This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS201079.roa File: AS201079.roa (raw, json) Hash identifier: lgHkqRezj+gWKhnRoFZuZdda8uGD1WPpkKwXKl2EpQs= Subject key identifier: 87:EF:06:E0:8C:E9:E8:3F:F1:85:E6:BA:BF:2F:8D:07:E5:E6:A6:E7 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 307B901AA458383E97D85036519716E54EB00C4F Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS201079.roa Signing time: Wed 04 Feb 2026 12:57:45 +0000 ROA not before: Wed 04 Feb 2026 12:52:45 +0000 ROA not after: Wed 03 Feb 2027 12:57:45 +0000 asID: 201079 IP address blocks: 185.254.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:7b:90:1a:a4:58:38:3e:97:d8:50:36:51:97:16:e5:4e:b0:0c:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:45 2026 GMT Not After : Feb 3 12:57:45 2027 GMT Subject: CN=87EF06E08CE9E83FF185E6BABF2F8D07E5E6A6E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:45:34:f3:18:56:96:54:f8:e3:3d:a3:cf:a2: 68:3f:ad:90:d5:02:44:ee:fb:0c:65:6a:0e:1c:1c: f9:d4:65:43:c4:00:23:2c:63:0a:4d:4b:60:45:00: d8:cf:34:2f:67:cd:40:60:1a:e0:8f:1a:da:96:7c: 25:94:41:27:62:24:36:8a:8a:b5:fd:f2:35:14:f6: 55:00:bb:a1:20:aa:a0:76:9d:32:02:92:ad:91:3a: 96:b1:8a:44:6a:37:6f:45:e3:93:6e:ad:33:3a:d7: e5:21:18:18:6e:5a:75:7f:ed:37:b8:e8:c7:85:88: f1:17:65:40:9e:7e:43:0c:00:18:43:67:95:ba:58: e6:ae:b1:e5:05:80:7c:88:30:ca:34:56:00:89:83: 90:ea:8b:74:5b:f3:78:b3:76:32:13:6c:c8:a0:34: 0e:82:a6:ea:83:0d:66:1c:83:e8:83:46:66:4b:5d: 58:f7:33:9e:0e:1d:33:d9:c2:e3:5d:6d:c3:6e:3b: 4a:3e:ba:53:80:11:fa:2d:35:a6:f2:03:50:63:1c: 2c:7e:fd:2c:ff:79:40:12:b5:83:d4:07:7c:fd:ba: 8c:e5:ad:43:60:d3:76:f3:ce:71:87:29:03:87:b2: f3:15:c5:e3:1c:7d:b7:10:94:e8:f8:56:1e:6b:1d: fd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EF:06:E0:8C:E9:E8:3F:F1:85:E6:BA:BF:2F:8D:07:E5:E6:A6:E7 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS201079.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.53.0/24 Signature Algorithm: sha256WithRSAEncryption 28:24:99:54:30:2b:b9:9b:14:6a:a9:bd:d7:74:9a:d4:44:f5: 34:e3:c2:ee:7e:d4:87:8a:7d:38:b2:c3:05:3e:d0:2d:cb:98: 30:d9:c6:be:11:9b:0f:d0:34:2b:e6:85:61:91:66:dd:b7:55: fd:ce:1c:cf:80:5e:39:1d:f6:8d:b9:7f:94:e3:50:e7:4a:00: 1e:00:1b:fc:09:db:3b:73:d5:ea:51:70:a1:81:b8:4e:6a:8f: 33:8b:4e:44:59:37:8a:fd:de:4b:a6:1b:d0:66:e8:a5:29:67: 72:3e:ac:c8:22:bb:72:44:ed:5e:7f:06:9e:a1:62:58:71:9d: 88:9d:61:69:d9:c8:34:bb:85:1a:e1:c1:9c:93:40:8c:83:97: b6:23:d8:69:70:3f:62:10:61:cd:39:66:5f:1f:d0:a7:ce:ce: 7c:6a:13:46:44:d3:80:8e:d7:ba:6a:0e:69:57:e7:72:4d:24: 04:ba:d5:8b:a7:52:93:6f:fa:80:b8:2d:ac:f6:10:eb:5e:52: 43:e0:a3:10:ef:99:c2:ac:ea:13:3a:22:b8:38:c1:59:0b:a3: 10:31:de:00:b3:1c:26:0f:2b:3c:f3:80:24:11:e8:65:e7:a3: 31:1c:a1:70:61:46:86:29:cd:86:52:e9:7a:22:67:d7:1b:b5: 55:ad:37:e4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUMHuQGqRYOD6X2FA2UZcW5U6wDE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNDVaFw0yNzAyMDMxMjU3NDVaMDMxMTAvBgNV BAMTKDg3RUYwNkUwOENFOUU4M0ZGMTg1RTZCQUJGMkY4RDA3RTVFNkE2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfRTTzGFaWVPjjPaPPomg/rZDV AkTu+wxlag4cHPnUZUPEACMsYwpNS2BFANjPNC9nzUBgGuCPGtqWfCWUQSdiJDaK irX98jUU9lUAu6EgqqB2nTICkq2ROpaxikRqN29F45NurTM61+UhGBhuWnV/7Te4 6MeFiPEXZUCefkMMABhDZ5W6WOauseUFgHyIMMo0VgCJg5Dqi3Rb83izdjITbMig NA6CpuqDDWYcg+iDRmZLXVj3M54OHTPZwuNdbcNuO0o+ulOAEfotNabyA1BjHCx+ /Sz/eUAStYPUB3z9uozlrUNg03bzznGHKQOHsvMVxeMcfbcQlOj4Vh5rHf2tAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUh+8G4Izp6D/xhea6vy+NB+XmpucwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjAxMDc5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf41 MA0GCSqGSIb3DQEBCwUAA4IBAQAoJJlUMCu5mxRqqb3XdJrURPU048LuftSHin04 ssMFPtAty5gw2ca+EZsP0DQr5oVhkWbdt1X9zhzPgF45HfaNuX+U41DnSgAeABv8 Cds7c9XqUXChgbhOao8zi05EWTeK/d5LphvQZuilKWdyPqzIIrtyRO1efwaeoWJY cZ2InWFp2cg0u4Ua4cGck0CMg5e2I9hpcD9iEGHNOWZfH9Cnzs58ahNGRNOAjte6 ag5pV+dyTSQEutWLp1KTb/qAuC2s9hDrXlJD4KMQ75nCrOoTOiK4OMFZC6MQMd4A sxwmDys884AkEehl56MxHKFwYUaGKc2GUul6ImfXG7VVrTfk -----END CERTIFICATE-----Generated at Thu Feb 5 13:52:24 2026 by rpki-client