This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397630.roa File: AS397630.roa (raw, json) Hash identifier: n6tr0U+9cL7/8wv7ZteQSvrEnvsZ7WAOIqNyOIcKQ04= Subject key identifier: 4F:99:B7:DC:B7:00:86:96:A3:D2:4D:04:88:7F:04:99:1B:89:76:8F Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 36AE180AB7A3866EA23D174D5F9344103AB8F3EB Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397630.roa Signing time: Thu 15 Jan 2026 00:06:38 +0000 ROA not before: Thu 15 Jan 2026 00:01:38 +0000 ROA not after: Thu 14 Jan 2027 00:06:38 +0000 asID: 397630 IP address blocks: 143.14.188.0/24 maxlen: 24 147.79.2.0/24 maxlen: 24 150.241.136.0/24 maxlen: 24 155.117.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ae:18:0a:b7:a3:86:6e:a2:3d:17:4d:5f:93:44:10:3a:b8:f3:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 15 00:01:38 2026 GMT Not After : Jan 14 00:06:38 2027 GMT Subject: CN=4F99B7DCB7008696A3D24D04887F04991B89768F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5f:58:a3:af:64:7f:ce:ca:75:12:13:3d:58: bb:fe:23:a4:c0:5e:37:56:94:53:b6:fa:31:a5:33: ae:23:4b:dd:01:0a:85:ac:f8:f4:5e:19:bd:aa:01: 6d:5b:bd:a6:62:cd:6b:54:68:3f:9f:c8:64:52:57: d2:19:c7:fb:8c:4a:ff:9d:0c:e8:aa:d6:b9:fc:1f: 1a:98:9b:a9:0e:65:c6:6e:6a:c4:3a:c4:96:8c:f1: 63:90:ff:ac:07:4b:ed:64:d0:6f:9e:bd:59:ce:7e: 76:6d:f4:b9:e4:f6:50:a0:d2:c5:f5:46:ec:45:1c: 83:18:70:5e:3b:d7:5f:df:77:1f:f8:dd:3e:ce:c8: 91:75:5e:ad:72:91:b1:42:c5:0f:9b:02:f4:7a:58: f3:c7:8c:3b:dc:ec:72:e2:00:e1:3f:36:44:d0:8e: 5f:16:1a:d3:3b:a4:e6:01:ee:ff:4b:f8:8d:8f:85: 7c:14:00:e9:42:4e:c1:9f:59:3b:c3:82:1e:f6:d3: 75:7b:51:44:a9:e2:2e:05:77:e2:4e:0d:5a:5c:71: c1:6a:86:79:ba:80:0a:7b:e0:14:fb:3e:8f:a4:36: 0e:a0:9b:15:8b:9a:80:3b:31:3b:8e:7f:84:60:ac: 32:c0:2f:eb:c3:35:6c:34:d2:82:4e:eb:f0:29:7e: c1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:99:B7:DC:B7:00:86:96:A3:D2:4D:04:88:7F:04:99:1B:89:76:8F X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.14.188.0/24 147.79.2.0/24 150.241.136.0/24 155.117.81.0/24 Signature Algorithm: sha256WithRSAEncryption a8:9e:93:43:25:1f:26:82:aa:98:8f:a1:f2:32:db:22:51:3a: 30:7a:85:6e:5e:15:ca:4f:c7:c1:97:be:dc:4e:89:73:03:74: cc:99:84:cc:4e:22:61:33:09:4c:df:a3:39:a8:a9:d9:63:52: ed:91:8a:fe:98:e6:13:03:77:42:6a:41:cc:d4:13:28:65:60: 8b:f0:fe:bb:84:82:2d:e5:ec:ed:b8:4f:a3:f3:e2:db:75:16: 83:8a:d4:63:eb:28:99:f7:2f:d9:b7:91:37:fa:69:9c:70:42: af:1e:40:be:d7:4c:89:7e:8e:e0:4f:bf:c8:61:d5:7a:6f:a4: 55:6a:74:dd:c4:f5:c3:63:cf:23:e0:67:d4:8a:42:7d:98:2a: 44:34:9b:06:5a:fb:4e:58:3a:a9:05:1e:04:7d:49:0a:32:a5: 1e:a1:de:0f:58:e8:53:13:aa:09:d4:34:da:3e:c6:1d:b7:b2: 93:31:fe:1b:67:f9:95:c3:ab:f4:42:61:ec:f5:57:48:ac:1f: e6:94:05:c5:b9:66:54:11:01:54:79:bf:b4:b0:6f:54:3f:1f: f0:90:db:c6:3a:99:71:af:c4:6c:e5:28:53:db:78:ca:d2:d5: 6d:1c:db:c6:d3:9c:38:7e:3c:4f:07:f3:b3:59:6d:19:a4:ec: 8f:e2:b9:73 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUNq4YCrejhm6iPRdNX5NEEDq48+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMTUwMDAxMzhaFw0yNzAxMTQwMDA2MzhaMDMxMTAvBgNV BAMTKDRGOTlCN0RDQjcwMDg2OTZBM0QyNEQwNDg4N0YwNDk5MUI4OTc2OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoX1ijr2R/zsp1EhM9WLv+I6TA XjdWlFO2+jGlM64jS90BCoWs+PReGb2qAW1bvaZizWtUaD+fyGRSV9IZx/uMSv+d DOiq1rn8HxqYm6kOZcZuasQ6xJaM8WOQ/6wHS+1k0G+evVnOfnZt9Lnk9lCg0sX1 RuxFHIMYcF4711/fdx/43T7OyJF1Xq1ykbFCxQ+bAvR6WPPHjDvc7HLiAOE/NkTQ jl8WGtM7pOYB7v9L+I2PhXwUAOlCTsGfWTvDgh7203V7UUSp4i4Fd+JODVpcccFq hnm6gAp74BT7Po+kNg6gmxWLmoA7MTuOf4RgrDLAL+vDNWw00oJO6/ApfsFpAgMB AAGjggIcMIICGDAdBgNVHQ4EFgQUT5m33LcAhpaj0k0EiH8EmRuJdo8wHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzk3NjMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAjw68 AwQAk08CAwQAlvGIAwQAm3VRMA0GCSqGSIb3DQEBCwUAA4IBAQConpNDJR8mgqqY j6HyMtsiUToweoVuXhXKT8fBl77cTolzA3TMmYTMTiJhMwlM36M5qKnZY1LtkYr+ mOYTA3dCakHM1BMoZWCL8P67hIIt5eztuE+j8+LbdRaDitRj6yiZ9y/Zt5E3+mmc cEKvHkC+10yJfo7gT7/IYdV6b6RVanTdxPXDY88j4GfUikJ9mCpENJsGWvtOWDqp BR4EfUkKMqUeod4PWOhTE6oJ1DTaPsYdt7KTMf4bZ/mVw6v0QmHs9VdIrB/mlAXF uWZUEQFUeb+0sG9UPx/wkNvGOplxr8Rs5ShT23jK0tVtHNvG05w4fjxPB/OzWW0Z pOyP4rlz -----END CERTIFICATE-----Generated at Mon Jan 19 22:38:39 2026 by rpki-client