This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55201.roa File: AS55201.roa (raw, json) Hash identifier: 5o/GXR/uf6NZnHuybLyhuM8BHFrhNHMZXCzLT2YMWxg= Subject key identifier: 01:D2:FB:EA:A2:6E:CF:97:8D:10:40:99:DF:C6:35:31:35:74:3B:EC Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 539EDBD5FFD069DBE8460FB2A88C77917782F1F3 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55201.roa Signing time: Mon 19 Jan 2026 06:13:58 +0000 ROA not before: Mon 19 Jan 2026 06:08:58 +0000 ROA not after: Mon 18 Jan 2027 06:13:58 +0000 asID: 55201 IP address blocks: 96.62.0.0/19 maxlen: 24 96.62.37.0/24 maxlen: 24 96.62.45.0/24 maxlen: 24 96.62.47.0/24 maxlen: 24 96.62.48.0/23 maxlen: 24 96.62.50.0/23 maxlen: 24 96.62.52.0/23 maxlen: 24 96.62.54.0/24 maxlen: 24 96.62.55.0/24 maxlen: 24 96.62.56.0/24 maxlen: 24 96.62.57.0/24 maxlen: 24 96.62.58.0/24 maxlen: 24 96.62.60.0/23 maxlen: 24 96.62.62.0/23 maxlen: 24 96.62.79.0/24 maxlen: 24 96.62.80.0/23 maxlen: 24 96.62.82.0/23 maxlen: 24 96.62.85.0/24 maxlen: 24 96.62.86.0/23 maxlen: 24 96.62.88.0/24 maxlen: 24 96.62.90.0/23 maxlen: 24 96.62.92.0/23 maxlen: 24 96.62.94.0/23 maxlen: 24 96.62.98.0/23 maxlen: 24 96.62.135.0/24 maxlen: 24 96.62.149.0/24 maxlen: 24 96.62.150.0/24 maxlen: 24 96.62.151.0/24 maxlen: 24 143.14.78.0/24 maxlen: 24 143.14.254.0/24 maxlen: 24 148.135.216.0/23 maxlen: 24 148.135.218.0/23 maxlen: 24 148.135.224.0/23 maxlen: 24 148.135.226.0/23 maxlen: 24 148.135.232.0/23 maxlen: 24 148.135.234.0/23 maxlen: 24 148.135.240.0/23 maxlen: 24 148.135.242.0/23 maxlen: 24 148.135.248.0/23 maxlen: 24 148.135.250.0/23 maxlen: 24 150.241.146.0/23 maxlen: 24 150.241.148.0/23 maxlen: 24 150.241.150.0/23 maxlen: 24 150.241.152.0/23 maxlen: 24 150.241.154.0/23 maxlen: 24 150.241.156.0/23 maxlen: 24 150.241.158.0/23 maxlen: 24 150.241.160.0/23 maxlen: 24 150.241.162.0/23 maxlen: 24 150.241.164.0/23 maxlen: 24 150.241.166.0/23 maxlen: 24 150.241.168.0/23 maxlen: 24 150.241.170.0/23 maxlen: 24 150.241.172.0/23 maxlen: 24 150.241.176.0/23 maxlen: 24 150.241.178.0/23 maxlen: 24 150.241.180.0/23 maxlen: 24 150.241.182.0/23 maxlen: 24 150.241.184.0/23 maxlen: 24 150.241.186.0/23 maxlen: 24 150.241.188.0/23 maxlen: 24 150.241.190.0/23 maxlen: 24 167.148.97.0/24 maxlen: 24 167.148.98.0/24 maxlen: 24 167.148.104.0/24 maxlen: 24 167.148.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:9e:db:d5:ff:d0:69:db:e8:46:0f:b2:a8:8c:77:91:77:82:f1:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 19 06:08:58 2026 GMT Not After : Jan 18 06:13:58 2027 GMT Subject: CN=01D2FBEAA26ECF978D104099DFC6353135743BEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:dc:67:fd:4a:2f:27:ed:33:26:3c:d6:2a:dc: a6:ed:b3:4d:6d:b7:c9:05:b7:cb:6b:de:97:89:a4: fa:47:0c:fb:63:3b:91:f1:bd:18:05:f8:e1:91:b7: fe:fd:7e:c7:9e:36:f9:2d:e3:8a:69:19:b0:4b:c2: a0:f2:02:f7:69:4e:df:f6:6a:e1:a9:e6:59:df:36: bd:91:80:07:56:ae:ed:03:29:b3:88:2b:40:e6:24: be:4b:be:8a:ac:e8:9b:b9:ed:a1:e9:e4:69:f9:3a: 9c:c7:46:3f:91:a6:ac:77:d9:1a:bd:e1:81:22:01: c8:3c:4a:d2:35:38:93:dd:0a:7f:01:5c:c6:36:22: bd:f4:5e:97:59:eb:78:9d:a3:fe:45:d8:3d:e1:7a: fb:20:da:56:ef:f7:3d:56:1b:89:f2:79:1d:b8:9e: 08:eb:18:ff:a0:88:a3:e1:3e:52:96:85:a1:7b:8a: 82:84:4a:e6:d8:ae:80:4c:ec:7a:bb:ee:21:c2:be: f6:a1:7c:7b:61:d9:5b:e4:67:4b:5f:78:2e:01:3c: bb:03:35:9d:9c:63:51:1a:a5:ff:29:b2:1b:71:81: 51:4e:4f:0b:10:89:bd:9b:94:2c:4e:5f:9d:57:4e: 2f:f3:0e:f0:45:53:e0:6f:f0:3e:a6:a5:44:a9:d9: 42:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D2:FB:EA:A2:6E:CF:97:8D:10:40:99:DF:C6:35:31:35:74:3B:EC X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55201.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.62.0.0/19 96.62.37.0/24 96.62.45.0/24 96.62.47.0-96.62.58.255 96.62.60.0/22 96.62.79.0-96.62.83.255 96.62.85.0-96.62.88.255 96.62.90.0-96.62.95.255 96.62.98.0/23 96.62.135.0/24 96.62.149.0-96.62.151.255 143.14.78.0/24 143.14.254.0/24 148.135.216.0/22 148.135.224.0/22 148.135.232.0/22 148.135.240.0/22 148.135.248.0/22 150.241.146.0-150.241.173.255 150.241.176.0/20 167.148.97.0-167.148.98.255 167.148.104.0/24 167.148.112.0/24 Signature Algorithm: sha256WithRSAEncryption 02:77:c3:1a:88:ec:d3:94:15:03:94:7a:3a:4c:69:48:5c:c2: 06:c0:66:ba:31:74:31:ca:37:e8:8d:28:03:05:51:6a:df:47: 91:cc:c9:25:a7:21:3d:6c:79:d3:0c:2d:3c:cb:e8:2b:71:71: fe:81:7b:44:ea:1d:df:a2:0d:7b:2e:c4:85:f9:b0:98:9c:dd: c2:a7:df:ab:4a:cd:76:56:86:20:b1:27:1a:31:63:d1:73:9c: 5c:9e:29:37:42:66:13:4e:c1:fb:8b:85:45:7f:2b:38:b6:fa: 43:d5:d5:a2:b6:cc:f2:9c:8f:b2:00:87:9d:1a:e5:cd:d2:24: a4:35:bc:68:56:c2:4c:77:a9:70:6d:49:0c:00:4a:9e:a4:b7: 99:51:7c:5b:dd:c6:97:86:73:59:bd:48:af:7f:2e:1e:cd:c9: 78:16:a8:df:5d:c9:50:2c:bb:9a:d0:92:b5:b9:23:04:aa:65: 21:6e:dc:14:fa:0e:24:e9:e5:a1:fb:14:17:6a:b3:a0:6b:19: 72:e0:4f:63:b4:e9:e7:86:6a:92:0e:c8:cd:08:09:c6:42:bf: e6:61:31:cc:24:47:75:3b:2a:95:d1:32:cd:58:87:1b:38:eb: 7a:e8:75:b9:3a:85:d2:86:d6:e4:75:89:78:80:1f:dc:03:c6: 8c:2d:bd:90 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUU57b1f/QadvoRg+yqIx3kXeC8fMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMTkwNjA4NThaFw0yNzAxMTgwNjEzNThaMDMxMTAvBgNV BAMTKDAxRDJGQkVBQTI2RUNGOTc4RDEwNDA5OURGQzYzNTMxMzU3NDNCRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi3Gf9Si8n7TMmPNYq3Kbts01t t8kFt8tr3peJpPpHDPtjO5HxvRgF+OGRt/79fseeNvkt44ppGbBLwqDyAvdpTt/2 auGp5lnfNr2RgAdWru0DKbOIK0DmJL5Lvoqs6Ju57aHp5Gn5OpzHRj+Rpqx32Rq9 4YEiAcg8StI1OJPdCn8BXMY2Ir30XpdZ63ido/5F2D3hevsg2lbv9z1WG4nyeR24 ngjrGP+giKPhPlKWhaF7ioKESubYroBM7Hq77iHCvvahfHth2VvkZ0tfeC4BPLsD NZ2cY1Eapf8pshtxgVFOTwsQib2blCxOX51XTi/zDvBFU+Bv8D6mpUSp2UIjAgMB AAGjggLKMIICxjAdBgNVHQ4EFgQUAdL76qJuz5eNEECZ38Y1MTV0O+wwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNTUyMDEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwgd8GCCsGAQUFBwEHAQH/BIHPMIHMMIHJBAIAATCBwgME BWA+AAMEAGA+JQMEAGA+LTAMAwQAYD4vAwQAYD46AwQCYD48MAwDBABgPk8DBAJg PlAwDAMEAGA+VQMEAGA+WDAMAwQBYD5aAwQFYD5AAwQBYD5iAwQAYD6HMAwDBABg PpUDBANgPpADBACPDk4DBACPDv4DBAKUh9gDBAKUh+ADBAKUh+gDBAKUh/ADBAKU h/gwDAMEAZbxkgMEAZbxrAMEBJbxsDAMAwQAp5RhAwQAp5RiAwQAp5RoAwQAp5Rw MA0GCSqGSIb3DQEBCwUAA4IBAQACd8MaiOzTlBUDlHo6TGlIXMIGwGa6MXQxyjfo jSgDBVFq30eRzMklpyE9bHnTDC08y+grcXH+gXtE6h3fog17LsSF+bCYnN3Cp9+r Ss12VoYgsScaMWPRc5xcnik3QmYTTsH7i4VFfys4tvpD1dWitszynI+yAIedGuXN 0iSkNbxoVsJMd6lwbUkMAEqepLeZUXxb3caXhnNZvUivfy4ezcl4FqjfXclQLLua 0JK1uSMEqmUhbtwU+g4k6eWh+xQXarOgaxly4E9jtOnnhmqSDsjNCAnGQr/mYTHM JEd1OyqV0TLNWIcbOOt66HW5OoXShtbkdYl4gB/cA8aMLb2Q -----END CERTIFICATE-----Generated at Wed Jan 21 11:16:43 2026 by rpki-client