This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401322.roa File: AS401322.roa (raw, json) Hash identifier: MlX3AczmJTECW2fIo7AdMzxOynmnFLfHxNf4/KkYkG8= Subject key identifier: 0A:6F:8B:47:C9:71:3C:66:60:98:A4:69:57:6C:46:15:95:F2:DC:BC Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 3E47419023DF2552BA68D5536C117555F3442F4E Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401322.roa Signing time: Tue 13 Jan 2026 14:00:33 +0000 ROA not before: Tue 13 Jan 2026 13:55:33 +0000 ROA not after: Tue 12 Jan 2027 14:00:33 +0000 asID: 401322 IP address blocks: 46.236.243.0/24 maxlen: 24 82.139.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:47:41:90:23:df:25:52:ba:68:d5:53:6c:11:75:55:f3:44:2f:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Jan 13 13:55:33 2026 GMT Not After : Jan 12 14:00:33 2027 GMT Subject: CN=0A6F8B47C9713C666098A469576C461595F2DCBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:cd:2f:b3:b3:55:d2:b3:a6:a8:06:a2:0e: d2:4c:3a:3c:02:fd:16:19:39:bc:ef:7b:77:8b:da: 1b:b1:98:17:d1:82:3c:39:97:62:cf:a6:07:f3:ba: ab:d8:48:48:f0:d1:88:9c:d6:fa:79:32:03:82:7d: d3:8a:dd:bc:42:3d:dd:bc:39:40:d5:66:3b:3e:04: f6:0a:de:0d:b0:ce:11:48:11:22:ec:3b:13:f8:00: 37:1f:1f:09:0c:84:a9:9a:ae:04:3a:88:bf:64:32: 22:40:61:4c:19:3f:23:59:89:86:47:4a:52:db:1b: c6:c8:43:cd:99:d3:35:6a:3b:72:9e:7f:10:96:89: 60:3f:52:27:1b:c9:63:c5:d6:9b:b6:34:81:e6:bf: be:d2:b4:3b:2c:41:9b:a2:b7:0d:35:a3:c7:26:c4: 61:63:c4:e1:8a:20:3f:ca:b0:7a:4f:93:0e:03:07: 23:36:38:1a:bd:ee:35:ab:96:ba:68:d6:48:73:40: 51:37:17:1a:08:9d:a1:b8:18:f6:71:f6:c0:eb:b9: 1b:63:e6:1c:0b:27:78:34:b5:7c:bc:1b:10:0e:68: 78:d8:72:e9:a4:fa:05:32:d1:af:e4:fc:53:b9:a2: e1:d8:a4:10:cc:72:24:33:5f:54:62:5e:02:c0:76: 25:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6F:8B:47:C9:71:3C:66:60:98:A4:69:57:6C:46:15:95:F2:DC:BC X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401322.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.236.243.0/24 82.139.194.0/24 Signature Algorithm: sha256WithRSAEncryption 29:53:41:7d:f2:f2:ea:79:8b:f6:42:2b:b2:c4:cd:cf:47:d3: d5:ce:ef:74:6a:6b:2b:6c:4e:9c:85:32:d9:f7:65:26:c2:74: 13:07:0c:1b:2d:eb:90:e1:f3:0f:ae:22:00:b9:2f:5b:f4:26: c7:d7:2c:77:b9:fb:fa:9d:be:eb:f2:ca:37:e6:a7:c5:ad:f3: 03:ff:3c:f5:8d:2b:9e:37:9c:84:8d:84:c2:bb:76:7c:fd:7b: 45:5f:77:88:00:76:a8:ed:9f:e2:e1:51:6c:7c:a4:a8:1a:e3: 40:e9:c7:48:34:be:53:4f:63:ce:2a:12:1f:d3:c5:83:b8:8c: d8:cf:63:ba:5e:21:b1:6a:74:55:8c:d4:64:cd:65:49:08:ed: 35:db:d3:92:70:ff:f1:49:32:5b:a9:92:9b:23:aa:dc:85:64: 87:c5:17:54:59:37:88:f2:c1:18:db:ba:cc:e2:05:94:98:15: cc:ea:92:f4:31:e7:0f:fd:01:2b:2f:57:01:fc:d9:2f:11:23: 98:29:ed:04:ba:49:62:1d:54:14:3b:0e:73:aa:14:2c:11:7f: 01:e2:30:e8:43:96:f5:47:5e:73:44:6f:e9:38:c9:63:bc:4d: a3:d2:23:dd:4b:db:9c:b7:45:08:de:d2:5f:6c:39:7b:2c:7b: f4:52:8b:4f -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUPkdBkCPfJVK6aNVTbBF1VfNEL04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNjAxMTMxMzU1MzNaFw0yNzAxMTIxNDAwMzNaMDMxMTAvBgNV BAMTKDBBNkY4QjQ3Qzk3MTNDNjY2MDk4QTQ2OTU3NkM0NjE1OTVGMkRDQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6J80vs7NV0rOmqAaiDtJMOjwC /RYZObzve3eL2huxmBfRgjw5l2LPpgfzuqvYSEjw0Yic1vp5MgOCfdOK3bxCPd28 OUDVZjs+BPYK3g2wzhFIESLsOxP4ADcfHwkMhKmargQ6iL9kMiJAYUwZPyNZiYZH SlLbG8bIQ82Z0zVqO3KefxCWiWA/UicbyWPF1pu2NIHmv77StDssQZuitw01o8cm xGFjxOGKID/KsHpPkw4DByM2OBq97jWrlrpo1khzQFE3FxoInaG4GPZx9sDruRtj 5hwLJ3g0tXy8GxAOaHjYcumk+gUy0a/k/FO5ouHYpBDMciQzX1RiXgLAdiV/AgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUCm+LR8lxPGZgmKRpV2xGFZXy3LwwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTNDAxMzIyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALuzz AwQAUovCMA0GCSqGSIb3DQEBCwUAA4IBAQApU0F98vLqeYv2QiuyxM3PR9PVzu90 amsrbE6chTLZ92UmwnQTBwwbLeuQ4fMPriIAuS9b9CbH1yx3ufv6nb7r8so35qfF rfMD/zz1jSueN5yEjYTCu3Z8/XtFX3eIAHao7Z/i4VFsfKSoGuNA6cdINL5TT2PO KhIf08WDuIzYz2O6XiGxanRVjNRkzWVJCO0129OScP/xSTJbqZKbI6rchWSHxRdU WTeI8sEY27rM4gWUmBXM6pL0MecP/QErL1cB/NkvESOYKe0EukliHVQUOw5zqhQs EX8B4jDoQ5b1R15zRG/pOMljvE2j0iPdS9uct0UI3tJfbDl7LHv0UotP -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:02 2026 by rpki-client