This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213404.roa File: AS213404.roa (raw, json) Hash identifier: KWxBv1Q1hg+wSEaSe5mejZlx0GDHfv/jlnJZjk03YcM= Subject key identifier: E8:F3:04:3D:E2:11:D5:7D:A7:1E:26:26:07:93:86:9C:A0:45:88:38 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 01D2C2940EA85FCA47B57FA25FC5D3C3BA8BD649 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213404.roa Signing time: Wed 04 Feb 2026 12:57:51 +0000 ROA not before: Wed 04 Feb 2026 12:52:51 +0000 ROA not after: Wed 03 Feb 2027 12:57:51 +0000 asID: 213404 IP address blocks: 84.54.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d2:c2:94:0e:a8:5f:ca:47:b5:7f:a2:5f:c5:d3:c3:ba:8b:d6:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:51 2026 GMT Not After : Feb 3 12:57:51 2027 GMT Subject: CN=E8F3043DE211D57DA71E26260793869CA0458838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e3:17:b5:ec:8c:86:8e:7c:77:f8:87:2d:29: b1:b5:85:39:b8:05:3e:1d:6f:7b:87:72:dd:b1:f3: fd:03:c3:24:b2:65:3e:04:fd:60:34:28:6a:11:ba: 07:7b:c7:9b:e1:de:b6:2b:0a:53:9d:2f:bf:55:bc: 67:6d:f2:4e:d1:bd:26:81:03:d7:ed:b3:2a:94:9d: 45:3f:96:94:6a:7d:06:35:76:93:d8:46:ee:6d:5c: 83:9a:e6:bd:02:07:e1:34:a9:7f:e9:3a:13:ae:43: 35:b1:47:34:a9:ce:a3:01:59:c1:e8:68:f1:6e:c7: 5b:34:e3:ee:8e:88:af:bd:d2:b7:f7:5b:e9:48:8b: 6c:41:ef:86:ae:30:09:08:b0:7c:a2:4a:47:aa:36: 13:69:87:4f:ba:8c:44:2b:ac:15:f7:24:29:e7:f9: 61:22:40:69:85:5d:ce:df:ad:6f:8e:2c:72:8f:fb: 5c:9c:8a:60:5c:34:a2:ac:c4:71:77:67:95:ad:06: cd:e6:fd:dc:13:17:c3:f1:cd:8a:f1:81:7e:87:41: 54:27:fd:45:2b:65:04:59:36:f5:cf:4c:80:57:09: 0b:7c:d7:83:be:ce:52:1f:bf:2c:fb:05:7c:ef:5b: 11:39:8b:28:f8:ee:74:32:4c:52:06:98:50:3b:cb: 7e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F3:04:3D:E2:11:D5:7D:A7:1E:26:26:07:93:86:9C:A0:45:88:38 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213404.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.2.0/23 Signature Algorithm: sha256WithRSAEncryption ca:60:64:d3:e5:4a:4a:e1:e8:4a:84:3e:30:d5:16:64:16:20: f3:01:e6:59:ea:81:86:3c:fe:1a:ee:cf:72:b4:c4:d6:58:59: 37:68:99:b6:a9:f7:33:42:e5:cd:88:3c:a1:29:e5:cc:bd:c6: 71:44:30:eb:41:91:d5:0e:87:1c:94:e3:4c:c5:2a:82:6c:f7: 98:22:89:cf:27:9c:4b:f8:4f:8a:86:2c:95:22:5c:cb:72:94: 44:96:f6:d6:f5:98:9e:db:58:01:b1:18:fa:d1:c2:11:cf:fc: 6d:d1:c1:93:bb:3b:49:74:eb:ca:6f:c2:1a:17:5b:10:f8:c9: d2:4e:42:ea:61:93:b1:12:a7:c2:15:3b:05:8e:fb:32:4f:b6: bb:d0:e4:bf:62:b9:47:ba:b9:96:83:6d:23:9f:b8:a2:fa:e8: 7a:fb:cf:3c:6c:97:c3:af:d9:da:27:08:8c:aa:84:8c:6b:77: 1f:85:58:9e:ec:5e:6c:86:76:c2:3b:26:cd:59:2d:18:2a:c1: d2:5a:7f:ee:3c:d5:d4:7a:e8:b6:ea:95:58:25:a6:16:26:fb: 30:4c:75:5f:9c:78:6a:33:fe:0a:5d:1e:ab:05:5f:f7:a5:d7: 18:d2:79:24:50:12:29:e3:b5:bc:05:db:d9:b2:fa:65:62:9c: 51:29:a0:e5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUAdLClA6oX8pHtX+iX8XTw7qL1kkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNTFaFw0yNzAyMDMxMjU3NTFaMDMxMTAvBgNV BAMTKEU4RjMwNDNERTIxMUQ1N0RBNzFFMjYyNjA3OTM4NjlDQTA0NTg4MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94xe17IyGjnx3+IctKbG1hTm4 BT4db3uHct2x8/0DwySyZT4E/WA0KGoRugd7x5vh3rYrClOdL79VvGdt8k7RvSaB A9ftsyqUnUU/lpRqfQY1dpPYRu5tXIOa5r0CB+E0qX/pOhOuQzWxRzSpzqMBWcHo aPFux1s04+6OiK+90rf3W+lIi2xB74auMAkIsHyiSkeqNhNph0+6jEQrrBX3JCnn +WEiQGmFXc7frW+OLHKP+1ycimBcNKKsxHF3Z5WtBs3m/dwTF8PxzYrxgX6HQVQn /UUrZQRZNvXPTIBXCQt814O+zlIfvyz7BXzvWxE5iyj47nQyTFIGmFA7y35jAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU6PMEPeIR1X2nHiYmB5OGnKBFiDgwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjEzNDA0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVDYC MA0GCSqGSIb3DQEBCwUAA4IBAQDKYGTT5UpK4ehKhD4w1RZkFiDzAeZZ6oGGPP4a 7s9ytMTWWFk3aJm2qfczQuXNiDyhKeXMvcZxRDDrQZHVDocclONMxSqCbPeYIonP J5xL+E+KhiyVIlzLcpRElvbW9Zie21gBsRj60cIRz/xt0cGTuztJdOvKb8IaF1sQ +MnSTkLqYZOxEqfCFTsFjvsyT7a70OS/YrlHurmWg20jn7ii+uh6+888bJfDr9na JwiMqoSMa3cfhVie7F5shnbCOybNWS0YKsHSWn/uPNXUeui26pVYJaYWJvswTHVf nHhqM/4KXR6rBV/3pdcY0nkkUBIp47W8BdvZsvplYpxRKaDl -----END CERTIFICATE-----Generated at Thu Feb 5 13:52:28 2026 by rpki-client