This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402044.roa File: AS402044.roa (raw, json) Hash identifier: TeXNOXPE0PZ4n/aRbVwNBzdg/LSUcNFTcaTL81QpG7c= Subject key identifier: EA:88:3D:CE:FF:27:A8:5F:55:CC:65:EA:0A:49:43:64:B6:92:B5:D8 Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 5C1B679260A906D5E9435AA1C9DAD89B1024B15F Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402044.roa Signing time: Fri 09 Jan 2026 07:16:49 +0000 ROA not before: Fri 09 Jan 2026 07:11:49 +0000 ROA not after: Fri 08 Jan 2027 07:16:49 +0000 asID: 402044 IP address blocks: 46.236.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:1b:67:92:60:a9:06:d5:e9:43:5a:a1:c9:da:d8:9b:10:24:b1:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Jan 9 07:11:49 2026 GMT Not After : Jan 8 07:16:49 2027 GMT Subject: CN=EA883DCEFF27A85F55CC65EA0A494364B692B5D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:f6:24:e8:99:6d:3c:3e:5a:ec:37:c2:00: 63:7d:23:87:66:f4:be:4b:41:de:bb:62:62:63:b1: fa:20:01:43:c6:12:30:06:bf:03:1d:2d:d0:ff:69: 7a:64:77:64:20:13:66:db:3c:01:32:89:93:f2:61: 4b:4d:17:48:af:39:11:a6:7e:86:95:59:cf:e5:1f: ad:4f:25:0c:6f:63:bd:2f:b0:0c:e4:84:a5:40:0b: 9d:8c:12:a4:34:ba:4a:2d:22:c2:4c:48:ba:04:a3: b7:52:40:5b:b5:c2:04:9b:12:06:fe:a3:cd:0f:cc: 60:df:4f:76:c5:bf:1e:f9:35:83:6c:d9:7f:73:d6: ab:f7:cf:70:0a:3b:16:a6:38:8c:4b:d1:fe:d7:f2: e9:9e:f8:ef:33:7e:24:04:8a:30:0a:7a:91:72:2e: d8:69:c0:38:75:d3:c2:90:41:4a:33:1c:e4:39:ad: 71:c0:fb:bf:61:5e:e0:90:fb:46:9d:40:c2:1f:12: 07:29:ab:68:c4:e1:01:3f:98:09:a3:f9:4c:14:a7: 0e:c5:07:b3:c8:90:ae:dc:67:20:b7:a3:4a:ab:82: 03:b6:d3:d6:d5:8a:53:cb:a4:54:fd:d3:a3:92:d3: b1:77:9f:9d:75:80:14:ae:41:da:fe:88:a2:09:5f: 96:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:88:3D:CE:FF:27:A8:5F:55:CC:65:EA:0A:49:43:64:B6:92:B5:D8 X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS402044.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.236.192.0/24 Signature Algorithm: sha256WithRSAEncryption 93:ae:4f:65:3c:91:4c:12:bf:d9:4f:b6:91:b9:4b:dd:17:c7: 57:d3:d9:90:92:a2:78:15:c7:60:46:ce:a3:43:e7:33:e0:8d: b4:54:67:43:9c:25:b5:90:ea:96:b9:c3:68:fd:8c:a8:43:8b: b2:1e:43:95:f8:8f:91:77:60:d3:b2:c7:94:c9:70:44:00:92: 10:94:43:83:f7:14:33:6b:87:de:80:a3:13:31:23:22:fb:48: 69:f4:71:19:92:57:79:4d:09:e4:cd:bb:fa:0c:ab:cc:e9:96: 00:f9:d0:3d:f2:cb:6f:2f:a8:f8:e1:d4:d1:6a:4c:43:a8:ac: 5d:24:96:2a:27:9d:91:1c:00:ca:c0:fa:6a:fe:aa:32:ee:84: 7a:9a:0b:09:35:2e:70:bc:26:e4:1e:c4:9c:d4:50:d7:2f:25: 70:86:c3:b8:33:ca:b2:44:1c:65:36:29:e8:5b:06:a7:4b:77: 15:ce:27:af:b3:ef:eb:1b:98:ab:e4:d3:b9:66:c3:93:2b:55: 50:9a:e0:bd:07:91:b7:72:ef:44:0b:fd:3d:b3:b8:2a:81:af: c4:4e:31:81:b2:c3:fb:09:30:4a:37:9d:d7:2c:63:57:ce:7d: 0b:68:16:39:21:34:03:b7:b2:3b:b1:8a:d0:ba:aa:20:4e:70: 75:47:c1:8d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUXBtnkmCpBtXpQ1qhydrYmxAksV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNjAxMDkwNzExNDlaFw0yNzAxMDgwNzE2NDlaMDMxMTAvBgNV BAMTKEVBODgzRENFRkYyN0E4NUY1NUNDNjVFQTBBNDk0MzY0QjY5MkI1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJvYk6JltPD5a7DfCAGN9I4dm 9L5LQd67YmJjsfogAUPGEjAGvwMdLdD/aXpkd2QgE2bbPAEyiZPyYUtNF0ivORGm foaVWc/lH61PJQxvY70vsAzkhKVAC52MEqQ0ukotIsJMSLoEo7dSQFu1wgSbEgb+ o80PzGDfT3bFvx75NYNs2X9z1qv3z3AKOxamOIxL0f7X8ume+O8zfiQEijAKepFy LthpwDh108KQQUozHOQ5rXHA+79hXuCQ+0adQMIfEgcpq2jE4QE/mAmj+UwUpw7F B7PIkK7cZyC3o0qrggO209bVilPLpFT906OS07F3n511gBSuQdr+iKIJX5atAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU6og9zv8nqF9VzGXqCklDZLaStdgwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTNDAyMDQ0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuzA MA0GCSqGSIb3DQEBCwUAA4IBAQCTrk9lPJFMEr/ZT7aRuUvdF8dX09mQkqJ4Fcdg Rs6jQ+cz4I20VGdDnCW1kOqWucNo/YyoQ4uyHkOV+I+Rd2DTsseUyXBEAJIQlEOD 9xQza4fegKMTMSMi+0hp9HEZkld5TQnkzbv6DKvM6ZYA+dA98stvL6j44dTRakxD qKxdJJYqJ52RHADKwPpq/qoy7oR6mgsJNS5wvCbkHsSc1FDXLyVwhsO4M8qyRBxl NinoWwanS3cVzievs+/rG5ir5NO5ZsOTK1VQmuC9B5G3cu9EC/09s7gqga/ETjGB ssP7CTBKN53XLGNXzn0LaBY5ITQDt7I7sYrQuqogTnB1R8GN -----END CERTIFICATE-----Generated at Mon Jan 12 01:22:00 2026 by rpki-client