This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS207121.roa File: AS207121.roa (raw, json) Hash identifier: /UI8rFAVhbHQQin7qpEahZYmn+I7HvarsmxvtOoMLoY= Subject key identifier: C1:1E:46:A5:D6:6E:00:DA:10:57:2F:AA:51:05:74:16:8D:CD:F0:6C Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 02B79368ABFD28F34FD7A718E4BBD22FB495063F Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS207121.roa Signing time: Wed 04 Feb 2026 12:57:37 +0000 ROA not before: Wed 04 Feb 2026 12:52:37 +0000 ROA not after: Wed 03 Feb 2027 12:57:37 +0000 asID: 207121 IP address blocks: 193.38.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b7:93:68:ab:fd:28:f3:4f:d7:a7:18:e4:bb:d2:2f:b4:95:06:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:37 2026 GMT Not After : Feb 3 12:57:37 2027 GMT Subject: CN=C11E46A5D66E00DA10572FAA510574168DCDF06C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c5:45:a2:b8:62:d6:91:e9:6c:3f:0a:af:86: c9:00:f2:40:41:11:10:69:57:5e:b1:26:8d:f1:bc: fc:d3:60:d5:8c:60:8c:02:6d:b3:89:d1:ed:38:d0: 5a:dd:be:02:07:e3:52:54:de:e6:80:2f:2f:ec:60: 19:5b:55:e0:be:a4:5a:d3:9a:bd:e3:11:a0:16:a7: 5f:58:55:de:e6:f8:95:52:54:44:69:8d:e2:ff:4a: 84:49:a7:7a:28:c8:03:ee:ac:c5:3f:fa:d3:74:85: c5:33:54:b3:b3:a0:22:5b:3e:51:cb:9b:db:f7:af: 42:d0:41:9a:f3:1e:49:68:31:0f:79:dd:1b:ea:61: ea:21:34:51:79:23:99:bf:b9:99:73:71:3a:6e:d7: 60:a7:aa:27:64:99:66:85:49:ef:32:f5:4f:38:81: ca:82:fe:6c:58:91:57:6d:b6:1d:f4:11:a9:77:61: 4d:b1:1c:5b:18:b2:bd:95:9c:d8:39:4a:09:9c:b9: 4d:46:22:f6:29:a2:5f:20:7a:ec:13:24:e7:35:27: 9a:24:0c:b9:d4:23:18:27:2b:a0:ee:87:2d:96:0e: d3:a6:5f:7b:6d:96:b2:ab:f4:9c:1b:17:a1:94:bf: af:4d:56:7d:17:f9:f4:60:df:c3:a7:1b:11:a9:f2: d9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1E:46:A5:D6:6E:00:DA:10:57:2F:AA:51:05:74:16:8D:CD:F0:6C X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS207121.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.38.46.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:9d:69:99:30:35:ef:ae:a8:5f:be:b1:e1:0b:d5:b1:c2:89: b9:83:74:a2:75:4c:e8:d2:ec:69:a2:59:f5:60:5e:33:c2:b3: 8a:25:34:45:e6:fa:5a:f4:cb:01:85:b7:fb:e1:2d:76:ef:81: 16:96:80:50:42:f5:e7:8a:c3:ce:fa:53:16:9d:ec:82:52:56: 89:44:e9:72:06:bb:85:5f:33:d2:92:c1:39:90:52:4b:b5:0d: 9e:fc:3e:d6:34:d3:55:e1:f6:4c:a1:4f:59:6c:60:05:20:62: aa:f6:5b:95:20:1f:f5:be:fc:02:7e:2e:35:70:2f:ed:d4:54: df:12:c7:27:a7:28:e2:81:a9:39:5d:8b:1e:9c:c6:50:10:b2: 2e:3b:92:7a:14:3a:28:11:6d:5b:7e:0b:86:01:9b:2e:2e:5e: 99:16:bc:17:ac:a1:68:0b:13:08:2e:74:48:fb:1d:33:da:7b: 1c:05:40:63:f7:79:c2:92:e5:13:55:34:73:9d:7d:db:77:8a: 88:7c:92:6c:51:4e:b1:02:9a:2a:67:74:db:c1:e6:42:f0:ec: 13:3d:f6:cc:c6:c7:ff:c5:17:58:02:12:50:9e:a2:ce:f0:d7: 6f:7c:72:e3:bb:81:88:f7:2f:ef:bc:46:b7:ca:a7:4d:34:e8: c9:9d:ea:33 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUAreTaKv9KPNP16cY5LvSL7SVBj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyMzdaFw0yNzAyMDMxMjU3MzdaMDMxMTAvBgNV BAMTKEMxMUU0NkE1RDY2RTAwREExMDU3MkZBQTUxMDU3NDE2OERDREYwNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnxUWiuGLWkelsPwqvhskA8kBB ERBpV16xJo3xvPzTYNWMYIwCbbOJ0e040FrdvgIH41JU3uaALy/sYBlbVeC+pFrT mr3jEaAWp19YVd7m+JVSVERpjeL/SoRJp3ooyAPurMU/+tN0hcUzVLOzoCJbPlHL m9v3r0LQQZrzHkloMQ953RvqYeohNFF5I5m/uZlzcTpu12CnqidkmWaFSe8y9U84 gcqC/mxYkVdtth30Eal3YU2xHFsYsr2VnNg5SgmcuU1GIvYpol8geuwTJOc1J5ok DLnUIxgnK6Duhy2WDtOmX3ttlrKr9JwbF6GUv69NVn0X+fRg38OnGxGp8tkTAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUwR5GpdZuANoQVy+qUQV0Fo3N8GwwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjA3MTIxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSYu MA0GCSqGSIb3DQEBCwUAA4IBAQAvnWmZMDXvrqhfvrHhC9Wxwom5g3SidUzo0uxp oln1YF4zwrOKJTRF5vpa9MsBhbf74S1274EWloBQQvXnisPO+lMWneyCUlaJROly BruFXzPSksE5kFJLtQ2e/D7WNNNV4fZMoU9ZbGAFIGKq9luVIB/1vvwCfi41cC/t 1FTfEscnpyjigak5XYsenMZQELIuO5J6FDooEW1bfguGAZsuLl6ZFrwXrKFoCxMI LnRI+x0z2nscBUBj93nCkuUTVTRznX3bd4qIfJJsUU6xApoqZ3TbweZC8OwTPfbM xsf/xRdYAhJQnqLO8NdvfHLju4GI9y/vvEa3yqdNNOjJneoz -----END CERTIFICATE-----Generated at Thu Feb 5 13:53:03 2026 by rpki-client