This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS396356.roa File: AS396356.roa (raw, json) Hash identifier: ewyBHPl77jJoOiHL+d6CXf5f36jZFXzbwbYZyZupGAg= Subject key identifier: 9D:ED:74:D3:E3:D8:89:CB:F6:43:7F:60:F9:9F:9E:BF:20:98:BC:7E Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 7BF20BAA909711209AC1792854F50AFDD0FBEA18 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS396356.roa Signing time: Mon 15 Dec 2025 14:50:57 +0000 ROA not before: Mon 15 Dec 2025 14:45:57 +0000 ROA not after: Mon 14 Dec 2026 14:50:57 +0000 asID: 396356 IP address blocks: 46.202.4.0/22 maxlen: 24 46.202.20.0/22 maxlen: 24 46.202.108.0/22 maxlen: 24 46.203.8.0/22 maxlen: 24 46.203.64.0/22 maxlen: 24 46.203.218.0/24 maxlen: 24 46.203.224.0/24 maxlen: 24 46.203.226.0/24 maxlen: 24 46.203.228.0/24 maxlen: 24 46.203.229.0/24 maxlen: 24 46.203.230.0/24 maxlen: 24 46.203.231.0/24 maxlen: 24 46.203.232.0/24 maxlen: 24 91.124.184.0/24 maxlen: 24 92.112.155.0/24 maxlen: 24 92.112.160.0/24 maxlen: 24 92.112.161.0/24 maxlen: 24 92.112.162.0/24 maxlen: 24 92.112.163.0/24 maxlen: 24 92.112.165.0/24 maxlen: 24 92.112.166.0/24 maxlen: 24 92.112.167.0/24 maxlen: 24 92.112.201.0/24 maxlen: 24 92.113.129.0/24 maxlen: 24 92.113.133.0/24 maxlen: 24 92.113.134.0/24 maxlen: 24 92.113.135.0/24 maxlen: 24 92.113.138.0/24 maxlen: 24 92.113.139.0/24 maxlen: 24 92.113.140.0/24 maxlen: 24 92.113.141.0/24 maxlen: 24 92.113.231.0/24 maxlen: 24 92.113.236.0/24 maxlen: 24 92.113.241.0/24 maxlen: 24 92.113.246.0/24 maxlen: 24 178.94.128.0/22 maxlen: 22 178.94.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f2:0b:aa:90:97:11:20:9a:c1:79:28:54:f5:0a:fd:d0:fb:ea:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 15 14:45:57 2025 GMT Not After : Dec 14 14:50:57 2026 GMT Subject: CN=9DED74D3E3D889CBF6437F60F99F9EBF2098BC7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dd:d1:5d:14:33:a3:d7:c2:7f:8b:1a:ea:fe: 78:1c:ce:17:a4:cc:33:2a:1a:e2:df:f8:a2:29:cd: 66:6a:ff:65:2c:6e:61:80:03:99:78:42:08:f8:cd: 1b:90:0b:4c:90:7a:71:19:cc:ce:79:83:8c:d5:eb: 4a:fb:00:9e:c2:d4:bb:49:4c:60:62:cb:c3:54:c1: ff:d6:bd:9f:e0:61:c0:48:c6:bd:a6:52:9d:77:59: 16:77:40:5a:6d:ca:03:03:88:6d:81:ce:f0:3b:21: 54:87:53:f3:43:0f:fd:64:20:fb:e2:ca:b6:6c:06: 32:4a:c3:46:43:82:9e:8a:a1:8f:62:34:45:1b:d0: 50:13:0f:30:35:6a:49:87:7a:44:c4:5f:8b:03:22: 55:26:79:a3:02:08:f3:ea:35:5b:a9:b8:11:de:3b: 71:d3:c0:bb:61:73:a0:04:6f:7f:13:d0:a2:44:4c: 12:7c:cf:b3:f7:da:e6:d9:b0:f8:e5:a9:7d:f6:e5: 0a:1a:01:78:1c:2f:fb:0e:cd:3e:0e:7b:5c:b9:a1: 73:6b:48:94:d5:21:d6:6f:3f:c7:ec:3b:a8:61:14: 16:42:ba:ca:c9:0c:db:39:71:b6:e2:cc:43:e7:a5: 47:86:00:98:cf:db:12:2c:6d:89:7a:a5:44:09:b8: ff:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:ED:74:D3:E3:D8:89:CB:F6:43:7F:60:F9:9F:9E:BF:20:98:BC:7E X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS396356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.202.4.0/22 46.202.20.0/22 46.202.108.0/22 46.203.8.0/22 46.203.64.0/22 46.203.218.0/24 46.203.224.0/24 46.203.226.0/24 46.203.228.0-46.203.232.255 91.124.184.0/24 92.112.155.0/24 92.112.160.0/22 92.112.165.0-92.112.167.255 92.112.201.0/24 92.113.129.0/24 92.113.133.0-92.113.135.255 92.113.138.0-92.113.141.255 92.113.231.0/24 92.113.236.0/24 92.113.241.0/24 92.113.246.0/24 178.94.128.0/22 178.94.176.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:44:c5:73:14:c2:ec:b1:63:4f:69:ef:dc:9e:e8:dc:0d:23: d6:4b:61:b2:dc:a6:2e:25:8c:31:d4:8d:4e:af:c8:e1:76:68: 59:f8:e2:96:7a:4d:e5:6e:07:35:44:30:4d:08:2a:b2:0d:bd: 3e:f8:17:81:04:4f:dc:f0:2c:1c:31:08:72:10:f8:58:50:fa: 01:77:a4:32:3c:a0:fe:1c:41:78:ad:0a:bb:a5:5c:2a:e6:86: 0e:d6:da:04:a3:cb:02:23:cd:d1:ac:63:3a:39:55:e8:1a:68: 98:45:34:c2:cc:36:ff:e0:b8:22:34:c9:60:8f:47:6c:bb:d7: f1:ad:99:9e:d5:25:81:d6:f9:f8:53:d2:dc:0e:69:2e:57:f8: 47:72:60:18:ec:e5:40:c7:3c:15:61:b8:7d:51:75:be:f7:bf: c3:6f:a3:ca:0c:89:dd:f2:70:48:56:a3:9b:3f:d8:03:2a:6a: 35:d9:32:c6:cd:19:87:cc:01:96:d4:c3:8e:98:4a:40:fe:ba: e5:d0:25:d9:41:b9:cb:a1:e5:34:9c:75:e6:ac:a2:40:11:c3: d0:77:44:ce:fa:81:ac:2f:6f:a9:46:df:0b:d6:77:66:36:5f: 50:31:54:cc:83:e0:d0:80:00:f3:02:ac:89:6f:db:3f:b2:d8: 7c:e1:46:eb -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgIUe/ILqpCXESCawXkoVPUK/dD76hgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMTUxNDQ1NTdaFw0yNjEyMTQxNDUwNTdaMDMxMTAvBgNV BAMTKDlERUQ3NEQzRTNEODg5Q0JGNjQzN0Y2MEY5OUY5RUJGMjA5OEJDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo3dFdFDOj18J/ixrq/ngczhek zDMqGuLf+KIpzWZq/2UsbmGAA5l4Qgj4zRuQC0yQenEZzM55g4zV60r7AJ7C1LtJ TGBiy8NUwf/WvZ/gYcBIxr2mUp13WRZ3QFptygMDiG2BzvA7IVSHU/NDD/1kIPvi yrZsBjJKw0ZDgp6KoY9iNEUb0FATDzA1akmHekTEX4sDIlUmeaMCCPPqNVupuBHe O3HTwLthc6AEb38T0KJETBJ8z7P32ubZsPjlqX325QoaAXgcL/sOzT4Oe1y5oXNr SJTVIdZvP8fsO6hhFBZCusrJDNs5cbbizEPnpUeGAJjP2xIsbYl6pUQJuP8pAgMB AAGjggKzMIICrzAdBgNVHQ4EFgQUne100+PYicv2Q39g+Z+evyCYvH4wHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMzk2MzU2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMIHHBggrBgEFBQcBBwEB/wSBtzCBtDCBsQQCAAEwgaoD BAIuygQDBAIuyhQDBAIuymwDBAIuywgDBAIuy0ADBAAuy9oDBAAuy+ADBAAuy+Iw DAMEAi7L5AMEAC7L6AMEAFt8uAMEAFxwmwMEAlxwoDAMAwQAXHClAwQDXHCgAwQA XHDJAwQAXHGBMAwDBABccYUDBANccYAwDAMEAVxxigMEAVxxjAMEAFxx5wMEAFxx 7AMEAFxx8QMEAFxx9gMEArJegAMEArJesDANBgkqhkiG9w0BAQsFAAOCAQEAHkTF cxTC7LFjT2nv3J7o3A0j1kthstymLiWMMdSNTq/I4XZoWfjilnpN5W4HNUQwTQgq sg29PvgXgQRP3PAsHDEIchD4WFD6AXekMjyg/hxBeK0Ku6VcKuaGDtbaBKPLAiPN 0axjOjlV6BpomEU0wsw2/+C4IjTJYI9HbLvX8a2ZntUlgdb5+FPS3A5pLlf4R3Jg GOzlQMc8FWG4fVF1vve/w2+jygyJ3fJwSFajmz/YAypqNdkyxs0Zh8wBltTDjphK QP665dAl2UG5y6HlNJx15qyiQBHD0HdEzvqBrC9vqUbfC9Z3ZjZfUDFUzIPg0IAA 8wKsiW/bP7LYfOFG6w== -----END CERTIFICATE-----Generated at Tue Dec 23 00:49:06 2025 by rpki-client