This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS206839.roa File: AS206839.roa (raw, json) Hash identifier: U4ccNIkdbm2UldYEA0/nyrEpM2NeHg41T/S/UwWdYbQ= Subject key identifier: 8F:6C:88:C7:C5:53:E2:6F:26:58:72:A3:D4:CC:37:46:24:3F:BD:8E Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 6F7F65C79E0B8B7D5D83E206F0BD4B63DFD805F4 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS206839.roa Signing time: Wed 04 Feb 2026 12:57:37 +0000 ROA not before: Wed 04 Feb 2026 12:52:37 +0000 ROA not after: Wed 03 Feb 2027 12:57:37 +0000 asID: 206839 IP address blocks: 176.53.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:7f:65:c7:9e:0b:8b:7d:5d:83:e2:06:f0:bd:4b:63:df:d8:05:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:37 2026 GMT Not After : Feb 3 12:57:37 2027 GMT Subject: CN=8F6C88C7C553E26F265872A3D4CC3746243FBD8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2f:a6:79:a9:d2:59:1b:5d:81:c2:80:46:6f: ab:22:c0:be:ee:ff:68:74:db:f3:09:04:2f:cd:4c: 12:1d:a1:ff:47:24:5b:c6:7a:f7:f1:83:36:3d:0f: 17:7c:74:4a:1b:73:49:72:82:3f:26:6f:fd:8f:21: ea:2c:35:b4:b4:67:36:5c:9e:09:4b:40:9e:96:22: ab:ab:79:3b:b9:f4:ed:53:81:a4:f2:b2:60:60:43: 5a:c8:f0:28:58:01:5b:2c:d1:b7:2e:32:60:63:0c: 8d:ea:f3:9d:0d:15:ec:ad:77:b1:2d:a6:85:e8:6e: 43:e5:92:d6:a6:a7:0f:e3:c2:1f:1b:58:77:48:3d: 1d:23:25:2d:51:1f:fe:77:b3:c1:94:59:f3:3a:06: b0:5e:29:10:55:b1:2f:fd:af:f9:13:49:a5:a8:db: 20:c7:9f:9e:92:23:56:a4:9b:92:21:48:88:5b:2a: 16:4e:08:e6:f8:f2:2f:e6:39:ef:b4:06:9b:58:51: 2c:7f:78:a3:e4:8d:4e:16:a6:71:c4:ad:fe:c4:fe: d8:5f:75:5c:a6:14:fa:ec:2a:b8:fb:d0:f9:f6:92: 79:40:fd:ab:69:32:1f:26:b3:75:68:bb:9f:83:df: 32:27:9f:55:f1:16:14:74:02:57:40:27:9f:e3:57: 72:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6C:88:C7:C5:53:E2:6F:26:58:72:A3:D4:CC:37:46:24:3F:BD:8E X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS206839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.53.170.0/24 Signature Algorithm: sha256WithRSAEncryption 14:61:91:75:b1:47:8f:a4:30:31:e3:54:2e:9d:20:80:52:8c: 25:05:91:d8:f4:3b:39:36:61:ff:61:9f:b6:2d:2e:ef:c3:46: 05:00:8a:aa:b5:6c:5d:1b:c1:6e:05:ca:db:73:00:85:4e:00: 45:e3:35:c4:c8:01:a6:21:d4:78:12:ca:11:24:6c:e0:0f:c0: 69:f8:b9:ee:8c:86:52:5c:67:b4:27:37:e9:be:9a:8d:d0:b9: d8:61:25:4b:4f:dd:c0:3e:1b:7a:22:2f:a6:83:8c:90:ef:5c: 50:b2:0e:ca:b8:3f:38:14:e8:c6:87:f4:69:37:c4:00:48:6e: 6d:3c:b8:56:ed:c1:9b:1a:af:4f:af:be:3b:02:b9:ef:9a:db: d8:e7:38:10:5b:4a:7f:a0:cd:16:b7:19:6f:20:1f:43:2f:1d: 2c:4f:b1:c8:3a:b2:7a:13:55:09:b7:56:d1:79:33:95:fc:0a: 90:17:30:d4:18:0e:bd:4b:53:59:f4:7e:1a:4e:3b:51:b3:f5: 56:b7:e5:6d:3c:ad:10:23:7f:ab:6b:2b:05:69:95:1c:70:43: aa:32:56:5a:79:0a:5f:a2:99:b6:1d:2a:b3:7b:df:89:08:29: e7:a2:49:0d:c0:63:aa:b8:00:e0:d9:17:11:3d:c1:a6:74:a5: d2:75:9c:68 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUb39lx54Li31dg+IG8L1LY9/YBfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyMzdaFw0yNzAyMDMxMjU3MzdaMDMxMTAvBgNV BAMTKDhGNkM4OEM3QzU1M0UyNkYyNjU4NzJBM0Q0Q0MzNzQ2MjQzRkJEOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRL6Z5qdJZG12BwoBGb6siwL7u /2h02/MJBC/NTBIdof9HJFvGevfxgzY9Dxd8dEobc0lygj8mb/2PIeosNbS0ZzZc nglLQJ6WIqureTu59O1TgaTysmBgQ1rI8ChYAVss0bcuMmBjDI3q850NFeytd7Et poXobkPlktampw/jwh8bWHdIPR0jJS1RH/53s8GUWfM6BrBeKRBVsS/9r/kTSaWo 2yDHn56SI1akm5IhSIhbKhZOCOb48i/mOe+0BptYUSx/eKPkjU4WpnHErf7E/thf dVymFPrsKrj70Pn2knlA/atpMh8ms3Vou5+D3zInn1XxFhR0AldAJ5/jV3LHAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUj2yIx8VT4m8mWHKj1Mw3RiQ/vY4wHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjA2ODM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDWq MA0GCSqGSIb3DQEBCwUAA4IBAQAUYZF1sUePpDAx41QunSCAUowlBZHY9Ds5NmH/ YZ+2LS7vw0YFAIqqtWxdG8FuBcrbcwCFTgBF4zXEyAGmIdR4EsoRJGzgD8Bp+Lnu jIZSXGe0JzfpvpqN0LnYYSVLT93APht6Ii+mg4yQ71xQsg7KuD84FOjGh/RpN8QA SG5tPLhW7cGbGq9Pr747ArnvmtvY5zgQW0p/oM0WtxlvIB9DLx0sT7HIOrJ6E1UJ t1bReTOV/AqQFzDUGA69S1NZ9H4aTjtRs/VWt+VtPK0QI3+raysFaZUccEOqMlZa eQpfopm2HSqze9+JCCnnokkNwGOquADg2RcRPcGmdKXSdZxo -----END CERTIFICATE-----Generated at Thu Feb 5 13:59:04 2026 by rpki-client