This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS201907.roa File: AS201907.roa (raw, json) Hash identifier: nyXnw1q4Z7/+DN3c1HV2CRoDHzR3Ka7mHL5kLX21F+s= Subject key identifier: 5B:C6:8B:C0:E4:C7:96:5E:4D:29:CB:70:CA:58:89:D5:DB:CB:B8:60 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 2EC4FEAC5EB52D83D8E4ACC1ED23485DD5B04C90 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS201907.roa Signing time: Wed 04 Feb 2026 12:57:45 +0000 ROA not before: Wed 04 Feb 2026 12:52:45 +0000 ROA not after: Wed 03 Feb 2027 12:57:45 +0000 asID: 201907 IP address blocks: 85.8.144.0/23 maxlen: 24 85.8.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c4:fe:ac:5e:b5:2d:83:d8:e4:ac:c1:ed:23:48:5d:d5:b0:4c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:45 2026 GMT Not After : Feb 3 12:57:45 2027 GMT Subject: CN=5BC68BC0E4C7965E4D29CB70CA5889D5DBCBB860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1b:f4:b3:29:13:de:96:ec:ae:a0:7e:4b:b6: 58:2e:ea:b9:dc:1e:d7:fc:58:64:57:66:a5:33:98: 25:0d:86:61:8d:cc:4c:2b:ef:53:0b:eb:6c:50:52: a4:80:a3:d6:b3:f6:10:0c:fa:b2:24:a5:6c:9f:26: 39:33:e9:c8:c0:c3:6a:3d:af:64:43:7a:f8:db:42: f6:4f:38:e2:a5:ec:cf:a8:2c:49:28:1c:4f:47:d5: 7e:80:c7:b3:97:fe:bf:39:91:8d:dc:ea:fe:bc:84: a2:1f:88:7b:8f:81:f7:7f:76:29:45:ce:98:07:fe: 75:6c:7b:ca:08:a8:16:58:8e:38:34:23:31:de:7e: 3c:6a:5d:c1:95:d1:55:24:39:3c:3f:77:88:8b:2a: 65:71:aa:d5:ce:bd:c7:d7:0b:d2:16:78:92:be:3e: 39:d6:0a:15:55:9b:8c:4c:d9:ac:d6:99:82:2c:08: 79:eb:57:a3:81:cd:49:f9:7a:93:9e:de:f2:cb:8d: 0f:a9:cb:85:3a:f0:86:4e:a3:41:03:32:f7:81:4b: bd:82:88:8d:7c:3a:2a:15:f0:10:11:92:7f:78:49: ed:be:4b:cd:9f:f1:fe:bc:db:61:9f:d9:6f:2f:9b: 34:90:3f:2d:7a:df:48:7f:98:1c:41:41:18:43:10: 81:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C6:8B:C0:E4:C7:96:5E:4D:29:CB:70:CA:58:89:D5:DB:CB:B8:60 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS201907.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.8.144.0/22 Signature Algorithm: sha256WithRSAEncryption 26:0b:71:1f:96:d3:f5:d5:47:a9:00:61:99:ad:14:e0:bd:52: bb:e1:b1:2c:db:66:1e:65:54:57:aa:99:17:21:cf:bb:28:6e: e7:c4:52:f7:11:98:30:4c:d8:23:40:e7:5e:33:32:fa:4c:f4: 72:eb:8c:09:cb:4e:ae:0f:1b:bc:02:ed:c9:33:c1:bb:56:7a: c5:79:a1:7d:35:22:19:57:5f:66:4f:b2:45:56:82:d6:ea:62: 62:7b:f5:b8:1c:7a:4f:1e:d8:99:59:3f:ae:23:bb:22:b9:a9: e4:46:15:0c:84:a1:38:e1:59:2a:2b:ac:c9:68:f9:f7:68:28: 12:8e:5b:94:af:f8:69:30:c9:9d:f9:e0:31:77:d6:44:6e:da: c0:88:55:f5:fe:79:27:79:fa:9b:e2:24:2e:a4:f4:4a:03:cf: d2:70:3c:ca:b4:2e:9a:19:e7:e2:79:7b:10:0d:47:c1:62:c4: 34:03:61:bb:54:bc:c4:ba:94:61:fe:5b:27:6f:8f:23:87:ce: 7c:9a:7d:bb:4d:de:77:df:ce:59:0b:1a:6d:a0:9f:a3:d8:81: df:84:19:fd:19:f0:0b:d9:11:63:e9:bd:2f:ad:1e:c2:75:87: d0:2e:1d:02:41:89:89:3c:d2:0e:bd:df:53:63:ed:2d:4c:25: 13:28:b7:c2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIULsT+rF61LYPY5KzB7SNIXdWwTJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNDVaFw0yNzAyMDMxMjU3NDVaMDMxMTAvBgNV BAMTKDVCQzY4QkMwRTRDNzk2NUU0RDI5Q0I3MENBNTg4OUQ1REJDQkI4NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjG/SzKRPeluyuoH5Ltlgu6rnc Htf8WGRXZqUzmCUNhmGNzEwr71ML62xQUqSAo9az9hAM+rIkpWyfJjkz6cjAw2o9 r2RDevjbQvZPOOKl7M+oLEkoHE9H1X6Ax7OX/r85kY3c6v68hKIfiHuPgfd/dilF zpgH/nVse8oIqBZYjjg0IzHefjxqXcGV0VUkOTw/d4iLKmVxqtXOvcfXC9IWeJK+ PjnWChVVm4xM2azWmYIsCHnrV6OBzUn5epOe3vLLjQ+py4U68IZOo0EDMveBS72C iI18OioV8BARkn94Se2+S82f8f6822Gf2W8vmzSQPy1630h/mBxBQRhDEIEHAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUW8aLwOTHll5NKctwyliJ1dvLuGAwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjAxOTA3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVQiQ MA0GCSqGSIb3DQEBCwUAA4IBAQAmC3EfltP11UepAGGZrRTgvVK74bEs22YeZVRX qpkXIc+7KG7nxFL3EZgwTNgjQOdeMzL6TPRy64wJy06uDxu8Au3JM8G7VnrFeaF9 NSIZV19mT7JFVoLW6mJie/W4HHpPHtiZWT+uI7siuankRhUMhKE44VkqK6zJaPn3 aCgSjluUr/hpMMmd+eAxd9ZEbtrAiFX1/nknefqb4iQupPRKA8/ScDzKtC6aGefi eXsQDUfBYsQ0A2G7VLzEupRh/lsnb48jh858mn27Td53385ZCxptoJ+j2IHfhBn9 GfAL2RFj6b0vrR7CdYfQLh0CQYmJPNIOvd9TY+0tTCUTKLfC -----END CERTIFICATE-----Generated at Thu Feb 5 13:59:24 2026 by rpki-client