This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401322.roa File: AS401322.roa (raw, json) Hash identifier: 0hyTrtBcYWE94F4z2OUMfB2n0MGcRbJ7NEJDvdkps8Y= Subject key identifier: B3:19:01:5D:D9:17:AF:76:96:81:F0:BE:95:B8:B4:EE:3A:4C:D3:E1 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 63BAE5330DEB258515509969B3C51DEC5D97FD1C Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401322.roa Signing time: Tue 13 Jan 2026 14:00:34 +0000 ROA not before: Tue 13 Jan 2026 13:55:34 +0000 ROA not after: Tue 12 Jan 2027 14:00:34 +0000 asID: 401322 IP address blocks: 143.14.218.0/24 maxlen: 24 155.117.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ba:e5:33:0d:eb:25:85:15:50:99:69:b3:c5:1d:ec:5d:97:fd:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 13 13:55:34 2026 GMT Not After : Jan 12 14:00:34 2027 GMT Subject: CN=B319015DD917AF769681F0BE95B8B4EE3A4CD3E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ef:94:87:9c:b0:96:b4:18:45:5d:79:2f:69: 42:17:44:8c:41:29:44:c4:b6:ee:22:e4:05:1b:71: 5b:49:2b:2f:47:be:8d:cc:da:27:85:b5:4c:05:b6: 1b:be:c8:a5:f6:6d:b2:6d:a0:02:60:b1:5f:93:9f: af:f6:78:e4:6e:78:d0:4f:10:f5:e9:65:f4:5e:b1: b1:8e:8b:13:aa:86:89:15:e4:a0:2c:6d:e1:66:bb: a1:8e:b2:bb:41:48:37:20:67:fd:99:c2:0e:94:73: c2:b1:a3:7b:bb:30:29:f6:4a:6d:9a:f6:d7:95:68: 07:47:21:3a:46:4a:95:e7:84:23:20:50:59:aa:60: 1d:9f:9c:c8:75:dd:e2:f3:68:ee:42:5c:2a:4f:75: 50:7c:3e:21:8e:dc:35:b8:c2:76:0c:9e:5c:6b:e8: db:13:53:0c:39:be:76:d6:ff:2d:f0:62:cb:1e:9f: 12:56:e0:a1:f2:6a:06:10:dc:83:0c:4f:49:9f:ee: b8:3b:61:c1:fe:24:7f:fb:ec:4d:46:8b:67:52:fc: b9:86:96:93:cd:1b:0c:47:3f:d5:2a:a2:04:6b:08: 06:7d:62:5a:63:45:79:aa:88:1e:5e:37:7f:24:b1: 76:59:2a:83:27:16:04:a9:14:81:7c:dc:c1:bf:e3: 58:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:19:01:5D:D9:17:AF:76:96:81:F0:BE:95:B8:B4:EE:3A:4C:D3:E1 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401322.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.14.218.0/24 155.117.79.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:db:6e:21:fd:bc:b6:b7:7c:22:f6:76:15:71:7c:23:39:cc: aa:51:26:89:13:14:c3:65:22:8c:43:7d:a2:ca:f9:d1:10:a2: 63:32:30:64:2f:f9:e8:57:b2:73:93:e1:a2:09:8a:9a:72:c9: aa:4b:5d:7c:59:3c:94:00:e8:07:15:e2:82:bb:44:9f:5a:f7: 8a:3b:6e:b6:b2:ea:52:62:77:19:99:f6:aa:30:c8:0f:f2:eb: 26:42:37:01:93:77:69:10:d7:69:21:98:20:a9:e3:79:30:b8: 35:4a:5b:be:44:1b:45:6c:4b:1f:1b:a0:e5:83:f8:2b:fc:57: b3:64:eb:97:f6:dc:45:0c:d9:43:dc:b0:ec:f2:bc:19:4f:5f: 12:1f:b7:d4:b7:98:4e:a6:7b:62:5d:b4:dd:e9:7e:4d:db:2f: 1e:ae:67:58:41:47:66:d3:ce:e6:76:ee:4b:9f:94:a2:23:f9: 02:c1:2f:57:9f:fa:ac:df:c9:78:d3:d9:a9:71:79:f6:c6:5e: 5b:9a:77:f4:ef:80:12:19:5c:d8:29:67:49:bb:e3:5a:22:ad: e1:d5:ac:09:c5:41:9d:f5:ad:ee:8d:93:04:3e:6a:e6:c9:2d: 12:6c:d0:97:68:d2:f8:0b:96:2b:1b:6c:5e:e8:e2:e7:16:20: 91:b8:94:d7 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUY7rlMw3rJYUVUJlps8Ud7F2X/RwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMTMxMzU1MzRaFw0yNzAxMTIxNDAwMzRaMDMxMTAvBgNV BAMTKEIzMTkwMTVERDkxN0FGNzY5NjgxRjBCRTk1QjhCNEVFM0E0Q0QzRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY75SHnLCWtBhFXXkvaUIXRIxB KUTEtu4i5AUbcVtJKy9Hvo3M2ieFtUwFthu+yKX2bbJtoAJgsV+Tn6/2eORueNBP EPXpZfResbGOixOqhokV5KAsbeFmu6GOsrtBSDcgZ/2Zwg6Uc8Kxo3u7MCn2Sm2a 9teVaAdHITpGSpXnhCMgUFmqYB2fnMh13eLzaO5CXCpPdVB8PiGO3DW4wnYMnlxr 6NsTUww5vnbW/y3wYssenxJW4KHyagYQ3IMMT0mf7rg7YcH+JH/77E1Gi2dS/LmG lpPNGwxHP9UqogRrCAZ9YlpjRXmqiB5eN38ksXZZKoMnFgSpFIF83MG/41hnAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUsxkBXdkXr3aWgfC+lbi07jpM0+EwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDAxMzIyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjw7a AwQAm3VPMA0GCSqGSIb3DQEBCwUAA4IBAQAa224h/by2t3wi9nYVcXwjOcyqUSaJ ExTDZSKMQ32iyvnREKJjMjBkL/noV7Jzk+GiCYqacsmqS118WTyUAOgHFeKCu0Sf WveKO262supSYncZmfaqMMgP8usmQjcBk3dpENdpIZggqeN5MLg1Slu+RBtFbEsf G6Dlg/gr/FezZOuX9txFDNlD3LDs8rwZT18SH7fUt5hOpntiXbTd6X5N2y8ermdY QUdm087mdu5Ln5SiI/kCwS9Xn/qs38l409mpcXn2xl5bmnf074ASGVzYKWdJu+Na Iq3h1awJxUGd9a3ujZMEPmrmyS0SbNCXaNL4C5YrG2xe6OLnFiCRuJTX -----END CERTIFICATE-----Generated at Mon Jan 19 08:14:27 2026 by rpki-client