This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS39855.roa File: AS39855.roa (raw, json) Hash identifier: SjkQS/WLTvIzjS6ewQelB1cVVNri1myoHVjYs72fcWo= Subject key identifier: B3:61:C7:2E:E0:36:3B:42:C7:8B:D0:5E:2C:4A:7E:D3:53:CB:05:E6 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 31DAC6AD4AA54EEF092BB3B821D8910C3CBD4451 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS39855.roa Signing time: Mon 10 Nov 2025 13:55:56 +0000 ROA not before: Mon 10 Nov 2025 13:50:56 +0000 ROA not after: Mon 09 Nov 2026 13:55:56 +0000 asID: 39855 IP address blocks: 168.222.56.0/24 maxlen: 24 168.222.57.0/24 maxlen: 24 168.222.58.0/24 maxlen: 24 168.222.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:da:c6:ad:4a:a5:4e:ef:09:2b:b3:b8:21:d8:91:0c:3c:bd:44:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 10 13:50:56 2025 GMT Not After : Nov 9 13:55:56 2026 GMT Subject: CN=B361C72EE0363B42C78BD05E2C4A7ED353CB05E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:52:52:d6:03:c2:8f:87:0e:a4:15:20:f4:34: 06:c5:fb:d2:d1:c1:a2:e1:8b:64:3d:45:9d:8a:69: 20:7b:81:21:21:b0:b3:d4:b0:ee:fb:b2:2e:3e:56: 99:f8:73:26:ff:85:18:df:d6:d3:c9:50:85:25:d6: 67:62:ba:a3:a6:92:93:84:63:1b:c8:2c:bc:7a:6a: 48:d7:85:e0:8b:fb:6e:31:22:7e:9f:ca:60:70:53: d0:fc:a7:bd:64:e7:21:bc:7b:8b:2f:c0:55:42:81: 86:3a:13:7a:1e:0b:a6:0f:b8:7f:b8:6d:87:98:4d: 2e:0b:b7:4e:36:76:20:3e:e5:b6:66:36:92:d4:78: b6:68:6d:f2:df:5b:89:3a:6a:a2:e8:b3:c7:a9:1a: bb:09:5f:5b:07:16:75:c4:9f:20:95:31:41:52:95: 74:9a:21:53:79:b0:23:8d:ca:79:da:f8:a4:c1:ad: f7:5f:81:4d:16:22:c8:3f:b4:d3:dd:bd:ef:30:c8: b2:12:60:2a:c5:56:ac:fc:a8:21:82:14:1d:ce:f7: b4:28:be:63:25:2a:a3:4a:d3:b1:0b:e8:f3:92:f1: 86:38:e8:7b:f2:7a:53:8f:3f:a5:d2:fa:69:c0:f9: 7d:f0:47:17:33:1e:43:c3:59:fe:b0:4d:50:8c:79: c3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:61:C7:2E:E0:36:3B:42:C7:8B:D0:5E:2C:4A:7E:D3:53:CB:05:E6 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS39855.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.222.56.0/22 Signature Algorithm: sha256WithRSAEncryption 36:bb:39:09:b3:a0:87:8e:bc:3d:83:21:1d:5c:d4:a8:1c:ff: 6a:29:c4:20:b0:ce:8f:ce:e1:a6:86:9c:c3:8b:79:f4:ed:70: e7:cb:1d:91:04:7b:ef:1e:e0:a5:d3:36:d0:e5:31:22:7d:fb: e0:8b:f5:88:4d:7c:93:d3:fe:6d:3d:fd:26:2b:e6:53:5a:2e: 27:bc:df:69:29:55:44:8a:21:f0:a8:1c:42:ba:18:dc:6d:4a: 1b:6a:33:fd:38:ea:b5:9c:6f:12:18:b6:31:d8:29:e7:50:64: de:c0:8a:ee:1b:ff:d1:ad:a6:4f:ed:fb:e3:67:a4:b3:77:4d: 76:9d:fe:d3:97:7e:09:4d:6a:28:3d:96:7a:b6:2e:11:9c:17: 5a:e5:f4:b6:9b:58:79:5f:3a:e2:af:da:eb:1f:8e:74:c2:6f: 19:9a:84:5c:3d:79:dc:8e:04:31:b5:39:f8:75:af:45:b2:1a: 2c:85:38:92:ee:14:c4:95:73:95:61:36:7d:ff:f8:8e:a0:5c: 16:28:0e:43:0b:af:3a:cd:01:b3:a1:6c:39:f4:62:b5:8d:dc: 69:27:1c:f6:54:9a:ea:40:0d:f5:0d:96:d2:4d:f3:1c:b6:91: 29:e3:19:17:40:ce:ca:f8:15:3c:db:25:8f:64:ed:5b:cd:43: 3f:19:23:16 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUMdrGrUqlTu8JK7O4IdiRDDy9RFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMTAxMzUwNTZaFw0yNjExMDkxMzU1NTZaMDMxMTAvBgNV BAMTKEIzNjFDNzJFRTAzNjNCNDJDNzhCRDA1RTJDNEE3RUQzNTNDQjA1RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5UlLWA8KPhw6kFSD0NAbF+9LR waLhi2Q9RZ2KaSB7gSEhsLPUsO77si4+Vpn4cyb/hRjf1tPJUIUl1mdiuqOmkpOE YxvILLx6akjXheCL+24xIn6fymBwU9D8p71k5yG8e4svwFVCgYY6E3oeC6YPuH+4 bYeYTS4Lt042diA+5bZmNpLUeLZobfLfW4k6aqLos8epGrsJX1sHFnXEnyCVMUFS lXSaIVN5sCONynna+KTBrfdfgU0WIsg/tNPdve8wyLISYCrFVqz8qCGCFB3O97Qo vmMlKqNK07EL6POS8YY46HvyelOPP6XS+mnA+X3wRxczHkPDWf6wTVCMecN/AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUs2HHLuA2O0LHi9BeLEp+01PLBeYwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzk4NTUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKo3jgw DQYJKoZIhvcNAQELBQADggEBADa7OQmzoIeOvD2DIR1c1Kgc/2opxCCwzo/O4aaG nMOLefTtcOfLHZEEe+8e4KXTNtDlMSJ9++CL9YhNfJPT/m09/SYr5lNaLie832kp VUSKIfCoHEK6GNxtShtqM/046rWcbxIYtjHYKedQZN7Aiu4b/9Gtpk/t++NnpLN3 TXad/tOXfglNaig9lnq2LhGcF1rl9LabWHlfOuKv2usfjnTCbxmahFw9edyOBDG1 Ofh1r0WyGiyFOJLuFMSVc5VhNn3/+I6gXBYoDkMLrzrNAbOhbDn0YrWN3GknHPZU mupADfUNltJN8xy2kSnjGRdAzsr4FTzbJY9k7VvNQz8ZIxY= -----END CERTIFICATE-----Generated at Fri Dec 5 05:06:10 2025 by rpki-client