This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16276.roa File: AS16276.roa (raw, json) Hash identifier: KW9MPVc+GYoziUSGxGJkc9sN3s6o49VGu2rqobWKOO8= Subject key identifier: 12:98:D1:60:F7:AB:83:9C:80:9C:6C:A4:1E:C2:E9:A5:64:19:8A:55 Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 4A13E105358EB7ACFEE25348B1EB442CA31E6FFC Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16276.roa Signing time: Wed 10 Dec 2025 09:40:29 +0000 ROA not before: Wed 10 Dec 2025 09:35:29 +0000 ROA not after: Wed 09 Dec 2026 09:40:29 +0000 asID: 16276 IP address blocks: 46.236.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:13:e1:05:35:8e:b7:ac:fe:e2:53:48:b1:eb:44:2c:a3:1e:6f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Dec 10 09:35:29 2025 GMT Not After : Dec 9 09:40:29 2026 GMT Subject: CN=1298D160F7AB839C809C6CA41EC2E9A564198A55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c8:f5:d0:6d:9f:74:7b:29:0d:20:da:d9:f8: bb:26:c7:1e:8b:e1:f3:c5:55:c1:bd:01:2b:c3:0e: 17:c2:9b:ca:0a:48:54:8b:6a:c7:86:3b:31:e2:c6: 86:5b:28:7c:a8:2b:d3:8d:c7:80:3a:cf:82:be:17: 13:56:ab:d9:b7:0d:1f:c6:8a:f7:a2:47:8e:df:a0: b3:88:9e:19:96:8b:71:14:1f:25:eb:21:af:25:71: 71:68:75:ac:84:70:db:8f:c9:01:31:90:f7:35:28: d4:72:57:cf:8d:9c:1b:e8:63:e0:c9:c8:61:f7:1d: dd:75:d2:b4:05:c7:5e:49:aa:48:c9:27:0e:eb:2d: 7d:4d:e4:93:92:2f:52:fb:d8:29:30:f4:34:a9:ee: ba:8d:cf:8b:f9:1d:d5:de:b6:d5:12:81:b6:3e:17: 8c:64:57:a2:8f:f8:82:a4:03:92:c8:ed:fc:35:c3: 94:b8:f7:94:76:cf:8c:a3:dc:94:c4:33:62:90:13: 30:d4:3d:ee:e0:8b:31:28:6f:21:3e:2f:2a:2a:f7: ed:5a:97:99:34:36:4c:03:20:00:3e:83:10:2a:93: 32:ac:f2:73:9a:da:da:39:78:41:09:fc:82:8f:55: 77:04:9a:cc:fc:e9:72:1c:09:45:e1:ac:84:53:3a: 35:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:98:D1:60:F7:AB:83:9C:80:9C:6C:A4:1E:C2:E9:A5:64:19:8A:55 X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS16276.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.236.211.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:d6:f6:b6:65:f1:d4:90:7e:fd:2b:bc:c1:c4:ad:8a:cb:f2: 21:d3:93:12:b0:44:7d:8b:2d:c2:06:b2:54:94:82:f4:17:8d: ed:f3:8f:41:0d:94:22:53:54:a7:57:f0:20:0c:67:24:5c:93: 26:1f:4a:7c:9f:51:af:4e:62:97:1e:8a:b3:ac:47:61:63:aa: ad:b1:8a:aa:d5:cc:7e:3f:04:29:18:ca:d3:4f:30:5a:ba:0f: e3:9b:37:33:69:39:80:61:7c:9c:a6:2a:ff:5d:55:88:81:99: 0b:f4:dc:8a:e4:46:c8:6a:2b:9c:0a:c8:9a:5d:2d:9d:25:d5: 3d:aa:f0:d7:60:d0:69:15:7b:af:2e:fd:9d:21:9a:b4:f0:13: 5a:98:9a:cf:ae:54:8b:9d:96:e1:eb:7a:80:87:31:c3:93:21: 25:20:80:ac:38:f5:ee:2b:53:5f:f2:49:d9:fb:b7:d8:76:c4: 28:5f:33:6d:66:44:fd:59:cc:86:d1:60:63:57:38:e8:b2:7d: f1:13:2e:73:4e:19:43:4f:b8:7f:04:ae:33:e5:b9:c1:84:56: db:80:5d:57:ce:d4:44:a1:9f:2b:97:b6:9b:bb:bf:98:76:b0: 49:d8:e3:08:76:1e:fb:69:01:93:17:bd:41:09:5d:77:72:19: 09:05:9c:17 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUShPhBTWOt6z+4lNIsetELKMeb/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNTEyMTAwOTM1MjlaFw0yNjEyMDkwOTQwMjlaMDMxMTAvBgNV BAMTKDEyOThEMTYwRjdBQjgzOUM4MDlDNkNBNDFFQzJFOUE1NjQxOThBNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwyPXQbZ90eykNINrZ+Lsmxx6L 4fPFVcG9ASvDDhfCm8oKSFSLaseGOzHixoZbKHyoK9ONx4A6z4K+FxNWq9m3DR/G iveiR47foLOInhmWi3EUHyXrIa8lcXFodayEcNuPyQExkPc1KNRyV8+NnBvoY+DJ yGH3Hd110rQFx15JqkjJJw7rLX1N5JOSL1L72Ckw9DSp7rqNz4v5HdXettUSgbY+ F4xkV6KP+IKkA5LI7fw1w5S495R2z4yj3JTEM2KQEzDUPe7gizEobyE+Lyoq9+1a l5k0NkwDIAA+gxAqkzKs8nOa2to5eEEJ/IKPVXcEmsz86XIcCUXhrIRTOjUxAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUEpjRYPerg5yAnGykHsLppWQZilUwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMTYyNzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAu7NMw DQYJKoZIhvcNAQELBQADggEBABzW9rZl8dSQfv0rvMHErYrL8iHTkxKwRH2LLcIG slSUgvQXje3zj0ENlCJTVKdX8CAMZyRckyYfSnyfUa9OYpceirOsR2Fjqq2xiqrV zH4/BCkYytNPMFq6D+ObNzNpOYBhfJymKv9dVYiBmQv03IrkRshqK5wKyJpdLZ0l 1T2q8Ndg0GkVe68u/Z0hmrTwE1qYms+uVIudluHreoCHMcOTISUggKw49e4rU1/y Sdn7t9h2xChfM21mRP1ZzIbRYGNXOOiyffETLnNOGUNPuH8ErjPlucGEVtuAXVfO 1EShnyuXtpu7v5h2sEnY4wh2HvtpAZMXvUEJXXdyGQkFnBc= -----END CERTIFICATE-----Generated at Sat Dec 20 18:22:37 2025 by rpki-client