This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS206064.roa File: AS206064.roa (raw, json) Hash identifier: 3KRjMu/tX4L6CFLIGUoxFPtcI+hs23fJBBdZ+FXmfts= Subject key identifier: 58:FB:82:82:8E:96:8E:D2:97:29:CB:93:8F:6A:A4:5F:B1:1D:01:B9 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 48F078150D73975BD42D05BB497900230EE5B78E Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS206064.roa Signing time: Wed 04 Feb 2026 12:57:49 +0000 ROA not before: Wed 04 Feb 2026 12:52:49 +0000 ROA not after: Wed 03 Feb 2027 12:57:49 +0000 asID: 206064 IP address blocks: 176.53.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:f0:78:15:0d:73:97:5b:d4:2d:05:bb:49:79:00:23:0e:e5:b7:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:49 2026 GMT Not After : Feb 3 12:57:49 2027 GMT Subject: CN=58FB82828E968ED29729CB938F6AA45FB11D01B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:61:39:fc:bf:fa:63:ee:79:41:0e:8c:46:09: 93:6e:b5:46:80:03:03:92:14:1d:df:c6:56:07:26: 0a:31:25:20:3f:49:52:a2:b7:92:9b:f8:32:79:8b: 46:b6:bc:36:6e:ca:21:c0:4e:a8:d4:8f:c4:d1:f0: e3:3d:01:bc:fa:c6:ae:10:1f:c9:8f:56:7d:35:6c: b3:6d:d6:53:62:8c:9b:dd:a2:2b:e9:b6:f2:f4:2d: 74:3f:15:6c:f8:e2:32:6e:cd:d9:a5:ae:5e:a1:82: 5f:55:b8:8e:c2:2a:de:33:0a:0c:1f:b8:50:8f:93: 25:7c:68:a2:50:a0:5d:7c:3b:82:74:f6:2b:53:05: 49:dc:d4:f7:f0:74:a5:dc:27:9a:d2:f7:d2:d2:35: b3:dd:51:87:52:74:9d:6a:28:f4:de:52:27:81:76: f4:df:cb:57:21:ae:f2:19:df:6b:5c:f6:6f:ed:bc: fd:0b:39:8a:b2:36:36:5c:40:a0:63:69:f2:27:49: be:4e:8c:fa:ef:53:d2:b3:fe:f3:35:c8:71:08:4f: f5:7d:8f:01:ea:21:55:b0:f4:1e:53:4d:fd:53:9d: e5:90:3f:5e:60:5b:bb:13:89:c8:c7:6e:62:1e:78: 84:27:9d:09:dc:7d:44:54:6b:99:64:64:fa:dd:86: 74:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FB:82:82:8E:96:8E:D2:97:29:CB:93:8F:6A:A4:5F:B1:1D:01:B9 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS206064.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.53.171.0/24 Signature Algorithm: sha256WithRSAEncryption 97:61:43:08:01:22:6a:db:0b:bc:b7:ce:e2:60:ff:01:33:ca: e2:9b:d9:32:69:15:81:19:43:cf:ae:5e:2a:7c:54:fb:ca:ee: 41:04:a8:a8:38:07:bf:3e:d4:13:09:4b:79:4e:c8:ae:11:76: 30:f6:ba:eb:6a:85:dd:8b:c9:88:e2:13:50:9e:98:a3:63:ca: 1d:da:1a:20:c1:56:7d:28:c3:3c:99:8a:5c:07:42:8f:9c:fc: 03:1e:c0:65:84:92:d1:ad:30:7a:c0:f2:40:73:41:cb:f9:2a: 5e:76:94:22:df:bf:b6:5a:ef:28:ce:67:29:87:c1:98:56:96: 9d:ac:42:1e:b3:2f:b1:38:93:e2:91:f6:6d:ad:2c:75:bc:3a: b1:7f:34:92:e4:96:40:0b:54:b9:d1:3a:ae:b3:c9:b9:97:d4: 93:ed:3a:bf:33:70:49:c3:81:e3:c1:41:c8:33:86:b7:b7:28: 88:8b:fa:54:13:d6:f7:ed:d4:31:b3:5d:5d:f7:f0:95:f6:c2: 6c:6e:64:bb:84:60:4e:53:b1:a4:6e:e1:d9:59:04:da:58:70: 8d:b0:3d:89:30:c3:00:e1:a5:ab:06:d1:7f:f5:97:8e:2d:0d: c7:40:1f:ae:4e:4c:dd:7e:cd:36:0b:d6:33:24:4f:3f:3d:60: 09:4e:47:e3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUSPB4FQ1zl1vULQW7SXkAIw7lt44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNDlaFw0yNzAyMDMxMjU3NDlaMDMxMTAvBgNV BAMTKDU4RkI4MjgyOEU5NjhFRDI5NzI5Q0I5MzhGNkFBNDVGQjExRDAxQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQYTn8v/pj7nlBDoxGCZNutUaA AwOSFB3fxlYHJgoxJSA/SVKit5Kb+DJ5i0a2vDZuyiHATqjUj8TR8OM9Abz6xq4Q H8mPVn01bLNt1lNijJvdoivptvL0LXQ/FWz44jJuzdmlrl6hgl9VuI7CKt4zCgwf uFCPkyV8aKJQoF18O4J09itTBUnc1PfwdKXcJ5rS99LSNbPdUYdSdJ1qKPTeUieB dvTfy1chrvIZ32tc9m/tvP0LOYqyNjZcQKBjafInSb5OjPrvU9Kz/vM1yHEIT/V9 jwHqIVWw9B5TTf1TneWQP15gW7sTicjHbmIeeIQnnQncfURUa5lkZPrdhnQDAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUWPuCgo6WjtKXKcuTj2qkX7EdAbkwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjA2MDY0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDWr MA0GCSqGSIb3DQEBCwUAA4IBAQCXYUMIASJq2wu8t87iYP8BM8rim9kyaRWBGUPP rl4qfFT7yu5BBKioOAe/PtQTCUt5TsiuEXYw9rrraoXdi8mI4hNQnpijY8od2hog wVZ9KMM8mYpcB0KPnPwDHsBlhJLRrTB6wPJAc0HL+SpedpQi37+2Wu8ozmcph8GY VpadrEIesy+xOJPikfZtrSx1vDqxfzSS5JZAC1S50Tqus8m5l9ST7Tq/M3BJw4Hj wUHIM4a3tyiIi/pUE9b37dQxs11d9/CV9sJsbmS7hGBOU7GkbuHZWQTaWHCNsD2J MMMA4aWrBtF/9ZeOLQ3HQB+uTkzdfs02C9YzJE8/PWAJTkfj -----END CERTIFICATE-----Generated at Thu Feb 5 13:53:53 2026 by rpki-client