This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS202736.roa File: AS202736.roa (raw, json) Hash identifier: 7wUd7Kre4yFqfLLkeAfM9GzI0MHRzrMINCSFzQcLjQU= Subject key identifier: 3A:22:EC:5D:67:FD:8E:84:53:92:41:7D:E1:3C:96:BA:75:FA:5E:61 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 18DEFAB9419A5353A675DF14DD5F591D2DF79427 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS202736.roa Signing time: Wed 04 Feb 2026 12:57:35 +0000 ROA not before: Wed 04 Feb 2026 12:52:35 +0000 ROA not after: Wed 03 Feb 2027 12:57:35 +0000 asID: 202736 IP address blocks: 176.53.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:de:fa:b9:41:9a:53:53:a6:75:df:14:dd:5f:59:1d:2d:f7:94:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:35 2026 GMT Not After : Feb 3 12:57:35 2027 GMT Subject: CN=3A22EC5D67FD8E845392417DE13C96BA75FA5E61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5c:93:3b:0d:62:65:7b:9c:34:aa:2c:73:62: e9:f5:1b:e0:62:a9:94:93:f3:ac:fc:75:25:21:e3: 9e:e3:80:2c:b8:3b:4d:02:52:c1:bd:bc:58:0e:35: 5f:75:f6:24:f9:3b:ec:08:d4:9b:94:e2:28:ea:1f: 50:93:9a:92:3c:c3:b1:13:73:a6:98:5f:fc:03:e8: 5f:24:87:ce:35:62:b8:7b:0b:0e:86:8c:0b:ae:21: a9:26:6f:94:63:f2:9f:04:5a:4d:f9:fa:c0:58:36: fe:d8:33:88:13:c1:f0:64:83:c3:26:a2:96:03:ec: 54:f3:65:ab:43:50:fc:8d:b7:a5:9a:3e:91:b8:2e: d7:2e:5f:8d:f9:00:dc:14:a6:69:52:b8:38:36:1c: 26:db:38:ad:89:4c:20:7a:79:d6:58:b9:de:62:2f: 65:30:6f:1d:0a:33:4a:5e:1d:51:c3:79:71:fb:09: 64:c9:7f:30:9d:22:bd:c2:e2:e8:91:7f:24:5d:f3: d1:ed:d3:3f:c9:3d:45:d6:88:04:b6:bb:99:bd:fc: ca:47:f3:35:c5:08:28:68:e4:1b:b7:0c:2c:9b:1c: fa:de:4d:02:bf:55:33:78:33:2e:f1:8b:f6:08:6e: 1d:b3:e6:c3:a7:b2:3e:dc:f6:1d:0c:89:0b:29:aa: 8d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:22:EC:5D:67:FD:8E:84:53:92:41:7D:E1:3C:96:BA:75:FA:5E:61 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS202736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.53.169.0/24 Signature Algorithm: sha256WithRSAEncryption d0:b9:f9:12:10:69:78:ee:60:34:6a:7d:99:92:f2:56:04:b3: 55:0c:f6:a5:db:d2:4c:82:ff:f5:87:49:04:3b:08:6f:fe:90: 55:74:27:bb:c9:77:c7:3c:b7:61:fd:52:3c:f8:6a:13:54:23: 80:cb:55:ae:0f:68:dd:ae:f1:97:93:ec:97:5f:b5:90:5d:50: fa:13:a0:f8:5d:f3:79:09:bb:12:4a:97:0e:8d:c5:b9:c6:61: 8c:8d:e8:ad:14:8f:1a:84:85:90:40:51:68:d8:1c:9c:39:81: e4:35:ea:2f:04:1c:f4:ec:3d:b2:0f:c6:86:e6:0a:c3:71:75: b2:a7:e1:77:3c:74:ca:3f:37:69:47:40:2e:d1:62:cd:a1:29: de:df:12:cb:1f:ef:74:77:7c:81:74:35:9e:ec:3b:69:83:78: 43:6f:9e:90:6e:2e:c6:9b:14:ac:b0:28:9e:9b:c9:fe:da:f6: 44:b5:3e:60:1d:a1:61:f6:09:ca:25:5a:ea:9f:5b:c9:c3:1a: 7b:72:90:a0:53:aa:c1:2b:59:3e:93:1a:2d:f3:00:8c:6c:23: 61:85:c5:24:e4:b4:0c:49:35:0d:05:39:70:b9:18:55:2a:ca: 69:60:2f:37:46:1e:fd:5a:69:7e:e0:36:1e:0d:10:2d:c1:1b: 9f:41:09:19 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUGN76uUGaU1Omdd8U3V9ZHS33lCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyMzVaFw0yNzAyMDMxMjU3MzVaMDMxMTAvBgNV BAMTKDNBMjJFQzVENjdGRDhFODQ1MzkyNDE3REUxM0M5NkJBNzVGQTVFNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiXJM7DWJle5w0qixzYun1G+Bi qZST86z8dSUh457jgCy4O00CUsG9vFgONV919iT5O+wI1JuU4ijqH1CTmpI8w7ET c6aYX/wD6F8kh841Yrh7Cw6GjAuuIakmb5Rj8p8EWk35+sBYNv7YM4gTwfBkg8Mm opYD7FTzZatDUPyNt6WaPpG4LtcuX435ANwUpmlSuDg2HCbbOK2JTCB6edZYud5i L2Uwbx0KM0peHVHDeXH7CWTJfzCdIr3C4uiRfyRd89Ht0z/JPUXWiAS2u5m9/MpH 8zXFCCho5Bu3DCybHPreTQK/VTN4My7xi/YIbh2z5sOnsj7c9h0MiQspqo3PAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUOiLsXWf9joRTkkF94TyWunX6XmEwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjAyNzM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDWp MA0GCSqGSIb3DQEBCwUAA4IBAQDQufkSEGl47mA0an2ZkvJWBLNVDPal29JMgv/1 h0kEOwhv/pBVdCe7yXfHPLdh/VI8+GoTVCOAy1WuD2jdrvGXk+yXX7WQXVD6E6D4 XfN5CbsSSpcOjcW5xmGMjeitFI8ahIWQQFFo2BycOYHkNeovBBz07D2yD8aG5grD cXWyp+F3PHTKPzdpR0Au0WLNoSne3xLLH+90d3yBdDWe7Dtpg3hDb56Qbi7GmxSs sCiem8n+2vZEtT5gHaFh9gnKJVrqn1vJwxp7cpCgU6rBK1k+kxot8wCMbCNhhcUk 5LQMSTUNBTlwuRhVKsppYC83Rh79Wml+4DYeDRAtwRufQQkZ -----END CERTIFICATE-----Generated at Thu Feb 5 13:59:25 2026 by rpki-client