This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397630.roa File: AS397630.roa (raw, json) Hash identifier: UQ2Tlir0eP1sBPgnXBXXDEkQHvSKd/8fJ15XJbJ60Q4= Subject key identifier: 90:EF:72:FE:08:06:D3:D1:A9:95:A7:B9:4D:EA:88:8A:6D:FD:77:16 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 3499C8749E66036866CDDA868946865AD35D7D1F Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397630.roa Signing time: Sun 23 Nov 2025 23:59:23 +0000 ROA not before: Sun 23 Nov 2025 23:54:23 +0000 ROA not after: Sun 22 Nov 2026 23:59:23 +0000 asID: 397630 IP address blocks: 96.62.217.0/24 maxlen: 24 143.14.188.0/24 maxlen: 24 147.79.2.0/24 maxlen: 24 150.241.136.0/24 maxlen: 24 155.117.81.0/24 maxlen: 24 162.141.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:99:c8:74:9e:66:03:68:66:cd:da:86:89:46:86:5a:d3:5d:7d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 23 23:54:23 2025 GMT Not After : Nov 22 23:59:23 2026 GMT Subject: CN=90EF72FE0806D3D1A995A7B94DEA888A6DFD7716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7e:4d:99:ca:21:32:34:d5:92:ec:77:4f:b3: d8:17:d1:f9:c8:c7:b1:3d:f1:a8:78:af:87:de:62: 67:c4:06:f8:b2:6a:55:74:81:16:09:4c:7f:0b:ec: 95:bb:46:b0:63:93:c0:45:c3:7f:0c:0e:1a:d3:95: aa:57:7c:f2:b3:3a:51:a4:e2:e8:39:14:b1:0d:3d: 39:e7:ff:ed:5a:13:f5:6b:91:98:8b:61:a2:e3:2d: e5:e0:06:70:72:79:6e:ad:f4:fb:ce:20:c1:9f:f9: d8:c6:61:37:48:53:51:13:7a:6e:4b:99:06:de:ad: e9:2e:9d:8f:a8:1d:5d:61:b1:2d:61:77:ed:43:7a: 24:9f:b4:17:e9:90:11:36:73:3f:2d:39:49:79:b0: 70:e3:17:87:ba:85:30:67:38:b6:23:c4:e3:34:ef: f9:89:78:00:79:0f:d6:ca:c9:24:e4:d5:14:75:10: f9:7d:3a:b2:f7:8a:e4:80:85:4b:64:8e:e6:1c:9d: d1:ae:ec:d2:33:a9:bc:36:ea:1a:42:e0:ee:93:fd: 28:a1:e7:21:3d:5c:8a:be:40:bd:a5:ae:8e:b5:5a: 8e:c9:5a:23:77:4b:57:6d:62:a5:09:d3:0d:ac:2a: 2a:cb:b9:54:ea:0f:50:f4:21:48:06:9b:eb:e0:f9: 17:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EF:72:FE:08:06:D3:D1:A9:95:A7:B9:4D:EA:88:8A:6D:FD:77:16 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS397630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.62.217.0/24 143.14.188.0/24 147.79.2.0/24 150.241.136.0/24 155.117.81.0/24 162.141.116.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:a0:04:73:82:af:7b:99:34:dc:ff:3f:c0:18:d1:de:bd:a8: 75:b2:59:60:2d:ff:eb:20:35:d2:44:5d:0b:22:2e:ca:13:69: df:ca:b8:4c:4c:3c:3b:94:c2:fe:10:e7:54:1e:96:c1:80:fc: 8b:a0:1b:9b:8a:26:5d:95:7c:cd:89:cf:ef:c5:32:f4:c3:05: 3a:71:d9:01:16:6a:34:94:04:20:fa:49:1e:a9:dc:79:e9:9b: 4c:c6:8a:02:52:50:91:23:f7:a8:cf:d5:0a:09:d1:df:6a:ea: b1:6e:c8:5c:54:d0:77:b1:d6:04:3d:e5:c3:3f:1c:b6:69:c0: 17:95:90:9c:1b:dd:6c:70:eb:6d:4e:3f:c7:96:6f:3d:2c:f2: fd:15:a4:8b:45:15:91:f2:e2:9a:7b:22:f6:9d:cb:c8:15:68: fb:21:07:ca:a5:ce:62:ce:c9:bd:d4:6b:9c:f9:8f:0f:ca:a4: b3:0d:6f:df:e7:a7:8b:d9:87:31:53:1c:62:42:c8:2a:a9:3f: e1:b4:39:74:79:72:9c:18:4e:a4:e7:73:69:b2:12:2f:37:e6: dc:4e:d1:16:3c:45:18:06:7a:b3:d6:df:40:06:f4:52:39:94: aa:b6:07:8a:fb:12:ea:8f:89:e8:b8:7f:57:df:8d:eb:78:cd: 43:08:e9:e5 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUNJnIdJ5mA2hmzdqGiUaGWtNdfR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMjMyMzU0MjNaFw0yNjExMjIyMzU5MjNaMDMxMTAvBgNV BAMTKDkwRUY3MkZFMDgwNkQzRDFBOTk1QTdCOTRERUE4ODhBNkRGRDc3MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvfk2ZyiEyNNWS7HdPs9gX0fnI x7E98ah4r4feYmfEBviyalV0gRYJTH8L7JW7RrBjk8BFw38MDhrTlapXfPKzOlGk 4ug5FLENPTnn/+1aE/VrkZiLYaLjLeXgBnByeW6t9PvOIMGf+djGYTdIU1ETem5L mQberekunY+oHV1hsS1hd+1DeiSftBfpkBE2cz8tOUl5sHDjF4e6hTBnOLYjxOM0 7/mJeAB5D9bKySTk1RR1EPl9OrL3iuSAhUtkjuYcndGu7NIzqbw26hpC4O6T/Sih 5yE9XIq+QL2lro61Wo7JWiN3S1dtYqUJ0w2sKirLuVTqD1D0IUgGm+vg+RcbAgMB AAGjggIoMIICJDAdBgNVHQ4EFgQUkO9y/ggG09Gplae5TeqIim39dxYwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzk3NjMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAYD7Z AwQAjw68AwQAk08CAwQAlvGIAwQAm3VRAwQAoo10MA0GCSqGSIb3DQEBCwUAA4IB AQB9oARzgq97mTTc/z/AGNHevah1sllgLf/rIDXSRF0LIi7KE2nfyrhMTDw7lML+ EOdUHpbBgPyLoBubiiZdlXzNic/vxTL0wwU6cdkBFmo0lAQg+kkeqdx56ZtMxooC UlCRI/eoz9UKCdHfauqxbshcVNB3sdYEPeXDPxy2acAXlZCcG91scOttTj/Hlm89 LPL9FaSLRRWR8uKaeyL2ncvIFWj7IQfKpc5izsm91Guc+Y8PyqSzDW/f56eL2Ycx UxxiQsgqqT/htDl0eXKcGE6k53NpshIvN+bcTtEWPEUYBnqz1t9ABvRSOZSqtgeK +xLqj4nouH9X343reM1DCOnl -----END CERTIFICATE-----Generated at Fri Dec 5 15:40:22 2025 by rpki-client