This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213568.roa
File: AS213568.roa (raw, json)
Hash identifier: +fVg17Im7t/pAzhgDt4ZwRZNt/5Vvuf7gv0TMT+FlCI=
Subject key identifier: 9C:51:4E:9C:C6:C3:B1:1E:B8:A8:F5:45:D7:26:9F:ED:6D:7F:D2:BF
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 56D7FF42522AD6C1CBE3C8593EFEB32469C32E25
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213568.roa
Signing time: Wed 04 Feb 2026 12:57:33 +0000
ROA not before: Wed 04 Feb 2026 12:52:33 +0000
ROA not after: Wed 03 Feb 2027 12:57:33 +0000
asID: 213568
IP address blocks: 92.249.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d7:ff:42:52:2a:d6:c1:cb:e3:c8:59:3e:fe:b3:24:69:c3:2e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Feb 4 12:52:33 2026 GMT
Not After : Feb 3 12:57:33 2027 GMT
Subject: CN=9C514E9CC6C3B11EB8A8F545D7269FED6D7FD2BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:2a:5c:ee:d5:e1:d8:70:df:3b:eb:b7:98:
4b:e6:8e:01:53:26:33:6c:59:dd:c8:79:56:be:ef:
8e:d2:aa:f0:d1:49:42:fc:59:a7:3e:bc:f2:63:30:
8c:42:d6:70:d0:8b:e2:d2:de:89:25:b6:56:4b:65:
f7:1a:77:ee:ee:26:55:f2:6b:99:fa:e9:6d:48:50:
6d:4f:06:f9:ec:e9:7d:26:42:d6:cc:f7:a9:d8:aa:
dc:22:6a:a5:ce:71:19:22:78:0a:73:78:fd:3a:5c:
68:71:f5:45:cb:2a:54:a2:c8:ef:07:ad:82:dd:28:
ee:33:7f:00:7f:2b:36:4b:9b:5a:36:65:b2:6a:31:
ee:e9:1d:6b:7f:6a:ae:6c:db:fa:84:b0:8f:4e:c4:
3d:66:54:e5:a5:a9:5c:d3:e5:ff:26:af:f0:97:df:
ca:37:63:04:c1:09:b6:8e:e5:56:69:1b:43:28:40:
9b:18:a9:c1:8e:49:fa:6b:81:f0:f2:a0:5e:98:02:
00:65:b5:7f:21:84:48:94:a6:69:36:77:35:a0:eb:
02:b7:30:06:b0:5c:69:29:4d:ce:cf:84:e0:f8:47:
0a:ad:44:89:bf:84:a6:53:b9:9b:2a:c2:54:be:79:
08:6c:db:0d:1a:a7:de:9c:99:31:2c:ef:0f:71:c9:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:51:4E:9C:C6:C3:B1:1E:B8:A8:F5:45:D7:26:9F:ED:6D:7F:D2:BF
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213568.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.62.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c0:fb:9f:ea:d0:22:cd:0f:cc:4a:7d:a0:48:93:38:7f:a7:
e0:2c:e6:7c:0c:10:00:c0:8e:b9:86:d0:19:59:43:67:c3:2b:
08:06:4b:1a:6f:55:1a:8f:90:21:37:9a:09:fe:79:84:65:3c:
c8:45:a8:fa:06:2a:3e:de:94:10:ae:22:5b:37:e8:74:29:d0:
65:0d:77:7a:0e:00:70:23:a5:89:ee:9d:3f:55:d1:17:5c:3c:
be:1e:81:19:f0:d0:62:a5:57:c8:2c:c6:e8:7d:0b:9c:e9:43:
6a:3b:44:58:79:94:e5:6c:05:51:66:d7:24:02:30:35:bd:ee:
25:0c:4f:ff:47:95:0b:05:00:81:03:cb:80:aa:05:4f:49:53:
14:91:77:9b:a7:f0:91:8e:49:3a:c3:a1:32:80:40:c7:f6:b2:
e1:18:7e:f8:1d:8e:55:39:56:4f:1d:67:9e:b8:37:41:b4:b9:
cd:bd:ca:a6:84:cd:98:b5:f0:8e:d2:ac:50:d5:76:f2:35:b8:
7c:5a:77:76:1c:c9:14:e6:56:18:4e:7a:3e:88:44:3f:05:90:
ef:98:be:98:62:b1:03:1f:32:31:2e:76:ad:7e:97:54:d9:de:
90:38:8d:11:66:d8:34:d4:63:c3:f3:48:02:81:10:f2:e0:d3:
ff:39:06:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 13:59:24 2026 by rpki-client