This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3356.roa File: AS3356.roa (raw, json) Hash identifier: w2vxqYFLWJuzt+7ZZh4mgNstTCs6bZl4zAvX9U2d1rk= Subject key identifier: F2:3A:18:6B:5E:58:DF:30:04:27:6C:D8:92:55:91:D6:66:9C:6E:2A Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 3483E56D7C40AA6B895DD5D2E83AB4B909B740B2 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3356.roa Signing time: Wed 26 Nov 2025 16:03:26 +0000 ROA not before: Wed 26 Nov 2025 15:58:26 +0000 ROA not after: Wed 25 Nov 2026 16:03:26 +0000 asID: 3356 IP address blocks: 148.135.145.0/24 maxlen: 24 148.135.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:83:e5:6d:7c:40:aa:6b:89:5d:d5:d2:e8:3a:b4:b9:09:b7:40:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 26 15:58:26 2025 GMT Not After : Nov 25 16:03:26 2026 GMT Subject: CN=F23A186B5E58DF3004276CD8925591D6669C6E2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:77:e7:39:0e:10:29:ed:dd:f7:00:0b:37:01: 48:17:a3:f2:02:aa:34:87:4f:c7:00:85:aa:c1:9f: 56:da:0c:07:fe:95:b6:a4:1f:81:5d:13:2f:9e:80: 7e:d3:7b:05:bf:0a:65:6f:34:ba:99:c9:a4:5e:a2: 0c:b4:97:1a:5d:7f:d0:20:9c:2a:ed:a6:90:54:03: 23:30:f7:8a:6e:87:ea:e3:94:c6:a6:d3:6e:aa:1a: 3c:51:a2:14:eb:fe:7e:a1:1b:f2:36:dc:12:1a:91: 1a:8b:22:69:3f:0e:2a:c6:85:20:f0:b6:25:e8:fe: 35:55:8c:e0:0d:de:e5:5d:97:7e:69:3c:8d:ad:82: 04:52:aa:ad:fc:9b:6f:de:19:34:d5:ca:10:78:4e: 9b:44:6b:13:c2:5c:03:fa:1c:65:b4:82:1b:c0:1c: c7:43:f9:cc:11:eb:e0:e2:66:da:b6:e7:34:e8:57: f2:ec:31:8a:a8:4e:cc:5d:85:d3:62:2e:48:92:6c: b9:1a:32:ac:5a:b0:86:e3:0c:a9:1d:e6:2a:ea:83: fb:ab:59:22:8f:85:d1:18:bc:d2:dc:aa:6b:36:77: 73:fc:6d:94:da:2f:9f:89:98:77:c5:a1:d4:6f:2f: ff:9a:a0:d7:72:e3:64:c8:3d:ee:ac:ab:19:db:a9: d9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3A:18:6B:5E:58:DF:30:04:27:6C:D8:92:55:91:D6:66:9C:6E:2A X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.135.145.0/24 148.135.156.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:29:a4:48:2c:76:db:4a:bd:cf:ef:e8:c5:e4:a3:28:27:83: c8:5f:80:8b:2c:8c:00:ad:4e:c4:db:af:20:b2:ed:e1:d6:a4: dd:d1:14:04:15:77:25:8b:7b:5b:a7:60:9e:8f:83:ca:f6:fc: 53:ed:ea:62:d1:56:81:d6:49:3a:9b:82:f6:b7:cb:5f:8f:9f: 4e:65:7a:bb:1f:e1:f6:f4:44:fe:c9:a0:4a:46:c0:9f:b9:f5: c8:e9:a5:52:06:a7:25:2e:2c:de:04:8d:7b:5d:36:be:6c:82: 77:15:2f:dd:94:c8:9d:70:80:72:31:6a:23:4a:52:b1:dc:cd: 60:53:fe:43:dc:f8:cb:fc:ae:1e:2b:4f:1a:bd:82:6f:8c:6f: ec:16:d0:d5:43:f4:5e:8f:72:18:64:9f:bd:84:64:14:59:09: 4b:d4:16:76:53:57:6b:3a:16:05:4f:cd:a6:c8:da:82:e0:46: 46:d9:df:27:25:cb:69:87:9a:f0:e6:21:f9:ef:5c:49:3b:e6: 80:03:c3:15:54:cd:33:29:ea:15:a4:03:ad:af:ff:6a:28:af: 8d:8d:c0:64:bf:d5:68:bc:7a:3d:22:11:71:3b:04:1d:fa:e4: 67:5f:f5:17:7d:77:6c:16:5f:ca:2c:c2:bb:b0:dc:6e:62:66: 30:50:e7:e9 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUNIPlbXxAqmuJXdXS6Dq0uQm3QLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMjYxNTU4MjZaFw0yNjExMjUxNjAzMjZaMDMxMTAvBgNV BAMTKEYyM0ExODZCNUU1OERGMzAwNDI3NkNEODkyNTU5MUQ2NjY5QzZFMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpd+c5DhAp7d33AAs3AUgXo/IC qjSHT8cAharBn1baDAf+lbakH4FdEy+egH7TewW/CmVvNLqZyaReogy0lxpdf9Ag nCrtppBUAyMw94puh+rjlMam026qGjxRohTr/n6hG/I23BIakRqLImk/DirGhSDw tiXo/jVVjOAN3uVdl35pPI2tggRSqq38m2/eGTTVyhB4TptEaxPCXAP6HGW0ghvA HMdD+cwR6+DiZtq25zToV/LsMYqoTsxdhdNiLkiSbLkaMqxasIbjDKkd5irqg/ur WSKPhdEYvNLcqms2d3P8bZTaL5+JmHfFodRvL/+aoNdy42TIPe6sqxnbqdk5AgMB AAGjggIOMIICCjAdBgNVHQ4EFgQU8joYa15Y3zAEJ2zYklWR1macbiowHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzM1Ni5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAJSHkQME AJSHnDANBgkqhkiG9w0BAQsFAAOCAQEAPymkSCx220q9z+/oxeSjKCeDyF+AiyyM AK1OxNuvILLt4dak3dEUBBV3JYt7W6dgno+Dyvb8U+3qYtFWgdZJOpuC9rfLX4+f TmV6ux/h9vRE/smgSkbAn7n1yOmlUganJS4s3gSNe102vmyCdxUv3ZTInXCAcjFq I0pSsdzNYFP+Q9z4y/yuHitPGr2Cb4xv7BbQ1UP0Xo9yGGSfvYRkFFkJS9QWdlNX azoWBU/NpsjaguBGRtnfJyXLaYea8OYh+e9cSTvmgAPDFVTNMynqFaQDra//aiiv jY3AZL/VaLx6PSIRcTsEHfrkZ1/1F313bBZfyizCu7DcbmJmMFDn6Q== -----END CERTIFICATE-----Generated at Fri Dec 5 05:06:11 2025 by rpki-client