This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401776.roa File: AS401776.roa (raw, json) Hash identifier: ieuhBML96x9bEtC5W1OhpIPmyNYVsgIm6+8IKPqZeyI= Subject key identifier: C8:B9:56:DD:BC:FB:4E:E4:42:6A:71:FE:BD:90:84:B4:2F:0D:93:3A Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 41E5C2102EB359DF11B4F532E376143D0C5D3907 Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401776.roa Signing time: Sun 04 Jan 2026 03:30:42 +0000 ROA not before: Sun 04 Jan 2026 03:25:42 +0000 ROA not after: Sun 03 Jan 2027 03:30:42 +0000 asID: 401776 IP address blocks: 143.20.7.0/24 maxlen: 24 143.20.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 11:32:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:e5:c2:10:2e:b3:59:df:11:b4:f5:32:e3:76:14:3d:0c:5d:39:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Jan 4 03:25:42 2026 GMT Not After : Jan 3 03:30:42 2027 GMT Subject: CN=C8B956DDBCFB4EE4426A71FEBD9084B42F0D933A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:20:98:8e:b5:14:c8:fc:84:60:f4:b8:8f:b1: 4c:69:ab:d6:47:8c:c6:ad:b5:95:82:eb:8e:28:91: b0:f0:cd:9a:ee:21:e3:c2:e9:b6:ba:64:2b:71:df: bf:e6:16:cd:28:8d:06:57:56:76:ae:52:7e:b8:c3: 6f:70:76:42:39:d0:b2:f0:0f:db:13:53:fd:8b:fb: 8c:0b:77:29:27:fb:16:06:a3:47:b0:82:58:4b:c5: 16:88:a5:5d:41:55:dd:d3:48:bb:da:e0:7c:d6:cd: bc:a2:3b:92:9a:1a:97:60:29:57:45:eb:64:f5:b0: 1e:41:3f:3b:cf:bb:ad:b9:a1:4d:7e:45:30:54:be: 64:9e:11:9b:90:29:00:5e:fb:40:42:17:89:f7:4c: 93:c4:7a:fc:e1:4d:d9:8c:1a:d6:bd:97:6b:fe:fb: fd:74:66:80:68:b6:f4:ee:76:9e:9a:fd:ac:4e:59: 0c:80:99:2c:00:07:3e:24:0e:e6:76:c5:aa:13:c1: 11:62:74:06:de:05:e1:1e:4f:42:6c:8b:c7:aa:c2: 14:cb:44:8d:49:ab:ae:3c:39:56:c7:f2:08:d3:f0: 43:f2:89:46:a5:6f:e4:de:9b:34:7e:2a:a4:14:5c: 54:5c:21:ac:87:8e:a2:8f:f4:60:0d:a1:86:8e:37: d1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B9:56:DD:BC:FB:4E:E4:42:6A:71:FE:BD:90:84:B4:2F:0D:93:3A X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS401776.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.7.0/24 143.20.178.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:e2:fd:ab:2f:a5:71:7d:d7:30:2d:27:0c:09:98:10:fe:d2: 24:e8:a2:49:43:da:86:c9:47:a6:65:29:57:9a:4c:6d:02:06: 38:cb:03:2f:ff:88:3b:18:8b:ea:c3:28:d6:59:10:38:88:b1: d6:85:89:39:d5:d3:58:62:8b:f5:b7:3d:6e:02:6f:1e:f5:a6: fb:07:c5:ab:6b:09:3f:b0:49:4f:e2:7c:8e:ab:a5:26:eb:1c: 26:2f:78:cf:b1:48:55:58:12:9b:cf:3d:02:a1:18:b4:9f:fd: 61:0d:79:15:74:28:84:e5:9c:5a:8e:5b:e8:d7:20:11:70:57: e7:6f:68:38:cc:dd:b9:81:8a:68:99:30:47:43:44:75:21:03: f9:2a:58:6b:1c:a4:02:e3:d4:68:ce:1d:e6:4b:39:aa:5e:b0: af:4b:c4:63:a4:33:f9:bb:c2:48:4e:50:88:d0:d0:d9:a2:4e: 3b:7e:6f:b5:30:d8:71:70:e8:00:7e:20:68:7f:48:52:be:71: 36:7a:d6:b4:08:33:e7:03:b0:40:65:b9:b5:dd:85:38:c1:cf: d2:92:09:95:7a:7b:9d:37:d3:89:1d:b3:56:56:c5:54:c9:8e: 17:25:60:92:55:0e:f5:6f:1a:6a:21:4f:51:d9:b8:c0:6e:68: 1b:28:14:30 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUQeXCEC6zWd8RtPUy43YUPQxdOQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNjAxMDQwMzI1NDJaFw0yNzAxMDMwMzMwNDJaMDMxMTAvBgNV BAMTKEM4Qjk1NkREQkNGQjRFRTQ0MjZBNzFGRUJEOTA4NEI0MkYwRDkzM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBIJiOtRTI/IRg9LiPsUxpq9ZH jMattZWC644okbDwzZruIePC6ba6ZCtx37/mFs0ojQZXVnauUn64w29wdkI50LLw D9sTU/2L+4wLdykn+xYGo0ewglhLxRaIpV1BVd3TSLva4HzWzbyiO5KaGpdgKVdF 62T1sB5BPzvPu625oU1+RTBUvmSeEZuQKQBe+0BCF4n3TJPEevzhTdmMGta9l2v+ +/10ZoBotvTudp6a/axOWQyAmSwABz4kDuZ2xaoTwRFidAbeBeEeT0Jsi8eqwhTL RI1Jq648OVbH8gjT8EPyiUalb+TemzR+KqQUXFRcIayHjqKP9GANoYaON9F/AgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUyLlW3bz7TuRCanH+vZCEtC8NkzowHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTNDAxNzc2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjxQH AwQAjxSyMA0GCSqGSIb3DQEBCwUAA4IBAQB84v2rL6VxfdcwLScMCZgQ/tIk6KJJ Q9qGyUemZSlXmkxtAgY4ywMv/4g7GIvqwyjWWRA4iLHWhYk51dNYYov1tz1uAm8e 9ab7B8Wrawk/sElP4nyOq6Um6xwmL3jPsUhVWBKbzz0CoRi0n/1hDXkVdCiE5Zxa jlvo1yARcFfnb2g4zN25gYpomTBHQ0R1IQP5KlhrHKQC49Rozh3mSzmqXrCvS8Rj pDP5u8JITlCI0NDZok47fm+1MNhxcOgAfiBof0hSvnE2eta0CDPnA7BAZbm13YU4 wc/SkgmVenudN9OJHbNWVsVUyY4XJWCSVQ71bxpqIU9R2bjAbmgbKBQw -----END CERTIFICATE-----Generated at Tue Jan 20 22:21:14 2026 by rpki-client