This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42689.roa File: AS42689.roa (raw, json) Hash identifier: hgzpOorY0veIikkzk8Rikj+mMvaJ5jWwenhu+32JQs0= Subject key identifier: 50:2E:1E:DB:91:98:80:B7:C8:5D:51:7D:C1:99:25:47:51:58:9B:21 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 151396687770A29D9B2B055E039D07B93076145F Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42689.roa Signing time: Fri 09 Jan 2026 12:31:30 +0000 ROA not before: Fri 09 Jan 2026 12:26:30 +0000 ROA not after: Fri 08 Jan 2027 12:31:30 +0000 asID: 42689 IP address blocks: 143.14.174.0/24 maxlen: 24 155.117.221.0/24 maxlen: 24 162.141.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:13:96:68:77:70:a2:9d:9b:2b:05:5e:03:9d:07:b9:30:76:14:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 9 12:26:30 2026 GMT Not After : Jan 8 12:31:30 2027 GMT Subject: CN=502E1EDB919880B7C85D517DC199254751589B21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:26:74:b8:25:e0:29:aa:2a:4a:a9:9e:7b:9f: 5e:b8:44:11:0e:e2:6b:d3:bf:ef:9d:7e:3c:97:7b: 7e:72:8a:da:0b:11:b7:9f:70:c9:81:72:d4:ee:c2: 74:11:57:4f:e0:e0:f8:87:55:ba:76:19:08:10:09: 94:e1:ee:2d:ba:b4:bb:5b:d8:8d:db:18:c1:eb:51: 32:4b:9f:dc:5e:61:af:e9:62:44:42:ea:1f:71:fb: f6:37:72:32:2f:00:3a:37:47:1e:4e:85:96:5d:d9: 43:2b:f6:c9:de:4d:ba:ec:a9:f5:93:1f:28:99:ba: 43:86:92:4b:79:43:65:86:76:53:d6:92:1e:59:a5: d1:12:01:a5:23:5a:e8:78:ea:ec:b5:28:7c:c0:55: a7:fd:51:9e:7a:5a:c8:c7:44:1e:b8:84:fd:ca:b7: 77:7f:4e:1a:6e:f6:97:60:ab:cf:e7:a6:e5:9c:7a: 60:e8:42:97:b3:14:e8:5e:e7:82:35:59:c6:2c:b2: 5e:8d:2d:6f:65:09:d6:46:78:58:35:1b:12:81:c9: a7:7d:4c:8e:a5:fb:f9:39:3c:c3:85:ee:bf:b2:f7: 05:71:b5:d6:36:ad:41:b1:a3:08:b8:3a:53:f7:0a: a9:85:46:a4:39:d7:56:b5:38:d0:7f:27:7b:33:c4: b7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2E:1E:DB:91:98:80:B7:C8:5D:51:7D:C1:99:25:47:51:58:9B:21 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42689.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.14.174.0/24 155.117.221.0/24 162.141.158.0/24 Signature Algorithm: sha256WithRSAEncryption 13:05:6d:ff:7d:97:58:d0:82:2b:0f:ad:fc:67:72:9c:9c:af: 4c:84:4f:9b:50:20:81:c6:5c:4e:74:3a:38:51:3d:fe:6c:98: 27:e3:1c:10:0e:94:78:c0:06:d1:98:e4:84:66:87:7c:d5:84: e4:80:58:df:24:7a:06:2b:da:bf:46:3a:76:6a:e4:de:69:b6: 1b:79:d2:61:29:c8:7c:9d:4f:1b:e7:41:86:73:a2:c8:b2:64: 30:cf:3b:4d:3c:18:9a:bf:d3:e3:14:ad:c5:e3:c3:36:97:d8: 0a:61:8c:90:23:7e:85:fa:ff:45:43:5b:45:35:b0:b6:22:3b: ee:3c:7a:42:91:96:79:f7:29:e9:89:13:64:dd:73:97:c9:7e: 92:91:e3:1f:1c:dc:7b:5f:c2:60:af:74:76:11:01:1a:10:1b: 9b:10:dc:25:b3:56:89:d5:6a:8b:d6:a2:fd:13:37:2f:89:6d: 24:f8:77:e0:93:e4:de:7a:30:fb:ce:de:f0:fb:ca:7d:8a:17: 37:6c:4c:82:bf:bf:84:e0:3e:00:a0:ae:88:25:1d:94:b8:4e: 99:18:fe:3c:5b:15:90:90:65:93:d1:42:44:47:40:be:f8:18: 6d:85:ff:48:94:e8:6b:0e:16:65:61:08:5f:3c:79:c8:fb:06: e5:84:d1:d7 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUFROWaHdwop2bKwVeA50HuTB2FF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMDkxMjI2MzBaFw0yNzAxMDgxMjMxMzBaMDMxMTAvBgNV BAMTKDUwMkUxRURCOTE5ODgwQjdDODVENTE3REMxOTkyNTQ3NTE1ODlCMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPJnS4JeApqipKqZ57n164RBEO 4mvTv++dfjyXe35yitoLEbefcMmBctTuwnQRV0/g4PiHVbp2GQgQCZTh7i26tLtb 2I3bGMHrUTJLn9xeYa/pYkRC6h9x+/Y3cjIvADo3Rx5OhZZd2UMr9sneTbrsqfWT HyiZukOGkkt5Q2WGdlPWkh5ZpdESAaUjWuh46uy1KHzAVaf9UZ56WsjHRB64hP3K t3d/Thpu9pdgq8/npuWcemDoQpezFOhe54I1WcYssl6NLW9lCdZGeFg1GxKByad9 TI6l+/k5PMOF7r+y9wVxtdY2rUGxowi4OlP3CqmFRqQ511a1ONB/J3szxLdlAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUUC4e25GYgLfIXVF9wZklR1FYmyEwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDI2ODkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACPDq4D BACbdd0DBACijZ4wDQYJKoZIhvcNAQELBQADggEBABMFbf99l1jQgisPrfxncpyc r0yET5tQIIHGXE50OjhRPf5smCfjHBAOlHjABtGY5IRmh3zVhOSAWN8kegYr2r9G OnZq5N5ptht50mEpyHydTxvnQYZzosiyZDDPO008GJq/0+MUrcXjwzaX2AphjJAj foX6/0VDW0U1sLYiO+48ekKRlnn3KemJE2Tdc5fJfpKR4x8c3HtfwmCvdHYRARoQ G5sQ3CWzVonVaovWov0TNy+JbST4d+CT5N56MPvO3vD7yn2KFzdsTIK/v4TgPgCg roglHZS4TpkY/jxbFZCQZZPRQkRHQL74GG2F/0iU6GsOFmVhCF88ecj7BuWE0dc= -----END CERTIFICATE-----Generated at Mon Jan 19 08:13:45 2026 by rpki-client