This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201640.roa
File: AS201640.roa (raw, json)
Hash identifier: VAR1vsJcnu658YpQ/4Rdu4/yAcnGx9f/4QW+36gIcII=
Subject key identifier: 0D:1B:CF:3C:94:03:4F:03:F6:AE:62:38:56:19:95:67:A9:B0:A9:AE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1554D1E6793367FFD875D1F1395158123F1765FB
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201640.roa
Signing time: Sat 07 Feb 2026 13:47:43 +0000
ROA not before: Sat 07 Feb 2026 13:42:43 +0000
ROA not after: Sat 06 Feb 2027 13:47:43 +0000
asID: 201640
IP address blocks: 96.62.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Feb 2026 02:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:54:d1:e6:79:33:67:ff:d8:75:d1:f1:39:51:58:12:3f:17:65:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 7 13:42:43 2026 GMT
Not After : Feb 6 13:47:43 2027 GMT
Subject: CN=0D1BCF3C94034F03F6AE623856199567A9B0A9AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:46:61:39:7f:4d:d3:be:6f:df:c1:d6:8b:
6c:13:cd:c7:11:c2:81:97:33:87:b8:b1:17:55:4e:
48:ad:6e:d1:f8:c5:4b:2e:4a:94:12:4b:62:70:ba:
ed:6d:85:81:54:30:0a:6c:c1:de:5d:3a:d6:95:cd:
95:82:e1:5e:4f:a7:f3:80:ac:b6:9f:bb:a7:f7:eb:
cd:c5:9e:58:96:37:0e:53:57:12:f0:3d:ff:14:97:
94:1b:4b:cf:47:0e:09:85:28:95:6a:9e:88:74:4c:
6b:85:77:b5:a1:75:5f:18:ff:05:56:e0:cc:a1:dc:
7e:e2:17:a2:d4:de:87:95:ae:8a:ec:a2:b5:11:46:
c6:63:a0:6d:d5:3d:5b:93:26:0e:33:01:60:2a:16:
ce:3f:6d:09:83:cd:73:bf:3e:52:65:b8:04:a8:cb:
fa:c4:86:ab:01:19:7c:71:63:28:b4:21:00:75:c3:
09:2e:c9:7d:36:21:90:87:0f:94:3e:71:df:81:75:
55:51:e7:f6:24:01:29:af:59:ba:09:d5:d5:8b:93:
e3:91:7f:18:63:e3:e2:02:3c:22:2a:75:a0:97:34:
96:26:76:de:77:f4:b2:81:10:6c:e7:9d:0c:a7:35:
ee:3e:cf:64:e9:59:0b:50:1b:8e:1c:05:cd:ff:07:
3d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1B:CF:3C:94:03:4F:03:F6:AE:62:38:56:19:95:67:A9:B0:A9:AE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS201640.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.223.0/24
Signature Algorithm: sha256WithRSAEncryption
48:22:ab:12:d7:e1:22:10:fd:c3:56:0d:47:d3:bd:74:6b:df:
74:6a:f2:7d:bd:0f:24:cd:a3:7a:d5:bb:b0:e7:50:b0:40:6a:
ad:d1:12:d9:d2:13:ce:08:74:db:44:c3:35:64:2c:79:d9:3a:
95:aa:fe:ce:c8:80:ff:26:70:4c:61:59:f8:a1:04:13:0c:cb:
af:89:8c:95:63:b9:e0:60:0a:2d:50:e1:ce:ed:5d:d6:48:4c:
2d:77:c0:b5:43:da:5f:85:72:ff:27:69:67:31:b0:e6:b4:2f:
d4:94:3f:e1:3b:47:59:20:bc:0b:a7:8a:38:42:c7:f6:7a:1d:
d5:a8:c9:a3:9b:9b:d3:a3:07:6c:fa:89:5e:66:3d:19:8f:8f:
ba:92:ac:54:67:ac:05:65:51:32:81:b3:37:13:0f:96:5a:84:
62:ef:9c:2f:e4:d3:a4:ee:71:88:ce:51:81:f2:48:0f:b1:37:
f9:9c:7b:4b:60:39:03:17:b5:5c:f4:06:a4:dc:7a:44:3f:68:
c8:66:31:83:e6:f8:d2:ce:e9:92:e2:1d:3c:f7:ed:2a:f1:e8:
7c:b4:4f:15:8e:49:8a:2d:1a:7a:bc:b3:a3:a4:ee:be:2f:a6:
3c:32:e3:52:6e:b1:6a:98:c3:88:29:5c:a6:74:ae:2c:fb:c9:
ff:a7:0d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 08:10:14 2026 by rpki-client