This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS137517.roa File: AS137517.roa (raw, json) Hash identifier: eb7a21QAA25kqYiIA104dVytqcBffVrlXarzSBXpNlc= Subject key identifier: 43:9F:1D:91:E3:F3:36:D3:27:5D:54:BD:A3:EA:85:08:F9:B0:EA:84 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 630DE83A7ACC2942F9D6C58A853CB1FB8E466467 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS137517.roa Signing time: Wed 04 Feb 2026 12:57:33 +0000 ROA not before: Wed 04 Feb 2026 12:52:33 +0000 ROA not after: Wed 03 Feb 2027 12:57:33 +0000 asID: 137517 IP address blocks: 188.119.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:0d:e8:3a:7a:cc:29:42:f9:d6:c5:8a:85:3c:b1:fb:8e:46:64:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:33 2026 GMT Not After : Feb 3 12:57:33 2027 GMT Subject: CN=439F1D91E3F336D3275D54BDA3EA8508F9B0EA84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:0f:34:12:81:ab:71:6e:f0:cc:d2:d0:be: 65:28:af:42:58:d4:84:62:a9:57:d8:42:f6:05:3c: 7b:85:6d:4c:3f:ec:f3:a4:b9:f9:38:89:97:d2:79: dc:8e:c3:dd:7e:65:1f:ab:e7:f2:1f:51:4f:ca:7f: 91:09:47:2f:32:53:c0:89:7f:54:c8:32:f8:01:75: b1:67:04:e8:b9:70:55:c1:40:06:0b:06:7c:f6:22: 66:f9:6d:a9:2d:51:3c:04:b4:f0:c9:35:d4:d8:9c: 1c:bf:4f:50:f3:ac:3d:9b:8f:e0:ee:bc:ae:26:77: f1:e4:b5:f4:25:b6:8d:33:5a:48:56:95:5f:b1:4d: 8c:c6:e5:cb:bd:04:3c:25:2f:0d:b4:7a:0f:ce:75: 96:4b:1b:23:3f:8d:f4:b4:11:4e:39:2f:c5:ab:b5: 27:8b:ff:8d:d4:a2:3a:4d:cb:f4:1d:d2:bd:49:00: 8b:ba:34:03:92:f8:63:0d:3d:df:8f:88:5a:5a:66: 40:cd:97:25:cf:36:e3:d5:dc:7d:91:f2:fb:c3:12: 1d:7c:ed:7d:20:5f:43:8b:ef:8e:0e:ca:61:14:10: ca:ec:70:5c:f8:92:7b:04:ed:7e:cd:30:ba:6e:b9: 2f:5a:d2:e3:3f:e1:f1:83:19:8a:07:6a:7d:b4:a4: 8f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9F:1D:91:E3:F3:36:D3:27:5D:54:BD:A3:EA:85:08:F9:B0:EA:84 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS137517.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.119.68.0/24 Signature Algorithm: sha256WithRSAEncryption ce:a5:b8:c8:6b:95:be:70:a3:f8:63:2a:58:6b:f8:55:40:4c: 44:23:88:85:d5:88:75:c0:06:6a:13:86:b5:cf:e0:64:13:ba: 3f:c3:02:0f:8e:fc:7a:08:55:2b:c0:b9:82:cf:fa:6a:a8:81: 60:67:8f:56:54:0d:bb:b5:08:a6:2d:b1:71:ea:c0:10:9b:04: 3e:99:2f:bb:71:13:68:7d:ca:9f:b6:ca:f0:93:da:12:91:74: c5:c2:19:b2:7d:1c:a6:6b:c9:4d:fe:d6:3e:39:0d:73:9a:08: a4:fa:b3:ae:d1:78:51:4a:e7:36:82:5c:a9:ce:6c:85:23:37: bf:9e:bc:77:38:08:85:8a:1c:c4:a4:03:a0:75:3d:56:56:10: 7c:cf:10:1a:a4:69:a6:7a:86:59:0b:72:b4:ec:5a:86:01:fc: f3:8c:f2:1e:e9:ad:50:f8:2f:1f:41:93:91:50:78:cc:ac:0a: cc:52:b3:8c:be:7a:b3:01:63:3f:3c:31:d2:d3:b8:0e:8d:d6: 63:a7:59:3a:0f:2e:95:ed:01:6e:88:a9:dc:35:8a:6b:b4:92: eb:ab:83:4a:71:47:72:3b:85:6e:26:d6:a4:8b:24:5c:3c:c3: 6e:ae:e0:6a:89:49:58:bb:d3:d6:48:00:50:a3:31:e6:de:0b: 66:ad:37:fc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUYw3oOnrMKUL51sWKhTyx+45GZGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyMzNaFw0yNzAyMDMxMjU3MzNaMDMxMTAvBgNV BAMTKDQzOUYxRDkxRTNGMzM2RDMyNzVENTRCREEzRUE4NTA4RjlCMEVBODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKQ80EoGrcW7wzNLQvmUor0JY 1IRiqVfYQvYFPHuFbUw/7POkufk4iZfSedyOw91+ZR+r5/IfUU/Kf5EJRy8yU8CJ f1TIMvgBdbFnBOi5cFXBQAYLBnz2Imb5baktUTwEtPDJNdTYnBy/T1DzrD2bj+Du vK4md/HktfQlto0zWkhWlV+xTYzG5cu9BDwlLw20eg/OdZZLGyM/jfS0EU45L8Wr tSeL/43UojpNy/Qd0r1JAIu6NAOS+GMNPd+PiFpaZkDNlyXPNuPV3H2R8vvDEh18 7X0gX0OL744OymEUEMrscFz4knsE7X7NMLpuuS9a0uM/4fGDGYoHan20pI/nAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUQ58dkePzNtMnXVS9o+qFCPmw6oQwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMTM3NTE3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvHdE MA0GCSqGSIb3DQEBCwUAA4IBAQDOpbjIa5W+cKP4YypYa/hVQExEI4iF1Yh1wAZq E4a1z+BkE7o/wwIPjvx6CFUrwLmCz/pqqIFgZ49WVA27tQimLbFx6sAQmwQ+mS+7 cRNofcqftsrwk9oSkXTFwhmyfRyma8lN/tY+OQ1zmgik+rOu0XhRSuc2glypzmyF Ize/nrx3OAiFihzEpAOgdT1WVhB8zxAapGmmeoZZC3K07FqGAfzzjPIe6a1Q+C8f QZORUHjMrArMUrOMvnqzAWM/PDHS07gOjdZjp1k6Dy6V7QFuiKncNYprtJLrq4NK cUdyO4VuJtakiyRcPMNuruBqiUlYu9PWSABQozHm3gtmrTf8 -----END CERTIFICATE-----Generated at Thu Feb 5 13:54:29 2026 by rpki-client