This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401776.roa File: AS401776.roa (raw, json) Hash identifier: ebLx46/uD/rPd1H9fx2yLVz5RrxFIjvh29qH51zn5WU= Subject key identifier: AF:35:B7:A5:18:AA:EC:E0:BF:28:6A:DF:57:29:81:76:42:FE:53:28 Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 29CA95060887F374621B0C731E7BC6D7E9B328A6 Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401776.roa Signing time: Fri 28 Nov 2025 08:50:24 +0000 ROA not before: Fri 28 Nov 2025 08:45:24 +0000 ROA not after: Fri 27 Nov 2026 08:50:24 +0000 asID: 401776 IP address blocks: 82.139.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ca:95:06:08:87:f3:74:62:1b:0c:73:1e:7b:c6:d7:e9:b3:28:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Nov 28 08:45:24 2025 GMT Not After : Nov 27 08:50:24 2026 GMT Subject: CN=AF35B7A518AAECE0BF286ADF5729817642FE5328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:34:4b:2f:86:98:48:63:30:b2:9b:11:13:46: 38:7c:c6:d5:e7:04:8d:e9:0b:af:8f:07:ca:c4:3c: 1c:c8:b1:36:65:fe:f6:60:49:f5:bd:56:93:70:e3: ab:ca:b9:61:32:da:26:1c:b1:0b:b0:4e:dd:47:ad: 17:25:2b:ef:a9:ce:d9:11:01:66:9e:c4:10:a1:4e: b3:7f:b2:ab:b9:6f:4f:f4:c1:f9:f9:1e:1b:68:1e: 54:05:58:0b:9e:c5:85:c7:6f:74:39:9c:23:cd:83: c0:40:03:b1:77:92:e5:83:b3:3f:38:1d:97:d0:27: bf:26:0a:a1:94:8f:16:c1:ed:4d:95:96:85:1d:7e: 5a:7b:5f:5e:0b:4c:22:06:75:7f:d5:fd:0c:27:1e: 2e:39:2b:02:b1:5c:23:e2:ac:49:0b:b4:fc:a9:69: 31:90:8b:47:36:c2:b7:80:aa:a0:57:16:73:20:7a: 0c:3d:3e:c2:a8:c8:7a:1c:68:f7:b8:f0:5e:c2:ea: ee:f6:ea:8b:14:01:6f:59:70:9d:07:8a:92:7e:9e: 8f:1c:c6:86:fc:53:85:4d:1f:18:7d:74:aa:25:48: b5:d0:d0:08:9d:55:fc:79:5c:7e:d1:d5:26:3d:3b: 33:7c:82:4a:0b:2d:01:95:b1:4d:19:b7:32:f3:c8: 0e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:35:B7:A5:18:AA:EC:E0:BF:28:6A:DF:57:29:81:76:42:FE:53:28 X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401776.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.139.233.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:6a:c4:4e:60:ae:72:d4:8d:54:6c:f8:f2:7b:d5:b1:25:ac: ae:d2:bd:95:01:2c:ca:a9:f4:4a:1b:5f:7c:ed:24:23:76:61: be:16:f3:7c:ab:47:d6:ee:20:8d:99:f5:70:d5:c9:59:d2:17: cb:9e:49:51:a0:eb:31:6d:5d:12:f0:9f:be:c1:8d:62:a9:24: dc:fd:23:07:78:e9:50:f2:27:30:60:f1:19:12:a8:8d:4c:4c: 26:f3:e4:24:b7:79:9b:c4:d7:c0:8e:2b:45:77:bb:bb:b4:a6: 26:83:cc:d4:c4:ae:f9:ac:91:db:15:fe:7f:ff:e2:f7:4c:67: 59:ba:02:4f:7b:cd:3a:9c:31:ce:f0:1b:36:19:3f:14:84:13: 7e:fd:87:b7:4e:66:65:f0:e8:62:1d:8d:d0:7b:bd:d2:58:0e: e9:ed:e3:71:81:fa:0d:79:3b:c7:ea:d0:c7:b4:50:9c:a1:c7: 9b:c9:e3:68:35:f5:3d:61:bf:51:d1:ff:30:70:35:3e:4e:e0: fa:06:0b:41:18:0f:44:c5:23:aa:31:c3:4c:0c:dd:25:b2:b7: fb:91:5f:bb:50:ed:61:91:64:b7:ca:d4:9f:ba:11:50:75:34: c8:30:c7:17:78:d1:87:37:ad:10:ca:df:39:d9:19:67:31:6d: e5:ce:bd:0e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUKcqVBgiH83RiGwxzHnvG1+mzKKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNTExMjgwODQ1MjRaFw0yNjExMjcwODUwMjRaMDMxMTAvBgNV BAMTKEFGMzVCN0E1MThBQUVDRTBCRjI4NkFERjU3Mjk4MTc2NDJGRTUzMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVNEsvhphIYzCymxETRjh8xtXn BI3pC6+PB8rEPBzIsTZl/vZgSfW9VpNw46vKuWEy2iYcsQuwTt1HrRclK++pztkR AWaexBChTrN/squ5b0/0wfn5HhtoHlQFWAuexYXHb3Q5nCPNg8BAA7F3kuWDsz84 HZfQJ78mCqGUjxbB7U2VloUdflp7X14LTCIGdX/V/QwnHi45KwKxXCPirEkLtPyp aTGQi0c2wreAqqBXFnMgegw9PsKoyHocaPe48F7C6u726osUAW9ZcJ0HipJ+no8c xob8U4VNHxh9dKolSLXQ0AidVfx5XH7R1SY9OzN8gkoLLQGVsU0ZtzLzyA5NAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUrzW3pRiq7OC/KGrfVymBdkL+UygwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTNDAxNzc2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUovp MA0GCSqGSIb3DQEBCwUAA4IBAQCPasROYK5y1I1UbPjye9WxJayu0r2VASzKqfRK G1987SQjdmG+FvN8q0fW7iCNmfVw1clZ0hfLnklRoOsxbV0S8J++wY1iqSTc/SMH eOlQ8icwYPEZEqiNTEwm8+Qkt3mbxNfAjitFd7u7tKYmg8zUxK75rJHbFf5//+L3 TGdZugJPe806nDHO8Bs2GT8UhBN+/Ye3TmZl8OhiHY3Qe73SWA7p7eNxgfoNeTvH 6tDHtFCcocebyeNoNfU9Yb9R0f8wcDU+TuD6BgtBGA9ExSOqMcNMDN0lsrf7kV+7 UO1hkWS3ytSfuhFQdTTIMMcXeNGHN60Qyt852RlnMW3lzr0O -----END CERTIFICATE-----Generated at Sat Dec 6 03:35:05 2025 by rpki-client