This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401857.roa File: AS401857.roa (raw, json) Hash identifier: AxmtkOgTQdquXT8anj5909RTnMM/vn15UinPoYpdrdI= Subject key identifier: 95:66:43:0C:C5:20:48:C3:41:89:2D:BB:5B:CD:48:1B:9B:1B:DD:F0 Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 7DB0C9D5A985CA238263107EE0CE6A5ED374B07E Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401857.roa Signing time: Thu 08 Jan 2026 09:24:18 +0000 ROA not before: Thu 08 Jan 2026 09:19:18 +0000 ROA not after: Thu 07 Jan 2027 09:24:18 +0000 asID: 401857 IP address blocks: 46.236.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 11:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b0:c9:d5:a9:85:ca:23:82:63:10:7e:e0:ce:6a:5e:d3:74:b0:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Jan 8 09:19:18 2026 GMT Not After : Jan 7 09:24:18 2027 GMT Subject: CN=9566430CC52048C341892DBB5BCD481B9B1BDDF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d4:76:f4:5e:05:c5:0e:c8:35:69:48:65:90: 75:bf:a6:6d:0d:4c:ca:34:fa:51:0e:ff:2e:f8:49: 79:c4:a0:9b:1a:50:37:db:dd:d0:50:8b:e9:19:25: 1b:b7:b3:da:a7:bc:cf:ff:94:3c:70:b9:d3:51:51: e5:e8:0f:6d:7b:33:fc:f4:e6:99:8e:5b:de:e4:ef: c9:4e:30:fc:21:2e:c8:ee:9e:10:af:64:67:43:72: a4:f2:1f:48:db:ae:9d:cf:fc:b0:ad:59:39:e7:b8: 4d:db:74:66:f2:e7:df:46:a0:21:a3:19:32:60:fa: 3a:94:51:f8:b4:a2:57:3b:f2:ff:fc:41:0d:2b:94: d8:0c:cb:a5:99:59:ac:da:b2:04:42:0d:38:00:6e: d6:74:c9:e0:2b:03:9e:d9:fa:94:d9:73:06:8a:e3: 9f:f9:26:21:83:b9:7f:a7:25:dd:16:0e:b9:55:53: cf:62:cb:45:5a:18:41:d9:00:5a:be:9c:37:31:61: d2:49:e9:d6:0d:54:fe:92:49:cd:14:de:25:0f:49: 89:12:7a:1c:bd:2e:8b:f3:cc:53:a2:14:96:aa:ef: 1a:2b:8a:66:ea:2c:69:b0:ce:3d:59:e0:8d:c9:d6: 45:2e:f9:c2:94:76:f0:f4:ba:7a:8a:fb:bb:fd:56: fe:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:66:43:0C:C5:20:48:C3:41:89:2D:BB:5B:CD:48:1B:9B:1B:DD:F0 X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS401857.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.236.212.0/24 Signature Algorithm: sha256WithRSAEncryption 57:c3:c4:31:50:1d:89:e6:26:91:db:16:fa:47:35:74:f1:94: 31:f7:60:ea:d7:11:5f:56:cf:61:24:8e:40:4e:53:1e:81:c2: 7e:ab:bd:0b:68:a2:a3:9a:15:3d:5d:ec:f2:b4:8b:e8:f9:7f: 29:89:77:67:d9:fa:7b:bf:f2:e3:39:f4:fe:5c:f7:7d:90:5a: 6e:49:d2:68:a7:c0:c2:e6:af:6f:f1:a3:57:72:8c:de:4d:b2: c7:28:94:1b:12:94:9c:2e:df:37:d3:46:3b:be:98:c4:ee:e4: 03:ab:af:79:92:af:f6:17:00:ce:11:17:b1:66:cb:6f:ef:00: b6:40:46:2d:35:70:bd:0b:e7:71:3b:b0:6c:ca:f5:f3:fb:01: 9d:9b:59:d8:0f:b8:d8:53:8d:58:20:4e:92:8c:f6:7e:8a:45: 0d:d8:1f:0f:e5:4b:71:ac:1a:dc:3c:84:b6:2d:4b:15:49:a0: 73:5f:79:0b:ff:b2:77:5c:86:ca:16:e1:7b:d1:99:ef:81:ac: 36:4d:cd:2c:e5:15:0f:24:87:7d:d2:1a:af:eb:1a:af:27:3d: 17:30:fd:53:d8:b2:92:eb:c7:ab:14:e8:4a:a7:b3:39:9a:bb: 3e:97:cd:c2:d8:f0:19:2f:83:ac:ec:05:87:44:ab:41:25:94: 74:b7:02:a7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUfbDJ1amFyiOCYxB+4M5qXtN0sH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNjAxMDgwOTE5MThaFw0yNzAxMDcwOTI0MThaMDMxMTAvBgNV BAMTKDk1NjY0MzBDQzUyMDQ4QzM0MTg5MkRCQjVCQ0Q0ODFCOUIxQkRERjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj1Hb0XgXFDsg1aUhlkHW/pm0N TMo0+lEO/y74SXnEoJsaUDfb3dBQi+kZJRu3s9qnvM//lDxwudNRUeXoD217M/z0 5pmOW97k78lOMPwhLsjunhCvZGdDcqTyH0jbrp3P/LCtWTnnuE3bdGby599GoCGj GTJg+jqUUfi0olc78v/8QQ0rlNgMy6WZWazasgRCDTgAbtZ0yeArA57Z+pTZcwaK 45/5JiGDuX+nJd0WDrlVU89iy0VaGEHZAFq+nDcxYdJJ6dYNVP6SSc0U3iUPSYkS ehy9LovzzFOiFJaq7xorimbqLGmwzj1Z4I3J1kUu+cKUdvD0unqK+7v9Vv5HAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUlWZDDMUgSMNBiS27W81IG5sb3fAwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTNDAxODU3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuzU MA0GCSqGSIb3DQEBCwUAA4IBAQBXw8QxUB2J5iaR2xb6RzV08ZQx92Dq1xFfVs9h JI5ATlMegcJ+q70LaKKjmhU9XezytIvo+X8piXdn2fp7v/LjOfT+XPd9kFpuSdJo p8DC5q9v8aNXcozeTbLHKJQbEpScLt8300Y7vpjE7uQDq695kq/2FwDOERexZstv 7wC2QEYtNXC9C+dxO7BsyvXz+wGdm1nYD7jYU41YIE6SjPZ+ikUN2B8P5UtxrBrc PIS2LUsVSaBzX3kL/7J3XIbKFuF70Znvgaw2Tc0s5RUPJId90hqv6xqvJz0XMP1T 2LKS68erFOhKp7M5mrs+l83C2PAZL4Os7AWHRKtBJZR0twKn -----END CERTIFICATE-----Generated at Sat Jan 10 22:34:39 2026 by rpki-client