This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202678.roa File: AS202678.roa (raw, json) Hash identifier: vJQWthsUevqpfowVz453wVidk+iFtVtHvhwSygkydr0= Subject key identifier: 55:0D:92:8E:25:63:22:BF:3F:85:D3:06:D2:45:CC:96:44:0E:88:CE Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 5BC930E996F71514501DD4220E22CFCFDF6CFC9A Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202678.roa Signing time: Wed 31 Dec 2025 15:26:43 +0000 ROA not before: Wed 31 Dec 2025 15:21:43 +0000 ROA not after: Wed 30 Dec 2026 15:26:43 +0000 asID: 202678 IP address blocks: 96.62.74.0/24 maxlen: 24 150.241.174.0/24 maxlen: 24 155.117.110.0/24 maxlen: 24 155.117.115.0/24 maxlen: 24 155.117.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c9:30:e9:96:f7:15:14:50:1d:d4:22:0e:22:cf:cf:df:6c:fc:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 31 15:21:43 2025 GMT Not After : Dec 30 15:26:43 2026 GMT Subject: CN=550D928E256322BF3F85D306D245CC96440E88CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:49:c4:59:ba:56:b0:8f:d6:d7:04:a5:94:d0: 43:3e:8f:62:e5:29:8a:47:2d:74:a0:ad:03:ac:40: 02:62:31:16:b0:42:e6:4d:d5:1a:bf:a3:ab:04:02: 86:fb:9d:79:f7:4d:a3:e2:86:e4:eb:86:1b:d4:be: 89:a9:d2:fa:6b:7a:e1:0e:aa:8d:dd:08:74:76:11: fe:fc:47:73:e5:5b:11:c1:d8:55:a4:51:30:32:f9: 2e:48:be:22:ea:4b:c1:3f:08:9d:d7:93:2d:df:d4: e5:b0:76:ac:00:24:79:73:19:e9:39:49:15:30:41: 9e:f4:e7:8f:fb:10:f5:ef:1e:60:33:54:de:0d:c8: 72:88:07:f8:5d:f3:b4:6e:e0:35:0f:97:05:8b:3a: 69:8f:59:90:dd:32:cf:b3:c4:ad:78:df:2e:15:b0: cb:4a:34:a1:09:68:08:2f:67:b1:2f:57:a3:fb:3e: 19:9a:00:e1:93:ab:93:9c:d1:19:40:b0:5e:95:61: b6:7b:03:33:7f:a8:fd:52:9b:db:f7:ad:51:db:ee: ce:27:72:f7:4c:6c:ac:db:f9:56:5d:f6:2f:31:39: 16:3d:d6:be:c4:48:3e:4e:7c:cd:25:9c:9c:89:5b: 34:da:5d:a1:fe:a7:1b:a7:ef:e4:07:7a:78:3d:23: 67:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0D:92:8E:25:63:22:BF:3F:85:D3:06:D2:45:CC:96:44:0E:88:CE X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202678.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.62.74.0/24 150.241.174.0/24 155.117.110.0/24 155.117.115.0/24 155.117.196.0/24 Signature Algorithm: sha256WithRSAEncryption b6:1d:79:f7:b0:0f:8e:1c:c6:02:aa:44:55:9e:bc:de:43:5d: 59:22:1b:44:eb:67:56:f9:ce:7c:b9:99:3c:f9:4d:a1:9b:e9: 6a:0a:05:74:9a:fc:38:ec:58:34:3d:19:55:00:af:41:7f:f4: b5:a4:9a:6f:b1:f4:33:a9:a2:c6:5a:17:40:82:04:76:c7:6b: 47:7b:17:31:3b:30:cc:e6:f3:9b:e2:2e:f3:1e:85:25:8b:2c: 56:d5:9e:85:7b:30:ef:dc:e3:e2:89:46:fa:0c:38:e2:81:4e: 19:46:2c:5e:56:b7:e4:2e:e5:4f:2f:1c:58:b3:4c:d0:ac:c7: 0e:e8:ff:04:fc:08:7f:b4:5e:54:2f:62:a1:f0:60:03:ce:e6: c0:86:17:b7:e3:4e:b2:da:c7:c7:33:f4:52:3e:ef:2d:0b:1d: c8:83:8a:c5:1c:06:38:0f:4e:07:4f:5e:a5:c0:2b:54:a1:ce: 7c:d8:4d:2a:b0:f0:91:ee:9b:eb:86:56:4b:4d:fc:92:35:3a: a5:c3:f9:33:a1:b2:b8:9e:7e:96:d0:a7:82:fa:01:50:c6:39: 13:cb:3b:e4:68:20:38:3f:68:65:54:3a:92:a1:ea:7a:0c:28: 36:b2:1e:a5:f2:63:2f:c0:7e:f3:61:b3:a6:1e:17:6c:59:90: e4:3d:a5:17 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUW8kw6Zb3FRRQHdQiDiLPz99s/JowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMzExNTIxNDNaFw0yNjEyMzAxNTI2NDNaMDMxMTAvBgNV BAMTKDU1MEQ5MjhFMjU2MzIyQkYzRjg1RDMwNkQyNDVDQzk2NDQwRTg4Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUScRZulawj9bXBKWU0EM+j2Ll KYpHLXSgrQOsQAJiMRawQuZN1Rq/o6sEAob7nXn3TaPihuTrhhvUvomp0vpreuEO qo3dCHR2Ef78R3PlWxHB2FWkUTAy+S5IviLqS8E/CJ3Xky3f1OWwdqwAJHlzGek5 SRUwQZ7054/7EPXvHmAzVN4NyHKIB/hd87Ru4DUPlwWLOmmPWZDdMs+zxK143y4V sMtKNKEJaAgvZ7EvV6P7PhmaAOGTq5Oc0RlAsF6VYbZ7AzN/qP1Sm9v3rVHb7s4n cvdMbKzb+VZd9i8xORY91r7ESD5OfM0lnJyJWzTaXaH+pxun7+QHeng9I2fHAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUVQ2SjiVjIr8/hdMG0kXMlkQOiM4wHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjAyNjc4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAYD5K AwQAlvGuAwQAm3VuAwQAm3VzAwQAm3XEMA0GCSqGSIb3DQEBCwUAA4IBAQC2HXn3 sA+OHMYCqkRVnrzeQ11ZIhtE62dW+c58uZk8+U2hm+lqCgV0mvw47Fg0PRlVAK9B f/S1pJpvsfQzqaLGWhdAggR2x2tHexcxOzDM5vOb4i7zHoUliyxW1Z6FezDv3OPi iUb6DDjigU4ZRixeVrfkLuVPLxxYs0zQrMcO6P8E/Ah/tF5UL2Kh8GADzubAhhe3 406y2sfHM/RSPu8tCx3Ig4rFHAY4D04HT16lwCtUoc582E0qsPCR7pvrhlZLTfyS NTqlw/kzobK4nn6W0KeC+gFQxjkTyzvkaCA4P2hlVDqSoep6DCg2sh6l8mMvwH7z YbOmHhdsWZDkPaUX -----END CERTIFICATE-----Generated at Mon Jan 19 08:14:24 2026 by rpki-client