This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS399516.roa File: AS399516.roa (raw, json) Hash identifier: qaf3vwoRe6KBMaU3ppE9EJpJDAsae5MB9EB3qHW2eic= Subject key identifier: 90:C1:13:D8:7D:1B:5F:F5:8D:7D:94:D7:C2:BD:02:18:41:EE:C2:AD Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 25866524EE1EA0700031AF6CD9C4D680713A6142 Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS399516.roa Signing time: Sat 10 Jan 2026 14:00:18 +0000 ROA not before: Sat 10 Jan 2026 13:55:18 +0000 ROA not after: Sat 09 Jan 2027 14:00:18 +0000 asID: 399516 IP address blocks: 91.199.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:86:65:24:ee:1e:a0:70:00:31:af:6c:d9:c4:d6:80:71:3a:61:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Jan 10 13:55:18 2026 GMT Not After : Jan 9 14:00:18 2027 GMT Subject: CN=90C113D87D1B5FF58D7D94D7C2BD021841EEC2AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:eb:98:56:de:dd:cb:a6:8f:13:79:00:0f:f5: 41:0f:19:18:f9:32:41:14:5a:2d:7b:82:19:4a:7a: 3b:8d:6e:e2:35:a2:87:69:fc:82:74:26:27:ab:05: d5:52:21:25:d3:fd:51:a4:19:5d:b0:9a:39:97:c0: fc:c7:f3:c4:5c:00:8f:ad:9d:32:e0:0c:39:0f:36: e4:ca:3d:02:8d:63:6a:15:84:20:36:33:1f:d8:15: 6a:7e:ee:75:85:4f:16:d5:7c:79:26:0e:3a:de:12: 46:ac:c7:57:b1:ef:43:d9:89:48:01:e2:30:3d:ee: 9e:3a:54:c1:18:22:50:80:d6:04:9b:d7:8d:3e:28: 8e:ce:b1:a8:80:b6:51:5e:d6:6a:db:da:d1:fe:ab: ab:2b:55:08:51:33:1f:a0:b9:0d:98:34:30:ee:1a: d8:d8:d7:fb:69:db:56:b8:ab:04:b7:4d:e6:e9:a9: 8e:71:cc:32:5d:63:4d:1f:b8:38:50:3f:4a:05:ad: a2:88:a7:b5:63:b2:b3:7b:7d:72:9b:50:28:e0:02: c7:fb:5b:3a:ec:78:2d:dd:67:dd:53:7b:64:f1:b4: ee:da:c4:e1:60:15:80:43:be:e4:e6:7d:94:99:bd: f1:e5:82:a3:74:96:31:72:ce:91:72:8d:07:97:ae: 7b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C1:13:D8:7D:1B:5F:F5:8D:7D:94:D7:C2:BD:02:18:41:EE:C2:AD X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS399516.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.168.0/24 Signature Algorithm: sha256WithRSAEncryption d1:f7:d1:a5:bd:76:1f:7c:da:b5:cf:2d:a9:bf:16:1c:24:9f: 05:7c:b0:3d:04:ca:76:ce:ae:89:38:c2:aa:ef:9e:24:7a:46: 71:60:3d:db:77:46:00:45:4f:7c:65:39:df:fa:29:5c:65:20: b8:40:fa:f3:34:65:62:03:4b:ae:1b:82:9f:e8:08:de:07:02: f9:31:1f:50:ca:6c:3c:e5:db:4c:90:16:70:42:9a:a1:76:8d: d5:52:3d:49:34:a4:ca:ae:92:90:19:2d:2d:47:1a:50:40:5e: 7f:56:8d:bc:e7:e8:fe:f1:b9:19:51:62:82:91:1c:05:93:76: ce:40:30:7b:71:de:d8:26:4f:36:9b:39:99:06:d0:c2:99:23: be:d2:82:5f:12:3a:ed:70:71:f2:7a:c9:15:9e:74:ce:02:a5: 06:ac:44:63:1e:f5:82:a4:7a:24:0c:b0:99:44:ea:08:2a:54: 2c:34:f1:f2:be:6d:4f:84:e5:ff:85:09:20:7a:f4:fd:79:ec: fc:cf:c8:b1:dd:e9:ac:9a:72:24:21:ed:79:da:2f:8e:ee:ac: 53:41:9d:f1:af:75:3b:33:f3:da:ca:57:9b:00:b7:b4:c3:b4: fd:dd:b0:26:1e:9a:ca:50:75:b2:55:b0:e2:91:db:f4:73:4d: f6:34:4b:2e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUJYZlJO4eoHAAMa9s2cTWgHE6YUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNjAxMTAxMzU1MThaFw0yNzAxMDkxNDAwMThaMDMxMTAvBgNV BAMTKDkwQzExM0Q4N0QxQjVGRjU4RDdEOTREN0MyQkQwMjE4NDFFRUMyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr65hW3t3Lpo8TeQAP9UEPGRj5 MkEUWi17ghlKejuNbuI1oodp/IJ0JierBdVSISXT/VGkGV2wmjmXwPzH88RcAI+t nTLgDDkPNuTKPQKNY2oVhCA2Mx/YFWp+7nWFTxbVfHkmDjreEkasx1ex70PZiUgB 4jA97p46VMEYIlCA1gSb140+KI7OsaiAtlFe1mrb2tH+q6srVQhRMx+guQ2YNDDu GtjY1/tp21a4qwS3TebpqY5xzDJdY00fuDhQP0oFraKIp7VjsrN7fXKbUCjgAsf7 WzrseC3dZ91Te2TxtO7axOFgFYBDvuTmfZSZvfHlgqN0ljFyzpFyjQeXrntzAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUkMET2H0bX/WNfZTXwr0CGEHuwq0wHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMzk5NTE2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8eo MA0GCSqGSIb3DQEBCwUAA4IBAQDR99GlvXYffNq1zy2pvxYcJJ8FfLA9BMp2zq6J OMKq754kekZxYD3bd0YARU98ZTnf+ilcZSC4QPrzNGViA0uuG4Kf6AjeBwL5MR9Q ymw85dtMkBZwQpqhdo3VUj1JNKTKrpKQGS0tRxpQQF5/Vo285+j+8bkZUWKCkRwF k3bOQDB7cd7YJk82mzmZBtDCmSO+0oJfEjrtcHHyeskVnnTOAqUGrERjHvWCpHok DLCZROoIKlQsNPHyvm1PhOX/hQkgevT9eez8z8ix3emsmnIkIe152i+O7qxTQZ3x r3U7M/PaylebALe0w7T93bAmHprKUHWyVbDikdv0c032NEsu -----END CERTIFICATE-----Generated at Sun Jan 18 12:03:41 2026 by rpki-client