This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199959.roa File: AS199959.roa (raw, json) Hash identifier: VXXsUxxVRiBv+MtC7wkr+teu6sou5Prl3OiOPNxAMe4= Subject key identifier: DF:6E:11:CF:68:FD:26:9D:74:A2:3B:93:70:3E:1B:39:A3:75:95:D8 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 7797E20E88A549FA502C526938D616CB55D5808D Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199959.roa Signing time: Fri 16 Jan 2026 13:13:37 +0000 ROA not before: Fri 16 Jan 2026 13:08:37 +0000 ROA not after: Fri 15 Jan 2027 13:13:37 +0000 asID: 199959 IP address blocks: 155.117.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:97:e2:0e:88:a5:49:fa:50:2c:52:69:38:d6:16:cb:55:d5:80:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 16 13:08:37 2026 GMT Not After : Jan 15 13:13:37 2027 GMT Subject: CN=DF6E11CF68FD269D74A23B93703E1B39A37595D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f2:8f:8f:ec:86:31:ce:d9:9d:66:c4:d3:90: 20:4d:64:d1:9c:99:98:56:67:b5:18:d9:06:bb:65: b9:3e:58:0e:ee:7b:e1:64:8b:33:ba:67:a9:45:94: bd:06:b2:39:92:74:41:64:0d:11:34:7e:6e:84:f7: 67:10:c1:70:66:dd:7b:45:38:df:9e:f2:de:e1:40: e1:e9:c6:75:a8:b4:35:21:59:23:b8:57:eb:14:38: 24:21:ab:81:7a:f1:67:50:0a:8e:00:8b:8f:eb:c0: 42:ce:0a:0e:d8:22:4d:11:ac:2b:3a:b7:71:ee:1e: 9d:d9:0d:0c:2d:88:f4:07:7b:fc:67:e7:9e:98:a7: e6:e2:3e:5d:7d:4e:8c:53:28:af:de:ce:5c:cc:de: 92:64:76:5c:b2:49:fa:93:ed:85:c2:90:87:6a:b5: 90:c4:c9:4d:5c:41:20:95:6d:2a:5e:7a:0c:21:5c: 90:49:4d:d0:23:ed:5e:52:01:b5:81:8e:38:e4:f5: 41:e6:9c:ed:c2:bd:a5:d8:07:a0:a8:a9:60:14:de: 0e:98:33:6b:82:2c:e7:9b:cd:65:30:2c:bd:46:58: d1:09:4c:0d:9a:dd:b3:a8:19:f7:01:fd:5a:12:fb: 50:bf:1c:4a:2f:7f:ce:0b:b1:f0:b9:49:5b:14:42: fc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6E:11:CF:68:FD:26:9D:74:A2:3B:93:70:3E:1B:39:A3:75:95:D8 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS199959.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.117.237.0/24 Signature Algorithm: sha256WithRSAEncryption 38:74:21:70:16:91:8c:d8:d3:ba:17:58:71:94:97:67:9d:d9: 67:2d:ed:01:f4:87:65:bc:b0:5e:26:14:89:34:3a:8c:ee:6b: 69:99:00:1d:57:d1:ae:a0:4a:8d:be:30:1f:fe:27:0a:86:17: 73:c7:38:94:29:1e:dd:d4:dd:4a:4d:27:1e:56:9a:c6:08:07: 41:90:8f:69:37:cf:36:01:63:4c:5e:77:98:98:df:68:e6:85: d0:dd:5c:af:bc:0e:85:9f:d1:8a:3a:9a:22:1d:8a:3e:43:03: ed:98:7c:1e:8f:b7:53:14:96:fe:4e:f1:08:0d:4d:8b:32:c3: a1:b9:03:de:e8:a9:1e:f2:3a:01:03:37:ac:4c:c5:12:56:e2: 70:e3:ae:62:6b:63:89:83:79:b8:d8:17:8c:09:3c:af:2b:64: 54:1a:51:10:38:a3:50:0d:32:f1:09:c8:2f:ef:d1:0b:60:ad: 74:ef:27:c5:ea:34:44:6f:9b:77:b2:8f:15:1e:8f:4f:d6:38: bb:88:8d:e4:28:16:56:84:34:0d:55:b1:f1:59:48:7b:39:27: 70:28:ae:b2:44:33:24:d5:85:b2:9c:4c:28:ae:b1:af:1d:aa: c9:5a:26:e0:aa:a9:94:1a:29:4d:9c:01:d8:17:be:ff:e1:28: 57:89:aa:99 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUd5fiDoilSfpQLFJpONYWy1XVgI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMTYxMzA4MzdaFw0yNzAxMTUxMzEzMzdaMDMxMTAvBgNV BAMTKERGNkUxMUNGNjhGRDI2OUQ3NEEyM0I5MzcwM0UxQjM5QTM3NTk1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl8o+P7IYxztmdZsTTkCBNZNGc mZhWZ7UY2Qa7Zbk+WA7ue+FkizO6Z6lFlL0GsjmSdEFkDRE0fm6E92cQwXBm3XtF ON+e8t7hQOHpxnWotDUhWSO4V+sUOCQhq4F68WdQCo4Ai4/rwELOCg7YIk0RrCs6 t3HuHp3ZDQwtiPQHe/xn556Yp+biPl19ToxTKK/ezlzM3pJkdlyySfqT7YXCkIdq tZDEyU1cQSCVbSpeegwhXJBJTdAj7V5SAbWBjjjk9UHmnO3CvaXYB6CoqWAU3g6Y M2uCLOebzWUwLL1GWNEJTA2a3bOoGfcB/VoS+1C/HEovf84LsfC5SVsUQvwjAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU324Rz2j9Jp10ojuTcD4bOaN1ldgwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTk5OTU5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAm3Xt MA0GCSqGSIb3DQEBCwUAA4IBAQA4dCFwFpGM2NO6F1hxlJdnndlnLe0B9IdlvLBe JhSJNDqM7mtpmQAdV9GuoEqNvjAf/icKhhdzxziUKR7d1N1KTSceVprGCAdBkI9p N882AWNMXneYmN9o5oXQ3VyvvA6Fn9GKOpoiHYo+QwPtmHwej7dTFJb+TvEIDU2L MsOhuQPe6Kke8joBAzesTMUSVuJw465ia2OJg3m42BeMCTyvK2RUGlEQOKNQDTLx Ccgv79ELYK107yfF6jREb5t3so8VHo9P1ji7iI3kKBZWhDQNVbHxWUh7OSdwKK6y RDMk1YWynEworrGvHarJWibgqqmUGilNnAHYF77/4ShXiaqZ -----END CERTIFICATE-----Generated at Mon Jan 19 08:14:24 2026 by rpki-client