This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399516.roa File: AS399516.roa (raw, json) Hash identifier: QIn5r7Cv4fyirnIbS855v5WBn8ek3Uu94e8Mnp7TetA= Subject key identifier: C9:B8:CA:E5:AA:1F:32:72:8A:FA:CD:96:0F:12:48:7D:06:EA:D8:18 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 43A40F9F56C628D76BE170E8C9772FFC8B6C9FB9 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399516.roa Signing time: Sat 10 Jan 2026 14:00:20 +0000 ROA not before: Sat 10 Jan 2026 13:55:20 +0000 ROA not after: Sat 09 Jan 2027 14:00:20 +0000 asID: 399516 IP address blocks: 96.62.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 19:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a4:0f:9f:56:c6:28:d7:6b:e1:70:e8:c9:77:2f:fc:8b:6c:9f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 10 13:55:20 2026 GMT Not After : Jan 9 14:00:20 2027 GMT Subject: CN=C9B8CAE5AA1F32728AFACD960F12487D06EAD818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:89:7b:cd:27:9a:52:5c:1a:31:a0:aa:6e:26: 30:73:68:35:2d:c4:88:97:c7:bf:1e:9d:3d:81:a7: 04:11:0d:7d:39:66:25:f6:c8:16:53:c9:f4:20:4f: a3:b3:bf:a6:b0:a9:9f:fa:ce:8d:4d:e4:a7:1c:3f: 01:2b:ec:8d:2b:e9:a9:ca:b9:cd:a6:16:c6:41:7e: c8:7d:e3:eb:c4:36:02:b3:fc:b5:1b:fc:4b:ba:70: b2:26:9c:f7:7d:47:18:58:5a:87:f9:cd:2f:c2:a7: 53:99:53:5f:a2:78:2f:96:64:da:8b:eb:41:eb:20: cd:27:d9:c8:7e:c0:81:49:6b:2b:6f:ea:34:6c:24: ff:4c:0b:1e:0e:b4:14:6c:0d:4f:a9:91:58:b7:75: 69:3c:ee:00:40:20:c1:1b:2e:45:59:fc:b3:ee:ab: c3:69:50:0c:16:07:d2:e7:02:64:bc:cd:1e:f5:51: 17:47:1e:a0:22:a3:cc:30:34:95:6f:51:6e:c4:b7: de:b4:48:86:f8:36:57:a9:b8:8b:55:73:cc:af:e8: 59:1b:fd:52:4a:b3:5c:50:3c:74:ce:8f:d8:45:c8: f1:77:44:7a:d4:3a:ee:c9:7e:b7:86:c2:4c:9d:73: 11:69:7b:5e:07:50:6f:d9:ac:0a:40:bf:56:1a:5d: c3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B8:CA:E5:AA:1F:32:72:8A:FA:CD:96:0F:12:48:7D:06:EA:D8:18 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS399516.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.62.228.0/24 Signature Algorithm: sha256WithRSAEncryption 34:a6:fb:68:65:d0:cc:cf:6a:37:4f:9c:5f:e2:a5:0a:d7:3b: ce:bf:fc:53:1f:ac:73:f5:72:f4:1e:eb:f9:74:2d:16:23:bc: 68:4d:70:dd:08:8c:01:6e:9b:79:35:57:c2:3b:49:b1:fb:0a: 6c:4f:a1:6e:5b:5f:b6:01:51:45:5c:66:43:ef:56:94:35:c1: ef:fc:fa:74:bd:12:22:52:82:aa:ef:83:4c:76:11:39:7c:f1: de:7d:c1:cc:ac:c2:f9:39:48:88:c7:f5:d4:97:e5:c0:5e:39: 58:54:82:7e:e6:85:e4:94:d9:e5:26:ed:0b:31:56:08:7a:40: cb:a0:bf:c9:e1:81:a2:0d:8b:c1:d5:7c:45:e8:6b:81:a0:db: e1:be:88:b4:c3:96:e8:44:41:fe:90:7f:a9:e6:15:20:e3:35: fa:41:9b:e7:37:5f:bc:90:4a:c0:ec:fc:e2:07:b3:da:8c:e0: 29:32:b6:22:55:3b:9f:9d:f0:3d:35:9f:1a:c1:f7:2c:9b:be: cb:02:2c:97:f3:c8:49:90:59:6e:9c:74:9c:62:49:3e:07:21: 2a:16:88:cc:f9:81:5c:b0:d9:3c:43:96:f6:c0:dc:88:14:83: 3b:d8:be:ae:b3:de:65:d7:89:be:87:3c:60:13:29:92:6f:f1: 50:a9:dd:42 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUQ6QPn1bGKNdr4XDoyXcv/Itsn7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMTAxMzU1MjBaFw0yNzAxMDkxNDAwMjBaMDMxMTAvBgNV BAMTKEM5QjhDQUU1QUExRjMyNzI4QUZBQ0Q5NjBGMTI0ODdEMDZFQUQ4MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8iXvNJ5pSXBoxoKpuJjBzaDUt xIiXx78enT2BpwQRDX05ZiX2yBZTyfQgT6Ozv6awqZ/6zo1N5KccPwEr7I0r6anK uc2mFsZBfsh94+vENgKz/LUb/Eu6cLImnPd9RxhYWof5zS/Cp1OZU1+ieC+WZNqL 60HrIM0n2ch+wIFJaytv6jRsJP9MCx4OtBRsDU+pkVi3dWk87gBAIMEbLkVZ/LPu q8NpUAwWB9LnAmS8zR71URdHHqAio8wwNJVvUW7Et960SIb4NlepuItVc8yv6Fkb /VJKs1xQPHTOj9hFyPF3RHrUOu7JfreGwkydcxFpe14HUG/ZrApAv1YaXcMPAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUybjK5aofMnKK+s2WDxJIfQbq2BgwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMzk5NTE2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYD7k MA0GCSqGSIb3DQEBCwUAA4IBAQA0pvtoZdDMz2o3T5xf4qUK1zvOv/xTH6xz9XL0 Huv5dC0WI7xoTXDdCIwBbpt5NVfCO0mx+wpsT6FuW1+2AVFFXGZD71aUNcHv/Pp0 vRIiUoKq74NMdhE5fPHefcHMrML5OUiIx/XUl+XAXjlYVIJ+5oXklNnlJu0LMVYI ekDLoL/J4YGiDYvB1XxF6GuBoNvhvoi0w5boREH+kH+p5hUg4zX6QZvnN1+8kErA 7PziB7PajOApMrYiVTufnfA9NZ8awfcsm77LAiyX88hJkFlunHScYkk+ByEqFojM +YFcsNk8Q5b2wNyIFIM72L6us95l14m+hzxgEymSb/FQqd1C -----END CERTIFICATE-----Generated at Sun Jan 18 12:03:42 2026 by rpki-client