This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203796.roa File: AS203796.roa (raw, json) Hash identifier: OWWRKv8OwHo8aN+/228knPqoCL7HuN8KILkwdr4VhHE= Subject key identifier: 40:98:3D:88:DF:E9:5E:C6:FC:D6:BE:A8:64:23:A4:FD:D0:94:BA:0A Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 20EF04A700A896FD6565C14E8751C6CF8234832F Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203796.roa Signing time: Wed 04 Feb 2026 12:57:40 +0000 ROA not before: Wed 04 Feb 2026 12:52:40 +0000 ROA not after: Wed 03 Feb 2027 12:57:40 +0000 asID: 203796 IP address blocks: 141.98.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ef:04:a7:00:a8:96:fd:65:65:c1:4e:87:51:c6:cf:82:34:83:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:40 2026 GMT Not After : Feb 3 12:57:40 2027 GMT Subject: CN=40983D88DFE95EC6FCD6BEA86423A4FDD094BA0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a9:9f:55:06:c3:3b:f2:32:1d:95:9c:fd:87: 47:b4:b3:a1:7b:8a:ad:45:9e:22:ad:11:a7:f0:83: e5:0e:2d:a4:ae:0e:4a:b4:bc:5f:9b:f1:94:ea:07: a4:76:b0:08:3b:b2:54:19:80:6c:4b:40:7f:0b:96: da:16:a2:b8:55:2d:a4:61:9f:d4:50:a0:ed:44:a6: 51:07:54:5c:bd:10:b0:b2:39:81:dd:41:84:a4:8b: ba:1b:c4:66:2e:51:cc:32:7c:ac:45:82:76:35:f8: d7:4f:8c:c6:a3:b2:93:14:84:d2:35:a3:72:6f:c8: 3c:4a:69:ea:79:a1:7e:80:c7:df:3f:ae:9a:ff:76: 04:90:ca:64:30:6c:ec:04:a7:1e:50:fa:aa:1f:72: 52:0e:e2:af:eb:bf:04:44:b7:b0:6b:2d:d0:dd:3a: 6e:4a:db:06:bd:d2:bd:07:ce:74:b3:0d:0c:f6:74: 35:24:10:32:08:be:24:d6:5f:fe:17:9b:1a:a8:0d: 39:c3:53:2a:ae:0e:6f:55:26:ea:8a:25:1c:3e:fe: ad:e4:0a:c5:e5:ff:4c:ad:86:e4:15:b0:b6:8a:0d: 60:04:28:f5:63:da:cb:a4:71:90:3b:96:2a:f7:48: d7:b3:ab:05:e8:74:a2:65:ec:10:17:29:5c:73:85: 7f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:98:3D:88:DF:E9:5E:C6:FC:D6:BE:A8:64:23:A4:FD:D0:94:BA:0A X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS203796.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.49.0/24 Signature Algorithm: sha256WithRSAEncryption 57:cd:d4:7e:aa:7c:b7:79:76:4a:ac:dc:e4:6e:a9:f5:0b:06: 75:d9:96:6b:c0:2a:10:c7:64:8d:cc:a0:4a:46:5d:0b:5e:d1: 43:23:05:06:ba:3c:c5:a3:9c:2e:0e:f3:d7:b4:15:94:30:d8: 62:0f:2d:dd:51:d8:ee:d4:d8:3a:82:ef:4f:9e:c5:b3:f0:48: 31:69:b3:10:47:09:62:c8:ba:4a:df:41:da:09:2e:e5:1f:57: e0:d2:dc:2a:85:df:3f:fa:db:b2:61:ec:d2:ad:d0:4c:97:95: 7e:a8:e1:d5:9f:d3:22:90:fc:b7:ad:e2:17:0e:47:0c:9f:31: 24:44:63:2b:a1:41:e1:e8:82:0d:f5:51:18:ae:b9:ba:a3:9b: 88:81:58:21:f6:da:47:a1:7c:42:96:19:38:0f:99:ea:f9:bd: 69:7b:cc:d2:56:24:b1:09:01:92:8b:dd:75:4b:1f:31:a1:42: 87:fc:72:40:13:cf:f5:87:e1:76:e2:e2:bd:ff:a0:01:b3:f6: f3:08:94:1a:11:5b:7b:ec:4b:e9:58:84:f6:25:41:07:70:5c: 7b:41:f4:97:62:42:11:21:60:2b:47:ee:f3:c0:a8:4e:5d:18: 49:fb:62:f3:9c:96:cc:9c:6f:d8:ba:a2:d3:fa:1f:a3:a9:38: 27:a8:1a:b6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUIO8EpwColv1lZcFOh1HGz4I0gy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNDBaFw0yNzAyMDMxMjU3NDBaMDMxMTAvBgNV BAMTKDQwOTgzRDg4REZFOTVFQzZGQ0Q2QkVBODY0MjNBNEZERDA5NEJBMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNqZ9VBsM78jIdlZz9h0e0s6F7 iq1FniKtEafwg+UOLaSuDkq0vF+b8ZTqB6R2sAg7slQZgGxLQH8LltoWorhVLaRh n9RQoO1EplEHVFy9ELCyOYHdQYSki7obxGYuUcwyfKxFgnY1+NdPjMajspMUhNI1 o3JvyDxKaep5oX6Ax98/rpr/dgSQymQwbOwEpx5Q+qofclIO4q/rvwREt7BrLdDd Om5K2wa90r0HznSzDQz2dDUkEDIIviTWX/4XmxqoDTnDUyquDm9VJuqKJRw+/q3k CsXl/0ythuQVsLaKDWAEKPVj2sukcZA7lir3SNezqwXodKJl7BAXKVxzhX/XAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUQJg9iN/pXsb81r6oZCOk/dCUugowHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjAzNzk2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWIx MA0GCSqGSIb3DQEBCwUAA4IBAQBXzdR+qny3eXZKrNzkbqn1CwZ12ZZrwCoQx2SN zKBKRl0LXtFDIwUGujzFo5wuDvPXtBWUMNhiDy3dUdju1Ng6gu9PnsWz8EgxabMQ RwliyLpK30HaCS7lH1fg0twqhd8/+tuyYezSrdBMl5V+qOHVn9MikPy3reIXDkcM nzEkRGMroUHh6IIN9VEYrrm6o5uIgVgh9tpHoXxClhk4D5nq+b1pe8zSViSxCQGS i911Sx8xoUKH/HJAE8/1h+F24uK9/6ABs/bzCJQaEVt77EvpWIT2JUEHcFx7QfSX YkIRIWArR+7zwKhOXRhJ+2LznJbMnG/YuqLT+h+jqTgnqBq2 -----END CERTIFICATE-----Generated at Thu Feb 5 13:53:53 2026 by rpki-client