This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS206668.roa File: AS206668.roa (raw, json) Hash identifier: 7suMuUt+r68qMYwN+K69xzVF/TkHl9W1EK+JJePMyqk= Subject key identifier: 3B:FF:66:A3:EA:96:BE:79:A1:AE:6A:A1:72:87:64:75:EF:46:4A:AD Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 28E171D8A0B292A02D9DBBF1BF81E50A3D854D9F Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS206668.roa Signing time: Wed 04 Feb 2026 12:57:45 +0000 ROA not before: Wed 04 Feb 2026 12:52:45 +0000 ROA not after: Wed 03 Feb 2027 12:57:45 +0000 asID: 206668 IP address blocks: 185.231.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e1:71:d8:a0:b2:92:a0:2d:9d:bb:f1:bf:81:e5:0a:3d:85:4d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:45 2026 GMT Not After : Feb 3 12:57:45 2027 GMT Subject: CN=3BFF66A3EA96BE79A1AE6AA172876475EF464AAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:48:5a:fd:6e:c9:c4:28:06:61:d4:40:42:99: 44:f3:9e:22:0b:ae:3f:c1:9c:00:0b:69:0f:48:83: 48:da:72:a9:4e:0a:07:28:cd:85:c4:6a:dd:98:26: 49:85:70:23:34:ee:7b:e9:19:2a:65:a6:86:2b:c2: 6f:f5:e1:fd:ef:55:9b:9b:29:7b:6e:fb:a5:fa:d4: 47:fe:1b:44:5f:c9:9d:49:01:c8:ed:e7:86:e7:7e: e4:23:8e:62:6b:6b:eb:79:ea:db:db:51:fb:fb:94: 01:32:49:3c:d3:15:11:e5:23:8f:cb:a8:b6:a8:8c: 39:cd:5b:1e:11:c6:61:65:52:be:74:76:7e:9d:c0: 89:7e:6b:1e:ac:b4:61:9d:a4:75:b1:60:f9:c9:18: 47:98:8b:29:f8:8d:d6:d2:ea:d3:8a:64:74:c3:11: 20:5a:4d:4c:60:0a:29:c1:c5:bb:bc:0d:d4:8a:4d: dc:9b:33:99:a5:d7:56:7f:85:3b:ef:ad:0b:53:cb: 0f:8f:ac:ce:ff:f0:bb:84:58:b2:db:60:4f:e3:eb: b5:2d:f2:40:24:5b:3a:12:8b:e6:93:55:9d:e9:4b: 76:65:4d:83:14:51:13:62:06:16:07:18:12:15:06: 82:ed:a9:4c:7f:ab:ed:df:ab:93:26:3e:09:e8:0f: 9d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FF:66:A3:EA:96:BE:79:A1:AE:6A:A1:72:87:64:75:EF:46:4A:AD X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS206668.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.225.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:4d:a8:27:b9:3d:a7:4b:50:10:8d:74:69:84:ef:0c:41:01: 4d:61:eb:1f:1f:b0:44:c3:4c:c5:2f:92:48:6d:fa:06:d0:a9: 7a:7e:25:d7:b7:41:66:9b:ac:b9:86:f7:dc:98:d4:90:bf:14: df:3e:67:58:05:de:67:ab:7a:d1:ac:00:9d:06:2d:66:b8:16: 0e:b6:d1:2e:08:5f:10:af:c4:ff:2e:c3:b8:47:79:14:51:63: 3b:2a:4e:a8:72:6b:2a:5a:d1:31:d4:21:fd:41:2b:ca:3f:f9: 34:aa:17:7e:81:81:d8:99:0f:2e:be:31:88:8a:ae:cb:19:55: 91:ed:64:b7:b4:e3:71:5f:bb:c9:cd:10:74:90:b6:d4:11:13: ea:a6:16:aa:1e:4f:64:95:6b:22:ab:c7:50:63:33:29:75:80: 54:c9:7f:b5:35:c1:ec:49:1a:35:eb:b4:1f:60:f4:b5:8b:30: 95:a5:00:e6:50:c9:c0:a7:9d:8f:34:4a:be:b3:88:de:2a:57: 5a:4b:d6:98:78:ba:30:4f:08:23:e5:33:73:64:01:10:08:1f: 65:22:f9:bc:09:05:98:51:ad:f4:97:fa:8f:63:4d:d4:33:18: 19:0a:fd:1b:57:b4:40:ef:9b:3f:c9:0f:79:84:03:34:2a:ab: c7:91:a6:27 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUKOFx2KCykqAtnbvxv4HlCj2FTZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNDVaFw0yNzAyMDMxMjU3NDVaMDMxMTAvBgNV BAMTKDNCRkY2NkEzRUE5NkJFNzlBMUFFNkFBMTcyODc2NDc1RUY0NjRBQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTSFr9bsnEKAZh1EBCmUTzniIL rj/BnAALaQ9Ig0jacqlOCgcozYXEat2YJkmFcCM07nvpGSplpoYrwm/14f3vVZub KXtu+6X61Ef+G0RfyZ1JAcjt54bnfuQjjmJra+t56tvbUfv7lAEySTzTFRHlI4/L qLaojDnNWx4RxmFlUr50dn6dwIl+ax6stGGdpHWxYPnJGEeYiyn4jdbS6tOKZHTD ESBaTUxgCinBxbu8DdSKTdybM5ml11Z/hTvvrQtTyw+PrM7/8LuEWLLbYE/j67Ut 8kAkWzoSi+aTVZ3pS3ZlTYMUURNiBhYHGBIVBoLtqUx/q+3fq5MmPgnoD52vAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUO/9mo+qWvnmhrmqhcodkde9GSq0wHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjA2NjY4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuefh MA0GCSqGSIb3DQEBCwUAA4IBAQB7TagnuT2nS1AQjXRphO8MQQFNYesfH7BEw0zF L5JIbfoG0Kl6fiXXt0Fmm6y5hvfcmNSQvxTfPmdYBd5nq3rRrACdBi1muBYOttEu CF8Qr8T/LsO4R3kUUWM7Kk6ocmsqWtEx1CH9QSvKP/k0qhd+gYHYmQ8uvjGIiq7L GVWR7WS3tONxX7vJzRB0kLbUERPqphaqHk9klWsiq8dQYzMpdYBUyX+1NcHsSRo1 67QfYPS1izCVpQDmUMnAp52PNEq+s4jeKldaS9aYeLowTwgj5TNzZAEQCB9lIvm8 CQWYUa30l/qPY03UMxgZCv0bV7RA75s/yQ95hAM0KqvHkaYn -----END CERTIFICATE-----Generated at Thu Feb 5 13:54:29 2026 by rpki-client