This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42831.roa File: AS42831.roa (raw, json) Hash identifier: MJ/KyFOTa9eYNqkQl7TS/rhWaO9LHhRezxb2ApuXDfY= Subject key identifier: 61:C8:8D:2B:CC:BB:39:E6:A2:F9:9D:76:51:F1:72:BF:91:E2:A8:BF Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 07FF610841FE72CC48523BA63EBD433C1B3E32FE Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42831.roa Signing time: Tue 23 Dec 2025 00:11:31 +0000 ROA not before: Tue 23 Dec 2025 00:06:31 +0000 ROA not after: Tue 22 Dec 2026 00:11:31 +0000 asID: 42831 IP address blocks: 146.103.28.0/24 maxlen: 24 147.79.4.0/24 maxlen: 24 150.241.132.0/24 maxlen: 24 150.241.133.0/24 maxlen: 24 150.241.134.0/24 maxlen: 24 150.241.144.0/24 maxlen: 24 150.241.241.0/24 maxlen: 24 162.141.88.0/24 maxlen: 24 167.148.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ff:61:08:41:fe:72:cc:48:52:3b:a6:3e:bd:43:3c:1b:3e:32:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 23 00:06:31 2025 GMT Not After : Dec 22 00:11:31 2026 GMT Subject: CN=61C88D2BCCBB39E6A2F99D7651F172BF91E2A8BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ec:2b:d7:eb:02:0b:2a:19:79:04:b3:48:92: f0:b4:0b:fd:53:eb:8e:3e:1f:bf:38:83:c7:90:c2: 7c:25:fe:d3:7f:45:ab:78:5f:d8:2c:22:4a:98:6b: 38:ea:29:ac:c4:c9:19:3b:1a:cc:5c:9d:3b:f5:11: 90:fa:73:dd:5e:a0:1e:a7:f0:46:5a:08:2a:8f:3f: c1:c2:b4:2d:d5:48:c2:79:e9:17:a4:47:4b:db:41: 1c:0f:39:5b:2f:77:8d:32:b7:bc:2b:f8:c5:e4:4d: 07:e3:f7:12:78:0a:59:26:0b:1f:6c:e4:75:30:8b: 8e:e3:27:32:f2:97:73:e5:36:83:ac:c2:cb:3d:77: da:10:09:c6:60:72:e9:72:38:65:56:c8:31:c8:05: 18:04:ef:59:a9:e8:ab:87:32:9e:16:2b:e6:ee:18: 2e:b6:63:2c:bc:3e:19:cd:20:cb:ac:77:42:61:c6: 14:40:31:64:9f:89:5e:67:ee:f8:1a:6a:02:8a:cc: 81:9f:be:a1:f4:2b:31:d2:a4:71:73:ea:cd:48:d5: 7d:7a:30:82:20:f9:58:6a:45:ab:2a:b5:fe:8c:0a: 47:c2:2d:67:dd:d0:94:2e:5e:31:2c:13:c5:be:a7: ca:5f:32:46:bf:44:6d:b1:be:68:79:f4:9c:43:02: e4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C8:8D:2B:CC:BB:39:E6:A2:F9:9D:76:51:F1:72:BF:91:E2:A8:BF X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.103.28.0/24 147.79.4.0/24 150.241.132.0-150.241.134.255 150.241.144.0/24 150.241.241.0/24 162.141.88.0/24 167.148.152.0/24 Signature Algorithm: sha256WithRSAEncryption 73:d6:6e:16:fd:63:7a:fe:f6:1c:fa:81:f0:0d:50:ca:52:c1: 43:ac:62:10:fa:26:d8:2e:84:bb:5f:11:59:76:dd:58:80:02: bf:5b:c6:92:d2:c4:03:22:b6:34:d2:fa:3f:1e:87:e1:fc:4b: 57:99:15:5b:a0:8f:0f:ac:d2:e6:79:03:b2:0c:ae:80:97:f9: f5:4c:37:8e:96:96:6c:7c:71:a1:9f:0f:fd:d5:38:d7:21:83: eb:35:31:69:81:1a:ff:13:b9:ea:1f:89:e7:15:56:87:a5:16: b7:b7:b8:36:92:dd:91:1f:6e:a4:e5:5a:5c:c5:5b:7b:a3:c3: 56:b0:f6:70:d7:42:99:06:ba:26:73:ea:ea:61:0c:83:55:75: e6:3e:a0:f9:aa:91:b0:55:3e:d5:f7:dd:8e:49:3d:cd:47:8c: 28:09:3b:f0:5c:6e:9f:f9:5b:41:e3:65:a0:b3:1e:b9:0c:86: 40:79:56:c1:23:d8:a5:1a:bb:53:e6:82:ea:2d:19:c6:46:22: be:04:d7:87:b1:0a:16:07:fc:18:c7:ba:a0:d7:b7:97:48:22: 3f:e0:0e:db:0d:cf:14:8e:cb:c8:b1:f1:ef:06:28:e3:da:dd: 3e:70:c9:3e:d7:a4:43:51:90:6a:de:bd:3c:02:30:12:c5:dd: 92:c2:f0:0c -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUB/9hCEH+csxIUjumPr1DPBs+Mv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMjMwMDA2MzFaFw0yNjEyMjIwMDExMzFaMDMxMTAvBgNV BAMTKDYxQzg4RDJCQ0NCQjM5RTZBMkY5OUQ3NjUxRjE3MkJGOTFFMkE4QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd7CvX6wILKhl5BLNIkvC0C/1T 644+H784g8eQwnwl/tN/Rat4X9gsIkqYazjqKazEyRk7GsxcnTv1EZD6c91eoB6n 8EZaCCqPP8HCtC3VSMJ56RekR0vbQRwPOVsvd40yt7wr+MXkTQfj9xJ4ClkmCx9s 5HUwi47jJzLyl3PlNoOswss9d9oQCcZgculyOGVWyDHIBRgE71mp6KuHMp4WK+bu GC62Yyy8PhnNIMusd0JhxhRAMWSfiV5n7vgaagKKzIGfvqH0KzHSpHFz6s1I1X16 MIIg+VhqRasqtf6MCkfCLWfd0JQuXjEsE8W+p8pfMka/RG2xvmh59JxDAuSZAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUYciNK8y7Oeai+Z12UfFyv5HiqL8wHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDI4MzEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwSwYIKwYBBQUHAQcBAf8EPDA6MDgEAgABMDIDBACSZxwD BACTTwQwDAMEApbxhAMEAJbxhgMEAJbxkAMEAJbx8QMEAKKNWAMEAKeUmDANBgkq hkiG9w0BAQsFAAOCAQEAc9ZuFv1jev72HPqB8A1QylLBQ6xiEPom2C6Eu18RWXbd WIACv1vGktLEAyK2NNL6Px6H4fxLV5kVW6CPD6zS5nkDsgyugJf59Uw3jpaWbHxx oZ8P/dU41yGD6zUxaYEa/xO56h+J5xVWh6UWt7e4NpLdkR9upOVaXMVbe6PDVrD2 cNdCmQa6JnPq6mEMg1V15j6g+aqRsFU+1ffdjkk9zUeMKAk78Fxun/lbQeNloLMe uQyGQHlWwSPYpRq7U+aC6i0ZxkYivgTXh7EKFgf8GMe6oNe3l0giP+AO2w3PFI7L yLHx7wYo49rdPnDJPtekQ1GQat69PAIwEsXdksLwDA== -----END CERTIFICATE-----Generated at Mon Jan 19 23:24:02 2026 by rpki-client