This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401838.roa File: AS401838.roa (raw, json) Hash identifier: hwPDTGGGQgmudRiXPpbPdljKja7PZdXEtfAY2yeYkPY= Subject key identifier: 01:11:5F:F9:1C:7C:15:79:FF:7F:1E:F4:B1:22:F5:D2:04:C3:B5:CB Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 2204F1C88D51EB2A687B6201AA16A8A0690A0463 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401838.roa Signing time: Wed 17 Dec 2025 00:15:52 +0000 ROA not before: Wed 17 Dec 2025 00:10:52 +0000 ROA not after: Wed 16 Dec 2026 00:15:52 +0000 asID: 401838 IP address blocks: 46.203.107.0/24 maxlen: 24 46.203.112.0/24 maxlen: 24 46.203.114.0/24 maxlen: 24 46.203.145.0/24 maxlen: 24 46.203.146.0/24 maxlen: 24 46.203.152.0/24 maxlen: 24 46.203.156.0/24 maxlen: 24 46.203.168.0/24 maxlen: 24 46.203.169.0/24 maxlen: 24 46.203.171.0/24 maxlen: 24 46.203.174.0/24 maxlen: 24 46.203.177.0/24 maxlen: 24 46.203.179.0/24 maxlen: 24 46.203.187.0/24 maxlen: 24 46.203.199.0/24 maxlen: 24 46.203.208.0/24 maxlen: 24 46.203.227.0/24 maxlen: 24 46.203.235.0/24 maxlen: 24 46.203.249.0/24 maxlen: 24 91.124.242.0/24 maxlen: 24 92.112.6.0/24 maxlen: 24 92.112.7.0/24 maxlen: 24 92.112.8.0/24 maxlen: 24 92.112.36.0/24 maxlen: 24 92.112.38.0/24 maxlen: 24 92.112.55.0/24 maxlen: 24 92.112.62.0/24 maxlen: 24 92.112.89.0/24 maxlen: 24 92.112.142.0/24 maxlen: 24 92.113.4.0/24 maxlen: 24 92.113.6.0/24 maxlen: 24 92.113.9.0/24 maxlen: 24 92.113.15.0/24 maxlen: 24 92.113.40.0/24 maxlen: 24 92.113.169.0/24 maxlen: 24 92.113.247.0/24 maxlen: 24 95.134.114.0/23 maxlen: 24 95.134.166.0/23 maxlen: 24 95.134.184.0/24 maxlen: 24 95.134.186.0/23 maxlen: 24 95.134.193.0/24 maxlen: 24 95.134.204.0/24 maxlen: 24 95.134.206.0/24 maxlen: 24 95.134.221.0/24 maxlen: 24 95.134.223.0/24 maxlen: 24 95.135.61.0/24 maxlen: 24 95.135.72.0/24 maxlen: 24 178.92.44.0/24 maxlen: 24 178.92.76.0/23 maxlen: 24 178.92.180.0/22 maxlen: 24 178.92.252.0/23 maxlen: 24 178.93.117.0/24 maxlen: 24 178.93.121.0/24 maxlen: 24 178.93.192.0/22 maxlen: 24 178.94.167.0/24 maxlen: 24 178.94.168.0/24 maxlen: 24 178.94.175.0/24 maxlen: 24 178.94.191.0/24 maxlen: 24 178.94.244.0/22 maxlen: 24 178.95.60.0/22 maxlen: 24 178.95.77.0/24 maxlen: 24 178.95.82.0/24 maxlen: 24 178.95.172.0/23 maxlen: 24 178.95.230.0/24 maxlen: 24 178.95.236.0/24 maxlen: 24 178.95.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:04:f1:c8:8d:51:eb:2a:68:7b:62:01:aa:16:a8:a0:69:0a:04:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 17 00:10:52 2025 GMT Not After : Dec 16 00:15:52 2026 GMT Subject: CN=01115FF91C7C1579FF7F1EF4B122F5D204C3B5CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8b:56:6b:c9:dc:d3:3a:2b:51:26:75:c3:ba: f0:af:66:bb:6b:b8:0a:0b:e6:92:8f:0c:39:69:eb: 64:51:84:91:37:c6:71:47:f3:74:b1:c8:82:10:6c: 69:b3:e1:db:e9:87:7a:a9:f3:9e:16:30:a8:aa:4c: ea:07:80:6e:e9:cb:ae:f5:d7:78:c7:0b:d3:e4:1d: 76:37:32:2f:d8:05:ce:08:a2:05:86:53:f1:33:da: 80:ed:a2:a7:7f:32:29:32:87:27:a3:f8:af:e3:04: b5:83:6b:77:fe:48:a5:8a:15:0b:0e:98:25:fe:d9: 95:77:f3:ea:b1:5a:06:58:13:85:60:ea:53:2c:83: 59:e6:b2:52:8a:15:2b:d2:fa:e2:64:f6:30:27:e0: 93:10:fe:73:b6:50:46:17:77:83:59:7c:b0:21:0f: 62:7a:f1:22:d2:99:4a:bb:3a:1d:2b:48:9a:89:4a: db:dc:d2:de:8a:bc:df:4d:7d:a8:a4:5f:44:a9:e7: b1:ba:48:b0:75:59:8c:0b:3c:87:cb:f0:dc:73:59: d5:19:42:9b:d5:a1:15:f9:be:91:91:76:a3:c8:62: 5a:8f:87:fb:0c:15:5c:bb:4f:32:d0:2b:f8:c6:7e: a3:ed:fc:9a:d8:5b:51:ad:5b:12:0f:28:8f:45:e3: 8d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:11:5F:F9:1C:7C:15:79:FF:7F:1E:F4:B1:22:F5:D2:04:C3:B5:CB X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS401838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.203.107.0/24 46.203.112.0/24 46.203.114.0/24 46.203.145.0-46.203.146.255 46.203.152.0/24 46.203.156.0/24 46.203.168.0/23 46.203.171.0/24 46.203.174.0/24 46.203.177.0/24 46.203.179.0/24 46.203.187.0/24 46.203.199.0/24 46.203.208.0/24 46.203.227.0/24 46.203.235.0/24 46.203.249.0/24 91.124.242.0/24 92.112.6.0-92.112.8.255 92.112.36.0/24 92.112.38.0/24 92.112.55.0/24 92.112.62.0/24 92.112.89.0/24 92.112.142.0/24 92.113.4.0/24 92.113.6.0/24 92.113.9.0/24 92.113.15.0/24 92.113.40.0/24 92.113.169.0/24 92.113.247.0/24 95.134.114.0/23 95.134.166.0/23 95.134.184.0/24 95.134.186.0/23 95.134.193.0/24 95.134.204.0/24 95.134.206.0/24 95.134.221.0/24 95.134.223.0/24 95.135.61.0/24 95.135.72.0/24 178.92.44.0/24 178.92.76.0/23 178.92.180.0/22 178.92.252.0/23 178.93.117.0/24 178.93.121.0/24 178.93.192.0/22 178.94.167.0-178.94.168.255 178.94.175.0/24 178.94.191.0/24 178.94.244.0/22 178.95.60.0/22 178.95.77.0/24 178.95.82.0/24 178.95.172.0/23 178.95.230.0/24 178.95.236.0/24 178.95.251.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:f8:7f:3a:61:52:a4:4e:ce:23:c8:72:29:70:7e:d6:45:dd: 55:e3:92:73:3b:96:4d:67:83:6a:38:a8:2c:a4:a0:59:59:37: ee:76:eb:23:bd:36:a9:60:91:fc:29:e9:3e:37:ad:e1:4d:9d: 13:bf:83:35:87:c0:5d:a1:d1:ea:18:41:c5:da:0a:63:84:89: 78:0f:f1:cd:2a:5e:58:23:30:e4:c3:b5:83:c6:d2:d5:fc:74: 6c:57:7d:37:f7:e6:31:f9:0f:58:75:4a:e3:90:c0:7c:e7:8e: cb:9f:a7:3d:0f:94:7f:1d:d3:09:00:5b:21:a4:bc:90:bf:a5: fb:cc:c8:26:53:87:25:fb:ab:52:3e:d0:a6:26:3b:d7:44:0a: b2:15:73:9e:8c:34:29:05:30:9e:cd:d2:8f:6d:da:0c:24:d6: a4:53:77:f8:8a:c8:14:5b:fc:9a:f5:d3:09:a4:0d:b2:9a:3a: a6:24:b8:40:ee:32:83:81:3a:65:22:ba:2b:47:2b:15:c6:d6: b6:5c:89:4c:31:d7:43:b0:8f:3b:58:ed:0b:71:ac:3d:2e:66: 64:4f:ba:d3:3f:df:55:ac:dd:7d:7f:38:f8:60:35:1b:f1:bc: e1:b6:00:a4:5d:20:dd:27:c2:58:2b:cf:e6:2c:07:1c:bb:80: 14:41:1c:f7 -----BEGIN CERTIFICATE----- MIIGijCCBXKgAwIBAgIUIgTxyI1R6ypoe2IBqhaooGkKBGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMTcwMDEwNTJaFw0yNjEyMTYwMDE1NTJaMDMxMTAvBgNV BAMTKDAxMTE1RkY5MUM3QzE1NzlGRjdGMUVGNEIxMjJGNUQyMDRDM0I1Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoi1ZrydzTOitRJnXDuvCvZrtr uAoL5pKPDDlp62RRhJE3xnFH83SxyIIQbGmz4dvph3qp854WMKiqTOoHgG7py671 13jHC9PkHXY3Mi/YBc4IogWGU/Ez2oDtoqd/Mikyhyej+K/jBLWDa3f+SKWKFQsO mCX+2ZV38+qxWgZYE4Vg6lMsg1nmslKKFSvS+uJk9jAn4JMQ/nO2UEYXd4NZfLAh D2J68SLSmUq7Oh0rSJqJStvc0t6KvN9NfaikX0Sp57G6SLB1WYwLPIfL8NxzWdUZ QpvVoRX5vpGRdqPIYlqPh/sMFVy7TzLQK/jGfqPt/JrYW1GtWxIPKI9F441lAgMB AAGjggOUMIIDkDAdBgNVHQ4EFgQUARFf+Rx8FXn/fx70sSL10gTDtcswHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTNDAxODM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMIIBpwYIKwYBBQUHAQcBAf8EggGWMIIBkjCCAY4EAgAB MIIBhgMEAC7LawMEAC7LcAMEAC7LcjAMAwQALsuRAwQALsuSAwQALsuYAwQALsuc AwQBLsuoAwQALsurAwQALsuuAwQALsuxAwQALsuzAwQALsu7AwQALsvHAwQALsvQ AwQALsvjAwQALsvrAwQALsv5AwQAW3zyMAwDBAFccAYDBABccAgDBABccCQDBABc cCYDBABccDcDBABccD4DBABccFkDBABccI4DBABccQQDBABccQYDBABccQkDBABc cQ8DBABccSgDBABccakDBABccfcDBAFfhnIDBAFfhqYDBABfhrgDBAFfhroDBABf hsEDBABfhswDBABfhs4DBABfht0DBABfht8DBABfhz0DBABfh0gDBACyXCwDBAGy XEwDBAKyXLQDBAGyXPwDBACyXXUDBACyXXkDBAKyXcAwDAMEALJepwMEALJeqAME ALJerwMEALJevwMEArJe9AMEArJfPAMEALJfTQMEALJfUgMEAbJfrAMEALJf5gME ALJf7AMEALJf+zANBgkqhkiG9w0BAQsFAAOCAQEAL/h/OmFSpE7OI8hyKXB+1kXd VeOSczuWTWeDajioLKSgWVk37nbrI702qWCR/CnpPjet4U2dE7+DNYfAXaHR6hhB xdoKY4SJeA/xzSpeWCMw5MO1g8bS1fx0bFd9N/fmMfkPWHVK45DAfOeOy5+nPQ+U fx3TCQBbIaS8kL+l+8zIJlOHJfurUj7QpiY710QKshVznow0KQUwns3Sj23aDCTW pFN3+IrIFFv8mvXTCaQNspo6piS4QO4yg4E6ZSK6K0crFcbWtlyJTDHXQ7CPO1jt C3GsPS5mZE+60z/fVazdfX84+GA1G/G84bYApF0g3SfCWCvP5iwHHLuAFEEc9w== -----END CERTIFICATE-----Generated at Sat Dec 20 12:33:49 2025 by rpki-client