This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401418.roa File: AS401418.roa (raw, json) Hash identifier: fud8oEFyvznvewrdzljaobW4QS6Qbog5lxmp2nc9PUc= Subject key identifier: C0:60:AF:D5:6B:8A:5D:F1:73:BF:CB:C3:05:B9:36:4E:2B:1B:0F:D4 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 5661EE53D5D09A636C7B2006E49B7A62359E314B Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401418.roa Signing time: Thu 01 Jan 2026 18:12:28 +0000 ROA not before: Thu 01 Jan 2026 18:07:28 +0000 ROA not after: Thu 31 Dec 2026 18:12:28 +0000 asID: 401418 IP address blocks: 155.117.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:61:ee:53:d5:d0:9a:63:6c:7b:20:06:e4:9b:7a:62:35:9e:31:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 1 18:07:28 2026 GMT Not After : Dec 31 18:12:28 2026 GMT Subject: CN=C060AFD56B8A5DF173BFCBC305B9364E2B1B0FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:14:ea:08:43:6a:9f:4e:e4:24:77:ab:3c:33: 25:67:07:56:f7:5f:3f:e7:a8:a8:ba:c1:66:3e:f1: a6:a0:d7:05:49:a0:4d:4a:5f:82:6c:41:6d:be:7d: 97:b8:c3:cf:0f:41:3a:b8:4f:a5:03:69:62:cb:04: 1e:6c:b8:69:e9:ae:0e:9e:f7:94:fd:8e:99:e3:88: a9:5b:7a:89:20:25:bf:d8:91:43:74:a2:69:c5:ea: ec:1a:28:ee:30:f3:c7:26:83:4d:de:38:e2:c6:a9: 66:2f:58:6e:fd:d1:60:36:70:df:27:36:a1:4d:ec: 72:74:62:7c:d3:6f:e5:40:a0:7f:50:68:25:46:6d: cc:57:ac:a4:78:65:57:1c:7a:ac:c2:82:7c:8f:b9: 83:f6:8c:35:f3:a4:e9:3d:27:3d:6f:12:2d:48:50: 65:ac:e6:b5:f0:55:1a:23:59:c7:86:cb:3a:6f:ef: dd:c1:5f:cf:74:14:53:d2:8f:3a:69:fd:a0:19:5d: 32:35:8b:30:77:61:46:f0:a4:88:d8:a2:e6:b8:6b: 13:26:fd:d9:9d:5c:96:b5:ef:52:d8:9a:1e:e3:89: 02:f6:43:51:77:62:0e:f2:ac:0a:b9:dc:2c:9c:b7: d6:66:5a:9e:9c:8c:d0:3f:da:5f:ca:d4:51:98:c9: 19:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:60:AF:D5:6B:8A:5D:F1:73:BF:CB:C3:05:B9:36:4E:2B:1B:0F:D4 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401418.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.117.235.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:c7:80:1d:83:33:06:d6:64:11:8c:06:7d:74:06:c4:29:92: 38:07:3d:dd:fa:0e:bc:de:cf:2a:09:f3:5e:e9:60:5a:56:1b: 9b:21:b0:0a:e6:a8:a7:30:9f:e9:f2:ae:fd:7a:bc:bc:88:5e: b9:02:c0:02:17:14:31:6f:fc:5c:2d:f4:c8:dc:13:5c:5b:d2: 14:e1:72:19:e5:62:ab:85:bc:cd:3b:9e:8a:9b:79:b3:a6:aa: fd:77:8b:e6:d6:84:20:62:5d:50:ff:81:87:02:a2:62:15:26: 4e:72:cd:27:6d:f6:dc:3e:e3:db:95:bd:c7:e5:39:9e:67:2b: a3:bd:4f:61:eb:93:c4:cb:9b:c2:2a:26:40:dc:1a:c3:5c:1b: 3e:6d:06:b4:1c:b7:7a:b3:32:9b:0e:60:b1:9e:aa:e8:36:08: af:ff:26:4a:04:f9:ae:11:47:72:b8:b9:e2:08:ec:1c:d1:b7: 30:91:31:8a:24:08:39:4d:52:ec:18:93:06:d3:7f:71:7a:3e: 95:e7:1d:07:6f:c9:76:d5:94:df:df:6d:64:bb:98:51:22:a1: 4b:95:a9:cf:80:13:f1:93:a4:25:82:8d:f9:cb:4e:52:58:c0: 28:e0:6f:18:d4:2c:d5:cb:96:a8:75:9e:64:6d:a4:62:37:76: f1:d3:17:93 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUVmHuU9XQmmNseyAG5Jt6YjWeMUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMDExODA3MjhaFw0yNjEyMzExODEyMjhaMDMxMTAvBgNV BAMTKEMwNjBBRkQ1NkI4QTVERjE3M0JGQ0JDMzA1QjkzNjRFMkIxQjBGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkFOoIQ2qfTuQkd6s8MyVnB1b3 Xz/nqKi6wWY+8aag1wVJoE1KX4JsQW2+fZe4w88PQTq4T6UDaWLLBB5suGnprg6e 95T9jpnjiKlbeokgJb/YkUN0omnF6uwaKO4w88cmg03eOOLGqWYvWG790WA2cN8n NqFN7HJ0YnzTb+VAoH9QaCVGbcxXrKR4ZVcceqzCgnyPuYP2jDXzpOk9Jz1vEi1I UGWs5rXwVRojWceGyzpv793BX890FFPSjzpp/aAZXTI1izB3YUbwpIjYoua4axMm /dmdXJa171LYmh7jiQL2Q1F3Yg7yrAq53Cyct9ZmWp6cjNA/2l/K1FGYyRmpAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUwGCv1WuKXfFzv8vDBbk2TisbD9QwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDAxNDE4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAm3Xr MA0GCSqGSIb3DQEBCwUAA4IBAQBvx4AdgzMG1mQRjAZ9dAbEKZI4Bz3d+g683s8q CfNe6WBaVhubIbAK5qinMJ/p8q79ery8iF65AsACFxQxb/xcLfTI3BNcW9IU4XIZ 5WKrhbzNO56Km3mzpqr9d4vm1oQgYl1Q/4GHAqJiFSZOcs0nbfbcPuPblb3H5Tme ZyujvU9h65PEy5vCKiZA3BrDXBs+bQa0HLd6szKbDmCxnqroNgiv/yZKBPmuEUdy uLniCOwc0bcwkTGKJAg5TVLsGJMG039xej6V5x0Hb8l21ZTf321ku5hRIqFLlanP gBPxk6Qlgo35y05SWMAo4G8Y1CzVy5aodZ5kbaRiN3bx0xeT -----END CERTIFICATE-----Generated at Mon Jan 19 08:14:26 2026 by rpki-client