This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202673.roa File: AS202673.roa (raw, json) Hash identifier: y9B3i9ysiNiFT5gEBStzo2RG9Aw6ayEVGXPv8Rd96kg= Subject key identifier: 44:F8:7D:57:F0:A0:3C:17:AD:8A:55:4C:E9:5D:4E:B1:36:AF:13:A6 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 619ED96A04F4E30E693B34F8B5F40FBD9999F999 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202673.roa Signing time: Sun 25 Jan 2026 10:54:15 +0000 ROA not before: Sun 25 Jan 2026 10:49:15 +0000 ROA not after: Sun 24 Jan 2027 10:54:15 +0000 asID: 202673 IP address blocks: 155.117.147.0/24 maxlen: 24 155.117.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:9e:d9:6a:04:f4:e3:0e:69:3b:34:f8:b5:f4:0f:bd:99:99:f9:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 25 10:49:15 2026 GMT Not After : Jan 24 10:54:15 2027 GMT Subject: CN=44F87D57F0A03C17AD8A554CE95D4EB136AF13A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ec:cb:9a:86:b5:53:0b:8b:54:c5:74:62:81: b8:fb:aa:f3:85:7f:56:4c:89:90:ba:d7:57:b6:0a: 99:e5:c1:05:6b:3f:b2:88:8f:5c:4e:54:8b:09:ff: e0:6a:34:3a:b0:7c:2a:b3:43:4e:21:a7:9c:2b:0b: d1:c9:59:ee:be:3e:5b:34:6a:2e:68:d5:dd:fc:18: 03:f6:91:4c:1f:6b:3e:6e:41:44:c9:c8:e8:48:3e: be:24:91:06:9a:8d:d7:c0:35:6f:2a:5c:13:d9:f3: f5:8c:6d:d9:65:50:86:c6:8f:60:f5:24:6f:37:2d: f9:7f:c4:6e:5d:53:89:fd:96:d5:8a:28:61:7b:e9: f2:ae:be:97:2a:5f:9d:ee:a7:3a:be:c5:d0:30:33: 47:36:98:25:d2:85:7b:33:a0:08:df:8d:ff:37:88: ab:2f:ce:b6:d4:c9:b7:56:68:4e:72:be:7b:77:81: 81:fd:b0:3f:8e:7d:94:48:c8:46:f8:8c:d4:5d:47: c3:70:85:75:af:c1:a1:5f:af:fb:e4:10:29:ab:b2: 13:da:ec:8e:e3:3e:12:f9:ce:f0:c5:cd:a7:cd:53: b5:cb:21:16:1e:c8:7a:e3:7f:fb:5b:df:c9:97:23: 37:4c:7a:18:a3:6f:89:1b:9c:a1:6c:90:a3:a2:a9: 83:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F8:7D:57:F0:A0:3C:17:AD:8A:55:4C:E9:5D:4E:B1:36:AF:13:A6 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202673.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.117.147.0/24 155.117.197.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:7d:60:1e:99:34:33:fa:1d:97:86:cc:81:f5:ae:6a:35:73: e0:08:cd:d9:1c:4d:23:33:b8:e4:e4:8b:1d:90:cd:b1:20:08: 3d:68:34:38:e9:7d:e0:50:ee:e4:d3:a6:17:77:50:17:e8:71: a1:2b:5d:b0:11:a8:4d:bd:7b:01:a8:38:d8:3e:3c:f0:22:44: 13:b1:ea:a0:d2:4f:28:ff:22:d5:19:fc:50:9a:37:9f:a2:87: be:3b:0e:df:98:34:2c:64:19:ca:35:a3:64:01:0d:fd:90:a7: cf:5f:58:3b:38:47:54:65:2e:66:e0:b7:49:1f:92:82:d1:59: 04:f7:03:52:fa:43:17:b4:51:a8:2c:14:24:9b:b4:c0:bd:25: 13:ab:80:3a:81:29:a0:60:61:00:c0:51:aa:6f:63:82:88:30: 0a:c8:cc:d8:1c:be:e8:17:6f:d6:1c:4c:d0:b9:10:f0:67:a5: 2d:f0:52:cf:4a:b4:3f:3c:3b:8d:cb:26:43:13:71:7a:3a:75: a6:75:eb:53:5c:25:7a:c8:c4:67:c3:63:06:5d:a6:30:aa:56: 30:b1:6b:4b:0a:6d:e9:31:16:f1:d8:2f:ca:52:5e:89:e5:12: 02:16:9d:b0:fb:fc:d8:d2:80:ea:f7:ba:b0:6d:f3:0f:d9:3f: f9:ec:5b:a3 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUYZ7ZagT04w5pOzT4tfQPvZmZ+ZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMjUxMDQ5MTVaFw0yNzAxMjQxMDU0MTVaMDMxMTAvBgNV BAMTKDQ0Rjg3RDU3RjBBMDNDMTdBRDhBNTU0Q0U5NUQ0RUIxMzZBRjEzQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw7MuahrVTC4tUxXRigbj7qvOF f1ZMiZC611e2CpnlwQVrP7KIj1xOVIsJ/+BqNDqwfCqzQ04hp5wrC9HJWe6+Pls0 ai5o1d38GAP2kUwfaz5uQUTJyOhIPr4kkQaajdfANW8qXBPZ8/WMbdllUIbGj2D1 JG83Lfl/xG5dU4n9ltWKKGF76fKuvpcqX53upzq+xdAwM0c2mCXShXszoAjfjf83 iKsvzrbUybdWaE5yvnt3gYH9sD+OfZRIyEb4jNRdR8NwhXWvwaFfr/vkECmrshPa 7I7jPhL5zvDFzafNU7XLIRYeyHrjf/tb38mXIzdMehijb4kbnKFskKOiqYORAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQURPh9V/CgPBetilVM6V1OsTavE6YwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjAyNjczLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAm3WT AwQAm3XFMA0GCSqGSIb3DQEBCwUAA4IBAQAOfWAemTQz+h2XhsyB9a5qNXPgCM3Z HE0jM7jk5IsdkM2xIAg9aDQ46X3gUO7k06YXd1AX6HGhK12wEahNvXsBqDjYPjzw IkQTseqg0k8o/yLVGfxQmjefooe+Ow7fmDQsZBnKNaNkAQ39kKfPX1g7OEdUZS5m 4LdJH5KC0VkE9wNS+kMXtFGoLBQkm7TAvSUTq4A6gSmgYGEAwFGqb2OCiDAKyMzY HL7oF2/WHEzQuRDwZ6Ut8FLPSrQ/PDuNyyZDE3F6OnWmdetTXCV6yMRnw2MGXaYw qlYwsWtLCm3pMRbx2C/KUl6J5RICFp2w+/zY0oDq97qwbfMP2T/57Fuj -----END CERTIFICATE-----Generated at Mon Feb 2 03:06:34 2026 by rpki-client