This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS36352.roa File: AS36352.roa (raw, json) Hash identifier: L9rwEe0U0M7V6efUMR5gpesxOizPm6f1J/jGCgXj4Y8= Subject key identifier: 29:14:CB:D6:21:05:AB:B6:AD:85:40:0C:C9:E8:D3:4C:A8:80:B2:73 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 64B9F9301D93F0A666FA5C696D71EDC3611BAD96 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS36352.roa Signing time: Fri 09 Jan 2026 11:11:33 +0000 ROA not before: Fri 09 Jan 2026 11:06:33 +0000 ROA not after: Fri 08 Jan 2027 11:11:33 +0000 asID: 36352 IP address blocks: 162.141.17.0/24 maxlen: 24 167.148.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:b9:f9:30:1d:93:f0:a6:66:fa:5c:69:6d:71:ed:c3:61:1b:ad:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 9 11:06:33 2026 GMT Not After : Jan 8 11:11:33 2027 GMT Subject: CN=2914CBD62105ABB6AD85400CC9E8D34CA880B273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a5:f7:3c:bc:52:8e:03:e5:64:a7:1c:66:53: 6d:f6:db:4f:cb:76:bf:5f:97:b2:a5:e5:5b:c9:55: 3b:fb:33:1d:c4:ec:dd:cf:e7:ff:4d:36:b9:2f:f5: d9:92:5b:ba:4d:6e:d0:a3:dd:c0:d6:c2:53:6d:ac: d8:71:a3:d3:bf:55:1a:53:de:84:ce:02:65:7b:e6: 8a:a2:29:a3:82:f8:f1:81:a5:52:d4:33:8b:cc:da: 6d:9e:22:d4:3a:1c:8d:0a:c7:15:9b:62:b6:75:48: 1b:07:4a:fc:ce:db:d2:b7:19:49:3f:2f:22:93:43: 1d:f2:9c:ab:50:64:35:7c:dd:e1:aa:8a:a4:7f:73: 26:2e:b2:e5:59:99:3f:de:c0:fc:aa:71:4b:6f:c8: 6f:1e:06:18:fb:10:04:f9:7f:df:e2:cd:fb:92:27: 64:9e:f1:6c:0f:fb:c7:01:6b:a8:6c:01:5c:fa:4e: 60:3d:8f:da:aa:06:1d:41:08:85:33:4e:9f:1b:2c: d4:d3:63:39:58:50:98:f2:0d:ae:9c:34:7e:5c:42: 51:51:ef:87:12:7f:f9:c2:b0:ec:c1:0a:95:e2:6a: fc:b7:f6:ac:8d:cc:42:95:0e:5e:21:49:84:a9:71: 9a:96:e1:ca:49:9d:c1:38:26:5e:2e:60:b8:55:4d: 23:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:14:CB:D6:21:05:AB:B6:AD:85:40:0C:C9:E8:D3:4C:A8:80:B2:73 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS36352.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.141.17.0/24 167.148.162.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:31:30:68:8c:f4:7a:08:32:88:cc:23:14:38:27:67:1e:b1: bd:6d:81:cd:95:fe:ca:5c:78:17:d2:14:d8:3f:65:85:9d:51: 03:f2:b3:58:c0:61:2c:d0:24:aa:03:fa:62:a9:5b:45:45:57: a3:73:52:bb:9b:7b:42:d5:55:69:da:64:2d:06:cd:89:44:08: 53:5c:7f:b6:4b:1a:9b:33:e1:73:ff:f8:16:44:6a:1d:5c:6e: 41:ad:d3:b7:aa:4b:1d:da:aa:05:75:d4:e1:f7:62:19:ff:99: 5d:a0:c6:69:13:4b:04:f2:ef:d9:b4:ec:a0:13:7d:15:80:b0: 1a:6f:a3:33:41:4a:1b:c7:67:44:16:f3:5b:02:b9:04:37:91: a9:fc:e7:4b:9c:c4:38:b8:54:41:07:cd:b2:8e:c8:b1:ab:03: 64:25:f9:e9:c7:64:92:aa:10:af:d3:b3:b5:27:4b:67:d3:6e: 5b:cf:93:7d:89:bd:0a:e5:a5:3a:89:50:7b:e5:dc:62:9b:89: bb:e9:56:0c:09:86:f3:ee:2d:79:d2:c7:a4:c1:ee:8b:ca:5e: 39:8f:aa:23:2e:74:21:91:ab:3c:3e:64:98:db:0d:3e:de:af: a1:4b:72:69:99:19:c6:69:02:69:e6:fb:bc:96:3f:bb:02:9a: 9a:77:0e:fd -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUZLn5MB2T8KZm+lxpbXHtw2EbrZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMDkxMTA2MzNaFw0yNzAxMDgxMTExMzNaMDMxMTAvBgNV BAMTKDI5MTRDQkQ2MjEwNUFCQjZBRDg1NDAwQ0M5RThEMzRDQTg4MEIyNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIpfc8vFKOA+VkpxxmU23220/L dr9fl7Kl5VvJVTv7Mx3E7N3P5/9NNrkv9dmSW7pNbtCj3cDWwlNtrNhxo9O/VRpT 3oTOAmV75oqiKaOC+PGBpVLUM4vM2m2eItQ6HI0KxxWbYrZ1SBsHSvzO29K3GUk/ LyKTQx3ynKtQZDV83eGqiqR/cyYusuVZmT/ewPyqcUtvyG8eBhj7EAT5f9/izfuS J2Se8WwP+8cBa6hsAVz6TmA9j9qqBh1BCIUzTp8bLNTTYzlYUJjyDa6cNH5cQlFR 74cSf/nCsOzBCpXiavy39qyNzEKVDl4hSYSpcZqW4cpJncE4Jl4uYLhVTSNxAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUKRTL1iEFq7athUAMyejTTKiAsnMwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzYzNTIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACijRED BACnlKIwDQYJKoZIhvcNAQELBQADggEBAFsxMGiM9HoIMojMIxQ4J2cesb1tgc2V /spceBfSFNg/ZYWdUQPys1jAYSzQJKoD+mKpW0VFV6NzUrube0LVVWnaZC0GzYlE CFNcf7ZLGpsz4XP/+BZEah1cbkGt07eqSx3aqgV11OH3Yhn/mV2gxmkTSwTy79m0 7KATfRWAsBpvozNBShvHZ0QW81sCuQQ3kan850ucxDi4VEEHzbKOyLGrA2Ql+enH ZJKqEK/Ts7UnS2fTblvPk32JvQrlpTqJUHvl3GKbibvpVgwJhvPuLXnSx6TB7ovK XjmPqiMudCGRqzw+ZJjbDT7er6FLcmmZGcZpAmnm+7yWP7sCmpp3Dv0= -----END CERTIFICATE-----Generated at Mon Jan 19 08:17:59 2026 by rpki-client