This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203545.roa
File: AS203545.roa (raw, json)
Hash identifier: GQqpsm1+6ou2IRoVDwiH/asmMOpXeIt8DdfwDQXwmr0=
Subject key identifier: 3C:5C:B5:F2:6F:DA:52:77:07:5F:5A:BB:EE:2A:D4:AF:29:88:9B:DB
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 7CC1F75A700430196E263212355EAC37472487F9
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203545.roa
Signing time: Wed 04 Feb 2026 12:57:34 +0000
ROA not before: Wed 04 Feb 2026 12:52:34 +0000
ROA not after: Wed 03 Feb 2027 12:57:34 +0000
asID: 203545
IP address blocks: 141.98.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:c1:f7:5a:70:04:30:19:6e:26:32:12:35:5e:ac:37:47:24:87:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Feb 4 12:52:34 2026 GMT
Not After : Feb 3 12:57:34 2027 GMT
Subject: CN=3C5CB5F26FDA5277075F5ABBEE2AD4AF29889BDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4f:08:07:39:3e:8b:b4:1b:f6:ed:73:d8:19:
fd:d0:1c:16:75:d6:a2:11:73:8e:ad:61:75:41:e6:
4f:d4:ae:79:ab:e8:04:ca:7e:f5:c3:c1:d2:77:c3:
c1:c5:f1:7d:6f:2a:58:a4:d6:3a:fa:cf:70:12:53:
9e:31:3c:a7:c8:1f:a8:78:4a:bf:fb:af:2c:94:da:
e5:4d:27:b6:17:7a:fd:0a:2b:61:2c:65:24:d6:8f:
dd:8c:36:42:27:3b:f1:81:01:ad:ac:47:07:de:4a:
73:99:13:57:5a:13:7c:23:8f:3a:c3:0d:b9:16:f1:
b6:ec:1a:51:34:4f:58:c4:53:3d:c9:cb:8b:78:e4:
85:7d:02:49:39:d8:ee:26:bb:ac:b1:aa:61:39:92:
38:ac:e3:13:72:b8:96:ab:13:d2:74:16:1a:3d:aa:
c1:9f:ba:8f:72:de:9a:4e:0e:3a:c1:e1:e1:e0:54:
64:bd:bf:1e:58:b7:22:35:fe:96:9f:11:70:e9:d7:
c8:29:be:86:8f:2a:32:4b:e9:c3:ba:d8:55:3e:b4:
0d:62:1f:a2:f5:b1:57:03:0e:77:cf:1f:5d:ce:12:
34:26:17:c4:54:63:d5:05:42:0f:81:e8:27:95:e3:
ef:8a:7c:85:10:0d:74:6d:09:68:91:d0:49:98:d7:
58:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5C:B5:F2:6F:DA:52:77:07:5F:5A:BB:EE:2A:D4:AF:29:88:9B:DB
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203545.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.50.0/24
Signature Algorithm: sha256WithRSAEncryption
01:97:8f:92:fc:ef:0d:7e:56:3a:96:f4:b4:4f:a2:32:d0:9a:
e4:a8:99:a7:7f:42:1b:25:ca:a7:14:10:49:9b:1f:6e:4c:d5:
a3:2f:3a:0c:ac:a4:4b:6b:df:ad:dd:b8:e4:2b:80:80:5b:fc:
8a:34:61:6b:a5:2a:94:14:e4:1a:60:dc:06:94:84:16:93:9c:
61:4d:2d:42:aa:91:7d:2b:cf:2c:c2:8d:eb:24:9a:66:49:1c:
22:9a:8d:79:cd:ab:28:fd:1a:4d:1e:f4:04:9d:05:65:56:5b:
5c:60:94:d7:a0:7e:cf:fd:8c:36:8b:3f:f1:7d:51:4b:c0:2f:
53:8c:ac:70:79:a6:a0:76:2c:a0:4b:aa:64:7b:9e:90:e5:2f:
87:b8:20:aa:89:4f:12:38:ee:0c:d2:ed:cf:ff:97:04:f2:8e:
a4:95:ca:06:09:65:d5:9c:b6:ec:d6:4d:bc:4c:ed:61:24:dc:
45:0b:53:f4:dd:e6:64:31:61:1b:88:de:28:9b:86:c0:27:1e:
5b:25:30:ad:fd:21:c2:51:3e:16:fe:20:9e:db:1f:66:22:31:
de:34:c7:f7:3d:68:4d:80:5f:1d:18:6a:3e:85:f6:f9:a1:4c:
99:e9:4e:47:bf:b3:5c:0d:41:3c:a6:10:93:d0:64:05:1f:fa:
c6:b8:1d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 13:52:23 2026 by rpki-client