This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa File: AS401776.roa (raw, json) Hash identifier: 8gs64pJCrmw4eUc668t12A3ApTVxZAAiG1gzOmqUSbU= Subject key identifier: A2:05:4F:0C:7F:59:12:75:63:64:99:BA:06:41:FB:5B:66:B1:0F:9D Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 411CE8DCDDC2EEADCEBE98E515935956032F34FD Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa Signing time: Sun 04 Jan 2026 03:39:25 +0000 ROA not before: Sun 04 Jan 2026 03:34:25 +0000 ROA not after: Sun 03 Jan 2027 03:39:25 +0000 asID: 401776 IP address blocks: 96.62.114.0/24 maxlen: 24 140.150.156.0/24 maxlen: 24 143.14.241.0/24 maxlen: 24 147.79.16.0/24 maxlen: 24 150.241.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 11:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:1c:e8:dc:dd:c2:ee:ad:ce:be:98:e5:15:93:59:56:03:2f:34:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 4 03:34:25 2026 GMT Not After : Jan 3 03:39:25 2027 GMT Subject: CN=A2054F0C7F591275636499BA0641FB5B66B10F9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:56:ad:94:93:96:ad:48:1a:1e:c7:b3:7f:13: c4:76:f5:ed:68:b6:45:4b:6c:6a:83:dc:af:6a:46: a7:9d:2d:4f:b1:0d:77:c4:a1:64:43:1a:7b:95:58: 88:4c:3c:16:0c:d3:b9:4d:ea:05:1a:1e:7b:2e:93: 8b:2d:d8:04:d6:c9:72:d7:bd:13:67:9e:ea:e9:82: 6d:6b:4f:4f:78:5d:ad:af:ff:90:26:9b:34:56:51: f6:c1:b1:0f:31:e8:40:b7:37:8d:3d:c9:aa:b8:83: e7:b6:14:ef:f9:36:64:55:74:d0:de:31:b9:8f:c3: 03:6a:42:f2:3e:36:6e:8c:f0:f2:46:c0:5b:30:19: 0c:f0:2a:57:b7:4a:be:01:40:14:0b:ba:c3:0b:f9: c9:ac:a5:5a:5d:bf:18:7b:36:48:2a:2c:32:6d:27: 13:0f:e4:b5:db:2f:ad:28:7f:33:9d:60:05:92:a7: 6a:76:06:79:b6:cb:6a:5c:70:64:9a:8c:f7:49:0a: 4d:87:79:9d:84:cf:51:e9:06:41:48:bb:16:ac:0a: 4e:5d:06:00:6d:2b:ea:55:ca:82:34:11:ff:61:59: a0:27:21:ab:d4:ee:fa:7d:7f:fa:43:f3:57:9f:ff: dd:ea:ec:2e:40:6b:5f:49:0e:0a:24:ca:9d:59:b5: b4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:05:4F:0C:7F:59:12:75:63:64:99:BA:06:41:FB:5B:66:B1:0F:9D X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401776.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.62.114.0/24 140.150.156.0/24 143.14.241.0/24 147.79.16.0/24 150.241.131.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:5d:c5:f8:a1:ee:56:f5:94:af:da:b0:55:22:f9:90:8e:d1: f5:69:7a:fa:89:88:0f:fb:df:00:a4:fc:39:09:d0:7f:19:d9: 51:a3:a9:73:fa:f3:2f:bc:ac:b5:b1:9f:7b:3a:f5:f7:37:84: c3:f4:03:e3:6c:dc:ad:24:92:a1:76:29:56:7c:39:e6:e9:9e: f3:d2:5a:93:7c:64:8e:9e:64:5e:da:20:d4:13:bf:1c:de:53: 24:70:8f:86:e2:77:f0:c9:e5:38:12:d1:7f:dd:63:50:03:ad: 39:0b:a4:0d:09:e7:07:a2:27:12:c8:72:95:e3:94:8d:fe:d4: 75:45:89:5e:13:51:74:f7:2d:a7:c1:8f:6f:a4:5a:e0:87:57: 78:a1:58:c1:35:22:be:31:3f:0f:f4:7a:3b:02:29:e6:72:9a: fd:ab:ba:0b:6d:ae:34:af:94:49:db:8b:b4:42:63:3c:06:4f: 47:e9:df:ff:fb:9f:5a:bf:92:e0:02:89:8b:3c:e4:a1:55:ca: 5b:85:bc:86:cd:f2:3d:01:f4:f0:62:e3:3a:49:d7:2c:33:87: 50:6c:96:27:78:2b:30:3f:39:bb:68:d1:18:ca:fa:c8:76:f7: f9:13:a1:0a:65:ff:98:56:f4:8a:b1:f2:ee:54:a1:a7:39:ed: 26:80:ad:fe -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUQRzo3N3C7q3OvpjlFZNZVgMvNP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMDQwMzM0MjVaFw0yNzAxMDMwMzM5MjVaMDMxMTAvBgNV BAMTKEEyMDU0RjBDN0Y1OTEyNzU2MzY0OTlCQTA2NDFGQjVCNjZCMTBGOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyVq2Uk5atSBoex7N/E8R29e1o tkVLbGqD3K9qRqedLU+xDXfEoWRDGnuVWIhMPBYM07lN6gUaHnsuk4st2ATWyXLX vRNnnurpgm1rT094Xa2v/5AmmzRWUfbBsQ8x6EC3N409yaq4g+e2FO/5NmRVdNDe MbmPwwNqQvI+Nm6M8PJGwFswGQzwKle3Sr4BQBQLusML+cmspVpdvxh7NkgqLDJt JxMP5LXbL60ofzOdYAWSp2p2Bnm2y2pccGSajPdJCk2HeZ2Ez1HpBkFIuxasCk5d BgBtK+pVyoI0Ef9hWaAnIavU7vp9f/pD81ef/93q7C5Aa19JDgokyp1ZtbTRAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUogVPDH9ZEnVjZJm6BkH7W2axD50wHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDAxNzc2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAYD5y AwQAjJacAwQAjw7xAwQAk08QAwQAlvGDMA0GCSqGSIb3DQEBCwUAA4IBAQA7XcX4 oe5W9ZSv2rBVIvmQjtH1aXr6iYgP+98ApPw5CdB/GdlRo6lz+vMvvKy1sZ97OvX3 N4TD9APjbNytJJKhdilWfDnm6Z7z0lqTfGSOnmRe2iDUE78c3lMkcI+G4nfwyeU4 EtF/3WNQA605C6QNCecHoicSyHKV45SN/tR1RYleE1F09y2nwY9vpFrgh1d4oVjB NSK+MT8P9Ho7Ainmcpr9q7oLba40r5RJ24u0QmM8Bk9H6d//+59av5LgAomLPOSh VcpbhbyGzfI9AfTwYuM6SdcsM4dQbJYneCswPzm7aNEYyvrIdvf5E6EKZf+YVvSK sfLuVKGnOe0mgK3+ -----END CERTIFICATE-----Generated at Tue Jan 20 22:21:14 2026 by rpki-client