This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207821.roa File: AS207821.roa (raw, json) Hash identifier: ep7LxTf4HP7b6mhZiKdStGa1H4NyMpkLSFc1maGoygc= Subject key identifier: E3:DE:F6:6A:70:44:38:CE:53:96:39:05:12:CE:FF:C6:13:44:79:43 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 5389DBD54FB2FB338470F95BCE06D248D4BF859C Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207821.roa Signing time: Thu 08 Jan 2026 19:54:29 +0000 ROA not before: Thu 08 Jan 2026 19:49:29 +0000 ROA not after: Thu 07 Jan 2027 19:54:29 +0000 asID: 207821 IP address blocks: 147.79.11.0/24 maxlen: 24 147.79.12.0/24 maxlen: 24 147.79.13.0/24 maxlen: 24 147.79.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:89:db:d5:4f:b2:fb:33:84:70:f9:5b:ce:06:d2:48:d4:bf:85:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 8 19:49:29 2026 GMT Not After : Jan 7 19:54:29 2027 GMT Subject: CN=E3DEF66A704438CE5396390512CEFFC613447943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:47:f0:8d:26:77:00:65:7d:56:40:a6:fa:3a: 32:36:dc:0f:c7:9b:86:0a:d5:69:db:02:87:db:bd: 55:ac:7d:17:a1:fa:57:ac:4e:9b:84:2e:05:3e:bd: 97:8a:f5:41:53:41:03:c9:ed:22:9e:90:53:ab:39: f4:79:7c:17:2b:31:84:1c:3b:6d:45:27:f9:f7:3d: 09:bb:be:72:1a:df:5c:2b:92:ce:55:71:ed:c1:32: 0e:01:86:33:4a:64:fc:a1:39:19:83:21:50:cd:a1: ae:9f:3a:fc:c0:fc:3f:22:1e:85:24:5f:59:20:76: ee:dc:5d:fc:92:53:8f:b2:60:c7:cf:01:2e:a9:eb: c1:36:25:99:c8:00:bb:12:d9:da:35:3d:fe:dd:b1: 77:ee:77:fa:14:44:03:79:3e:71:81:10:65:ff:1d: 88:2e:3f:45:20:94:f4:2a:e4:69:d2:3c:c8:47:3a: e5:b1:d5:88:9b:35:4f:79:ca:a5:e6:70:c2:fb:16: 6d:1e:cb:02:13:cc:14:2a:b2:1a:32:cd:76:ad:8f: 50:1a:69:f9:cb:ed:85:be:16:be:50:67:43:a3:98: c0:75:22:2c:51:ab:66:04:e8:5f:ad:1a:ad:01:b0: cc:ac:03:73:39:55:80:fe:3e:b8:bb:01:b2:f3:6e: 5c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DE:F6:6A:70:44:38:CE:53:96:39:05:12:CE:FF:C6:13:44:79:43 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207821.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.79.11.0-147.79.13.255 147.79.15.0/24 Signature Algorithm: sha256WithRSAEncryption 07:b5:bf:a2:00:1f:1c:8a:28:22:7a:b0:e9:67:ae:2d:57:41: fd:7b:96:90:b8:ee:c6:24:26:6e:ee:cb:31:83:bb:25:26:f2: ee:60:a5:2e:ea:a5:e4:68:d8:a9:08:f2:b3:a9:24:62:38:95: 06:46:6f:68:77:87:26:eb:f7:3e:d2:3a:9b:fa:be:00:9a:7c: 13:a1:74:cc:bd:71:e5:65:d7:90:93:8b:76:75:58:b7:3d:29: 25:1f:38:6f:48:41:fe:62:c0:e4:8d:99:2e:40:dc:b7:e2:ff: 0a:08:52:65:b9:4f:f4:4b:91:3a:b2:65:b4:d1:27:b9:e6:e5: c6:dd:bc:cd:14:5a:88:02:b8:eb:80:2d:84:47:85:93:cc:47: b2:df:c9:6f:cb:6a:05:4e:99:e7:49:ae:37:3c:16:65:51:2e: 75:d7:8a:64:74:d2:47:e7:fe:57:20:90:ea:5e:36:e7:8a:84: f7:65:cb:a4:0b:8c:b3:0b:5f:c7:6e:fe:d2:41:a7:01:26:ce: 93:c1:1a:76:10:21:b7:f8:30:6c:71:cb:30:a6:e3:36:a5:e1: ae:99:20:34:89:bd:72:23:90:f4:75:ac:26:62:dd:8c:24:a8: 79:c0:a2:9d:87:fe:0e:86:05:48:c7:8d:23:8b:51:9f:39:4d: 9f:c2:5b:65 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIUU4nb1U+y+zOEcPlbzgbSSNS/hZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMDgxOTQ5MjlaFw0yNzAxMDcxOTU0MjlaMDMxMTAvBgNV BAMTKEUzREVGNjZBNzA0NDM4Q0U1Mzk2MzkwNTEyQ0VGRkM2MTM0NDc5NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKR/CNJncAZX1WQKb6OjI23A/H m4YK1WnbAofbvVWsfReh+lesTpuELgU+vZeK9UFTQQPJ7SKekFOrOfR5fBcrMYQc O21FJ/n3PQm7vnIa31wrks5Vce3BMg4BhjNKZPyhORmDIVDNoa6fOvzA/D8iHoUk X1kgdu7cXfySU4+yYMfPAS6p68E2JZnIALsS2do1Pf7dsXfud/oURAN5PnGBEGX/ HYguP0UglPQq5GnSPMhHOuWx1YibNU95yqXmcML7Fm0eywITzBQqshoyzXatj1Aa afnL7YW+Fr5QZ0OjmMB1IixRq2YE6F+tGq0BsMysA3M5VYD+Pri7AbLzblwXAgMB AAGjggIYMIICFDAdBgNVHQ4EFgQU4972anBEOM5TljkFEs7/xhNEeUMwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA3ODIxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACT TwsDBAGTTwwDBACTTw8wDQYJKoZIhvcNAQELBQADggEBAAe1v6IAHxyKKCJ6sOln ri1XQf17lpC47sYkJm7uyzGDuyUm8u5gpS7qpeRo2KkI8rOpJGI4lQZGb2h3hybr 9z7SOpv6vgCafBOhdMy9ceVl15CTi3Z1WLc9KSUfOG9IQf5iwOSNmS5A3Lfi/woI UmW5T/RLkTqyZbTRJ7nm5cbdvM0UWogCuOuALYRHhZPMR7LfyW/LagVOmedJrjc8 FmVRLnXXimR00kfn/lcgkOpeNueKhPdly6QLjLMLX8du/tJBpwEmzpPBGnYQIbf4 MGxxyzCm4zal4a6ZIDSJvXIjkPR1rCZi3YwkqHnAop2H/g6GBUjHjSOLUZ85TZ/C W2U= -----END CERTIFICATE-----Generated at Mon Jan 19 08:14:23 2026 by rpki-client