This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS206592.roa File: AS206592.roa (raw, json) Hash identifier: azZ2hgPTxV8DfWK6PxMIbZZi7WaLUT6YbeyKKH+rhrU= Subject key identifier: 29:18:53:E0:DE:4E:38:AA:5C:02:AF:99:BF:BA:36:2F:99:EF:1F:4E Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 5071334FC0CA827BC989A5BA1BE6AD18582DC0FB Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS206592.roa Signing time: Wed 04 Feb 2026 12:57:33 +0000 ROA not before: Wed 04 Feb 2026 12:52:33 +0000 ROA not after: Wed 03 Feb 2027 12:57:33 +0000 asID: 206592 IP address blocks: 85.235.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:71:33:4f:c0:ca:82:7b:c9:89:a5:ba:1b:e6:ad:18:58:2d:c0:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:33 2026 GMT Not After : Feb 3 12:57:33 2027 GMT Subject: CN=291853E0DE4E38AA5C02AF99BFBA362F99EF1F4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c3:ad:1d:64:f9:5e:1d:af:1f:d3:93:03:41: 90:97:9f:5c:26:fd:19:4a:b6:b8:0e:4b:e0:35:b9: 7e:72:6d:84:5d:90:87:21:89:51:48:ac:ce:09:a3: a6:07:8b:1a:22:8f:c7:15:d1:e1:b0:dd:ca:05:da: 1b:8d:18:d3:13:31:ab:d3:64:57:1d:86:08:89:65: d4:5a:69:69:6f:76:15:c0:11:4f:de:d4:9e:9a:55: 5f:05:eb:73:2d:6d:4a:41:d7:43:eb:05:67:cb:0d: ce:d1:09:cb:02:dc:88:b4:e3:70:7b:a5:e8:c9:7a: ad:6c:ae:f9:6e:bd:81:9c:5c:84:54:5d:4b:03:72: 70:6b:81:9c:d8:04:32:55:a6:02:68:28:15:6a:b0: 41:e2:ac:8c:8b:08:bf:50:3d:7d:9f:8c:5f:8d:cd: c5:e2:9e:22:49:c1:c0:ac:c5:df:c7:9f:ed:6c:e2: 87:30:fa:58:27:f2:b2:b1:7c:92:61:0f:a0:07:65: ad:7e:6a:f0:fc:0a:cf:12:54:6c:d7:53:d7:cf:f4: 87:77:ad:8e:00:9f:9f:c6:4f:63:26:43:61:ec:e4: 28:3c:40:e8:3d:e6:53:45:a8:23:18:93:c8:6a:9d: 17:b2:02:ba:dc:17:b2:77:cf:57:b6:df:09:b9:3a: cb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:18:53:E0:DE:4E:38:AA:5C:02:AF:99:BF:BA:36:2F:99:EF:1F:4E X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS206592.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.235.72.0/24 Signature Algorithm: sha256WithRSAEncryption 72:b3:4d:36:68:75:8d:49:0a:c9:b5:a4:ee:66:cc:dd:6c:e7: 49:ef:30:80:56:a8:22:6f:a7:f6:a6:89:52:a5:a1:a6:19:18: 68:d5:fc:7b:3d:04:42:2e:15:db:22:50:c8:d9:5f:6e:97:2f: 6b:a7:b1:10:0e:36:07:c6:5b:2e:99:60:52:4e:ff:9b:eb:ee: 91:8f:a3:2d:44:3b:11:84:80:07:85:90:1e:d4:1b:48:1a:15: 78:4a:77:5a:da:19:95:e3:02:b5:e7:5a:25:8c:1e:cb:cc:3e: 7e:18:8c:2a:e7:05:90:dc:cc:33:d5:04:f0:cd:5a:87:aa:0f: f1:e4:5a:20:cb:f6:89:53:97:8d:fc:3a:2c:9f:d0:ca:34:92: 11:50:2d:f7:88:20:c4:3d:17:1e:62:48:2f:14:cf:36:f8:0c: 37:f3:2c:b6:ec:ad:fa:31:5d:31:a3:a0:f9:64:cf:1d:59:41: f8:11:77:bb:1c:6a:3f:82:1f:9b:61:71:d7:33:50:a9:0c:fc: 7c:08:3f:93:f9:c4:f2:a6:b7:14:53:90:32:be:21:13:29:3c: 2a:ab:fb:6d:74:8a:5b:99:4a:8b:b1:b0:7f:57:0a:5b:1c:f3: 58:75:af:33:00:1e:07:8b:14:aa:00:e2:3e:24:8f:9c:d1:09: 5d:cd:5a:52 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUUHEzT8DKgnvJiaW6G+atGFgtwPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyMzNaFw0yNzAyMDMxMjU3MzNaMDMxMTAvBgNV BAMTKDI5MTg1M0UwREU0RTM4QUE1QzAyQUY5OUJGQkEzNjJGOTlFRjFGNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClw60dZPleHa8f05MDQZCXn1wm /RlKtrgOS+A1uX5ybYRdkIchiVFIrM4Jo6YHixoij8cV0eGw3coF2huNGNMTMavT ZFcdhgiJZdRaaWlvdhXAEU/e1J6aVV8F63MtbUpB10PrBWfLDc7RCcsC3Ii043B7 pejJeq1srvluvYGcXIRUXUsDcnBrgZzYBDJVpgJoKBVqsEHirIyLCL9QPX2fjF+N zcXiniJJwcCsxd/Hn+1s4ocw+lgn8rKxfJJhD6AHZa1+avD8Cs8SVGzXU9fP9Id3 rY4An5/GT2MmQ2Hs5Cg8QOg95lNFqCMYk8hqnReyArrcF7J3z1e23wm5OssbAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUKRhT4N5OOKpcAq+Zv7o2L5nvH04wHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjA2NTkyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVetI MA0GCSqGSIb3DQEBCwUAA4IBAQBys002aHWNSQrJtaTuZszdbOdJ7zCAVqgib6f2 polSpaGmGRho1fx7PQRCLhXbIlDI2V9uly9rp7EQDjYHxlsumWBSTv+b6+6Rj6Mt RDsRhIAHhZAe1BtIGhV4Snda2hmV4wK151oljB7LzD5+GIwq5wWQ3Mwz1QTwzVqH qg/x5Fogy/aJU5eN/Dosn9DKNJIRUC33iCDEPRceYkgvFM82+Aw38yy27K36MV0x o6D5ZM8dWUH4EXe7HGo/gh+bYXHXM1CpDPx8CD+T+cTyprcUU5AyviETKTwqq/tt dIpbmUqLsbB/VwpbHPNYda8zAB4HixSqAOI+JI+c0QldzVpS -----END CERTIFICATE-----Generated at Thu Feb 5 13:53:00 2026 by rpki-client