This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151389.roa File: AS151389.roa (raw, json) Hash identifier: ocCqtf5yO+XNfcYb+XDbTEEpyzs2JfNER0BlRFJM5bM= Subject key identifier: BC:F5:70:96:B2:B0:75:75:16:1C:0F:47:F5:FF:E7:6C:45:81:88:3F Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 71469397345391A6617115DBAAD8C7EF6226EF1C Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151389.roa Signing time: Wed 11 Feb 2026 02:39:57 +0000 ROA not before: Wed 11 Feb 2026 02:34:57 +0000 ROA not after: Wed 10 Feb 2027 02:39:57 +0000 asID: 151389 IP address blocks: 167.148.139.0/24 maxlen: 24 168.222.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 13:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:46:93:97:34:53:91:a6:61:71:15:db:aa:d8:c7:ef:62:26:ef:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Feb 11 02:34:57 2026 GMT Not After : Feb 10 02:39:57 2027 GMT Subject: CN=BCF57096B2B07575161C0F47F5FFE76C4581883F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ce:bc:ac:15:1e:fd:bb:0c:c8:b6:27:aa:3e: d1:57:4c:80:35:16:dc:aa:5d:5e:fd:e8:86:08:6a: 23:51:72:2a:9d:e8:16:9d:b1:f7:4e:68:be:75:dc: 26:05:62:47:0d:03:c6:ce:36:3b:00:d3:6e:5e:3d: 90:9a:8d:98:0a:ed:3a:60:03:1a:b4:80:1f:24:df: 73:d5:2d:76:ba:91:81:01:f2:df:15:8f:54:de:f8: d1:c4:1d:47:8e:79:7f:a5:a0:fa:60:0e:0e:2c:01: cf:f8:d6:5e:a9:35:c4:6a:f8:2c:aa:16:b7:cf:83: f6:85:13:06:96:ee:1d:f0:c6:fb:c1:55:1a:5b:bc: f8:10:aa:4f:2c:09:e7:5a:b9:a2:4d:19:f7:e2:d4: 60:55:c2:43:01:17:95:36:7e:31:71:a0:d0:e1:ab: 56:a4:b7:3a:a4:3f:6a:09:13:5c:c5:9f:dd:0a:5d: a7:70:2e:9d:46:9a:e5:99:b7:2d:02:ff:b9:2d:9d: dc:ba:4c:d6:55:4d:d8:b4:69:e4:72:8e:d0:da:57: 11:39:81:05:7a:e3:9c:9e:ea:6a:c7:d1:9b:98:e8: 06:78:8c:e8:12:f5:1f:87:27:25:99:c7:c2:1f:bc: 29:27:41:48:17:72:64:62:9f:9f:7f:b1:e4:1a:58: 52:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F5:70:96:B2:B0:75:75:16:1C:0F:47:F5:FF:E7:6C:45:81:88:3F X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS151389.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.148.139.0/24 168.222.125.0/24 Signature Algorithm: sha256WithRSAEncryption ad:ea:21:e7:f8:98:88:40:dd:73:6e:1b:45:21:95:ba:5f:a6: 1c:c9:d0:fa:fc:ea:d5:15:98:f7:6a:f0:24:e0:0e:17:8d:6a: e6:32:ed:dc:ad:0c:b5:cb:a2:1a:3c:fe:ca:5a:35:ed:9c:5a: 00:78:25:35:62:c5:a2:3e:41:ad:75:94:2f:15:37:82:0b:89: b7:09:c5:b4:53:a3:e8:a4:32:33:4f:c0:85:31:60:b7:48:82: a0:83:0a:27:68:fb:3e:ca:45:50:aa:ea:2b:a5:a5:4a:74:7a: c2:47:87:89:0e:14:7a:42:ee:bf:91:f1:9f:b9:d5:7e:19:d6: 8e:d4:09:8d:f6:fc:53:e4:70:3e:3b:31:25:9b:af:cc:05:18: 8d:ba:42:68:7b:a1:f5:75:b7:9c:e4:e2:17:fa:9c:55:a5:3a: 68:0c:f2:6c:0e:b4:de:b0:6b:e0:e3:27:c5:79:28:f7:d1:f2: 5b:03:a2:2f:89:a3:ec:c0:4a:31:1f:13:4c:9c:30:e8:cf:6b: 0b:46:68:ec:d9:0d:f5:b8:eb:b6:d5:1f:78:fe:da:28:01:ba: e4:a2:f0:d5:45:46:15:41:21:1c:8b:39:83:91:11:2f:f0:21: c7:67:57:a2:00:8e:8d:6b:6b:c1:0a:ff:e3:fb:5a:f9:35:ba: 94:44:d5:8d -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUcUaTlzRTkaZhcRXbqtjH72Im7xwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAyMTEwMjM0NTdaFw0yNzAyMTAwMjM5NTdaMDMxMTAvBgNV BAMTKEJDRjU3MDk2QjJCMDc1NzUxNjFDMEY0N0Y1RkZFNzZDNDU4MTg4M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRzrysFR79uwzItieqPtFXTIA1 FtyqXV796IYIaiNRciqd6BadsfdOaL513CYFYkcNA8bONjsA025ePZCajZgK7Tpg Axq0gB8k33PVLXa6kYEB8t8Vj1Te+NHEHUeOeX+loPpgDg4sAc/41l6pNcRq+Cyq FrfPg/aFEwaW7h3wxvvBVRpbvPgQqk8sCedauaJNGffi1GBVwkMBF5U2fjFxoNDh q1aktzqkP2oJE1zFn90KXadwLp1GmuWZty0C/7ktndy6TNZVTdi0aeRyjtDaVxE5 gQV645ye6mrH0ZuY6AZ4jOgS9R+HJyWZx8IfvCknQUgXcmRin59/seQaWFLxAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUvPVwlrKwdXUWHA9H9f/nbEWBiD8wHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTUxMzg5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAp5SL AwQAqN59MA0GCSqGSIb3DQEBCwUAA4IBAQCt6iHn+JiIQN1zbhtFIZW6X6YcydD6 /OrVFZj3avAk4A4XjWrmMu3crQy1y6IaPP7KWjXtnFoAeCU1YsWiPkGtdZQvFTeC C4m3CcW0U6PopDIzT8CFMWC3SIKggwonaPs+ykVQquorpaVKdHrCR4eJDhR6Qu6/ kfGfudV+GdaO1AmN9vxT5HA+OzElm6/MBRiNukJoe6H1dbec5OIX+pxVpTpoDPJs DrTesGvg4yfFeSj30fJbA6IviaPswEoxHxNMnDDoz2sLRmjs2Q31uOu21R94/too AbrkovDVRUYVQSEcizmDkREv8CHHZ1eiAI6Na2vBCv/j+1r5NbqURNWN -----END CERTIFICATE-----Generated at Sat Feb 14 22:25:12 2026 by rpki-client