This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401560.roa File: AS401560.roa (raw, json) Hash identifier: uKcNTsJwutFatVWVSrfqsNEw04o8Lq1KAdud5ZXibkQ= Subject key identifier: CF:3E:84:DC:01:6D:AA:E9:A1:D4:90:12:AA:8B:C5:7B:A8:DA:51:CE Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 62BC3C9F0DC0AA2655C50059E58145AD69428CF7 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401560.roa Signing time: Wed 31 Dec 2025 16:57:34 +0000 ROA not before: Wed 31 Dec 2025 16:52:34 +0000 ROA not after: Wed 30 Dec 2026 16:57:34 +0000 asID: 401560 IP address blocks: 143.14.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:bc:3c:9f:0d:c0:aa:26:55:c5:00:59:e5:81:45:ad:69:42:8c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 31 16:52:34 2025 GMT Not After : Dec 30 16:57:34 2026 GMT Subject: CN=CF3E84DC016DAAE9A1D49012AA8BC57BA8DA51CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:37:36:8c:bc:95:d3:74:50:be:42:32:c1:22: 7a:8a:d1:1f:4c:2b:fd:41:60:bf:c7:eb:6a:c4:fa: 46:56:22:c7:2e:e1:97:a8:a2:70:45:f1:3c:3c:6b: d5:62:8c:2f:2a:ba:ee:61:b3:f5:60:9e:57:4b:e2: fb:db:c0:2f:3f:bd:08:27:fa:b9:84:92:0f:08:b8: 72:06:13:a3:19:de:74:7a:49:76:d2:6f:f8:8c:4e: 29:1c:cb:43:4f:31:aa:f4:56:10:c6:d2:66:0d:6a: 02:bb:91:be:63:cf:db:d3:a0:6c:89:81:ec:20:30: 6a:db:bc:b4:e4:a9:ad:66:2f:91:31:fe:58:a4:4c: 69:f8:1a:2a:7e:0a:e3:22:75:75:1c:45:e1:00:00: 0b:ba:a7:b8:c5:49:84:76:4c:99:6c:6a:36:88:64: 78:77:cd:9b:8a:9f:2c:b3:77:a2:62:40:c2:27:87: dd:cf:2e:b8:f4:0c:de:1f:1c:63:ec:fd:c9:ee:28: 64:48:a6:ca:cf:cb:15:b8:94:ba:a0:18:3b:bd:98: 6d:0f:6b:80:50:5e:f8:2d:16:9d:46:c6:aa:19:51: 0e:81:4e:c3:09:4d:13:67:06:c4:8e:e8:ec:b9:ba: 67:71:2c:ac:fb:1b:ab:81:7d:2b:a4:63:10:5b:06: ba:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3E:84:DC:01:6D:AA:E9:A1:D4:90:12:AA:8B:C5:7B:A8:DA:51:CE X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401560.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.14.6.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:e4:c3:bc:1f:b7:52:80:59:2c:17:57:ef:c4:2e:ab:34:a6: e6:67:33:3e:79:fa:d8:1d:a9:ef:94:12:50:c5:40:16:eb:97: 31:45:ff:32:d9:9c:2c:b0:cc:fb:1e:02:39:b1:0a:37:fe:b5: a5:58:f8:8d:7e:ff:c0:04:b8:d8:1a:ae:86:f9:e6:f7:0f:f6: 0a:af:14:d8:b0:2c:e9:a9:b3:9a:82:5b:43:5c:be:bb:36:9a: 9c:64:e2:77:bb:f8:e7:45:fe:87:91:e3:8f:4f:02:7c:49:17: 57:15:ed:1e:4b:19:0f:39:b4:ab:5d:68:52:3e:52:3b:38:5e: c8:09:eb:bf:9b:72:2d:1c:7d:ed:6b:18:be:6e:f7:85:95:2a: 6a:85:67:f5:9e:13:a7:81:c6:53:e2:15:65:39:06:a6:d6:ae: 13:3e:58:78:0d:2f:3c:70:10:10:09:20:bc:fb:25:13:9b:38: 47:88:b7:ae:90:cb:71:2e:ff:ce:4f:35:fe:7b:2b:86:23:bf: 3b:67:93:89:38:92:03:7a:08:09:3e:de:4a:9e:09:f7:ca:5b: 83:4d:7b:e7:33:00:de:10:ce:49:c8:f2:78:94:82:8e:bd:a9: b5:b4:b3:93:5e:59:e1:a2:93:30:fe:6e:e8:c2:aa:51:7a:e5: 4d:e7:62:76 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUYrw8nw3AqiZVxQBZ5YFFrWlCjPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMzExNjUyMzRaFw0yNjEyMzAxNjU3MzRaMDMxMTAvBgNV BAMTKENGM0U4NERDMDE2REFBRTlBMUQ0OTAxMkFBOEJDNTdCQThEQTUxQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NzaMvJXTdFC+QjLBInqK0R9M K/1BYL/H62rE+kZWIscu4ZeoonBF8Tw8a9VijC8quu5hs/VgnldL4vvbwC8/vQgn +rmEkg8IuHIGE6MZ3nR6SXbSb/iMTikcy0NPMar0VhDG0mYNagK7kb5jz9vToGyJ gewgMGrbvLTkqa1mL5Ex/likTGn4Gip+CuMidXUcReEAAAu6p7jFSYR2TJlsajaI ZHh3zZuKnyyzd6JiQMInh93PLrj0DN4fHGPs/cnuKGRIpsrPyxW4lLqgGDu9mG0P a4BQXvgtFp1GxqoZUQ6BTsMJTRNnBsSO6Oy5umdxLKz7G6uBfSukYxBbBropAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUzz6E3AFtqumh1JASqovFe6jaUc4wHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDAxNTYwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjw4G MA0GCSqGSIb3DQEBCwUAA4IBAQCf5MO8H7dSgFksF1fvxC6rNKbmZzM+efrYHanv lBJQxUAW65cxRf8y2ZwssMz7HgI5sQo3/rWlWPiNfv/ABLjYGq6G+eb3D/YKrxTY sCzpqbOagltDXL67NpqcZOJ3u/jnRf6HkeOPTwJ8SRdXFe0eSxkPObSrXWhSPlI7 OF7ICeu/m3ItHH3taxi+bveFlSpqhWf1nhOngcZT4hVlOQam1q4TPlh4DS88cBAQ CSC8+yUTmzhHiLeukMtxLv/OTzX+eyuGI787Z5OJOJIDeggJPt5Kngn3yluDTXvn MwDeEM5JyPJ4lIKOvam1tLOTXlnhopMw/m7owqpReuVN52J2 -----END CERTIFICATE-----Generated at Mon Jan 12 01:03:09 2026 by rpki-client