This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401819.roa File: AS401819.roa (raw, json) Hash identifier: VJpDJI4O9jV7y6d/qDuFBL4Bm76XHhxaqJCYWh+UkvI= Subject key identifier: 45:9E:BF:E8:E7:9B:83:0B:7C:E7:3B:5D:C8:A0:A8:EA:23:CA:33:E9 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 7AF4F37CC2BEB032303408CD906A5ADA3C7A2A61 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401819.roa Signing time: Sat 10 Jan 2026 09:59:51 +0000 ROA not before: Sat 10 Jan 2026 09:54:51 +0000 ROA not after: Sat 09 Jan 2027 09:59:51 +0000 asID: 401819 IP address blocks: 162.141.104.0/24 maxlen: 24 167.148.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f4:f3:7c:c2:be:b0:32:30:34:08:cd:90:6a:5a:da:3c:7a:2a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 10 09:54:51 2026 GMT Not After : Jan 9 09:59:51 2027 GMT Subject: CN=459EBFE8E79B830B7CE73B5DC8A0A8EA23CA33E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:73:86:44:ed:63:f6:7f:a3:80:1d:c6:86:e9: b2:db:7d:ce:2e:65:04:7d:8b:af:dc:e1:c1:10:69: 27:c6:7a:20:90:36:58:07:e2:18:d5:56:7f:a9:32: 99:89:3b:e9:a6:44:2f:9a:7e:6d:3d:54:28:89:29: 13:67:ed:9a:49:c9:90:36:03:a4:94:55:eb:5f:27: f1:3b:67:0b:70:0a:74:b2:5d:3a:56:09:78:a7:6b: c6:a1:df:da:bf:a5:06:f1:36:a8:6b:dd:bb:9e:02: ef:33:c5:bb:96:3c:ee:85:d1:11:02:23:91:c8:ed: cd:0e:48:ae:e0:74:da:f3:66:a8:0e:b9:e3:be:cd: 66:38:75:81:4d:fc:df:29:d3:8f:90:c0:39:91:7b: da:bb:ee:7a:07:12:0b:b5:e8:f1:8e:e1:da:86:52: a6:7c:ed:99:ea:8d:b0:28:0a:e3:a9:31:39:60:23: 96:1f:02:60:13:55:30:7e:20:b4:da:93:47:9b:a9: 68:db:77:44:85:f8:be:4e:bd:97:30:f8:4f:37:62: e0:79:3f:d6:67:9c:96:c5:83:a0:d5:06:70:49:e6: ce:48:f9:bd:ff:fa:c3:18:18:e3:ef:45:cb:52:e4: 76:ae:13:19:85:1c:79:cc:80:f0:20:e6:8b:68:f5: c9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9E:BF:E8:E7:9B:83:0B:7C:E7:3B:5D:C8:A0:A8:EA:23:CA:33:E9 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS401819.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.141.104.0/24 167.148.141.0/24 Signature Algorithm: sha256WithRSAEncryption 72:50:37:a0:b6:05:b6:7b:fa:80:47:9d:a7:5f:58:14:1b:90: d2:f2:31:16:1d:a9:76:7f:61:f5:58:c7:d2:ca:f8:b9:89:f7: 7b:6d:61:e7:fc:96:0f:93:96:90:d8:d5:ec:ee:a0:16:6a:3a: 15:42:3b:0c:71:d1:b8:f5:fa:83:55:d3:92:6d:95:6b:bb:f3: cd:d0:fa:f5:ad:cc:ee:34:50:4f:e1:87:47:0d:28:63:2c:99: cf:32:3e:53:7c:f6:5d:b6:20:3f:1b:d2:8c:84:b8:06:76:f6: 77:f2:cd:50:12:4f:55:62:8b:25:17:b8:39:c8:7e:eb:a4:d8: b6:32:cc:29:3c:2e:ed:be:e1:0e:8f:83:f9:37:e1:1c:de:ca: 0c:fc:1d:1d:63:0f:1b:e6:d7:53:d8:26:d5:6c:3b:9b:7a:46: d8:3c:d2:74:02:2f:c2:f3:b3:9c:45:0f:a3:ad:3d:f2:95:2b: d7:11:eb:9e:6e:7d:2d:d2:bc:8e:43:b9:bc:fc:a8:a0:c4:2e: 13:9e:f1:9b:82:59:28:cc:27:04:5e:dd:61:09:af:5a:3a:72: 1e:06:f2:f6:d0:f4:47:00:d6:af:a6:69:b9:13:b6:f4:4c:af: 77:e2:74:f3:41:79:22:14:9e:a6:60:48:12:ae:e9:6e:29:89: b5:c3:35:c3 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUevTzfMK+sDIwNAjNkGpa2jx6KmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMTAwOTU0NTFaFw0yNzAxMDkwOTU5NTFaMDMxMTAvBgNV BAMTKDQ1OUVCRkU4RTc5QjgzMEI3Q0U3M0I1REM4QTBBOEVBMjNDQTMzRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOc4ZE7WP2f6OAHcaG6bLbfc4u ZQR9i6/c4cEQaSfGeiCQNlgH4hjVVn+pMpmJO+mmRC+afm09VCiJKRNn7ZpJyZA2 A6SUVetfJ/E7ZwtwCnSyXTpWCXina8ah39q/pQbxNqhr3bueAu8zxbuWPO6F0REC I5HI7c0OSK7gdNrzZqgOueO+zWY4dYFN/N8p04+QwDmRe9q77noHEgu16PGO4dqG UqZ87ZnqjbAoCuOpMTlgI5YfAmATVTB+ILTak0ebqWjbd0SF+L5OvZcw+E83YuB5 P9ZnnJbFg6DVBnBJ5s5I+b3/+sMYGOPvRctS5HauExmFHHnMgPAg5oto9clDAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQURZ6/6Oebgwt85ztdyKCo6iPKM+kwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDAxODE5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAoo1o AwQAp5SNMA0GCSqGSIb3DQEBCwUAA4IBAQByUDegtgW2e/qAR52nX1gUG5DS8jEW Hal2f2H1WMfSyvi5ifd7bWHn/JYPk5aQ2NXs7qAWajoVQjsMcdG49fqDVdOSbZVr u/PN0Pr1rczuNFBP4YdHDShjLJnPMj5TfPZdtiA/G9KMhLgGdvZ38s1QEk9VYosl F7g5yH7rpNi2MswpPC7tvuEOj4P5N+Ec3soM/B0dYw8b5tdT2CbVbDubekbYPNJ0 Ai/C87OcRQ+jrT3ylSvXEeuebn0t0ryOQ7m8/KigxC4TnvGbglkozCcEXt1hCa9a OnIeBvL20PRHANavpmm5E7b0TK934nTzQXkiFJ6mYEgSruluKYm1wzXD -----END CERTIFICATE-----Generated at Mon Jan 19 08:14:26 2026 by rpki-client