This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS49981.roa File: AS49981.roa (raw, json) Hash identifier: j+SoQHHrVLX3qMSJKofZZ6mtaoIufFbSOV79nh9knxc= Subject key identifier: 38:3F:FC:D4:E9:AB:9F:70:0B:DE:A7:AF:8D:3A:51:19:F9:28:14:6C Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 18C9BEBBD76188B93AE409CFFB7E353938576CC4 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS49981.roa Signing time: Mon 22 Dec 2025 07:29:20 +0000 ROA not before: Mon 22 Dec 2025 07:24:20 +0000 ROA not after: Mon 21 Dec 2026 07:29:20 +0000 asID: 49981 IP address blocks: 143.14.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c9:be:bb:d7:61:88:b9:3a:e4:09:cf:fb:7e:35:39:38:57:6c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 22 07:24:20 2025 GMT Not After : Dec 21 07:29:20 2026 GMT Subject: CN=383FFCD4E9AB9F700BDEA7AF8D3A5119F928146C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4b:a3:d8:4b:4d:a9:17:15:90:88:28:cd:41: 4c:66:3b:ad:f1:f4:7d:07:59:d4:29:8d:27:ac:c5: e1:1e:ef:08:a6:ae:28:5e:a4:76:83:3a:b1:d1:70: 8d:60:96:b7:95:d4:83:77:bc:e4:2d:8a:cf:df:85: 52:3f:21:2d:71:6e:a4:8d:33:20:ea:03:82:36:02: f9:b5:0c:fd:fe:97:d8:e4:e9:54:5e:7f:b7:c8:81: bb:4a:b6:bb:d0:1e:2a:61:06:00:e6:76:8d:09:c5: 37:cd:e8:9b:b9:b8:da:1f:41:1f:b1:1b:4a:df:26: a3:84:89:a3:93:94:d9:20:4d:5f:b4:68:5f:d7:fc: 4c:18:b7:02:cb:1f:41:5e:62:6a:d1:28:0c:f9:7a: 88:de:40:51:b9:80:2a:a2:80:05:52:2e:e7:31:25: 8d:de:d4:47:f0:5b:d0:ff:93:46:63:44:06:1c:85: f3:ac:84:5e:c7:ad:8d:08:a2:12:94:43:86:c9:2e: c3:fc:73:b4:eb:8e:7e:cd:40:60:62:b8:e8:d5:5b: 7d:29:bf:c2:bc:f6:6e:aa:59:b6:1e:ec:58:99:b2: 09:3d:8a:a0:37:41:6f:d8:65:8d:3b:79:1d:50:3d: 7c:ce:b7:2e:7e:1f:b2:d2:66:8f:1c:c6:a9:31:42: 29:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3F:FC:D4:E9:AB:9F:70:0B:DE:A7:AF:8D:3A:51:19:F9:28:14:6C X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS49981.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.14.124.0/24 Signature Algorithm: sha256WithRSAEncryption 84:8f:1b:a8:4b:df:d6:e1:35:ae:8f:d0:b7:b7:81:02:28:ab: f0:4b:bb:dc:f8:1f:71:d2:4b:b3:1b:6c:ec:9a:0a:71:d3:2f: 21:ba:d8:d2:16:85:da:fa:49:66:d2:7d:37:06:38:0c:72:d4: e4:8c:fe:57:1b:0d:dc:64:d6:54:f1:73:39:dc:15:62:36:21: 5b:6b:15:95:05:37:ec:06:dd:41:8f:db:07:47:a8:5c:8d:7a: 2e:84:95:b1:e1:55:ec:03:fa:f2:5a:8d:a0:ca:27:27:e8:26: 54:b0:3c:90:09:ff:d3:89:6b:4d:33:5e:4d:64:e9:14:13:a5: 7e:51:5a:52:65:b5:e3:c1:b6:d1:3f:b4:44:ea:fd:bd:57:df: d5:42:e1:85:e3:37:34:20:30:d6:6d:01:77:0a:e2:68:d5:23: df:e7:b9:fc:b1:63:5d:e0:43:3f:5f:32:04:9e:f0:26:ed:19: 4d:a7:86:04:44:fc:1c:a1:e6:09:be:7b:b2:a1:7b:95:67:5b: 2b:18:1b:b4:86:03:98:1c:17:2f:08:a2:c0:34:c6:04:2d:2b: 87:73:34:0a:11:76:a7:29:f4:0c:62:d6:c8:1b:18:23:f8:7a: 13:6c:31:25:32:d0:83:55:ba:16:2c:21:0d:d6:de:d4:26:64: d6:63:9c:1a -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUGMm+u9dhiLk65AnP+341OThXbMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMjIwNzI0MjBaFw0yNjEyMjEwNzI5MjBaMDMxMTAvBgNV BAMTKDM4M0ZGQ0Q0RTlBQjlGNzAwQkRFQTdBRjhEM0E1MTE5RjkyODE0NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKS6PYS02pFxWQiCjNQUxmO63x 9H0HWdQpjSesxeEe7wimrihepHaDOrHRcI1glreV1IN3vOQtis/fhVI/IS1xbqSN MyDqA4I2Avm1DP3+l9jk6VRef7fIgbtKtrvQHiphBgDmdo0JxTfN6Ju5uNofQR+x G0rfJqOEiaOTlNkgTV+0aF/X/EwYtwLLH0FeYmrRKAz5eojeQFG5gCqigAVSLucx JY3e1EfwW9D/k0ZjRAYchfOshF7HrY0IohKUQ4bJLsP8c7Trjn7NQGBiuOjVW30p v8K89m6qWbYe7FiZsgk9iqA3QW/YZY07eR1QPXzOty5+H7LSZo8cxqkxQintAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUOD/81Omrn3AL3qevjTpRGfkoFGwwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNDk5ODEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACPDnww DQYJKoZIhvcNAQELBQADggEBAISPG6hL39bhNa6P0Le3gQIoq/BLu9z4H3HSS7Mb bOyaCnHTLyG62NIWhdr6SWbSfTcGOAxy1OSM/lcbDdxk1lTxczncFWI2IVtrFZUF N+wG3UGP2wdHqFyNei6ElbHhVewD+vJajaDKJyfoJlSwPJAJ/9OJa00zXk1k6RQT pX5RWlJltePBttE/tETq/b1X39VC4YXjNzQgMNZtAXcK4mjVI9/nufyxY13gQz9f MgSe8CbtGU2nhgRE/Byh5gm+e7Khe5VnWysYG7SGA5gcFy8IosA0xgQtK4dzNAoR dqcp9Axi1sgbGCP4ehNsMSUy0INVuhYsIQ3W3tQmZNZjnBo= -----END CERTIFICATE-----Generated at Mon Jan 19 08:21:40 2026 by rpki-client