This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213737.roa File: AS213737.roa (raw, json) Hash identifier: 6ORFX7wZG6H7pVWz0OvX1223SoYOR5ZptQBSkbebZNc= Subject key identifier: 74:E1:0D:AF:0A:5F:3F:5F:95:90:36:AD:14:D7:82:7E:B9:4C:96:19 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: C76B24A3A3572BAB92DDF38A53B8E368F8E2CA Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213737.roa Signing time: Sun 25 Jan 2026 21:39:25 +0000 ROA not before: Sun 25 Jan 2026 21:34:25 +0000 ROA not after: Sun 24 Jan 2027 21:39:25 +0000 asID: 213737 IP address blocks: 155.117.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 01:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c7:6b:24:a3:a3:57:2b:ab:92:dd:f3:8a:53:b8:e3:68:f8:e2:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 25 21:34:25 2026 GMT Not After : Jan 24 21:39:25 2027 GMT Subject: CN=74E10DAF0A5F3F5F959036AD14D7827EB94C9619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:16:48:67:94:2c:5e:15:3a:7e:b8:ba:9d: 2d:5d:88:69:45:6d:53:af:34:a1:af:8a:b1:4c:d8: 0e:6a:04:06:af:b8:c1:38:32:7c:3a:68:d6:46:63: ec:2d:79:67:90:6f:85:ad:da:72:23:f5:38:66:f2: 87:d5:db:8f:1a:84:79:49:6e:cc:12:ac:20:a4:33: 05:e2:44:6b:38:c0:72:f6:86:d6:16:3e:f0:a1:0c: f8:37:21:85:22:fd:81:03:64:5c:e8:bd:45:b8:13: 69:09:9f:23:19:f6:02:b5:a7:8b:bd:63:09:70:9d: d5:9c:e1:37:2b:8d:72:40:f4:0f:2e:3d:44:f6:ab: eb:bf:9d:71:a2:54:71:b3:9c:7e:e3:04:cd:a2:d0: 2b:82:61:1d:2c:1d:8a:64:1a:cb:e2:46:50:6c:e7: 59:5d:da:fd:7e:d1:fd:f3:46:7b:79:f6:5d:3c:ca: 2c:01:4d:82:c8:a0:1a:ef:44:00:9b:1f:c0:f4:b6: 05:bf:30:7a:31:35:2b:3c:30:56:92:e1:4c:8c:43: 3e:76:b3:63:01:7c:f4:9b:29:75:ee:06:ec:9c:6d: 5f:ac:ad:24:0d:78:11:28:84:1a:4a:14:48:c7:58: a1:48:ed:36:66:8c:e6:2f:da:c7:3d:b0:33:08:87: 19:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E1:0D:AF:0A:5F:3F:5F:95:90:36:AD:14:D7:82:7E:B9:4C:96:19 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.117.202.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:a6:a7:5c:41:34:45:5c:07:ce:b2:7d:88:79:dd:cc:62:12: 77:0c:c4:1d:56:de:2a:aa:69:9a:10:aa:e2:e0:6d:f5:70:a5: f2:70:61:f4:69:92:ac:52:68:f1:b9:fc:5b:9a:74:ca:01:90: 93:54:fa:86:c1:20:58:52:83:64:40:f4:f8:b8:83:2e:3e:21: 1f:6d:79:ed:26:a5:4f:bb:5f:15:18:08:05:f7:8f:32:0e:be: 32:fc:80:ea:4c:39:ec:33:44:ad:5f:c5:3b:15:d7:f6:dc:16: 28:4a:55:05:e9:85:a5:85:20:da:a1:45:ff:08:00:fe:3f:2b: 0e:52:7f:b8:4e:af:dc:1b:23:3f:53:63:e0:02:a4:2d:08:56: 0c:61:d6:2e:26:30:ae:da:53:b7:a0:19:09:93:47:bd:2c:e5: 08:8c:9e:f7:85:02:e7:07:d1:c8:a0:86:2e:4c:20:13:e2:e3: 2c:f8:3c:9e:ad:43:82:bc:27:3f:48:0f:db:47:59:dc:91:b3: 24:ac:21:29:a9:3b:31:ec:6a:76:6d:72:07:94:6a:9f:3d:4e: 5d:e0:d1:fa:67:ce:95:54:6d:b9:58:88:cf:8c:02:46:c1:cd: 88:0a:a4:3a:f7:22:b5:eb:d3:5f:ff:5d:04:f0:0b:46:02:d9: 0a:eb:21:ce -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUAMdrJKOjVyurkt3zilO442j44sowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMjUyMTM0MjVaFw0yNzAxMjQyMTM5MjVaMDMxMTAvBgNV BAMTKDc0RTEwREFGMEE1RjNGNUY5NTkwMzZBRDE0RDc4MjdFQjk0Qzk2MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5QBZIZ5QsXhU6fri6nS1diGlF bVOvNKGvirFM2A5qBAavuME4Mnw6aNZGY+wteWeQb4Wt2nIj9Thm8ofV248ahHlJ bswSrCCkMwXiRGs4wHL2htYWPvChDPg3IYUi/YEDZFzovUW4E2kJnyMZ9gK1p4u9 YwlwndWc4TcrjXJA9A8uPUT2q+u/nXGiVHGznH7jBM2i0CuCYR0sHYpkGsviRlBs 51ld2v1+0f3zRnt59l08yiwBTYLIoBrvRACbH8D0tgW/MHoxNSs8MFaS4UyMQz52 s2MBfPSbKXXuBuycbV+srSQNeBEohBpKFEjHWKFI7TZmjOYv2sc9sDMIhxmdAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUdOENrwpfP1+VkDatFNeCfrlMlhkwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjEzNzM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAm3XK MA0GCSqGSIb3DQEBCwUAA4IBAQCNpqdcQTRFXAfOsn2Ied3MYhJ3DMQdVt4qqmma EKri4G31cKXycGH0aZKsUmjxufxbmnTKAZCTVPqGwSBYUoNkQPT4uIMuPiEfbXnt JqVPu18VGAgF948yDr4y/IDqTDnsM0StX8U7Fdf23BYoSlUF6YWlhSDaoUX/CAD+ PysOUn+4Tq/cGyM/U2PgAqQtCFYMYdYuJjCu2lO3oBkJk0e9LOUIjJ73hQLnB9HI oIYuTCAT4uMs+DyerUOCvCc/SA/bR1nckbMkrCEpqTsx7Gp2bXIHlGqfPU5d4NH6 Z86VVG25WIjPjAJGwc2ICqQ69yK169Nf/10E8AtGAtkK6yHO -----END CERTIFICATE-----Generated at Thu Feb 5 08:22:50 2026 by rpki-client