This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203494.roa File: AS203494.roa (raw, json) Hash identifier: KDZjcGF7xAm1136BX/iagzEt0zzXAiD7EvRKbgavGNI= Subject key identifier: 6B:97:31:C5:9A:DA:D8:A3:95:FC:D4:CC:29:61:AB:51:B9:13:9A:55 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 6EA5DE4A55FB17EE0F6C16AE85969E308F036453 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203494.roa Signing time: Wed 04 Feb 2026 12:57:36 +0000 ROA not before: Wed 04 Feb 2026 12:52:36 +0000 ROA not after: Wed 03 Feb 2027 12:57:36 +0000 asID: 203494 IP address blocks: 217.18.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:a5:de:4a:55:fb:17:ee:0f:6c:16:ae:85:96:9e:30:8f:03:64:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:36 2026 GMT Not After : Feb 3 12:57:36 2027 GMT Subject: CN=6B9731C59ADAD8A395FCD4CC2961AB51B9139A55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c2:38:96:43:14:48:5b:32:d5:3b:6f:d3:90: bd:87:e4:e7:1f:fc:c6:32:d9:da:c6:ca:29:5d:59: 46:93:17:d8:e3:38:ff:75:72:c3:f0:31:e4:fa:91: 97:8a:30:2e:a3:a0:11:65:13:bd:f7:f4:b7:0e:49: b5:3f:ef:28:9a:48:a4:73:9b:c5:4a:a1:e7:e3:3a: 50:58:68:74:15:21:7e:29:a1:5d:78:c4:ca:4e:e2: e2:a1:c6:7e:51:5c:e2:01:5f:a5:61:d6:97:e5:2d: c7:e4:5a:90:02:46:64:ee:61:1e:67:e3:1c:85:23: c6:26:e8:c8:ae:0e:d9:77:82:fe:ba:56:47:58:47: f5:05:92:1e:8c:04:8e:0b:bf:ba:7c:f7:9a:29:4b: ca:87:3c:9e:78:2c:c5:5f:7b:c9:87:fa:60:ea:f8: 49:9a:e0:68:a9:1c:e1:12:9d:45:d1:76:39:ba:9e: 99:96:a4:f5:57:0d:ad:b2:4d:00:18:d0:ac:16:14: da:41:d0:c1:b3:24:a2:b8:b7:eb:1f:7b:2f:55:3e: c1:cc:b0:b5:71:cc:b6:ac:4c:16:37:48:6e:94:6e: bb:4b:65:62:fd:41:04:e3:91:e4:c4:dd:d6:e4:82: 46:88:b3:a0:f3:f1:2e:ba:d4:38:2c:e5:f5:48:54: 33:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:97:31:C5:9A:DA:D8:A3:95:FC:D4:CC:29:61:AB:51:B9:13:9A:55 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203494.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.18.209.0/24 Signature Algorithm: sha256WithRSAEncryption 35:25:4d:5c:6c:0f:ef:38:70:6b:76:a2:9f:3d:72:75:e4:9e: 71:b6:d0:ec:ca:65:82:cc:d8:72:82:25:3a:91:ce:67:32:4b: 82:c8:f1:0e:2d:b1:7a:ae:60:4e:37:60:47:18:f2:38:31:95: ed:b1:3b:b6:ed:08:cd:19:9f:64:ec:71:49:90:22:95:02:c1: 8a:7a:53:b8:24:0f:3c:3d:e5:4f:df:73:39:2f:3d:77:5d:f9: a0:69:06:85:79:ca:ee:10:59:19:95:05:85:5d:a6:0e:d2:73: 66:9b:11:fe:b6:24:d6:b1:29:6f:bf:22:16:28:00:ca:8b:0d: be:cb:27:53:05:81:ed:c2:32:bd:65:48:23:d0:bb:38:4b:91: 28:73:74:15:ac:67:45:cd:33:ce:b8:8d:81:a3:df:e0:fe:db: c0:25:71:01:eb:b1:e4:f0:a5:26:0c:42:b3:24:17:03:e8:c4: ed:ab:53:f4:cf:04:3f:eb:4f:a6:16:86:84:fd:38:42:7a:10: f7:fc:7d:a4:67:aa:44:0c:83:af:99:93:6b:3b:ca:92:a7:44: 4e:31:c8:21:9d:d4:82:4a:9f:3a:c3:55:0f:12:70:6f:c1:bc: e4:e2:91:ea:2e:94:dc:90:61:b1:84:50:42:1b:36:0b:12:9f: 84:58:0b:53 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUbqXeSlX7F+4PbBauhZaeMI8DZFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyMzZaFw0yNzAyMDMxMjU3MzZaMDMxMTAvBgNV BAMTKDZCOTczMUM1OUFEQUQ4QTM5NUZDRDRDQzI5NjFBQjUxQjkxMzlBNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVwjiWQxRIWzLVO2/TkL2H5Ocf /MYy2drGyildWUaTF9jjOP91csPwMeT6kZeKMC6joBFlE7339LcOSbU/7yiaSKRz m8VKoefjOlBYaHQVIX4poV14xMpO4uKhxn5RXOIBX6Vh1pflLcfkWpACRmTuYR5n 4xyFI8Ym6MiuDtl3gv66VkdYR/UFkh6MBI4Lv7p895opS8qHPJ54LMVfe8mH+mDq +Ema4GipHOESnUXRdjm6npmWpPVXDa2yTQAY0KwWFNpB0MGzJKK4t+sfey9VPsHM sLVxzLasTBY3SG6UbrtLZWL9QQTjkeTE3dbkgkaIs6Dz8S661Dgs5fVIVDMVAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUa5cxxZra2KOV/NTMKWGrUbkTmlUwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjAzNDk0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RLR MA0GCSqGSIb3DQEBCwUAA4IBAQA1JU1cbA/vOHBrdqKfPXJ15J5xttDsymWCzNhy giU6kc5nMkuCyPEOLbF6rmBON2BHGPI4MZXtsTu27QjNGZ9k7HFJkCKVAsGKelO4 JA88PeVP33M5Lz13XfmgaQaFecruEFkZlQWFXaYO0nNmmxH+tiTWsSlvvyIWKADK iw2+yydTBYHtwjK9ZUgj0Ls4S5Eoc3QVrGdFzTPOuI2Bo9/g/tvAJXEB67Hk8KUm DEKzJBcD6MTtq1P0zwQ/60+mFoaE/ThCehD3/H2kZ6pEDIOvmZNrO8qSp0ROMcgh ndSCSp86w1UPEnBvwbzk4pHqLpTckGGxhFBCGzYLEp+EWAtT -----END CERTIFICATE-----Generated at Thu Feb 5 13:54:29 2026 by rpki-client