This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS397032.roa File: AS397032.roa (raw, json) Hash identifier: v0BNRVxH6WcgMOrOrcVmIsE8UFKkIlW+p/7WocmFf8Q= Subject key identifier: 90:B4:73:79:37:56:46:4C:58:4E:6B:D2:71:81:8B:E6:D7:D8:7F:CF Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 30080A17B8FC1D07BEC3CDB5CC634228F900291F Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS397032.roa Signing time: Sat 03 Jan 2026 19:31:37 +0000 ROA not before: Sat 03 Jan 2026 19:26:37 +0000 ROA not after: Sat 02 Jan 2027 19:31:37 +0000 asID: 397032 IP address blocks: 2a14:7584:e390::/44 maxlen: 44 2a14:7584:e3a0::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:08:0a:17:b8:fc:1d:07:be:c3:cd:b5:cc:63:42:28:f9:00:29:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 3 19:26:37 2026 GMT Not After : Jan 2 19:31:37 2027 GMT Subject: CN=90B473793756464C584E6BD271818BE6D7D87FCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4e:72:ea:63:46:55:5f:f5:e7:a8:a2:e8:a2: b8:98:32:e8:57:f8:81:45:3b:bf:e3:81:88:fa:bf: 73:26:2d:5f:2b:20:bf:57:0d:c6:df:1e:5f:8f:f8: f7:66:6e:ed:fb:f3:b0:c3:57:dd:67:fb:ee:eb:be: e8:7a:ad:cb:f0:46:e4:68:c6:11:d8:16:de:a7:e9: 99:31:43:de:0a:8e:20:fc:3c:59:c0:f3:01:72:8e: 7f:73:b4:96:83:2e:78:51:bb:e9:09:ec:cc:a9:89: 6b:67:3e:cc:55:bd:e0:4a:f4:e0:30:b7:ef:dd:ae: 7a:3c:81:58:1b:41:90:9c:06:8e:06:c6:04:b8:01: 55:b6:4d:18:80:77:25:85:a0:e0:57:44:d7:dd:25: 06:09:21:d6:6b:d3:a8:17:75:8b:be:e6:66:6d:a6: 71:54:70:f2:61:bd:3d:9b:b9:0e:e6:bd:29:32:ad: de:11:04:88:99:d1:51:1f:e0:86:a2:66:04:51:10: 6e:19:5a:96:5a:97:33:e8:c8:6e:83:76:7b:d9:b4: 61:ce:66:6e:af:b2:08:0e:43:4e:bc:f1:a9:9a:75: 40:7b:f6:74:3e:23:bc:29:bb:f5:ad:1c:0e:11:d7: fe:dc:e0:2c:7a:70:bc:70:68:c5:23:92:32:62:d5: 54:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B4:73:79:37:56:46:4C:58:4E:6B:D2:71:81:8B:E6:D7:D8:7F:CF X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS397032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:e390::-2a14:7584:e3af:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 1e:1f:83:73:b1:6e:89:7d:ed:86:47:bc:5c:84:19:a4:19:7b: 59:04:97:d4:5e:67:8f:1f:4d:f8:3c:58:2d:69:6b:fa:79:20: f5:fc:cd:94:be:53:f5:b8:12:0b:15:6c:54:af:01:0d:5d:90: 48:59:b9:6d:13:f2:ee:42:59:6d:ed:1f:5f:cf:16:e5:21:bd: 3c:48:14:21:11:70:2b:c9:e9:05:ef:51:45:98:dd:3b:d4:d4: fa:10:eb:04:65:e6:5b:bd:5f:30:a8:f6:c7:2e:a8:fb:e5:17: d5:d1:be:46:3c:5e:ca:a0:97:45:a7:b2:54:ba:10:e4:f8:36: 12:99:ca:b2:61:23:dc:12:59:ff:64:35:d1:fc:e9:79:1b:05: f2:5f:bf:49:6e:5b:75:4d:09:c2:7c:d6:e6:cc:2f:32:c0:6c: 40:03:cf:8a:5a:35:94:6f:b7:81:f0:ba:4d:c7:2f:07:f6:01: 9b:eb:40:be:ab:31:95:cb:5f:2f:39:60:9b:c1:1f:23:3c:b4: bf:c3:5c:61:ac:11:c4:fa:ea:44:69:cb:9a:fa:ce:a2:a3:2c: 0e:0a:76:0d:db:95:ee:f6:35:63:24:e4:bb:d3:be:11:be:0b: 2a:e3:a0:8c:a6:f7:2d:93:81:aa:63:ea:4d:7f:f4:da:53:5b: 74:7a:58:9d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIUMAgKF7j8HQe+w821zGNCKPkAKR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMDMxOTI2MzdaFw0yNzAxMDIxOTMxMzdaMDMxMTAvBgNV BAMTKDkwQjQ3Mzc5Mzc1NjQ2NEM1ODRFNkJEMjcxODE4QkU2RDdEODdGQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqTnLqY0ZVX/XnqKLooriYMuhX +IFFO7/jgYj6v3MmLV8rIL9XDcbfHl+P+Pdmbu3787DDV91n++7rvuh6rcvwRuRo xhHYFt6n6ZkxQ94KjiD8PFnA8wFyjn9ztJaDLnhRu+kJ7MypiWtnPsxVveBK9OAw t+/drno8gVgbQZCcBo4GxgS4AVW2TRiAdyWFoOBXRNfdJQYJIdZr06gXdYu+5mZt pnFUcPJhvT2buQ7mvSkyrd4RBIiZ0VEf4IaiZgRREG4ZWpZalzPoyG6DdnvZtGHO Zm6vsggOQ0688amadUB79nQ+I7wpu/WtHA4R1/7c4Cx6cLxwaMUjkjJi1VSLAgMB AAGjggIYMIICFDAdBgNVHQ4EFgQUkLRzeTdWRkxYTmvScYGL5tfYf88wHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMzk3MDMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwQq FHWE45ADBwQqFHWE46AwDQYJKoZIhvcNAQELBQADggEBAB4fg3Oxbol97YZHvFyE GaQZe1kEl9ReZ48fTfg8WC1pa/p5IPX8zZS+U/W4EgsVbFSvAQ1dkEhZuW0T8u5C WW3tH1/PFuUhvTxIFCERcCvJ6QXvUUWY3TvU1PoQ6wRl5lu9XzCo9scuqPvlF9XR vkY8Xsqgl0WnslS6EOT4NhKZyrJhI9wSWf9kNdH86XkbBfJfv0luW3VNCcJ81ubM LzLAbEADz4paNZRvt4Hwuk3HLwf2AZvrQL6rMZXLXy85YJvBHyM8tL/DXGGsEcT6 6kRpy5r6zqKjLA4Kdg3ble72NWMk5LvTvhG+CyrjoIym9y2Tgapj6k1/9NpTW3R6 WJ0= -----END CERTIFICATE-----Generated at Tue Jan 20 22:19:41 2026 by rpki-client