This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS211567.roa File: AS211567.roa (raw, json) Hash identifier: f9YWi+fXcDuOfFNYvtaorP+tf91ZEi+Af2/82TO8zSU= Subject key identifier: 1A:65:C5:FF:C6:4E:27:F1:D0:5D:92:23:24:2C:7E:CC:B5:C8:EA:CB Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 5313E459A29E41B9FB8F775DB84D27D5FDD94346 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS211567.roa Signing time: Wed 04 Feb 2026 12:57:42 +0000 ROA not before: Wed 04 Feb 2026 12:52:42 +0000 ROA not after: Wed 03 Feb 2027 12:57:42 +0000 asID: 211567 IP address blocks: 31.40.198.0/24 maxlen: 24 141.98.48.0/24 maxlen: 24 176.96.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:13:e4:59:a2:9e:41:b9:fb:8f:77:5d:b8:4d:27:d5:fd:d9:43:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:42 2026 GMT Not After : Feb 3 12:57:42 2027 GMT Subject: CN=1A65C5FFC64E27F1D05D9223242C7ECCB5C8EACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fc:be:5b:f4:f9:a3:1e:b6:b9:80:4a:ce:34: 9d:0e:09:36:62:4d:5a:51:15:00:f9:3c:8a:ef:22: 1c:ca:eb:51:17:8a:6d:2d:db:42:44:d6:03:36:12: fb:70:30:e2:da:d5:ee:96:a7:45:28:29:e2:b8:41: 1b:af:7b:ed:2f:69:25:4d:d0:a9:82:dd:fc:7b:ac: a0:ae:57:6d:73:28:b2:d9:13:44:31:55:0a:4a:c2: ec:36:f2:2b:6f:71:54:72:51:92:18:07:2b:14:ba: ed:20:e0:45:df:fb:89:73:43:48:aa:9d:4d:a9:2c: 80:65:9b:97:ab:9c:3e:de:ca:02:ef:96:d7:8f:a4: ba:f1:3f:28:d9:cd:fe:59:04:34:20:5e:79:2f:f0: ff:ac:06:68:7a:e8:ae:60:ec:12:de:63:79:d8:fa: e9:ff:ce:9a:7c:1b:94:15:83:c1:96:39:34:7f:79: ad:78:1b:c6:b0:ca:8f:99:34:44:9e:66:29:d0:0c: 7e:9e:b3:65:06:cb:52:44:ac:84:71:dd:1d:9c:92: 76:90:a9:cb:9a:9b:19:3e:ef:8b:e1:cd:7d:ba:99: d4:8b:0d:66:82:45:44:8e:0f:64:6e:93:67:a7:30: 18:d7:6e:94:c6:e1:fa:7c:d9:0c:88:dd:5e:67:47: 46:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:65:C5:FF:C6:4E:27:F1:D0:5D:92:23:24:2C:7E:CC:B5:C8:EA:CB X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS211567.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.198.0/24 141.98.48.0/24 176.96.129.0/24 Signature Algorithm: sha256WithRSAEncryption 45:cc:d0:36:85:06:c2:5d:b2:29:3f:28:1f:45:b1:53:3a:0f: 67:a9:a2:8a:c9:ac:c5:98:e3:b9:26:a3:a0:37:68:f4:81:20: 8b:af:62:0b:cd:9e:df:7e:08:cd:b3:86:84:79:b6:31:ec:68: c6:0f:81:06:e0:21:73:78:47:f2:14:d7:59:70:ac:9e:aa:12: b8:b6:b1:73:fd:dd:da:ea:e5:19:fc:e8:ed:95:69:74:bb:4c: ca:68:f6:7d:72:c9:f9:c6:41:32:2f:60:5a:45:7b:2a:65:35: 5f:a7:13:6e:11:4b:c6:3e:82:53:47:a0:f2:4d:37:11:0b:a6: 67:eb:b6:92:93:bb:87:07:38:5f:5b:c0:b7:e5:50:6f:fe:88: 79:2b:e1:83:eb:9f:e8:c2:6f:a3:78:ff:9a:a0:a2:25:ed:d4: aa:ec:13:2f:24:77:1b:ef:ae:06:cb:6c:d7:f7:41:c6:e2:7e: 14:43:24:5a:3f:39:29:e2:84:e8:38:8e:c1:24:93:f5:44:fc: 1c:38:53:0e:4b:d4:1b:68:cd:69:56:19:8c:76:06:3f:f5:4c: 12:46:03:64:b6:86:ce:e6:51:0e:bf:85:97:39:08:8f:9e:8a: b4:a7:81:c6:39:7b:6b:c8:16:55:ff:3f:b7:a4:5f:99:1f:ec: b9:51:89:a1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUUxPkWaKeQbn7j3dduE0n1f3ZQ0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNDJaFw0yNzAyMDMxMjU3NDJaMDMxMTAvBgNV BAMTKDFBNjVDNUZGQzY0RTI3RjFEMDVEOTIyMzI0MkM3RUNDQjVDOEVBQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl/L5b9PmjHra5gErONJ0OCTZi TVpRFQD5PIrvIhzK61EXim0t20JE1gM2EvtwMOLa1e6Wp0UoKeK4QRuve+0vaSVN 0KmC3fx7rKCuV21zKLLZE0QxVQpKwuw28itvcVRyUZIYBysUuu0g4EXf+4lzQ0iq nU2pLIBlm5ernD7eygLvltePpLrxPyjZzf5ZBDQgXnkv8P+sBmh66K5g7BLeY3nY +un/zpp8G5QVg8GWOTR/ea14G8awyo+ZNESeZinQDH6es2UGy1JErIRx3R2cknaQ qcuamxk+74vhzX26mdSLDWaCRUSOD2Ruk2enMBjXbpTG4fp82QyI3V5nR0YvAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUGmXF/8ZOJ/HQXZIjJCx+zLXI6sswHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjExNTY3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHyjG AwQAjWIwAwQAsGCBMA0GCSqGSIb3DQEBCwUAA4IBAQBFzNA2hQbCXbIpPygfRbFT Og9nqaKKyazFmOO5JqOgN2j0gSCLr2ILzZ7ffgjNs4aEebYx7GjGD4EG4CFzeEfy FNdZcKyeqhK4trFz/d3a6uUZ/OjtlWl0u0zKaPZ9csn5xkEyL2BaRXsqZTVfpxNu EUvGPoJTR6DyTTcRC6Zn67aSk7uHBzhfW8C35VBv/oh5K+GD65/owm+jeP+aoKIl 7dSq7BMvJHcb764Gy2zX90HG4n4UQyRaPzkp4oToOI7BJJP1RPwcOFMOS9QbaM1p VhmMdgY/9UwSRgNktobO5lEOv4WXOQiPnoq0p4HGOXtryBZV/z+3pF+ZH+y5UYmh -----END CERTIFICATE-----Generated at Thu Feb 5 13:59:25 2026 by rpki-client