This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS29066.roa File: AS29066.roa (raw, json) Hash identifier: 3sI+OMPnSJGGx56j2CpNbK6+hsW2OxFqSvjJ4DlYa9I= Subject key identifier: D4:98:3A:E0:51:73:E2:E7:00:CB:C9:C5:40:82:36:48:B9:BE:32:B4 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 557B24A9D3D91977547937BA4B9D97CE082887D8 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS29066.roa Signing time: Thu 15 Jan 2026 14:22:36 +0000 ROA not before: Thu 15 Jan 2026 14:17:36 +0000 ROA not after: Thu 14 Jan 2027 14:22:36 +0000 asID: 29066 IP address blocks: 193.7.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:7b:24:a9:d3:d9:19:77:54:79:37:ba:4b:9d:97:ce:08:28:87:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Jan 15 14:17:36 2026 GMT Not After : Jan 14 14:22:36 2027 GMT Subject: CN=D4983AE05173E2E700CBC9C540823648B9BE32B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:22:e3:65:4b:20:5b:67:00:8e:eb:e4:a5:7a: e9:e5:94:31:3f:36:0a:86:70:4d:17:af:bc:e3:65: ac:c2:92:25:82:cd:be:b8:bb:06:71:fc:3e:fd:5b: e0:97:a7:c4:ab:f0:fc:78:ce:8c:3a:0a:44:83:cb: 9d:14:ba:7c:80:7e:48:b7:38:48:4e:5d:52:c2:bc: 60:20:cc:8f:55:54:d8:17:98:f3:fb:42:a7:56:42: 3c:cc:3a:4a:85:eb:19:90:af:a2:74:43:b7:41:b7: ee:a0:a1:3f:cd:83:98:7c:33:02:bd:4f:82:ef:f1: 2c:a1:c2:c7:99:24:d5:67:f4:06:13:e1:55:29:15: ed:36:91:92:cc:b9:27:4e:a8:03:b9:17:ed:67:ac: 76:ba:64:a5:e6:ee:6d:04:13:01:ee:83:03:d5:c7: a4:40:8e:a0:73:5f:ed:77:c6:00:37:d9:00:7f:8b: f7:46:d9:6a:df:3c:ba:49:b7:e9:ba:5a:ee:33:e3: 51:93:94:3b:b1:6e:07:17:83:ca:09:28:f7:6c:d9: 63:29:2c:74:2c:d4:e4:7d:d6:46:c5:81:ba:29:c7: 45:f8:31:f0:db:8b:66:05:48:21:7d:4e:be:16:8a: c2:ad:db:cf:08:f6:e0:70:f9:08:d7:05:1b:6a:89: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:98:3A:E0:51:73:E2:E7:00:CB:C9:C5:40:82:36:48:B9:BE:32:B4 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS29066.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.7.203.0/24 Signature Algorithm: sha256WithRSAEncryption 20:1a:33:93:69:39:2b:b5:ac:51:5e:39:15:51:91:0d:13:cf: ff:80:16:a7:d2:9b:b2:ab:66:05:0e:12:bd:cd:c4:03:25:04: 0a:6a:43:e5:53:0c:da:29:50:ad:f5:58:5b:ea:99:c8:c2:64: 84:36:2e:c5:f4:86:c8:51:03:b5:5c:2a:30:4a:7e:0f:dc:b1: 02:e1:f6:d2:e3:a1:1d:24:94:14:c4:1e:d4:8e:bc:fd:6b:4f: 66:b8:6d:9e:76:8d:e3:73:a0:c3:cb:37:cb:25:69:44:00:ee: 3f:2a:8c:29:18:1f:15:ab:c3:46:38:06:c6:12:bf:0d:63:9f: a9:35:d7:61:e3:36:84:16:5c:95:16:31:79:0a:15:0d:a9:86: 05:6a:8a:21:a0:1b:55:01:24:a4:19:f1:51:30:5f:22:3c:b6: 8f:86:02:0f:3c:f0:f5:a1:fa:60:30:9f:87:5a:1b:93:c1:b4: b8:2f:06:26:ae:cf:2f:c8:f6:f8:66:e1:98:7a:37:8b:ca:c7: 71:51:78:77:fb:87:12:d5:e7:0e:71:70:06:d1:6e:43:22:e3: 5c:ef:6f:00:ac:c1:c7:39:d9:11:c6:d4:34:b0:38:6a:2d:1a: f9:51:90:94:f6:20:87:4d:91:be:a3:b7:14:84:47:13:ff:eb: 17:97:d7:ec -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUVXskqdPZGXdUeTe6S52Xzggoh9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNjAxMTUxNDE3MzZaFw0yNzAxMTQxNDIyMzZaMDMxMTAvBgNV BAMTKEQ0OTgzQUUwNTE3M0UyRTcwMENCQzlDNTQwODIzNjQ4QjlCRTMyQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpIuNlSyBbZwCO6+SleunllDE/ NgqGcE0Xr7zjZazCkiWCzb64uwZx/D79W+CXp8Sr8Px4zow6CkSDy50UunyAfki3 OEhOXVLCvGAgzI9VVNgXmPP7QqdWQjzMOkqF6xmQr6J0Q7dBt+6goT/Ng5h8MwK9 T4Lv8SyhwseZJNVn9AYT4VUpFe02kZLMuSdOqAO5F+1nrHa6ZKXm7m0EEwHugwPV x6RAjqBzX+13xgA32QB/i/dG2WrfPLpJt+m6Wu4z41GTlDuxbgcXg8oJKPds2WMp LHQs1OR91kbFgbopx0X4MfDbi2YFSCF9Tr4WisKt288I9uBw+QjXBRtqiT49AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQU1Jg64FFz4ucAy8nFQII2SLm+MrQwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjkwNjYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBB8sw DQYJKoZIhvcNAQELBQADggEBACAaM5NpOSu1rFFeORVRkQ0Tz/+AFqfSm7KrZgUO Er3NxAMlBApqQ+VTDNopUK31WFvqmcjCZIQ2LsX0hshRA7VcKjBKfg/csQLh9tLj oR0klBTEHtSOvP1rT2a4bZ52jeNzoMPLN8slaUQA7j8qjCkYHxWrw0Y4BsYSvw1j n6k112HjNoQWXJUWMXkKFQ2phgVqiiGgG1UBJKQZ8VEwXyI8to+GAg888PWh+mAw n4daG5PBtLgvBiauzy/I9vhm4Zh6N4vKx3FReHf7hxLV5w5xcAbRbkMi41zvbwCs wcc52RHG1DSwOGotGvlRkJT2IIdNkb6jtxSERxP/6xeX1+w= -----END CERTIFICATE-----Generated at Mon Jan 19 15:31:07 2026 by rpki-client