This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210173.roa File: AS210173.roa (raw, json) Hash identifier: lLFDXA7AZONiVdXT19zXI677RT2tvpg9mGWzsU04s8k= Subject key identifier: 83:E3:85:A7:A3:B4:43:3C:BB:F8:C0:B2:D8:F7:9A:9F:2B:D5:F8:50 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 5CEB0D505AE1DCAA7CE88AB6263A0E8CAE03983B Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210173.roa Signing time: Mon 02 Feb 2026 13:58:37 +0000 ROA not before: Mon 02 Feb 2026 13:53:37 +0000 ROA not after: Mon 01 Feb 2027 13:58:37 +0000 asID: 210173 IP address blocks: 146.103.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:eb:0d:50:5a:e1:dc:aa:7c:e8:8a:b6:26:3a:0e:8c:ae:03:98:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Feb 2 13:53:37 2026 GMT Not After : Feb 1 13:58:37 2027 GMT Subject: CN=83E385A7A3B4433CBBF8C0B2D8F79A9F2BD5F850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:04:ae:18:94:53:cc:09:d4:86:1a:7a:cf:bd: 7b:a7:85:d6:61:a1:49:f3:8b:43:5a:1d:8f:6c:5f: ca:99:d3:3e:01:75:c1:96:4a:2b:d9:54:7f:95:3a: 1b:ed:92:fb:3d:8d:d0:42:2f:36:84:b1:0f:ba:e7: 88:81:d7:12:71:ee:ad:14:22:92:8e:1a:7b:8b:56: e5:96:1c:0d:2b:88:10:e5:60:5c:72:2d:ea:bf:91: f3:b4:6e:68:49:06:88:ff:1f:64:c5:09:9b:20:67: 1d:3e:76:6b:1c:c1:6f:1a:2a:c3:9c:2d:c3:50:ab: bf:31:c3:82:56:d6:e1:5b:e0:8c:ea:16:91:2f:12: ab:81:04:f8:86:49:2a:d0:13:2d:5c:9c:de:6d:df: 42:29:42:42:21:53:27:42:c2:06:7b:e1:ac:9e:2a: ba:e1:40:14:ca:0c:95:04:5a:ad:51:6a:0a:23:56: 4e:d2:0f:68:9e:12:49:5f:30:f7:96:5a:76:40:a6: d8:5b:bb:b2:0f:b8:3c:58:80:e3:93:ee:40:82:ab: ff:ac:d7:42:d6:b1:6d:df:77:45:e9:81:32:b0:51: 98:0e:56:20:d2:e1:3e:b9:9e:b5:f7:8b:e0:78:b9: d6:a4:0d:92:74:fd:16:38:71:c5:d8:11:cf:dc:08: b4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E3:85:A7:A3:B4:43:3C:BB:F8:C0:B2:D8:F7:9A:9F:2B:D5:F8:50 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS210173.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.103.59.0/24 Signature Algorithm: sha256WithRSAEncryption 41:f3:4e:e8:26:70:b7:15:27:af:b0:b6:9b:a5:9a:d5:42:72: 95:0e:02:de:a3:18:91:62:35:ca:08:41:cd:6b:21:9f:f5:20: fc:cd:da:8e:92:49:d2:a9:e6:3d:2c:41:82:a3:ac:db:7c:c8: 7e:40:85:fb:c5:f1:d4:d8:d4:03:4d:6c:3a:35:07:15:43:a9: 8a:81:5e:f4:da:8f:c6:51:2d:04:45:15:82:61:2f:0c:21:83: cd:47:da:b6:88:13:66:e6:1e:0a:a5:0b:d3:dc:1e:f5:ce:53: 04:b1:2f:d3:db:f7:d0:87:6c:47:c4:b2:7b:d8:36:f4:6b:7f: 90:e9:57:ea:08:07:76:83:f7:39:13:83:29:9f:6e:d6:72:1e: 6f:49:5d:2a:32:e9:ed:84:2a:e8:83:57:34:6f:24:5e:a7:20: ec:dc:f5:e7:60:d1:f8:bb:7d:7a:92:6c:3e:ef:7f:a5:77:f7: c5:db:63:2d:60:a8:f6:48:05:8e:39:8f:5f:f3:2d:c7:14:07: 6a:2a:26:73:83:3c:fe:24:35:ac:55:59:d8:68:e0:74:bc:1e: ae:17:1f:d8:0a:2e:87:c1:05:a9:81:16:d5:0e:4b:ef:50:2f: 99:c6:d9:ea:ce:84:b8:da:62:2d:28:b4:2d:57:8a:1a:b5:7b: 85:76:cb:01 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUXOsNUFrh3Kp86Iq2JjoOjK4DmDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAyMDIxMzUzMzdaFw0yNzAyMDExMzU4MzdaMDMxMTAvBgNV BAMTKDgzRTM4NUE3QTNCNDQzM0NCQkY4QzBCMkQ4Rjc5QTlGMkJENUY4NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjBK4YlFPMCdSGGnrPvXunhdZh oUnzi0NaHY9sX8qZ0z4BdcGWSivZVH+VOhvtkvs9jdBCLzaEsQ+654iB1xJx7q0U IpKOGnuLVuWWHA0riBDlYFxyLeq/kfO0bmhJBoj/H2TFCZsgZx0+dmscwW8aKsOc LcNQq78xw4JW1uFb4IzqFpEvEquBBPiGSSrQEy1cnN5t30IpQkIhUydCwgZ74aye KrrhQBTKDJUEWq1RagojVk7SD2ieEklfMPeWWnZApthbu7IPuDxYgOOT7kCCq/+s 10LWsW3fd0XpgTKwUZgOViDS4T65nrX3i+B4udakDZJ0/RY4ccXYEc/cCLQtAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUg+OFp6O0Qzy7+MCy2PeanyvV+FAwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjEwMTczLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkmc7 MA0GCSqGSIb3DQEBCwUAA4IBAQBB807oJnC3FSevsLabpZrVQnKVDgLeoxiRYjXK CEHNayGf9SD8zdqOkknSqeY9LEGCo6zbfMh+QIX7xfHU2NQDTWw6NQcVQ6mKgV70 2o/GUS0ERRWCYS8MIYPNR9q2iBNm5h4KpQvT3B71zlMEsS/T2/fQh2xHxLJ72Db0 a3+Q6VfqCAd2g/c5E4Mpn27Wch5vSV0qMunthCrog1c0byRepyDs3PXnYNH4u316 kmw+73+ld/fF22MtYKj2SAWOOY9f8y3HFAdqKiZzgzz+JDWsVVnYaOB0vB6uFx/Y Ci6HwQWpgRbVDkvvUC+ZxtnqzoS42mItKLQtV4oatXuFdssB -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:46 2026 by rpki-client