This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199524.roa File: AS199524.roa (raw, json) Hash identifier: 0Fx7/WbfEwtcvIF/pZSCSGJ7yxPNfVPPB/I27A/8DqQ= Subject key identifier: AE:D4:55:01:E8:D3:B3:BC:4F:60:31:4A:4C:10:31:73:4E:9B:F2:55 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 188EB3F9F3D925B46CB68D8672CCFFC1807F42CE Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199524.roa Signing time: Sat 17 Jan 2026 09:17:37 +0000 ROA not before: Sat 17 Jan 2026 09:12:37 +0000 ROA not after: Sat 16 Jan 2027 09:17:37 +0000 asID: 199524 IP address blocks: 162.141.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:8e:b3:f9:f3:d9:25:b4:6c:b6:8d:86:72:cc:ff:c1:80:7f:42:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 17 09:12:37 2026 GMT Not After : Jan 16 09:17:37 2027 GMT Subject: CN=AED45501E8D3B3BC4F60314A4C1031734E9BF255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e7:c5:c6:e7:c6:59:35:01:3d:9c:c9:d2:ec: 22:20:2d:de:be:66:56:0b:4f:bd:08:7e:aa:2a:05: c4:60:1b:6d:9b:7a:fe:de:06:bd:f5:eb:76:25:94: a2:6e:20:07:72:85:4b:fc:da:26:b9:bb:3b:5e:d3: 9b:2e:47:51:24:08:b0:c5:90:16:96:a3:84:74:47: 55:8d:58:3a:a3:63:c1:27:d2:b5:91:20:ad:aa:3f: 46:0f:cc:b8:ba:9f:01:53:22:0b:c3:0e:93:e6:8e: a2:00:f0:45:86:18:58:c7:68:c8:15:d1:51:88:c2: ec:b7:6c:03:56:21:7b:b0:af:c8:ce:ac:ff:3e:33: 94:d6:91:31:ca:54:67:27:e3:7f:28:1a:c2:96:4e: 3a:f1:53:4d:b7:3b:e9:25:72:7f:96:3d:9f:01:a3: 6d:f7:04:17:b6:04:f8:25:14:78:74:e5:71:4f:1c: 0a:d0:78:6d:5e:7a:64:37:23:04:85:59:ad:3a:22: da:54:0a:3f:98:31:11:09:76:48:14:2e:52:ec:23: ca:ae:23:b6:d3:c4:82:54:f8:60:92:c2:55:e8:7a: 20:1b:22:11:6f:01:01:d8:f6:72:1e:69:7f:84:4b: a7:09:66:4a:33:51:fe:5b:0b:2c:bf:ea:a4:13:35: 2f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D4:55:01:E8:D3:B3:BC:4F:60:31:4A:4C:10:31:73:4E:9B:F2:55 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199524.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.141.161.0/24 Signature Algorithm: sha256WithRSAEncryption 84:83:5a:ec:19:20:b7:b9:be:a1:98:c9:81:1a:de:0b:ab:b5: 7d:74:37:2b:6c:40:1c:20:6d:e6:23:4d:bf:8c:f3:7d:53:15: 69:a9:f2:da:0a:7e:e5:3f:a7:c6:54:37:17:91:43:6c:1e:7a: bc:4a:f1:7b:1c:ab:a3:f2:4e:f1:8c:3d:26:ad:42:b8:68:80: fe:a3:3f:81:93:d0:5c:94:e9:02:3d:6e:3c:4c:1e:2a:88:d3: c2:5e:6d:dd:d1:ec:29:ff:c6:11:c2:8a:15:00:1c:2a:d8:7c: e6:7e:c4:d6:75:76:d8:38:30:d9:80:5c:d6:ac:0f:f5:28:b2: f3:fa:16:7b:a9:e4:8b:2d:51:0b:81:35:44:ea:65:8f:cb:97: 27:98:5f:ac:c7:03:9f:9b:ee:c3:68:3a:a8:98:b4:ae:b3:0b: 05:c7:04:29:91:e4:5c:e1:4c:70:01:ae:06:4f:66:dd:6f:e8: af:8f:54:ee:c8:df:fa:6a:c8:ba:c2:10:2d:c6:73:10:74:8d: ee:46:9c:ea:78:85:61:f8:94:96:4f:56:ec:2d:de:34:2d:b7: f4:7d:c4:78:40:aa:d0:cf:0f:e0:92:92:34:45:9c:74:d5:11: 95:0f:74:c0:40:e6:4b:65:39:15:2a:bc:6a:aa:4c:d4:00:00: 06:0d:6e:37 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUGI6z+fPZJbRsto2Gcsz/wYB/Qs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMTcwOTEyMzdaFw0yNzAxMTYwOTE3MzdaMDMxMTAvBgNV BAMTKEFFRDQ1NTAxRThEM0IzQkM0RjYwMzE0QTRDMTAzMTczNEU5QkYyNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq58XG58ZZNQE9nMnS7CIgLd6+ ZlYLT70IfqoqBcRgG22bev7eBr3163YllKJuIAdyhUv82ia5uzte05suR1EkCLDF kBaWo4R0R1WNWDqjY8En0rWRIK2qP0YPzLi6nwFTIgvDDpPmjqIA8EWGGFjHaMgV 0VGIwuy3bANWIXuwr8jOrP8+M5TWkTHKVGcn438oGsKWTjrxU023O+klcn+WPZ8B o233BBe2BPglFHh05XFPHArQeG1eemQ3IwSFWa06ItpUCj+YMREJdkgULlLsI8qu I7bTxIJU+GCSwlXoeiAbIhFvAQHY9nIeaX+ES6cJZkozUf5bCyy/6qQTNS+DAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUrtRVAejTs7xPYDFKTBAxc06b8lUwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTk5NTI0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoo2h MA0GCSqGSIb3DQEBCwUAA4IBAQCEg1rsGSC3ub6hmMmBGt4Lq7V9dDcrbEAcIG3m I02/jPN9UxVpqfLaCn7lP6fGVDcXkUNsHnq8SvF7HKuj8k7xjD0mrUK4aID+oz+B k9BclOkCPW48TB4qiNPCXm3d0ewp/8YRwooVABwq2HzmfsTWdXbYODDZgFzWrA/1 KLLz+hZ7qeSLLVELgTVE6mWPy5cnmF+sxwOfm+7DaDqomLSuswsFxwQpkeRc4Uxw Aa4GT2bdb+ivj1TuyN/6asi6whAtxnMQdI3uRpzqeIVh+JSWT1bsLd40Lbf0fcR4 QKrQzw/gkpI0RZx01RGVD3TAQOZLZTkVKrxqqkzUAAAGDW43 -----END CERTIFICATE-----Generated at Mon Jan 19 08:13:45 2026 by rpki-client