This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS50385.roa File: AS50385.roa (raw, json) Hash identifier: 77BuN5VhPbJ2v8YSdPrYlXAHr7YEPWCsmi+pn5oGBPc= Subject key identifier: 15:71:4D:38:BF:07:B9:CF:F1:0C:24:6E:B8:F4:BE:DD:08:3A:67:E8 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 7356D1C75B72EFD6A2DD745C522547B3674F2462 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS50385.roa Signing time: Sat 17 Jan 2026 14:18:22 +0000 ROA not before: Sat 17 Jan 2026 14:13:22 +0000 ROA not after: Sat 16 Jan 2027 14:18:22 +0000 asID: 50385 IP address blocks: 2a14:7581:8000::/36 maxlen: 41 2a14:7581:8600::/39 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 20:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:56:d1:c7:5b:72:ef:d6:a2:dd:74:5c:52:25:47:b3:67:4f:24:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 17 14:13:22 2026 GMT Not After : Jan 16 14:18:22 2027 GMT Subject: CN=15714D38BF07B9CFF10C246EB8F4BEDD083A67E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e8:2f:48:20:ea:ba:a5:5e:4a:73:d3:42:77: a7:81:bc:80:a6:22:ab:96:25:be:b6:d7:ce:12:82: ca:0d:e7:0c:3e:c4:b6:78:74:1c:98:90:40:37:e3: 20:ab:4b:5c:78:9e:d9:b2:a4:a8:d4:d1:bd:d2:d4: b3:d6:87:ef:41:b1:50:b1:c6:17:99:c2:0a:6a:a0: 19:92:de:1b:e3:89:6c:d5:a5:28:08:49:1c:ae:9b: da:5b:55:90:04:3f:80:06:a0:19:4b:db:f6:35:02: c3:e5:b4:4f:10:05:3d:30:46:1a:c2:eb:af:83:d0: 78:ab:ed:22:a0:78:35:06:d8:fb:41:14:73:49:73: 93:04:20:0a:ba:dd:3c:06:58:f7:69:c9:e1:c9:7e: 11:f0:b2:70:58:09:1e:6e:90:31:83:48:8f:c4:61: a0:c6:4f:d5:03:e5:d0:63:6e:fb:7a:19:c8:19:20: af:33:2d:3c:c1:8f:d8:10:d2:e9:7b:bd:d0:70:df: ef:ae:ed:24:41:f7:45:a9:b8:87:75:ec:9b:8a:45: 9f:ca:f3:5a:50:cb:19:5f:b1:92:4a:22:5d:0c:4d: 55:34:b5:77:3d:69:6f:02:c7:f4:e2:e1:ab:cd:8d: 82:29:b9:5b:88:a5:62:8a:2c:fd:25:fc:49:ef:c1: d2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:71:4D:38:BF:07:B9:CF:F1:0C:24:6E:B8:F4:BE:DD:08:3A:67:E8 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS50385.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:8000::/36 Signature Algorithm: sha256WithRSAEncryption 10:08:ba:e8:d5:19:93:6a:ba:c0:fc:ce:d6:85:0b:45:2e:53: 17:c6:a6:9a:a9:d1:e9:0a:37:d0:c1:f0:d4:ed:76:55:6a:04: ca:de:45:53:a9:36:79:c2:be:14:e6:c2:7b:b3:b7:b1:3e:e5: 91:ab:52:82:8f:34:73:fa:f7:a5:76:94:56:f6:e1:51:3a:8b: 42:99:71:be:64:19:2b:17:ca:e3:3a:f9:56:05:6a:16:27:04: 95:e8:1f:9b:2a:1f:2c:da:1e:34:65:65:1d:f5:95:a5:43:2e: ce:86:2d:47:0b:35:b7:e7:8a:89:b6:21:3c:ea:ef:ac:b5:c6: 9c:15:13:b1:22:d6:fe:c1:7e:e7:63:dc:b9:ad:56:16:90:57: bc:91:c2:35:4a:1d:24:c1:50:2c:39:13:d0:35:9f:33:51:b1: 91:2e:e8:b2:70:a7:b0:f6:62:9f:e9:cd:b6:80:95:f4:16:15: 8e:d2:24:07:0a:b9:94:ac:b3:c7:6b:ab:1b:96:35:aa:19:21: a0:b0:40:a7:5a:4d:08:e1:9f:9d:73:03:df:f4:5f:2c:97:df: 5f:a1:85:75:cf:cd:89:d0:b5:a4:37:65:58:f3:be:7a:9b:c3: 54:ff:59:33:cb:34:cd:64:57:4e:8d:20:83:6b:fb:ea:3f:3f: f0:35:37:4b -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUc1bRx1ty79ai3XRcUiVHs2dPJGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMTcxNDEzMjJaFw0yNzAxMTYxNDE4MjJaMDMxMTAvBgNV BAMTKDE1NzE0RDM4QkYwN0I5Q0ZGMTBDMjQ2RUI4RjRCRUREMDgzQTY3RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC36C9IIOq6pV5Kc9NCd6eBvICm IquWJb62184SgsoN5ww+xLZ4dByYkEA34yCrS1x4ntmypKjU0b3S1LPWh+9BsVCx xheZwgpqoBmS3hvjiWzVpSgISRyum9pbVZAEP4AGoBlL2/Y1AsPltE8QBT0wRhrC 66+D0Hir7SKgeDUG2PtBFHNJc5MEIAq63TwGWPdpyeHJfhHwsnBYCR5ukDGDSI/E YaDGT9UD5dBjbvt6GcgZIK8zLTzBj9gQ0ul7vdBw3++u7SRB90WpuId17JuKRZ/K 81pQyxlfsZJKIl0MTVU0tXc9aW8Cx/Ti4avNjYIpuVuIpWKKLP0l/EnvwdJxAgMB AAGjggILMIICBzAdBgNVHQ4EFgQUFXFNOL8Huc/xDCRuuPS+3Qg6Z+gwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTNTAzODUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqFHWB gDANBgkqhkiG9w0BAQsFAAOCAQEAEAi66NUZk2q6wPzO1oULRS5TF8ammqnR6Qo3 0MHw1O12VWoEyt5FU6k2ecK+FObCe7O3sT7lkatSgo80c/r3pXaUVvbhUTqLQplx vmQZKxfK4zr5VgVqFicElegfmyofLNoeNGVlHfWVpUMuzoYtRws1t+eKibYhPOrv rLXGnBUTsSLW/sF+52Pcua1WFpBXvJHCNUodJMFQLDkT0DWfM1GxkS7osnCnsPZi n+nNtoCV9BYVjtIkBwq5lKyzx2urG5Y1qhkhoLBAp1pNCOGfnXMD3/RfLJffX6GF dc/NidC1pDdlWPO+epvDVP9ZM8s0zWRXTo0gg2v76j8/8DU3Sw== -----END CERTIFICATE-----Generated at Thu Jan 29 23:59:45 2026 by rpki-client