This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197071.roa File: AS197071.roa (raw, json) Hash identifier: SEGBuFZVXRqiD8wDXY544Uz/QO5LDfZnBpuRk4enfnY= Subject key identifier: E8:BD:76:BB:95:09:64:AD:D8:10:A4:A2:CE:71:12:2E:C0:FD:3C:58 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 556BDDDFB692B3939F9063434B55119EF17875F7 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197071.roa Signing time: Thu 08 Jan 2026 17:25:25 +0000 ROA not before: Thu 08 Jan 2026 17:20:25 +0000 ROA not after: Thu 07 Jan 2027 17:25:25 +0000 asID: 197071 IP address blocks: 147.79.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:6b:dd:df:b6:92:b3:93:9f:90:63:43:4b:55:11:9e:f1:78:75:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 8 17:20:25 2026 GMT Not After : Jan 7 17:25:25 2027 GMT Subject: CN=E8BD76BB950964ADD810A4A2CE71122EC0FD3C58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:c0:d3:d0:c3:4b:b7:de:1b:9e:e5:0e:99: 4e:98:36:c7:46:bc:8a:30:a5:97:10:1d:0c:75:a9: 37:f3:95:c5:eb:8b:4b:d8:fa:04:0f:fa:db:72:a4: a0:2f:31:aa:1f:b2:bd:68:63:95:3b:b2:19:74:12: ed:51:84:92:43:6d:95:66:ed:25:aa:63:66:9e:7d: 09:bd:05:6c:a1:d7:48:01:ab:41:4e:a1:59:45:9c: 92:f4:55:01:37:1e:12:23:cf:01:56:4a:a8:8e:21: a3:8f:8b:7e:c9:16:dd:cc:a6:b9:d2:35:ea:7e:bc: 84:d2:bd:92:aa:77:2a:ab:b2:d1:eb:d2:eb:e1:32: 04:1d:59:cd:b1:d8:80:3d:6e:02:7c:bb:87:89:2e: e5:9a:12:67:b4:52:06:24:87:3d:3b:c6:04:f7:33: 4a:b9:a7:23:0f:7e:e6:51:0e:76:66:95:55:fb:21: 65:aa:0d:96:d7:d2:b9:7e:17:94:fb:77:93:fa:df: ec:12:16:20:c1:cf:9f:21:80:d6:ae:09:21:d3:15: 1d:a9:68:41:4a:cc:58:74:49:07:ac:d9:fe:64:fc: 5a:84:69:3e:db:00:b4:69:be:9f:d0:a2:15:af:b6: 2d:e4:36:79:9a:67:ca:70:25:be:d8:61:18:3b:bc: bb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BD:76:BB:95:09:64:AD:D8:10:A4:A2:CE:71:12:2E:C0:FD:3C:58 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS197071.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.79.9.0/24 Signature Algorithm: sha256WithRSAEncryption 70:a7:00:fb:38:47:87:1f:24:84:36:44:8e:cb:c6:08:4d:19: 5f:1c:db:de:f3:4f:38:ea:0b:92:46:99:03:7d:d7:71:57:46: fb:d8:86:42:52:94:12:1d:2b:59:78:7e:63:db:d7:d3:59:19: a4:27:5e:8d:52:06:a0:06:e1:1a:93:8d:f9:88:77:ad:f4:44: 14:69:0b:ab:93:5e:3d:84:a6:ca:b1:e1:fb:3f:8e:f6:0e:ac: ec:dd:f4:f4:17:4c:fd:1b:a6:0d:92:b9:04:03:fa:01:e3:27: ac:0a:a4:99:65:9f:bd:d1:4d:af:17:ae:9a:90:28:58:fd:97: 71:20:39:6f:12:39:4b:3d:25:56:5b:51:64:a8:e7:c9:01:8b: a9:aa:4f:a6:75:a6:79:25:52:34:d4:32:4d:51:c0:a9:44:83: 5f:a2:7b:96:53:37:ef:38:00:13:a2:7e:87:3a:58:92:f6:be: 11:15:a6:ec:52:f3:d7:80:fd:8b:58:8c:79:f4:47:3e:0f:28: 94:82:7c:f8:0e:2e:43:cd:8a:5f:47:6b:5a:06:93:96:5b:82: a6:9b:83:65:cd:a2:18:6f:e1:ea:64:9e:05:ae:57:bd:d7:cf: d9:31:04:2b:99:7a:f2:01:5d:6a:7c:d4:22:a4:3c:0a:b8:ad: 67:bf:43:c3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUVWvd37aSs5OfkGNDS1URnvF4dfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMDgxNzIwMjVaFw0yNzAxMDcxNzI1MjVaMDMxMTAvBgNV BAMTKEU4QkQ3NkJCOTUwOTY0QUREODEwQTRBMkNFNzExMjJFQzBGRDNDNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhMDT0MNLt94bnuUOmU6YNsdG vIowpZcQHQx1qTfzlcXri0vY+gQP+ttypKAvMaofsr1oY5U7shl0Eu1RhJJDbZVm 7SWqY2aefQm9BWyh10gBq0FOoVlFnJL0VQE3HhIjzwFWSqiOIaOPi37JFt3MprnS Nep+vITSvZKqdyqrstHr0uvhMgQdWc2x2IA9bgJ8u4eJLuWaEme0UgYkhz07xgT3 M0q5pyMPfuZRDnZmlVX7IWWqDZbX0rl+F5T7d5P63+wSFiDBz58hgNauCSHTFR2p aEFKzFh0SQes2f5k/FqEaT7bALRpvp/QohWvti3kNnmaZ8pwJb7YYRg7vLthAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU6L12u5UJZK3YEKSiznESLsD9PFgwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTk3MDcxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk08J MA0GCSqGSIb3DQEBCwUAA4IBAQBwpwD7OEeHHySENkSOy8YITRlfHNve80846guS RpkDfddxV0b72IZCUpQSHStZeH5j29fTWRmkJ16NUgagBuEak435iHet9EQUaQur k149hKbKseH7P472Dqzs3fT0F0z9G6YNkrkEA/oB4yesCqSZZZ+90U2vF66akChY /ZdxIDlvEjlLPSVWW1FkqOfJAYupqk+mdaZ5JVI01DJNUcCpRINfonuWUzfvOAAT on6HOliS9r4RFabsUvPXgP2LWIx59Ec+DyiUgnz4Di5DzYpfR2taBpOWW4Kmm4Nl zaIYb+HqZJ4Frle918/ZMQQrmXryAV1qfNQipDwKuK1nv0PD -----END CERTIFICATE-----Generated at Mon Jan 19 08:14:23 2026 by rpki-client