This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS210529.roa File: AS210529.roa (raw, json) Hash identifier: JYHMzAjYXznRWJZtjik6i8os0oyN8pNr4FnA2dT+Ud4= Subject key identifier: A3:DD:3F:84:F9:E0:81:86:C2:B4:23:1C:49:A3:D0:C1:2D:AA:F1:50 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 1CA5A2D574DD2B2D2A2741133C4340A0F978D534 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS210529.roa Signing time: Wed 04 Feb 2026 12:57:34 +0000 ROA not before: Wed 04 Feb 2026 12:52:34 +0000 ROA not after: Wed 03 Feb 2027 12:57:34 +0000 asID: 210529 IP address blocks: 5.133.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:a5:a2:d5:74:dd:2b:2d:2a:27:41:13:3c:43:40:a0:f9:78:d5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:34 2026 GMT Not After : Feb 3 12:57:34 2027 GMT Subject: CN=A3DD3F84F9E08186C2B4231C49A3D0C12DAAF150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:80:21:1d:b7:5d:df:44:e7:14:90:d8:23:03: b3:33:1a:59:8f:a7:98:23:ea:61:53:64:31:bd:fc: b0:49:b0:4c:34:8f:8b:14:0a:cb:e0:3c:22:47:a7: cc:90:30:59:ff:f1:6f:69:99:a8:65:84:dc:f0:7c: fc:40:ac:e5:44:56:48:2c:df:2b:07:0f:c3:73:bc: 04:c8:8e:c6:f7:bf:33:b4:9c:5c:f9:2e:e7:91:27: 71:ed:a0:0d:cb:01:23:e5:51:3a:27:61:48:79:2e: e1:49:27:28:b8:f5:6e:68:4d:33:2f:62:58:c7:8e: a7:3a:66:6c:13:da:91:85:14:1e:ec:45:94:37:5b: 6d:23:bd:7e:f5:48:f9:b8:6b:0d:84:84:d9:26:44: 7b:08:78:13:bc:42:88:7f:0d:e5:17:24:d4:07:c7: ab:29:7a:5d:0a:8a:38:5b:9f:c6:ce:e0:fb:cd:76: e0:51:f8:51:27:55:1d:dc:b5:36:7c:70:40:ed:1c: 67:7c:92:b0:cb:96:1f:3a:72:82:87:c4:69:b5:22: 44:e1:b3:5b:18:d2:dd:ac:71:d0:12:f0:bf:d4:02: ca:3c:fe:8d:9d:bd:33:36:e6:34:c6:f5:df:c5:ba: fc:9a:97:72:63:00:e3:84:4d:5d:d5:05:9c:4a:03: 2c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DD:3F:84:F9:E0:81:86:C2:B4:23:1C:49:A3:D0:C1:2D:AA:F1:50 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS210529.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.103.0/24 Signature Algorithm: sha256WithRSAEncryption ad:bd:66:53:1d:e8:f0:26:1c:f5:f7:32:ce:49:15:82:8f:55: 96:5d:2b:e4:44:c0:f7:f9:a1:a4:47:51:b2:50:9e:fe:3e:9f: c8:b0:6f:bb:15:bc:35:33:6c:6f:fa:68:d7:1b:e3:5c:b9:dd: bd:b1:e8:a4:39:da:e2:bf:cf:64:77:56:36:6d:a5:59:cf:51: 3f:e6:6a:ed:98:38:20:bf:70:d0:d5:92:78:16:2f:cb:0e:c8: 43:46:e9:a0:da:0c:9f:ec:4b:f6:f3:e1:20:ac:84:73:98:53: a7:c1:f8:b3:1c:a8:2c:a6:cc:42:32:2a:8e:25:7b:bd:05:26: 29:e3:64:78:22:38:da:73:1e:7c:3c:c2:21:0a:ba:bf:f3:20: 47:cc:d4:5c:56:d8:80:a1:03:d0:db:a4:9e:4e:f6:5b:b3:03: c3:09:e7:d7:89:72:a1:6d:71:02:87:36:21:93:dc:ba:bb:97: ea:0f:bf:02:32:0c:12:d6:d5:37:f8:d8:82:c3:0d:80:4e:13: ba:58:55:b6:74:bc:92:df:fb:14:ed:6b:ee:95:4c:e2:a2:a4: e8:55:c0:78:da:db:fd:26:6b:c6:6c:6f:63:6e:41:0a:e2:ff: df:b2:c8:07:50:ff:b8:57:fa:b8:b0:3d:0e:5e:2c:6b:88:ef: f9:97:1a:b0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUHKWi1XTdKy0qJ0ETPENAoPl41TQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyMzRaFw0yNzAyMDMxMjU3MzRaMDMxMTAvBgNV BAMTKEEzREQzRjg0RjlFMDgxODZDMkI0MjMxQzQ5QTNEMEMxMkRBQUYxNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSgCEdt13fROcUkNgjA7MzGlmP p5gj6mFTZDG9/LBJsEw0j4sUCsvgPCJHp8yQMFn/8W9pmahlhNzwfPxArOVEVkgs 3ysHD8NzvATIjsb3vzO0nFz5LueRJ3HtoA3LASPlUTonYUh5LuFJJyi49W5oTTMv YljHjqc6ZmwT2pGFFB7sRZQ3W20jvX71SPm4aw2EhNkmRHsIeBO8Qoh/DeUXJNQH x6spel0Kijhbn8bO4PvNduBR+FEnVR3ctTZ8cEDtHGd8krDLlh86coKHxGm1IkTh s1sY0t2scdAS8L/UAso8/o2dvTM25jTG9d/Fuvyal3JjAOOETV3VBZxKAyzJAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUo90/hPnggYbCtCMcSaPQwS2q8VAwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjEwNTI5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABYVn MA0GCSqGSIb3DQEBCwUAA4IBAQCtvWZTHejwJhz19zLOSRWCj1WWXSvkRMD3+aGk R1GyUJ7+Pp/IsG+7Fbw1M2xv+mjXG+Ncud29seikOdriv89kd1Y2baVZz1E/5mrt mDggv3DQ1ZJ4Fi/LDshDRumg2gyf7Ev28+EgrIRzmFOnwfizHKgspsxCMiqOJXu9 BSYp42R4Ijjacx58PMIhCrq/8yBHzNRcVtiAoQPQ26SeTvZbswPDCefXiXKhbXEC hzYhk9y6u5fqD78CMgwS1tU3+NiCww2AThO6WFW2dLyS3/sU7WvulUzioqToVcB4 2tv9JmvGbG9jbkEK4v/fssgHUP+4V/q4sD0OXixriO/5lxqw -----END CERTIFICATE-----Generated at Thu Feb 5 13:53:54 2026 by rpki-client