This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS398547.roa File: AS398547.roa (raw, json) Hash identifier: ZrlTPswRl3l/VAHVoRbsRiIOAy3E56RVFWAP2adWdaM= Subject key identifier: 53:3C:F8:F8:B1:A0:CD:F1:3D:55:8A:5E:46:21:18:56:5D:65:21:B9 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 534C14B24DFD86E9858E02E44EF7F9C346B30BDA Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS398547.roa Signing time: Wed 07 Jan 2026 22:35:46 +0000 ROA not before: Wed 07 Jan 2026 22:30:46 +0000 ROA not after: Wed 06 Jan 2027 22:35:46 +0000 asID: 398547 IP address blocks: 162.141.100.0/24 maxlen: 24 167.148.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:4c:14:b2:4d:fd:86:e9:85:8e:02:e4:4e:f7:f9:c3:46:b3:0b:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 7 22:30:46 2026 GMT Not After : Jan 6 22:35:46 2027 GMT Subject: CN=533CF8F8B1A0CDF13D558A5E462118565D6521B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a2:68:1e:10:81:d9:fa:1c:56:40:15:c0:51: e6:81:58:44:01:f2:6f:8c:6e:2f:4d:08:15:43:f4: ca:ef:23:db:d4:be:a7:f0:e9:a5:4f:41:ae:83:11: af:2d:32:5d:ff:06:27:e3:5d:f6:7b:37:c4:41:30: 62:db:dd:57:43:5e:2d:96:c1:7c:c3:4c:f8:e8:b1: 2f:fb:14:50:1b:ce:5c:9b:1d:9d:cd:af:04:dd:2f: a4:1e:8e:c9:9e:c2:19:d0:33:6e:df:9b:fb:db:a8: f7:43:6e:5b:80:d2:82:23:69:42:67:24:c6:ff:c1: 5c:61:33:2d:be:ff:6d:68:c2:f4:76:e7:c1:c0:96: 25:3f:31:1e:cc:fa:71:26:5e:05:0e:c2:56:e1:0c: ed:80:68:9f:5d:55:32:b5:21:12:98:d2:f8:22:8a: f2:67:19:cf:41:f3:08:05:6b:f0:6e:ec:63:ca:14: 81:fa:fb:d6:d7:6c:7d:c5:10:79:5d:88:ed:37:a6: 1d:3b:14:c2:24:26:ac:fb:a4:f5:e6:9d:41:8b:78: f0:7e:65:a7:23:61:eb:26:ba:4a:f8:2c:cb:54:cf: 2f:f5:01:21:d8:c5:2d:6a:82:de:44:37:cc:ca:73: 2e:98:5f:93:32:cb:1c:cf:93:c9:97:52:ec:d6:78: 2d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3C:F8:F8:B1:A0:CD:F1:3D:55:8A:5E:46:21:18:56:5D:65:21:B9 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS398547.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.141.100.0/24 167.148.0.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:c6:05:e0:df:ba:38:04:36:54:5d:1d:6f:01:9f:5d:5d:1b: 3b:f1:37:fa:61:7a:2e:fd:9f:6a:fa:e7:20:5e:37:77:62:f6: ef:87:88:70:ce:5e:bc:b8:8e:68:1f:af:80:16:59:c8:44:c8: 8e:85:a2:11:71:bb:19:b1:a7:5d:87:64:dd:17:98:97:ac:20: 0d:b2:38:ac:e2:31:84:c1:b8:97:0b:fe:ce:73:59:ea:b6:70: 29:29:84:9e:b3:ed:02:ba:7d:09:aa:f9:82:4f:d0:00:2d:d1: 4c:31:43:41:5e:84:86:47:81:1c:76:0f:25:9f:5e:c3:4e:09: b0:3d:32:4e:f4:0e:7b:c6:ab:bd:14:c0:8c:65:2a:f5:73:57: 62:d7:d6:00:2d:89:bb:50:71:b0:72:3c:09:4b:71:f4:b4:e6: 11:93:50:d8:8b:b4:60:de:3c:71:11:75:8c:ed:b3:21:64:88: 16:a1:dc:37:f2:c5:89:77:d3:9d:2d:0c:11:c0:ed:d4:6a:05: f8:77:9f:d8:5c:3c:70:04:9b:f0:95:ef:34:89:53:5a:48:02: d2:68:52:68:c0:8f:56:38:f4:26:e9:3a:31:37:17:a9:7f:55: 13:e7:0c:ad:ec:52:92:95:d5:82:5e:c1:5e:d5:31:eb:71:85: e0:7c:6b:e2 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUU0wUsk39humFjgLkTvf5w0azC9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMDcyMjMwNDZaFw0yNzAxMDYyMjM1NDZaMDMxMTAvBgNV BAMTKDUzM0NGOEY4QjFBMENERjEzRDU1OEE1RTQ2MjExODU2NUQ2NTIxQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRomgeEIHZ+hxWQBXAUeaBWEQB 8m+Mbi9NCBVD9MrvI9vUvqfw6aVPQa6DEa8tMl3/BifjXfZ7N8RBMGLb3VdDXi2W wXzDTPjosS/7FFAbzlybHZ3NrwTdL6QejsmewhnQM27fm/vbqPdDbluA0oIjaUJn JMb/wVxhMy2+/21owvR258HAliU/MR7M+nEmXgUOwlbhDO2AaJ9dVTK1IRKY0vgi ivJnGc9B8wgFa/Bu7GPKFIH6+9bXbH3FEHldiO03ph07FMIkJqz7pPXmnUGLePB+ ZacjYesmukr4LMtUzy/1ASHYxS1qgt5EN8zKcy6YX5MyyxzPk8mXUuzWeC1FAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUUzz4+LGgzfE9VYpeRiEYVl1lIbkwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzk4NTQ3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAoo1k AwQAp5QAMA0GCSqGSIb3DQEBCwUAA4IBAQBNxgXg37o4BDZUXR1vAZ9dXRs78Tf6 YXou/Z9q+ucgXjd3Yvbvh4hwzl68uI5oH6+AFlnIRMiOhaIRcbsZsaddh2TdF5iX rCANsjis4jGEwbiXC/7Oc1nqtnApKYSes+0Cun0JqvmCT9AALdFMMUNBXoSGR4Ec dg8ln17DTgmwPTJO9A57xqu9FMCMZSr1c1di19YALYm7UHGwcjwJS3H0tOYRk1DY i7Rg3jxxEXWM7bMhZIgWodw38sWJd9OdLQwRwO3UagX4d5/YXDxwBJvwle80iVNa SALSaFJowI9WOPQm6ToxNxepf1UT5wyt7FKSldWCXsFe1THrcYXgfGvi -----END CERTIFICATE-----Generated at Sun Jan 11 00:04:38 2026 by rpki-client