This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS147003.roa File: AS147003.roa (raw, json) Hash identifier: cncsSPwbjId4q/fr630hQLnQ3kcmIC0E0ByYTj1BZew= Subject key identifier: D7:E5:81:9B:2C:79:CE:CE:C6:98:87:E6:8E:BF:F8:89:1A:A7:F2:B2 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 5B0872F8D96AC2CA59124A25357CBB657B93C119 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS147003.roa Signing time: Wed 04 Feb 2026 12:57:37 +0000 ROA not before: Wed 04 Feb 2026 12:52:37 +0000 ROA not after: Wed 03 Feb 2027 12:57:37 +0000 asID: 147003 IP address blocks: 84.54.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:08:72:f8:d9:6a:c2:ca:59:12:4a:25:35:7c:bb:65:7b:93:c1:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:37 2026 GMT Not After : Feb 3 12:57:37 2027 GMT Subject: CN=D7E5819B2C79CECEC69887E68EBFF8891AA7F2B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:da:cb:96:f8:9f:0b:ed:ae:52:d1:b8:6c:22: a6:a0:67:36:30:66:b5:d1:e5:a5:1f:59:5c:64:46: ac:6d:07:ab:f1:11:16:3c:c2:c7:48:f3:cc:a7:9f: a0:4b:3d:9d:1d:fd:38:b8:12:25:04:48:6e:36:98: 3c:4e:47:ed:45:35:31:c9:2c:3b:88:db:48:16:66: 9a:c7:d2:b8:cf:45:4a:83:6d:af:90:b7:5f:ed:5f: 5c:cf:70:3f:94:80:c1:49:ce:44:96:b6:44:0e:0b: 7e:db:41:a3:09:0f:0a:a0:73:8d:0f:b5:48:59:0a: b9:87:e7:51:7c:85:a9:bb:20:39:53:3e:75:5c:e0: 4b:12:cc:af:b0:97:cf:c4:52:34:f8:bd:79:72:f1: f7:6f:9f:9e:db:cd:76:c3:81:e7:ab:88:ce:2e:b2: e4:58:a7:05:99:7e:23:69:4a:0b:09:43:d0:49:c6: a6:0f:73:96:2d:21:97:14:82:94:b6:70:58:22:ea: f8:be:eb:97:21:e1:56:07:c3:61:4c:f5:10:c3:63: be:c6:fe:d4:29:ba:0f:2b:29:46:5b:04:4a:ec:02: 7d:ce:21:94:b8:15:ab:a0:e2:24:08:73:83:08:c7: 7b:e6:e5:69:f6:bb:2e:b8:24:fc:de:29:74:3d:10: 9e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E5:81:9B:2C:79:CE:CE:C6:98:87:E6:8E:BF:F8:89:1A:A7:F2:B2 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS147003.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.0.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:88:bb:78:40:91:6f:71:54:8b:62:df:eb:5e:75:7e:1b:19: a3:2b:bc:52:32:4c:de:82:c0:07:d4:06:63:91:18:be:9b:ad: 4e:59:53:3a:67:00:68:3d:00:d7:5d:5c:00:cd:07:09:39:52: e1:6f:af:80:b0:d5:7b:cd:1d:3e:a7:1a:d1:a7:dd:c7:f6:37: 5d:cc:47:2b:e3:12:b9:6c:25:ae:3e:15:7f:bc:c4:e9:ce:6e: b9:b1:d6:b7:7c:e4:42:c9:09:95:e7:68:e3:a2:3c:9f:cd:ca: 0d:ba:16:ae:99:7d:50:20:90:58:02:64:c3:ac:4e:1f:39:37: ae:d7:8c:b1:53:70:d0:5c:f6:02:9f:5a:05:4c:ac:7d:d3:c4: ff:f1:c0:e4:83:c5:37:6c:35:4c:2a:e3:0d:ca:f6:c0:6e:97: 7b:1a:a8:3e:f6:c5:ac:cb:66:24:c7:d1:3c:c0:33:e6:79:ab: e0:e1:01:88:09:da:a5:41:2c:d6:74:94:a7:8d:30:bc:4b:be: f4:e8:45:03:76:f0:08:b4:fe:7c:d1:cf:e4:46:c8:0e:b0:94: fe:ac:94:8c:1c:e2:76:e8:27:a5:b1:53:aa:18:c8:32:9a:75: cc:a8:81:69:54:36:93:4c:80:13:1f:71:40:24:a3:ae:16:29: 3c:c7:73:74 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUWwhy+NlqwspZEkolNXy7ZXuTwRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyMzdaFw0yNzAyMDMxMjU3MzdaMDMxMTAvBgNV BAMTKEQ3RTU4MTlCMkM3OUNFQ0VDNjk4ODdFNjhFQkZGODg5MUFBN0YyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV2suW+J8L7a5S0bhsIqagZzYw ZrXR5aUfWVxkRqxtB6vxERY8wsdI88ynn6BLPZ0d/Ti4EiUESG42mDxOR+1FNTHJ LDuI20gWZprH0rjPRUqDba+Qt1/tX1zPcD+UgMFJzkSWtkQOC37bQaMJDwqgc40P tUhZCrmH51F8ham7IDlTPnVc4EsSzK+wl8/EUjT4vXly8fdvn57bzXbDgeeriM4u suRYpwWZfiNpSgsJQ9BJxqYPc5YtIZcUgpS2cFgi6vi+65ch4VYHw2FM9RDDY77G /tQpug8rKUZbBErsAn3OIZS4Faug4iQIc4MIx3vm5Wn2uy64JPzeKXQ9EJ69AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU1+WBmyx5zs7GmIfmjr/4iRqn8rIwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMTQ3MDAzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVDYA MA0GCSqGSIb3DQEBCwUAA4IBAQAaiLt4QJFvcVSLYt/rXnV+GxmjK7xSMkzegsAH 1AZjkRi+m61OWVM6ZwBoPQDXXVwAzQcJOVLhb6+AsNV7zR0+pxrRp93H9jddzEcr 4xK5bCWuPhV/vMTpzm65sda3fORCyQmV52jjojyfzcoNuhaumX1QIJBYAmTDrE4f OTeu14yxU3DQXPYCn1oFTKx908T/8cDkg8U3bDVMKuMNyvbAbpd7Gqg+9sWsy2Yk x9E8wDPmeavg4QGICdqlQSzWdJSnjTC8S7706EUDdvAItP580c/kRsgOsJT+rJSM HOJ26CelsVOqGMgymnXMqIFpVDaTTIATH3FAJKOuFik8x3N0 -----END CERTIFICATE-----Generated at Thu Feb 5 13:53:03 2026 by rpki-client