This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS146996.roa File: AS146996.roa (raw, json) Hash identifier: mzg5+/4KtTKS9NTytDl77VL0L8AZFEmbGLlR0Kds6yo= Subject key identifier: 7E:E0:BF:7A:D4:DE:44:A3:8F:F2:78:7D:6B:F1:48:9A:BD:D7:0C:5A Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 3DD2189FCF3D8E96F6CE75B6E78B0DDF8B6FF3E5 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS146996.roa Signing time: Fri 28 Nov 2025 08:51:17 +0000 ROA not before: Fri 28 Nov 2025 08:46:17 +0000 ROA not after: Fri 27 Nov 2026 08:51:17 +0000 asID: 146996 IP address blocks: 143.14.4.0/24 maxlen: 24 143.14.5.0/24 maxlen: 24 168.222.2.0/24 maxlen: 24 168.222.16.0/24 maxlen: 24 168.222.27.0/24 maxlen: 24 168.222.55.0/24 maxlen: 24 168.222.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d2:18:9f:cf:3d:8e:96:f6:ce:75:b6:e7:8b:0d:df:8b:6f:f3:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 28 08:46:17 2025 GMT Not After : Nov 27 08:51:17 2026 GMT Subject: CN=7EE0BF7AD4DE44A38FF2787D6BF1489ABDD70C5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:80:54:67:82:31:d2:68:94:91:60:62:6d: af:4f:a4:aa:ac:c2:f4:86:82:fd:07:11:e7:f8:6d: 24:44:58:27:91:e6:5c:cd:47:04:d0:17:66:33:5a: 48:60:5a:c8:cf:b6:95:b1:8e:9c:9c:52:8f:31:d3: be:eb:1b:87:f1:db:0f:3e:6c:91:aa:5e:b0:7b:a1: e2:18:a2:f0:d4:b0:ba:ee:de:c0:1c:da:9f:ee:65: c7:33:cf:8e:d4:70:6a:29:71:d9:05:91:b7:8c:2c: 13:b8:bf:93:76:9e:28:78:80:59:c7:c5:a1:58:a6: e3:4d:7c:95:6e:e2:5a:bb:fa:f4:92:08:92:36:71: 4c:59:c1:39:49:20:12:57:f8:09:e1:c2:86:9d:e7: 6d:61:1b:e9:2c:91:b3:00:97:3a:23:eb:ce:1f:f1: fb:59:f0:d8:9c:02:e9:26:c1:74:72:93:1a:59:1b: a9:31:7c:0f:33:48:30:a3:b3:51:c9:a4:37:85:53: 4b:73:a2:9c:fb:f6:2f:1c:62:b7:ca:e2:d6:bd:0b: 00:93:d6:f8:5e:7d:12:ec:e9:24:53:27:44:e4:a2: c1:40:9d:c7:86:0b:38:01:bb:86:41:26:83:39:90: 18:51:5a:89:cf:10:59:ef:bd:84:0a:29:93:ab:f6: c9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E0:BF:7A:D4:DE:44:A3:8F:F2:78:7D:6B:F1:48:9A:BD:D7:0C:5A X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS146996.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.14.4.0/23 168.222.2.0/24 168.222.16.0/24 168.222.27.0/24 168.222.55.0/24 168.222.60.0/24 Signature Algorithm: sha256WithRSAEncryption 52:56:93:c5:b1:f6:e4:c8:83:9b:4d:11:51:d2:f7:76:33:16: 76:84:39:1c:66:ce:87:e3:50:f5:cc:7b:75:25:fb:bd:d5:f0: 16:9b:47:82:45:50:55:5f:c4:08:dd:49:be:74:5c:d1:35:2c: b6:52:05:42:ef:44:96:9f:70:ce:de:ea:c5:36:76:c4:3d:8c: 88:ce:11:a2:e8:3c:a3:3a:0e:ec:f7:69:f6:8d:ec:3c:e6:13: c2:df:43:fb:e4:0f:eb:83:48:e0:27:e3:85:5e:c7:9b:f4:a3: c0:a1:38:b4:e2:9c:d7:e8:a6:6e:dd:ca:62:b2:d0:5f:bd:ae: 7f:88:8e:28:0d:c5:d1:1d:4a:f2:d5:3d:f1:63:f0:ac:62:54: 02:f4:af:ab:f4:9d:b4:ee:a6:be:a6:b3:60:80:d9:1e:43:82: 1f:ce:21:fa:85:c3:76:87:83:6c:5f:7f:6c:fc:0f:7a:57:2f: 50:1b:4a:9b:5a:f7:32:6b:a7:3d:f4:83:84:f5:42:8b:f6:ef: 89:54:1c:dc:bb:66:b4:46:dd:88:8f:ea:17:8d:b7:c1:8f:dd: 7f:84:69:7c:2c:d8:5f:00:b1:88:63:96:25:04:fa:63:4d:ee: 59:97:99:e4:f7:b7:60:97:a5:9b:64:ff:3c:92:f7:3d:ee:de: 5a:c7:14:f1 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUPdIYn889jpb2znW254sN34tv8+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMjgwODQ2MTdaFw0yNjExMjcwODUxMTdaMDMxMTAvBgNV BAMTKDdFRTBCRjdBRDRERTQ0QTM4RkYyNzg3RDZCRjE0ODlBQkRENzBDNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKCYBUZ4Ix0miUkWBiba9PpKqs wvSGgv0HEef4bSREWCeR5lzNRwTQF2YzWkhgWsjPtpWxjpycUo8x077rG4fx2w8+ bJGqXrB7oeIYovDUsLru3sAc2p/uZcczz47UcGopcdkFkbeMLBO4v5N2nih4gFnH xaFYpuNNfJVu4lq7+vSSCJI2cUxZwTlJIBJX+Anhwoad521hG+kskbMAlzoj684f 8ftZ8NicAukmwXRykxpZG6kxfA8zSDCjs1HJpDeFU0tzopz79i8cYrfK4ta9CwCT 1vhefRLs6SRTJ0TkosFAnceGCzgBu4ZBJoM5kBhRWonPEFnvvYQKKZOr9skNAgMB AAGjggIoMIICJDAdBgNVHQ4EFgQUfuC/etTeRKOP8nh9a/FImr3XDFowHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTQ2OTk2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBjw4E AwQAqN4CAwQAqN4QAwQAqN4bAwQAqN43AwQAqN48MA0GCSqGSIb3DQEBCwUAA4IB AQBSVpPFsfbkyIObTRFR0vd2MxZ2hDkcZs6H41D1zHt1Jfu91fAWm0eCRVBVX8QI 3Um+dFzRNSy2UgVC70SWn3DO3urFNnbEPYyIzhGi6DyjOg7s92n2jew85hPC30P7 5A/rg0jgJ+OFXseb9KPAoTi04pzX6KZu3cpistBfva5/iI4oDcXRHUry1T3xY/Cs YlQC9K+r9J207qa+prNggNkeQ4IfziH6hcN2h4NsX39s/A96Vy9QG0qbWvcya6c9 9IOE9UKL9u+JVBzcu2a0Rt2Ij+oXjbfBj91/hGl8LNhfALGIY5YlBPpjTe5Zl5nk 97dgl6WbZP88kvc97t5axxTx -----END CERTIFICATE-----Generated at Fri Dec 5 05:06:10 2025 by rpki-client