This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS401776.roa File: AS401776.roa (raw, json) Hash identifier: 8gqVx2/hZd0JNd7jwGQh60zBb5Cg+K/21WZRafTSTxs= Subject key identifier: 84:DA:5B:AD:7A:C0:E3:4C:8F:46:ED:7B:26:FA:88:57:EE:60:F9:8A Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 4D692E249FADE0F34FD503EAFF65A173996954AA Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS401776.roa Signing time: Tue 02 Dec 2025 04:46:45 +0000 ROA not before: Tue 02 Dec 2025 04:41:45 +0000 ROA not after: Tue 01 Dec 2026 04:46:45 +0000 asID: 401776 IP address blocks: 91.199.166.0/24 maxlen: 24 193.151.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:69:2e:24:9f:ad:e0:f3:4f:d5:03:ea:ff:65:a1:73:99:69:54:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Dec 2 04:41:45 2025 GMT Not After : Dec 1 04:46:45 2026 GMT Subject: CN=84DA5BAD7AC0E34C8F46ED7B26FA8857EE60F98A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:05:f1:f4:0a:a7:f1:97:97:69:7e:f4:e8:0c: 5f:1a:aa:05:42:e0:97:bc:e1:87:4b:d4:73:de:79: 25:0c:b9:26:3a:a1:0b:cc:1f:43:f9:32:0e:93:84: 56:ce:b2:23:c5:93:c7:d3:74:20:d4:a6:4d:03:ca: dc:56:52:79:0e:19:7d:60:61:53:58:60:00:2f:ef: a2:84:2c:d0:37:74:57:b4:8d:f1:96:ec:70:a2:0f: f8:54:f7:4b:9a:52:d7:38:6e:60:f5:7b:64:64:6d: 9e:33:5c:f1:58:6a:4c:c0:e3:5b:17:d3:26:0e:be: 35:bd:15:da:22:25:c6:e7:bd:73:ab:e3:2c:db:d7: 04:fe:cc:29:63:93:75:5f:39:4b:83:f8:af:05:07: d8:0c:a7:28:ad:f2:1b:f6:23:1c:1c:e5:8e:37:b1: 0e:07:a8:89:44:46:55:38:14:e7:72:ff:bc:6f:a8: 8a:8b:4b:84:8a:e1:c8:3d:1c:3e:04:b5:5f:88:c4: 64:30:69:76:aa:67:d5:cd:db:d8:6d:38:76:74:3f: 45:47:8b:44:78:c4:d5:ec:d3:4e:76:71:2d:89:d4: cf:de:85:70:4e:06:f1:51:0e:51:0b:86:db:f9:7f: bd:a8:5c:58:fa:b7:b5:67:09:ec:2d:18:2a:02:a8: e9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DA:5B:AD:7A:C0:E3:4C:8F:46:ED:7B:26:FA:88:57:EE:60:F9:8A X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS401776.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.166.0/24 193.151.181.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:2f:7e:74:9f:7d:dc:e1:d3:3e:ac:bb:c5:7d:7e:e6:16:d0: e2:48:33:b3:4d:ce:a6:ca:5d:48:60:dc:b9:ad:b6:ce:0b:8d: 75:42:6d:1f:f7:9f:3e:26:dc:19:c5:5c:7a:57:b1:e1:46:de: dd:d7:63:95:6d:69:e2:03:4e:aa:05:ca:b7:14:de:9b:41:f1: 48:33:26:79:db:d3:df:29:8d:9e:d4:fd:ef:04:74:47:ed:e5: 36:16:92:49:84:a9:2a:97:8f:fc:00:78:27:a4:48:f9:de:1a: 75:8a:91:ae:68:41:f8:b9:95:4e:2a:88:15:25:1d:db:c0:b4: a3:23:88:81:d2:e5:61:02:2e:9e:24:e7:db:f9:08:b3:49:3a: 28:be:14:00:70:8f:aa:d2:94:17:34:ed:30:9b:5d:19:a0:f3: d1:fe:54:07:50:f3:4c:cb:b8:4d:22:07:00:99:06:00:24:cb: 89:3a:49:b0:22:98:25:75:45:87:f6:b7:62:8c:f5:39:fb:5e: f3:c3:f7:7b:d3:17:9b:ce:8b:ad:4d:27:07:bd:f5:9b:89:4c: a9:49:09:4a:bf:43:2c:1c:cb:2a:cf:e6:9c:b9:c9:42:96:68: d1:65:2e:de:10:7a:37:24:58:5f:aa:0d:6d:43:de:82:96:b6: bd:13:07:89 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUTWkuJJ+t4PNP1QPq/2Whc5lpVKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNTEyMDIwNDQxNDVaFw0yNjEyMDEwNDQ2NDVaMDMxMTAvBgNV BAMTKDg0REE1QkFEN0FDMEUzNEM4RjQ2RUQ3QjI2RkE4ODU3RUU2MEY5OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHBfH0Cqfxl5dpfvToDF8aqgVC 4Je84YdL1HPeeSUMuSY6oQvMH0P5Mg6ThFbOsiPFk8fTdCDUpk0DytxWUnkOGX1g YVNYYAAv76KELNA3dFe0jfGW7HCiD/hU90uaUtc4bmD1e2RkbZ4zXPFYakzA41sX 0yYOvjW9FdoiJcbnvXOr4yzb1wT+zCljk3VfOUuD+K8FB9gMpyit8hv2Ixwc5Y43 sQ4HqIlERlU4FOdy/7xvqIqLS4SK4cg9HD4EtV+IxGQwaXaqZ9XN29htOHZ0P0VH i0R4xNXs0052cS2J1M/ehXBOBvFRDlELhtv5f72oXFj6t7VnCewtGCoCqOk1AgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUhNpbrXrA40yPRu17JvqIV+5g+YowHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTNDAxNzc2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8em AwQAwZe1MA0GCSqGSIb3DQEBCwUAA4IBAQA6L350n33c4dM+rLvFfX7mFtDiSDOz Tc6myl1IYNy5rbbOC411Qm0f958+JtwZxVx6V7HhRt7d12OVbWniA06qBcq3FN6b QfFIMyZ529PfKY2e1P3vBHRH7eU2FpJJhKkql4/8AHgnpEj53hp1ipGuaEH4uZVO KogVJR3bwLSjI4iB0uVhAi6eJOfb+QizSToovhQAcI+q0pQXNO0wm10ZoPPR/lQH UPNMy7hNIgcAmQYAJMuJOkmwIpgldUWH9rdijPU5+17zw/d70xebzoutTScHvfWb iUypSQlKv0MsHMsqz+acuclClmjRZS7eEHo3JFhfqg1tQ96Clra9EweJ -----END CERTIFICATE-----Generated at Fri Dec 5 08:01:45 2025 by rpki-client