This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS137235.roa File: AS137235.roa (raw, json) Hash identifier: QhN5AK6wtSWa2EV9saXRVML6Hofnd9RvhzTl9Ty9q6k= Subject key identifier: 66:F4:F2:50:49:97:CE:A7:DC:C4:DD:70:12:C3:06:3F:AD:D8:81:77 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 3E0D28E8A2265A6C55AA1E9F203B03EA9DE6C1C1 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS137235.roa Signing time: Wed 04 Feb 2026 12:57:35 +0000 ROA not before: Wed 04 Feb 2026 12:52:35 +0000 ROA not after: Wed 03 Feb 2027 12:57:35 +0000 asID: 137235 IP address blocks: 176.53.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:0d:28:e8:a2:26:5a:6c:55:aa:1e:9f:20:3b:03:ea:9d:e6:c1:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:35 2026 GMT Not After : Feb 3 12:57:35 2027 GMT Subject: CN=66F4F2504997CEA7DCC4DD7012C3063FADD88177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9e:a3:b6:4c:d2:e9:e5:94:f4:70:a3:dd:e3: 44:5d:e7:36:d8:21:c3:3c:24:bf:7d:8e:86:e1:fa: 86:f0:8f:e2:23:e9:e8:b1:bd:21:62:bf:25:4c:71: 05:bd:e4:a2:c1:1b:a6:0c:a5:3a:0b:66:36:f6:ca: eb:39:f5:b2:2a:0f:b0:59:42:42:2f:e2:f2:90:19: 03:ca:99:c6:f2:ea:86:04:ae:c7:6c:d0:92:be:fc: af:1d:2e:e8:90:cc:7b:f1:be:b9:cb:09:96:64:a2: 63:da:87:4f:dc:62:d9:f8:1a:ef:b0:70:90:c4:c2: 5a:98:f4:92:2f:10:81:90:2e:93:7f:f4:1e:79:54: 34:68:dd:68:d0:f4:48:65:52:a9:2e:a0:e8:1b:db: 0d:17:3a:46:e1:93:70:3d:45:8b:dc:36:8d:85:30: 3c:e8:70:23:ee:e4:9b:5f:49:1e:d3:4e:a8:99:4b: 1e:18:f4:93:6a:c0:d8:4a:98:9c:63:80:57:2e:13: 12:f9:c8:dd:14:cc:ac:12:c6:1c:c1:47:ce:da:9a: c4:db:2c:68:4c:57:37:49:fc:df:ef:53:71:75:a6: 55:8d:86:82:c8:06:88:91:66:2b:eb:83:5e:a0:c3: 14:ef:60:54:74:fc:f4:93:53:b7:e3:e9:82:db:5b: 3e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F4:F2:50:49:97:CE:A7:DC:C4:DD:70:12:C3:06:3F:AD:D8:81:77 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS137235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.53.168.0/24 Signature Algorithm: sha256WithRSAEncryption ad:b2:51:28:82:f6:eb:ed:b2:61:f8:c9:12:df:cb:6a:38:9c: 02:b5:79:ae:38:c5:cc:f5:8a:f2:fe:64:a6:50:7b:a4:41:46: ff:af:3d:95:46:04:b4:46:60:9c:c6:9e:ae:31:59:ed:95:67: e9:16:82:f1:ab:db:26:df:c1:f0:1f:80:9a:75:c0:ab:00:77: f5:86:d2:e9:ab:ae:38:5c:5b:a3:54:a9:6c:b6:b7:02:c8:39: 51:24:a3:b1:81:b3:1a:7d:20:b0:e2:99:c6:d8:9b:ae:66:92: 33:3a:ad:37:d9:6c:b4:db:af:0b:44:0c:93:fe:47:2f:e4:26: b4:3c:bc:07:8d:e1:54:f8:15:7f:25:e4:0d:7c:41:16:da:60: 07:c8:0f:94:eb:06:f9:5b:24:48:be:b6:c3:5f:fe:cf:fc:86: 5f:18:7b:11:18:af:91:bd:d8:35:74:83:35:3c:98:7e:6c:f4: 29:94:74:a5:0f:32:9f:0d:77:fd:1f:bf:71:7b:2c:62:20:8b: 5d:90:0b:bb:82:73:1a:b8:23:9c:aa:28:d7:03:61:af:f8:87: 2c:1c:cd:84:78:d5:06:b6:54:cd:d2:c6:0b:9f:7d:ad:7c:10: 5f:08:78:75:2a:bd:51:06:04:d2:d3:8f:b9:4c:c0:99:f7:09: 81:2d:3f:ca -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUPg0o6KImWmxVqh6fIDsD6p3mwcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyMzVaFw0yNzAyMDMxMjU3MzVaMDMxMTAvBgNV BAMTKDY2RjRGMjUwNDk5N0NFQTdEQ0M0REQ3MDEyQzMwNjNGQUREODgxNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2nqO2TNLp5ZT0cKPd40Rd5zbY IcM8JL99jobh+obwj+Ij6eixvSFivyVMcQW95KLBG6YMpToLZjb2yus59bIqD7BZ QkIv4vKQGQPKmcby6oYErsds0JK+/K8dLuiQzHvxvrnLCZZkomPah0/cYtn4Gu+w cJDEwlqY9JIvEIGQLpN/9B55VDRo3WjQ9EhlUqkuoOgb2w0XOkbhk3A9RYvcNo2F MDzocCPu5JtfSR7TTqiZSx4Y9JNqwNhKmJxjgFcuExL5yN0UzKwSxhzBR87amsTb LGhMVzdJ/N/vU3F1plWNhoLIBoiRZivrg16gwxTvYFR0/PSTU7fj6YLbWz6/AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUZvTyUEmXzqfcxN1wEsMGP63YgXcwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMTM3MjM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDWo MA0GCSqGSIb3DQEBCwUAA4IBAQCtslEogvbr7bJh+MkS38tqOJwCtXmuOMXM9Yry /mSmUHukQUb/rz2VRgS0RmCcxp6uMVntlWfpFoLxq9sm38HwH4CadcCrAHf1htLp q644XFujVKlstrcCyDlRJKOxgbMafSCw4pnG2JuuZpIzOq032Wy0268LRAyT/kcv 5Ca0PLwHjeFU+BV/JeQNfEEW2mAHyA+U6wb5WyRIvrbDX/7P/IZfGHsRGK+Rvdg1 dIM1PJh+bPQplHSlDzKfDXf9H79xeyxiIItdkAu7gnMauCOcqijXA2Gv+IcsHM2E eNUGtlTN0sYLn32tfBBfCHh1Kr1RBgTS04+5TMCZ9wmBLT/K -----END CERTIFICATE-----Generated at Thu Feb 5 13:59:05 2026 by rpki-client