0/24 95.134.186.0/23 95.134.193.0/24 95.134.204.0/24 95.134.206.0/24 95.134.221.0/24 95.134.223.0/24 95.135.61.0/24 95.135.72.0/24 178.92.76.0/23 178.92.180.0/22 178.92.252.0/23 178.93.192.0/22 178.94.167.0/24 178.94.191.0/24 178.94.244.0/22 178.95.60.0/22 178.95.77.0/24 178.95.82.0/24 178.95.172.0/23 178.95.230.0/24 178.95.236.0/24 178.95.251.0/24 Signature Algorithm: sha256WithRSAEncryption 32:51:9e:c7:d8:f3:fd:58:f6:6e:e6:1d:af:39:6c:49:4e:0e: ea:10:46:df:b9:5e:0b:c5:cf:df:40:fb:fa:4c:c0:02:d2:70: c6:8a:12:b3:c1:96:7b:c9:0c:fa:48:e4:52:94:7d:af:e2:11: 99:d2:95:81:07:4c:5f:7d:e0:d2:4f:b6:be:dc:74:56:b0:61: d2:db:0d:88:79:63:85:76:c9:76:cd:d4:09:24:76:a7:09:50: a2:f6:4d:93:09:94:71:f0:c9:aa:9d:01:a9:27:a8:5c:7c:63: 37:22:39:bf:82:8a:e5:2d:ee:4f:1b:40:73:c3:61:60:85:e3: a1:c3:c1:df:c8:81:47:06:e3:63:02:84:3f:6c:5a:09:46:a5: 3c:5c:e7:59:89:9d:be:1b:37:0a:9f:ed:92:0e:24:88:d5:dd: 54:cd:7f:f4:e1:dd:fb:53:8f:03:e5:53:70:a3:f0:d1:34:c6: a7:fc:35:3a:f9:4a:a7:0f:3a:24:73:6b:58:68:02:9e:81:b7: c1:17:16:18:72:fe:b8:41:42:be:da:2b:1e:c5:97:81:f8:ce: c1:b1:d1:84:5a:ba:dd:0c:f4:e8:36:4e:9e:c7:7b:63:c1:74: d5:be:62:24:24:82:aa:22:15:ae:bf:6e:1d:2c:2a:f2:c6:44: 15:ee:bd:e4 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUBposKx3OiZJ7Ng9VR97qqons+YQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNjAxMDEwMDAyMTFaFw0yNjEyMzEwMDA3MTFaMDMxMTAvBgNV BAMTKERCOUJDN0I1MUVFNTRBMDQwREFBQkUxRkVGNjZEOTlEQzk0QzNCMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZKY5uBrWNoYJNDH03g8UUSp3d rdfqo5xgskVOOxPLvU4nlvE4CmrVIdL+Dowcfk1/s+dmW68Bo3unFQZWv045FCcy 8uf5G8eilgGDevLpACYAOgBspQm4c/aVD89I3j5MJb9reyG0zboJC5QWfhHZcKCf wAUcDHOPT8RRsn7iLa0zH51zB8d2SPRMEfZ89WDTEskbfs6ZgZ8pvW1zs3DAk3B+ ite+OtMhovdnrar4r854LWBCqenrwPlPxl5R4nm1k4wGUskHzgglV5vvXgJ0IvPZ vyvqWsEJwB0xSGcrvPB8s+VUCN+S9/sWqCoSqMwIwK6zmntZ52MGwAMAi5a3AgMB AAGjggNcMIIDWDAdBgNVHQ4EFgQU25vHtR7lSgQNqr4f72bZnclMOyowHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDAxODM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMIIBbwYIKwYBBQUHAQcBAf8EggFeMIIBWjCCAVYEAgAB MIIBTgMEAC7LawMEAC7LcAMEAC7LcjAMAwQALsuRAwQALsuSAwQALsuYAwQALsuc AwQBLsuoAwQALsurAwQALsuuAwQALsuxAwQALsuzAwQALsu7AwQALsvHAwQALsvQ AwQALsvjAwQALsvrAwQALsv5AwQAW3zyMAwDBAFccAYDBABccAgDBABccDcDBABc cD4DBABccFkDBABccI4DBABccQQDBABccQYDBABccQkDBABccQ8DBABccSgDBAFf hnIDBAFfhqYDBABfhrgDBAFfhroDBABfhsEDBABfhswDBABfhs4DBABfht0DBABf ht8DBABfhz0DBABfh0gDBAGyXEwDBAKyXLQDBAGyXPwDBAKyXcADBACyXqcDBACy Xr8DBAKyXvQDBAKyXzwDBACyX00DBACyX1IDBAGyX6wDBACyX+YDBACyX+wDBACy X/swDQYJKoZIhvcNAQELBQADggEBADJRnsfY8/1Y9m7mHa85bElODuoQRt+5XgvF z99A+/pMwALScMaKErPBlnvJDPpI5FKUfa/iEZnSlYEHTF994NJPtr7cdFawYdLb DYh5Y4V2yXbN1AkkdqcJUKL2TZMJlHHwyaqdAaknqFx8YzciOb+CiuUt7k8bQHPD YWCF46HDwd/IgUcG42MChD9sWglGpTxc51mJnb4bNwqf7ZIOJIjV3VTNf/Th3ftT jwPlU3Cj8NE0xqf8NTr5SqcPOiRza1hoAp6Bt8EXFhhy/rhBQr7aKx7Fl4H4zsGx 0YRaut0M9Og2Tp7He2PBdNW+YiQkgqoiFa6/bh0sKvLGRBXuveQ= -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:29 2026 by rpki-client