This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS135391.roa
File: AS135391.roa (raw, json)
Hash identifier: EfRnZV9+BfpGZ3q0TGsue/jptuKEIsVA1o2LHtEn3x8=
Subject key identifier: 10:80:69:11:C2:BB:FD:CC:D6:0A:AB:2C:2E:70:8B:45:E3:7B:04:F0
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 064330780FD25062BA7A25D881CD5CDCCD9C8CB9
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS135391.roa
Signing time: Wed 04 Feb 2026 12:57:32 +0000
ROA not before: Wed 04 Feb 2026 12:52:32 +0000
ROA not after: Wed 03 Feb 2027 12:57:32 +0000
asID: 135391
IP address blocks: 193.187.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:43:30:78:0f:d2:50:62:ba:7a:25:d8:81:cd:5c:dc:cd:9c:8c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Feb 4 12:52:32 2026 GMT
Not After : Feb 3 12:57:32 2027 GMT
Subject: CN=10806911C2BBFDCCD60AAB2C2E708B45E37B04F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:8f:4b:e4:e2:6e:a8:e5:12:31:ec:2b:ac:
f7:b6:af:c8:00:f5:81:1e:51:9a:3f:31:64:59:54:
82:d4:7d:87:36:30:51:ff:4e:d8:28:8a:51:f4:38:
c4:ff:94:3d:01:4f:a3:a4:eb:eb:17:ed:d6:47:3d:
e6:97:a8:4f:67:40:8e:02:67:6a:26:30:a4:30:c4:
98:f0:ee:bf:30:fe:f1:65:4b:88:6a:30:db:84:72:
53:85:6a:10:bd:64:bd:6c:17:3f:94:b7:de:64:f5:
3b:ec:63:3d:cc:7d:6e:fe:b2:9f:c2:4c:da:8e:95:
81:7f:73:2e:f9:33:da:09:25:42:26:5f:ea:e5:33:
dc:90:77:b7:fe:c8:5c:d9:82:04:6d:6f:8e:13:5c:
de:10:0e:1f:a8:f9:33:93:73:c3:ad:8c:c1:85:6a:
15:49:79:b4:ff:50:d4:23:49:10:51:49:b2:e8:4e:
3f:cf:95:aa:ad:3e:ba:8b:8d:22:08:2f:58:ec:ff:
89:b4:0c:f6:79:8d:c7:d3:01:f3:3f:bb:91:23:ef:
98:c5:62:1f:d1:97:8c:42:3f:92:67:28:d5:ff:28:
bd:d7:38:b0:d7:8b:04:59:32:93:bc:4c:9d:ed:88:
57:a6:6e:d4:71:75:9a:23:2b:f3:dc:cf:b0:6c:6d:
e4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:80:69:11:C2:BB:FD:CC:D6:0A:AB:2C:2E:70:8B:45:E3:7B:04:F0
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS135391.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.133.0/24
Signature Algorithm: sha256WithRSAEncryption
37:66:9f:36:41:27:4c:61:17:81:30:42:96:9b:67:90:a8:52:
ee:82:43:d9:07:e1:87:03:5c:8e:51:e0:ca:7d:94:6d:5b:ff:
98:38:93:be:4d:64:67:15:eb:2d:b1:1b:52:f4:66:96:53:79:
d0:9b:0f:11:de:c8:eb:11:5c:0f:b1:3d:31:6c:a7:27:53:81:
d2:1f:23:78:6f:33:82:8e:2b:28:60:6b:1f:20:03:0b:fe:3f:
e1:a5:1e:2a:ee:aa:c9:18:a3:e7:82:02:61:b3:71:44:a1:a9:
13:21:b9:a3:c3:f6:be:db:25:ed:92:d3:52:2a:de:ac:98:6f:
5e:68:06:41:30:8f:66:81:da:b2:a2:58:9c:ba:2e:35:49:b0:
57:22:ae:b4:6d:dd:fe:e0:5a:48:eb:cd:4b:20:54:b6:55:d5:
2e:60:29:a1:a8:96:f5:0d:48:3e:58:b1:76:ed:0a:47:ac:21:
2e:bc:84:45:40:d6:29:45:00:12:0c:ba:84:9c:f7:73:e9:6b:
dc:ae:2e:25:88:6f:9a:23:ed:4b:d3:16:cb:a8:11:39:5a:be:
4b:3c:d8:f8:73:65:f1:86:d4:9a:00:1e:d8:79:1c:e3:1d:ac:
ed:ac:6a:3c:dc:e9:c4:48:f8:45:4e:f7:d3:b6:6b:6e:8e:c6:
85:4b:44:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 13:59:05 2026 by rpki-client