This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401856.roa File: AS401856.roa (raw, json) Hash identifier: PcqYuWw+WLjFd7xYMMDLh2PknwsMH4AN2HIAPKmy7hg= Subject key identifier: 49:A6:D8:67:E3:44:B5:5F:80:3E:C8:72:1D:5C:79:7B:C0:AC:4A:14 Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 1490BE54ECB01C1148252B8B304C9E1736F1FA02 Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401856.roa Signing time: Thu 08 Jan 2026 09:24:57 +0000 ROA not before: Thu 08 Jan 2026 09:19:57 +0000 ROA not after: Thu 07 Jan 2027 09:24:57 +0000 asID: 401856 IP address blocks: 46.236.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 11:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:90:be:54:ec:b0:1c:11:48:25:2b:8b:30:4c:9e:17:36:f1:fa:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Jan 8 09:19:57 2026 GMT Not After : Jan 7 09:24:57 2027 GMT Subject: CN=49A6D867E344B55F803EC8721D5C797BC0AC4A14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8a:3e:6d:19:02:70:93:0c:24:7b:27:4e:17: de:e8:fb:37:1e:19:1c:ac:95:ec:78:63:99:f2:e9: 4a:19:7f:d5:4d:46:92:09:b4:14:81:a3:6b:6c:cd: 76:07:93:ea:22:e0:b6:0f:30:79:e5:38:85:84:75: 18:98:db:00:c9:bc:64:02:67:72:39:90:03:ad:20: fa:c3:8c:24:ff:53:19:d9:1c:06:0d:c0:c2:ed:6d: 9c:bd:80:e1:cd:34:d0:97:b4:14:21:19:5b:d7:22: 21:30:ef:a8:09:cd:ee:c6:c3:fc:16:4a:a7:b1:4b: a9:07:c8:7f:e9:02:44:68:40:89:b2:f0:3c:fb:00: bc:f9:d5:15:a1:12:ed:f9:81:f7:a3:cc:f4:c7:eb: 1e:3e:cd:63:e7:2f:15:42:cc:1e:31:86:67:22:1b: 7d:80:09:8a:ea:3c:b1:8b:9e:90:e1:02:e9:73:fa: 35:d4:18:cc:d0:29:18:65:0e:05:df:75:cd:f2:02: d8:64:d4:80:0a:3e:b9:91:49:b9:fc:76:cc:44:33: fb:63:c1:eb:26:83:21:bf:5e:6e:64:00:30:67:d4: 33:91:77:85:60:e5:42:9f:3a:47:7b:58:29:ed:d2: cb:9a:4e:60:91:e7:45:f6:57:f5:52:2c:28:ca:ef: 72:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A6:D8:67:E3:44:B5:5F:80:3E:C8:72:1D:5C:79:7B:C0:AC:4A:14 X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401856.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.236.192.0/24 Signature Algorithm: sha256WithRSAEncryption 74:1a:34:26:05:f8:6f:fa:0d:50:88:94:59:de:09:89:37:24: cf:a4:b8:63:5c:23:2e:8e:e8:ae:71:96:85:50:e8:b4:e4:90: 86:f9:84:79:02:c9:17:00:1f:39:23:4b:db:31:53:9a:87:63: b8:9e:f0:ef:95:86:c0:17:23:68:d0:a3:16:96:79:67:1a:4b: fe:0e:b8:31:ea:39:2f:24:c2:b8:e6:53:84:ce:7c:45:b7:d5: 95:10:38:a6:a7:6c:86:8d:07:04:c0:da:37:fe:c6:08:38:4d: 60:28:37:21:04:0e:c6:20:b6:af:12:a3:22:a9:d3:13:f1:92: d2:4b:e1:a3:34:fe:21:78:0d:f3:48:26:57:c8:be:f3:d6:e0: 9c:bc:b3:99:42:87:93:43:78:bc:61:63:46:2a:58:b0:d6:3b: 66:60:95:93:66:5d:fe:b4:c0:57:61:3c:9e:b3:d1:c3:30:1a: 2c:66:8b:db:bc:68:fe:2f:2d:0e:01:83:94:4d:5b:ac:a3:4b: da:85:1e:b3:f7:3d:db:8c:2d:d4:49:25:eb:a3:9b:70:d4:c9: 0a:38:7e:b3:72:d6:35:cf:95:0e:2e:8f:17:16:b6:31:10:58: 2f:56:d1:dd:5a:83:f0:e2:d6:98:a8:30:f4:da:8a:bf:26:a5: 76:d7:15:ea -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUFJC+VOywHBFIJSuLMEyeFzbx+gIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNjAxMDgwOTE5NTdaFw0yNzAxMDcwOTI0NTdaMDMxMTAvBgNV BAMTKDQ5QTZEODY3RTM0NEI1NUY4MDNFQzg3MjFENUM3OTdCQzBBQzRBMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZij5tGQJwkwwkeydOF97o+zce GRyslex4Y5ny6UoZf9VNRpIJtBSBo2tszXYHk+oi4LYPMHnlOIWEdRiY2wDJvGQC Z3I5kAOtIPrDjCT/UxnZHAYNwMLtbZy9gOHNNNCXtBQhGVvXIiEw76gJze7Gw/wW SqexS6kHyH/pAkRoQImy8Dz7ALz51RWhEu35gfejzPTH6x4+zWPnLxVCzB4xhmci G32ACYrqPLGLnpDhAulz+jXUGMzQKRhlDgXfdc3yAthk1IAKPrmRSbn8dsxEM/tj wesmgyG/Xm5kADBn1DORd4Vg5UKfOkd7WCnt0suaTmCR50X2V/VSLCjK73LNAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUSabYZ+NEtV+APshyHVx5e8CsShQwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTNDAxODU2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuzA MA0GCSqGSIb3DQEBCwUAA4IBAQB0GjQmBfhv+g1QiJRZ3gmJNyTPpLhjXCMujuiu cZaFUOi05JCG+YR5AskXAB85I0vbMVOah2O4nvDvlYbAFyNo0KMWlnlnGkv+Drgx 6jkvJMK45lOEznxFt9WVEDimp2yGjQcEwNo3/sYIOE1gKDchBA7GILavEqMiqdMT 8ZLSS+GjNP4heA3zSCZXyL7z1uCcvLOZQoeTQ3i8YWNGKliw1jtmYJWTZl3+tMBX YTyes9HDMBosZovbvGj+Ly0OAYOUTVuso0vahR6z9z3bjC3USSXro5tw1MkKOH6z ctY1z5UOLo8XFrYxEFgvVtHdWoPw4taYqDD02oq/JqV21xXq -----END CERTIFICATE-----Generated at Sat Jan 10 22:34:39 2026 by rpki-client