This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS197537.roa File: AS197537.roa (raw, json) Hash identifier: pamPd+wVVLX3UzIARB8qTYgjLDVsu1NmH1G7e+Lmx5Y= Subject key identifier: C6:01:1F:07:66:7A:2A:A6:10:A0:17:B6:2F:5C:E7:FF:EC:74:C6:53 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 0A5D345961D6D3D9EB853171017DB9F92309FFC0 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS197537.roa Signing time: Wed 04 Feb 2026 12:57:33 +0000 ROA not before: Wed 04 Feb 2026 12:52:33 +0000 ROA not after: Wed 03 Feb 2027 12:57:33 +0000 asID: 197537 IP address blocks: 176.53.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:5d:34:59:61:d6:d3:d9:eb:85:31:71:01:7d:b9:f9:23:09:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:33 2026 GMT Not After : Feb 3 12:57:33 2027 GMT Subject: CN=C6011F07667A2AA610A017B62F5CE7FFEC74C653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f7:83:da:c4:a8:b0:1c:7e:f6:20:61:9a:80: 7d:a6:6c:5e:24:9a:e4:03:6e:46:d3:bb:bf:eb:15: 12:67:ff:31:8d:32:3c:76:5a:2d:ac:77:1c:a7:64: 9e:4d:8e:ab:ed:e7:3b:bd:bd:13:2d:0d:e3:3e:58: 3b:8d:47:93:8c:f4:4e:6e:8a:ec:2e:a9:88:ea:c2: 9f:4f:9a:a1:77:35:eb:cd:4d:14:97:8b:21:4f:92: 95:8a:44:26:ef:8c:cb:b8:7e:ef:dc:1d:eb:89:1b: e4:98:b4:b2:02:01:e2:0a:1f:0e:b1:34:75:d8:d9: f9:90:23:4d:e6:4c:07:e9:24:d6:16:ff:ba:10:aa: 3a:e8:85:76:7d:b0:ae:33:d4:9f:04:b8:66:a0:f7: c3:20:8a:55:18:4c:a7:58:84:9a:05:7c:2a:8c:da: 47:f9:93:ae:b1:6d:56:42:b1:ff:95:98:36:bc:e5: b4:9e:98:62:cd:7b:a5:1d:7b:e5:c8:c2:08:0a:0c: cc:40:7e:6e:e1:f8:a0:e3:7e:a4:20:c8:f5:9b:89: f3:1e:31:e0:82:11:44:6e:a5:8e:a9:b4:96:29:37: 52:be:06:cd:8d:1c:dc:a9:78:ff:51:b7:40:b8:d8: b1:4f:1b:29:54:40:7f:e5:d5:e9:98:b0:a8:99:c4: 61:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:01:1F:07:66:7A:2A:A6:10:A0:17:B6:2F:5C:E7:FF:EC:74:C6:53 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS197537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.53.169.0/24 Signature Algorithm: sha256WithRSAEncryption 83:60:5f:31:8e:d5:d4:c3:ad:84:ae:b0:32:d0:5c:dc:5b:95: 5b:c8:5a:81:63:f4:34:1a:00:3d:08:7b:0d:bd:3f:e0:0b:ae: fc:cd:ba:64:73:f3:d9:98:c6:c9:ca:f7:7d:5f:28:c3:90:7e: 80:2f:0d:de:5f:49:29:c0:98:05:d2:7e:3e:88:33:bb:94:d4: 49:cd:99:1c:ed:56:aa:05:14:67:3a:e0:b6:3b:3f:e6:8b:47: 0c:e3:f8:56:37:90:37:1a:5d:1d:90:8e:ba:6e:68:05:f5:26: 64:e6:84:77:2a:21:7f:71:5a:be:2d:13:4a:65:11:5e:a0:ed: 10:fe:01:9e:13:3f:b4:af:f7:db:ac:d0:13:db:56:99:45:f4: 24:cc:85:8f:c9:d5:e5:a2:c6:01:85:69:9a:a1:dd:a4:30:d2: a0:f8:fe:2b:6e:e4:07:56:33:47:2c:48:d5:c6:c0:7d:b3:08: 2b:e7:21:ce:64:91:35:62:23:b3:95:00:e8:28:e3:94:18:2a: 95:36:5b:67:99:b6:26:92:be:4f:4b:2e:a7:b7:b7:28:47:ec: 4a:7f:74:2d:b2:71:7f:55:49:8c:12:c2:64:22:34:fb:a2:95: f0:ed:7b:8a:88:9e:70:ce:fc:6b:ce:66:a0:39:5b:40:b7:e8: 26:11:25:1a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUCl00WWHW09nrhTFxAX25+SMJ/8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyMzNaFw0yNzAyMDMxMjU3MzNaMDMxMTAvBgNV BAMTKEM2MDExRjA3NjY3QTJBQTYxMEEwMTdCNjJGNUNFN0ZGRUM3NEM2NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO94PaxKiwHH72IGGagH2mbF4k muQDbkbTu7/rFRJn/zGNMjx2Wi2sdxynZJ5Njqvt5zu9vRMtDeM+WDuNR5OM9E5u iuwuqYjqwp9PmqF3NevNTRSXiyFPkpWKRCbvjMu4fu/cHeuJG+SYtLICAeIKHw6x NHXY2fmQI03mTAfpJNYW/7oQqjrohXZ9sK4z1J8EuGag98MgilUYTKdYhJoFfCqM 2kf5k66xbVZCsf+VmDa85bSemGLNe6Ude+XIwggKDMxAfm7h+KDjfqQgyPWbifMe MeCCEURupY6ptJYpN1K+Bs2NHNypeP9Rt0C42LFPGylUQH/l1emYsKiZxGF9AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUxgEfB2Z6KqYQoBe2L1zn/+x0xlMwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMTk3NTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDWp MA0GCSqGSIb3DQEBCwUAA4IBAQCDYF8xjtXUw62ErrAy0FzcW5VbyFqBY/Q0GgA9 CHsNvT/gC678zbpkc/PZmMbJyvd9XyjDkH6ALw3eX0kpwJgF0n4+iDO7lNRJzZkc 7VaqBRRnOuC2Oz/mi0cM4/hWN5A3Gl0dkI66bmgF9SZk5oR3KiF/cVq+LRNKZRFe oO0Q/gGeEz+0r/fbrNAT21aZRfQkzIWPydXlosYBhWmaod2kMNKg+P4rbuQHVjNH LEjVxsB9swgr5yHOZJE1YiOzlQDoKOOUGCqVNltnmbYmkr5PSy6nt7coR+xKf3Qt snF/VUmMEsJkIjT7opXw7XuKiJ5wzvxrzmagOVtAt+gmESUa -----END CERTIFICATE-----Generated at Thu Feb 5 13:59:05 2026 by rpki-client