This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS146996.roa File: AS146996.roa (raw, json) Hash identifier: DU6qNJM2aoRkF2Itm7aIFXdaDU2QMTWmsQt2Sz5zRcQ= Subject key identifier: 27:14:1F:F4:93:16:0E:85:5C:54:68:39:41:39:70:48:AF:F5:2E:0E Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 6A8BCB9BFD3B5681045A0B61BB07DD9D743649BE Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS146996.roa Signing time: Tue 13 Jan 2026 12:41:09 +0000 ROA not before: Tue 13 Jan 2026 12:36:09 +0000 ROA not after: Tue 12 Jan 2027 12:41:09 +0000 asID: 146996 IP address blocks: 143.14.4.0/24 maxlen: 24 143.14.5.0/24 maxlen: 24 143.14.77.0/24 maxlen: 24 168.222.2.0/24 maxlen: 24 168.222.16.0/24 maxlen: 24 168.222.27.0/24 maxlen: 24 168.222.55.0/24 maxlen: 24 168.222.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:8b:cb:9b:fd:3b:56:81:04:5a:0b:61:bb:07:dd:9d:74:36:49:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 13 12:36:09 2026 GMT Not After : Jan 12 12:41:09 2027 GMT Subject: CN=27141FF493160E855C54683941397048AFF52E0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2f:e0:f3:86:53:03:ae:94:a0:f2:10:72:6a: 3d:fc:01:6e:a2:de:03:6e:82:64:18:88:2b:de:8c: 7b:4d:e9:0f:eb:46:f5:9e:d2:88:05:6a:8c:77:a4: 84:b3:cd:4e:62:81:c2:d3:20:d3:3e:97:77:d5:05: 0e:03:57:47:ba:00:7b:6a:33:d0:71:89:0c:ec:a4: 5b:d0:6e:0c:b4:e4:8e:34:27:3b:3d:08:0d:f9:c7: de:d2:3c:61:69:0c:a0:9f:17:bb:1e:da:90:03:74: 3c:f6:71:47:e3:7c:cc:b2:27:3a:f4:e5:95:56:81: 8c:38:70:43:f8:e2:60:38:15:81:1b:1d:2f:63:3f: ba:14:71:86:6c:72:54:7d:f6:62:d8:d3:be:fd:1f: 45:1a:e2:04:91:02:4b:8e:51:0e:41:cb:e7:b9:f2: 25:99:20:31:9e:ac:03:1c:ec:16:32:91:13:81:53: 1e:c3:1f:b9:2e:59:4e:6f:dc:c6:d0:4a:7c:f3:fc: 9a:54:7b:4d:bf:fa:1e:86:ae:7d:c8:ae:55:08:94: 19:8c:76:bf:72:e7:c4:63:e2:e7:df:22:9d:f7:14: 33:e2:fe:fb:85:90:e8:2c:76:bb:b5:80:2b:e5:79: a9:86:4c:c0:26:69:31:49:9a:45:e1:45:5c:85:25: cb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:14:1F:F4:93:16:0E:85:5C:54:68:39:41:39:70:48:AF:F5:2E:0E X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS146996.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.14.4.0/23 143.14.77.0/24 168.222.2.0/24 168.222.16.0/24 168.222.27.0/24 168.222.55.0/24 168.222.60.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:41:06:b2:ad:f7:c7:d7:15:77:d6:2a:42:b6:ad:a4:67:76: 0d:9c:23:e8:65:cf:cb:8b:f2:e3:e0:8f:24:7c:8a:d1:56:9a: bd:6b:0a:ac:ac:b4:e4:4b:42:1f:62:27:94:55:d4:0e:4e:15: d2:cc:9f:78:11:f0:a9:7d:5f:9d:f0:39:d6:aa:c8:ae:8f:cc: 8b:06:67:be:f9:0a:31:d4:53:61:33:f7:fe:1e:45:f4:f4:dc: f5:1f:ea:53:93:fa:e9:f4:84:06:de:e2:38:b7:76:34:d6:18: 76:ae:cc:71:a7:6d:08:87:3c:65:9f:50:ed:6f:75:27:73:64: 29:95:2c:ac:89:52:1f:15:6e:a2:93:07:7c:82:3e:fb:28:c6: 70:22:34:07:3e:38:04:d8:61:ca:a3:4e:8f:75:44:43:4d:f0: 1a:cd:28:e3:03:15:88:04:60:db:39:24:47:40:4f:1e:b5:34: fc:1c:42:65:9b:b3:62:bc:a5:a5:8d:0b:0b:fd:7c:e2:0f:a7: 68:6b:7d:49:24:f5:14:79:75:e8:7b:6e:89:87:83:ba:41:7f: e2:ce:4a:62:d5:56:a6:37:45:20:12:35:19:4a:98:4b:38:a9: 90:66:e4:f7:76:4f:50:56:24:f7:4e:6c:73:b0:dd:16:20:a9: 8d:d9:30:db -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUaovLm/07VoEEWgthuwfdnXQ2Sb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMTMxMjM2MDlaFw0yNzAxMTIxMjQxMDlaMDMxMTAvBgNV BAMTKDI3MTQxRkY0OTMxNjBFODU1QzU0NjgzOTQxMzk3MDQ4QUZGNTJFMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdL+DzhlMDrpSg8hByaj38AW6i 3gNugmQYiCvejHtN6Q/rRvWe0ogFaox3pISzzU5igcLTINM+l3fVBQ4DV0e6AHtq M9BxiQzspFvQbgy05I40Jzs9CA35x97SPGFpDKCfF7se2pADdDz2cUfjfMyyJzr0 5ZVWgYw4cEP44mA4FYEbHS9jP7oUcYZsclR99mLY0779H0Ua4gSRAkuOUQ5By+e5 8iWZIDGerAMc7BYykROBUx7DH7kuWU5v3MbQSnzz/JpUe02/+h6Grn3IrlUIlBmM dr9y58Rj4uffIp33FDPi/vuFkOgsdru1gCvleamGTMAmaTFJmkXhRVyFJcspAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUJxQf9JMWDoVcVGg5QTlwSK/1Lg4wHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTQ2OTk2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBjw4E AwQAjw5NAwQAqN4CAwQAqN4QAwQAqN4bAwQAqN43AwQAqN48MA0GCSqGSIb3DQEB CwUAA4IBAQB8QQayrffH1xV31ipCtq2kZ3YNnCPoZc/Li/Lj4I8kfIrRVpq9awqs rLTkS0IfYieUVdQOThXSzJ94EfCpfV+d8DnWqsiuj8yLBme++Qox1FNhM/f+HkX0 9Nz1H+pTk/rp9IQG3uI4t3Y01hh2rsxxp20Ihzxln1Dtb3Unc2QplSysiVIfFW6i kwd8gj77KMZwIjQHPjgE2GHKo06PdURDTfAazSjjAxWIBGDbOSRHQE8etTT8HEJl m7NivKWljQsL/XziD6doa31JJPUUeXXoe26Jh4O6QX/izkpi1VamN0UgEjUZSphL OKmQZuT3dk9QViT3TmxzsN0WIKmN2TDb -----END CERTIFICATE-----Generated at Mon Jan 19 08:20:04 2026 by rpki-client