This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209630.roa File: AS209630.roa (raw, json) Hash identifier: VqXV+QsS/E2gVMaZu3UMbXTCF3WTYBz9FWu8jdQKknI= Subject key identifier: 56:BE:54:B0:A9:C7:48:4D:B6:52:89:9C:DA:5A:56:B4:03:B9:75:11 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 0365D3F61899683BDDA27A00998082B7F0EFAA03 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209630.roa Signing time: Fri 09 Jan 2026 21:26:44 +0000 ROA not before: Fri 09 Jan 2026 21:21:44 +0000 ROA not after: Fri 08 Jan 2027 21:26:44 +0000 asID: 209630 IP address blocks: 167.148.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:65:d3:f6:18:99:68:3b:dd:a2:7a:00:99:80:82:b7:f0:ef:aa:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 9 21:21:44 2026 GMT Not After : Jan 8 21:26:44 2027 GMT Subject: CN=56BE54B0A9C7484DB652899CDA5A56B403B97511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9d:9d:9e:46:e7:0b:f0:d5:6a:46:8f:07:7f: 78:51:b5:fd:bb:79:b7:33:44:a3:83:ba:f3:5a:31: 57:f7:cb:4b:92:a5:d4:9c:6d:7c:fd:02:5e:a1:e6: 00:65:a3:c0:21:17:c1:ad:4a:6e:2d:b7:ca:7e:1e: ad:c7:c5:0d:36:63:3c:fc:37:10:91:e5:c2:c8:48: 4c:1b:4b:5e:74:83:75:2c:62:01:77:86:32:ad:bb: 42:03:21:dd:ef:70:94:c4:7e:9d:e7:00:28:d6:b2: bc:16:16:9e:bf:20:e9:93:89:6b:98:e4:16:d0:8d: 83:21:d3:e9:87:17:85:e9:32:16:ab:97:f5:2b:99: f9:fb:4c:ee:35:1d:ea:aa:e9:c1:73:ab:87:ad:59: dd:b3:34:04:ee:52:9c:3a:19:5c:6b:cd:82:96:05: 16:3f:37:8b:c6:21:00:8b:e7:f9:a7:04:83:cd:95: 69:ea:b6:cf:e1:20:a2:67:5e:7d:99:90:12:23:60: e0:10:e7:25:c0:78:2d:ed:d4:4b:9b:7f:e4:87:77: 2e:67:d4:31:28:3f:7d:5b:1f:fe:32:2c:cd:83:9a: 99:7f:b5:ed:a2:9a:21:80:66:eb:af:0d:c7:42:c1: bb:1a:77:38:20:af:d4:ea:eb:ef:87:8f:54:1b:3a: ae:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BE:54:B0:A9:C7:48:4D:B6:52:89:9C:DA:5A:56:B4:03:B9:75:11 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS209630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.148.2.0/24 Signature Algorithm: sha256WithRSAEncryption 86:39:de:59:a4:ae:98:ca:4e:de:2f:93:08:8f:96:b1:13:d8: c1:5d:2e:25:53:e3:fe:34:cf:03:27:56:7e:77:5b:3d:cd:cb: be:7e:2f:50:bd:a2:8a:70:13:da:48:53:58:1b:88:61:b6:69: fb:9a:61:28:38:7d:33:08:4a:9a:3b:4c:a6:8a:f1:36:26:aa: ff:5f:e4:36:de:f8:54:a6:50:37:2a:67:1f:58:8f:3a:fc:24: 69:d9:6b:86:9e:34:42:da:44:5d:af:a9:3c:20:48:d4:e9:9e: eb:77:38:87:82:f6:4a:aa:42:fb:ce:f9:24:85:5d:91:5b:59: 37:ad:45:64:9a:a4:65:3f:3e:96:82:a8:70:e6:e1:fb:8f:e2: 25:55:7b:de:35:2b:22:d5:9b:26:29:95:1d:fe:9a:08:72:1a: e2:84:3f:71:ad:f0:5f:00:a3:12:7e:b5:86:e3:e8:e8:98:18: 31:d0:0c:4e:47:24:e1:95:c6:0e:6b:34:53:54:c3:96:37:f4: 5a:a3:25:97:14:46:b1:6f:c6:6d:c7:71:d6:29:c8:25:76:cc: 48:91:45:a6:01:6c:6e:d5:f3:ce:51:5a:c7:3f:16:78:ee:e0: 6c:d5:11:f5:07:88:1b:c2:f7:6f:4b:74:23:56:ef:8f:81:ae: d3:2c:21:70 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUA2XT9hiZaDvdonoAmYCCt/DvqgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMDkyMTIxNDRaFw0yNzAxMDgyMTI2NDRaMDMxMTAvBgNV BAMTKDU2QkU1NEIwQTlDNzQ4NERCNjUyODk5Q0RBNUE1NkI0MDNCOTc1MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCunZ2eRucL8NVqRo8Hf3hRtf27 ebczRKODuvNaMVf3y0uSpdScbXz9Al6h5gBlo8AhF8GtSm4tt8p+Hq3HxQ02Yzz8 NxCR5cLISEwbS150g3UsYgF3hjKtu0IDId3vcJTEfp3nACjWsrwWFp6/IOmTiWuY 5BbQjYMh0+mHF4XpMharl/Urmfn7TO41Heqq6cFzq4etWd2zNATuUpw6GVxrzYKW BRY/N4vGIQCL5/mnBIPNlWnqts/hIKJnXn2ZkBIjYOAQ5yXAeC3t1Eubf+SHdy5n 1DEoP31bH/4yLM2Dmpl/te2imiGAZuuvDcdCwbsadzggr9Tq6++Hj1QbOq6/AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUVr5UsKnHSE22Uomc2lpWtAO5dREwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA5NjMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp5QC MA0GCSqGSIb3DQEBCwUAA4IBAQCGOd5ZpK6Yyk7eL5MIj5axE9jBXS4lU+P+NM8D J1Z+d1s9zcu+fi9QvaKKcBPaSFNYG4hhtmn7mmEoOH0zCEqaO0ymivE2Jqr/X+Q2 3vhUplA3KmcfWI86/CRp2WuGnjRC2kRdr6k8IEjU6Z7rdziHgvZKqkL7zvkkhV2R W1k3rUVkmqRlPz6Wgqhw5uH7j+IlVXveNSsi1ZsmKZUd/poIchrihD9xrfBfAKMS frWG4+jomBgx0AxORyThlcYOazRTVMOWN/RaoyWXFEaxb8Ztx3HWKcgldsxIkUWm AWxu1fPOUVrHPxZ47uBs1RH1B4gbwvdvS3QjVu+Pga7TLCFw -----END CERTIFICATE-----Generated at Mon Jan 19 08:13:42 2026 by rpki-client