This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42831.roa File: AS42831.roa (raw, json) Hash identifier: P+912RnIr75fPBByGcICjGOmGdKBSaZDo/NHEEbaiLE= Subject key identifier: AE:D7:60:E2:87:A7:80:3E:08:74:7F:B9:17:9F:D0:D3:2D:3A:EF:EB Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 77C7C4434ADD5C28AB885D7E27126F43B71AACFF Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42831.roa Signing time: Mon 10 Nov 2025 01:05:19 +0000 ROA not before: Mon 10 Nov 2025 01:00:19 +0000 ROA not after: Mon 09 Nov 2026 01:05:19 +0000 asID: 42831 IP address blocks: 146.103.28.0/24 maxlen: 24 150.241.132.0/24 maxlen: 24 150.241.133.0/24 maxlen: 24 150.241.134.0/24 maxlen: 24 150.241.144.0/24 maxlen: 24 150.241.241.0/24 maxlen: 24 162.141.88.0/24 maxlen: 24 167.148.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c7:c4:43:4a:dd:5c:28:ab:88:5d:7e:27:12:6f:43:b7:1a:ac:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 10 01:00:19 2025 GMT Not After : Nov 9 01:05:19 2026 GMT Subject: CN=AED760E287A7803E08747FB9179FD0D32D3AEFEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e8:4c:7b:f8:d5:de:c0:93:77:45:ef:8b:c5: b3:4a:77:71:78:27:63:d0:0b:ac:0c:69:fc:f5:dc: 7e:12:0f:4e:90:e6:bf:cc:d7:6b:85:90:18:1e:d2: a3:66:ce:3e:03:c8:45:31:ab:fd:25:5f:6d:b0:c7: ed:83:e9:e5:82:86:c6:31:c6:51:e4:65:95:89:28: c1:2f:56:41:c8:a0:db:79:53:1e:39:25:87:dd:3e: 69:23:2f:bc:4e:8b:04:e8:1a:04:74:04:26:d4:f2: 64:19:37:fc:a9:e8:ab:78:65:93:c3:94:13:48:4f: 09:e7:8c:59:1a:e1:2a:3b:ee:d2:ff:e3:d5:23:b6: 79:ff:2e:41:cf:f6:88:71:23:26:b5:ed:e8:02:e5: 70:fe:49:3f:7d:e3:c7:23:72:9f:05:af:04:b9:76: 1d:b8:6c:ff:b8:f5:28:f4:99:52:88:45:8c:d2:ca: 62:b6:fc:64:0e:45:36:e1:f7:cf:a4:17:5c:82:7b: 6b:8b:3f:fa:06:77:6c:c2:ef:61:86:14:73:ca:75: 90:d5:b0:30:a8:40:08:2c:83:5e:e2:91:a7:8e:23: 83:4a:dd:7e:89:6f:b4:b4:a6:71:94:77:15:7f:02: 28:54:dc:a4:99:85:07:a7:02:e7:f7:59:fc:19:03: 9a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D7:60:E2:87:A7:80:3E:08:74:7F:B9:17:9F:D0:D3:2D:3A:EF:EB X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.103.28.0/24 150.241.132.0-150.241.134.255 150.241.144.0/24 150.241.241.0/24 162.141.88.0/24 167.148.152.0/24 Signature Algorithm: sha256WithRSAEncryption 00:d2:f2:8e:67:74:37:c4:da:50:54:a7:33:d9:9b:d5:75:b0: 49:e1:1f:d3:96:06:da:4a:87:43:c3:95:4d:22:35:04:c6:d6: a1:a7:55:d3:f6:2b:c9:16:bc:09:84:99:24:41:5a:b3:5f:44: 18:44:a7:9f:e0:6f:dc:9e:02:48:96:da:9f:f4:4f:41:fa:c9: 2c:d6:b7:b4:3f:83:26:83:88:8f:0e:c7:37:97:fb:eb:53:25: 88:d5:0b:ad:e5:d9:2e:11:07:6a:a7:02:f6:db:0e:e5:33:f5: 59:f5:e0:64:6e:ab:a2:f7:80:e8:0b:65:07:44:ba:3d:ad:5d: 6f:99:e3:c7:3d:70:1d:42:37:29:ef:25:77:3b:1d:e5:2e:50: b2:70:25:9c:ff:54:14:83:96:a5:78:ec:1b:d4:fd:c3:9f:a7: 78:1f:d6:eb:c1:cf:a7:e9:b6:ea:45:69:2e:5f:74:c0:be:94: 54:42:b7:82:74:73:31:f6:ec:8b:e7:f3:06:3f:34:be:fb:86: 37:f1:a9:72:fd:77:a9:1d:92:91:5a:83:2a:1f:1b:cc:7a:4b: b4:e5:25:48:65:74:d7:c6:ec:95:da:c2:73:25:4d:0d:d1:db: e0:07:01:1b:da:fd:61:1c:f6:19:86:52:40:87:ab:09:ad:f7: 2c:9b:77:9a -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgIUd8fEQ0rdXCiriF1+JxJvQ7carP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMTAwMTAwMTlaFw0yNjExMDkwMTA1MTlaMDMxMTAvBgNV BAMTKEFFRDc2MEUyODdBNzgwM0UwODc0N0ZCOTE3OUZEMEQzMkQzQUVGRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP6Ex7+NXewJN3Re+LxbNKd3F4 J2PQC6wMafz13H4SD06Q5r/M12uFkBge0qNmzj4DyEUxq/0lX22wx+2D6eWChsYx xlHkZZWJKMEvVkHIoNt5Ux45JYfdPmkjL7xOiwToGgR0BCbU8mQZN/yp6Kt4ZZPD lBNITwnnjFka4So77tL/49Ujtnn/LkHP9ohxIya17egC5XD+ST9948cjcp8FrwS5 dh24bP+49Sj0mVKIRYzSymK2/GQORTbh98+kF1yCe2uLP/oGd2zC72GGFHPKdZDV sDCoQAgsg17ikaeOI4NK3X6Jb7S0pnGUdxV/AihU3KSZhQenAuf3WfwZA5q7AgMB AAGjggIvMIICKzAdBgNVHQ4EFgQUrtdg4oengD4IdH+5F5/Q0y067+swHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDI4MzEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwRQYIKwYBBQUHAQcBAf8ENjA0MDIEAgABMCwDBACSZxww DAMEApbxhAMEAJbxhgMEAJbxkAMEAJbx8QMEAKKNWAMEAKeUmDANBgkqhkiG9w0B AQsFAAOCAQEAANLyjmd0N8TaUFSnM9mb1XWwSeEf05YG2kqHQ8OVTSI1BMbWoadV 0/YryRa8CYSZJEFas19EGESnn+Bv3J4CSJban/RPQfrJLNa3tD+DJoOIjw7HN5f7 61MliNULreXZLhEHaqcC9tsO5TP1WfXgZG6roveA6AtlB0S6Pa1db5njxz1wHUI3 Ke8ldzsd5S5QsnAlnP9UFIOWpXjsG9T9w5+neB/W68HPp+m26kVpLl90wL6UVEK3 gnRzMfbsi+fzBj80vvuGN/Gpcv13qR2SkVqDKh8bzHpLtOUlSGV018bsldrCcyVN DdHb4AcBG9r9YRz2GYZSQIerCa33LJt3mg== -----END CERTIFICATE-----Generated at Fri Dec 5 16:18:53 2025 by rpki-client