This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS398547.roa File: AS398547.roa (raw, json) Hash identifier: VLD3k1S/dJYgLtY+yuYMo0PeuyzZLTen7dzgl5u+VCo= Subject key identifier: AD:E0:8B:72:73:E7:B6:8A:3E:C7:93:64:2E:02:04:8C:B0:76:6A:FB Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 1F8504CC378A8B620C04BB4D6A788CDB5820F2B4 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS398547.roa Signing time: Sat 22 Nov 2025 18:35:21 +0000 ROA not before: Sat 22 Nov 2025 18:30:21 +0000 ROA not after: Sat 21 Nov 2026 18:35:21 +0000 asID: 398547 IP address blocks: 162.141.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 04:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:85:04:cc:37:8a:8b:62:0c:04:bb:4d:6a:78:8c:db:58:20:f2:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 22 18:30:21 2025 GMT Not After : Nov 21 18:35:21 2026 GMT Subject: CN=ADE08B7273E7B68A3EC793642E02048CB0766AFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:34:71:49:63:34:16:a1:9b:e1:29:4f:4f:90: 5c:f4:7a:f5:aa:04:75:42:7c:44:d5:ba:97:ab:73: 33:64:45:77:fc:a6:0e:09:d5:3c:67:64:f2:37:77: cb:72:a9:24:74:36:f1:18:f7:34:85:ea:09:88:77: 9c:e4:89:de:30:0c:95:a0:fb:ac:2a:66:d2:79:97: e3:6a:2b:49:30:a3:83:0a:78:1e:cf:7f:94:64:2f: 38:67:f4:3d:2f:62:98:f7:af:85:cc:af:cc:15:20: fb:99:51:09:fb:9b:b3:67:d2:4c:68:60:14:87:2b: 52:c0:46:ab:15:1d:46:fe:e2:b4:95:e4:e7:f7:95: bf:bb:63:09:21:59:e6:e6:07:99:52:b9:f7:31:98: 47:12:12:24:76:60:0c:eb:a6:e2:05:6c:1b:d6:74: f1:cf:fe:8f:f8:d0:ef:95:23:72:22:20:99:5c:75: 4b:cf:8d:39:b9:e2:93:79:e1:8e:87:da:2f:5c:1e: 60:a3:bf:5b:67:81:19:74:bd:d5:ea:ff:18:18:cc: 69:0a:bc:50:58:8a:27:ab:09:6f:a0:dc:44:f7:61: 17:9c:ba:61:48:26:17:74:9b:be:22:5e:ec:1f:78: 45:7a:41:f7:19:49:43:ea:df:51:45:59:9d:d7:c7: ce:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E0:8B:72:73:E7:B6:8A:3E:C7:93:64:2E:02:04:8C:B0:76:6A:FB X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS398547.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.141.100.0/24 Signature Algorithm: sha256WithRSAEncryption 34:52:a8:c9:19:14:5c:42:98:cf:b1:41:a8:27:d8:fe:dc:d8: 2c:1d:59:f0:5e:07:e8:72:96:fc:c0:38:95:8f:95:7d:8f:b7: d6:be:fb:46:94:64:fb:5f:da:26:aa:bf:29:89:04:ea:26:00: 9b:38:b6:08:25:dd:d3:75:d3:18:51:07:af:69:60:a1:e1:df: 84:10:25:ff:28:8e:6d:1c:8a:c2:29:b7:13:c3:68:60:e3:c1: f0:85:e2:d5:16:ff:5b:d0:2c:b5:3a:4f:4f:62:4f:39:5c:9b: 05:7f:b4:30:f2:7e:51:2d:5f:c8:58:ca:f1:76:97:4a:3b:35: 9e:76:f6:7a:ef:8a:64:c1:f4:03:bd:22:fc:42:b3:34:70:bb: 45:82:9c:2e:df:63:ed:91:0f:2a:6f:12:59:f6:94:33:a3:a7: d1:e3:79:40:43:c4:10:ec:4b:6a:ca:55:4d:29:ac:71:80:88: 4b:3b:20:5e:45:7c:4f:06:08:1c:b3:15:40:17:b4:75:6a:ef: cd:78:1d:60:f7:cf:50:4d:c8:13:64:6f:10:6d:50:c9:66:0a: 77:0c:e4:c5:5b:12:86:4e:73:b2:20:46:bf:70:f0:78:fb:72: 25:59:9e:5d:bd:06:d2:23:b1:1b:05:ed:e9:b3:b4:c1:bf:04: 6a:64:cb:7d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUH4UEzDeKi2IMBLtNaniM21gg8rQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMjIxODMwMjFaFw0yNjExMjExODM1MjFaMDMxMTAvBgNV BAMTKEFERTA4QjcyNzNFN0I2OEEzRUM3OTM2NDJFMDIwNDhDQjA3NjZBRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5NHFJYzQWoZvhKU9PkFz0evWq BHVCfETVuperczNkRXf8pg4J1TxnZPI3d8tyqSR0NvEY9zSF6gmId5zkid4wDJWg +6wqZtJ5l+NqK0kwo4MKeB7Pf5RkLzhn9D0vYpj3r4XMr8wVIPuZUQn7m7Nn0kxo YBSHK1LARqsVHUb+4rSV5Of3lb+7YwkhWebmB5lSufcxmEcSEiR2YAzrpuIFbBvW dPHP/o/40O+VI3IiIJlcdUvPjTm54pN54Y6H2i9cHmCjv1tngRl0vdXq/xgYzGkK vFBYiierCW+g3ET3YRecumFIJhd0m74iXuwfeEV6QfcZSUPq31FFWZ3Xx86DAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUreCLcnPntoo+x5NkLgIEjLB2avswHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzk4NTQ3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoo1k MA0GCSqGSIb3DQEBCwUAA4IBAQA0UqjJGRRcQpjPsUGoJ9j+3NgsHVnwXgfocpb8 wDiVj5V9j7fWvvtGlGT7X9omqr8piQTqJgCbOLYIJd3TddMYUQevaWCh4d+EECX/ KI5tHIrCKbcTw2hg48HwheLVFv9b0Cy1Ok9PYk85XJsFf7Qw8n5RLV/IWMrxdpdK OzWedvZ674pkwfQDvSL8QrM0cLtFgpwu32PtkQ8qbxJZ9pQzo6fR43lAQ8QQ7Etq ylVNKaxxgIhLOyBeRXxPBggcsxVAF7R1au/NeB1g989QTcgTZG8QbVDJZgp3DOTF WxKGTnOyIEa/cPB4+3IlWZ5dvQbSI7EbBe3ps7TBvwRqZMt9 -----END CERTIFICATE-----Generated at Sun Nov 23 14:24:51 2025 by rpki-client