This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213637.roa
File: AS213637.roa (raw, json)
Hash identifier: sSZlrGEod6MvlW/9wNx4ErPVozgzglDHupLPRD4sZOk=
Subject key identifier: F1:CF:9E:FE:88:D8:84:0E:EB:73:A4:6B:0D:8D:FE:7C:BF:AB:A0:C5
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 40DE61657BE7330B6EFF1DC06B147E95169D310B
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213637.roa
Signing time: Wed 04 Feb 2026 12:57:35 +0000
ROA not before: Wed 04 Feb 2026 12:52:35 +0000
ROA not after: Wed 03 Feb 2027 12:57:35 +0000
asID: 213637
IP address blocks: 193.17.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 03:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:de:61:65:7b:e7:33:0b:6e:ff:1d:c0:6b:14:7e:95:16:9d:31:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Feb 4 12:52:35 2026 GMT
Not After : Feb 3 12:57:35 2027 GMT
Subject: CN=F1CF9EFE88D8840EEB73A46B0D8DFE7CBFABA0C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:b1:51:ef:a8:a0:63:90:c9:61:de:6f:21:
64:90:ec:29:be:22:72:c8:76:10:94:bf:86:12:89:
ed:a8:93:90:95:53:e2:d1:7d:dd:3e:4e:0b:02:c4:
2b:94:50:11:38:8f:af:1a:fb:e4:dd:38:04:f3:3e:
2b:7d:2f:42:48:04:2b:47:75:11:08:2f:2d:19:69:
1c:d3:e5:9b:4b:ae:36:96:95:4c:64:dc:a3:e9:63:
9f:86:fc:b0:b7:ed:c0:4c:fe:1f:df:41:36:b3:ba:
4d:f6:ba:5f:6d:38:37:46:8e:40:0d:a7:c4:44:11:
42:e1:5a:b5:f4:10:58:1a:50:89:9a:ff:6c:98:dc:
fb:ce:7a:a5:d5:c3:68:3d:58:4f:4d:f0:1f:59:b6:
62:a7:10:fa:f9:56:bf:fd:9c:d0:18:9a:59:22:db:
9d:f7:41:b7:c2:5e:45:80:68:c0:44:26:d8:5c:c8:
b9:b2:48:df:06:8f:db:55:34:10:de:90:95:0f:bb:
d6:4d:5a:d1:c2:fb:c5:dc:cd:f9:6c:75:c5:80:a7:
8e:1e:ac:92:f2:38:4f:ea:36:d5:63:a7:13:b4:4a:
a0:79:3f:20:6e:b7:d6:f7:ba:d2:5a:49:17:f7:b4:
d4:a6:6a:26:51:47:21:cf:22:ec:1b:e8:a4:6f:d4:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CF:9E:FE:88:D8:84:0E:EB:73:A4:6B:0D:8D:FE:7C:BF:AB:A0:C5
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.4.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:cd:00:ac:49:ed:c8:8a:1d:c3:ad:03:44:40:10:3f:a2:b0:
1a:2a:e7:e3:73:79:7c:9f:7f:e5:4b:fd:5e:df:d9:c9:cf:a3:
2f:32:9c:63:bc:4c:c1:59:31:bd:15:6e:8e:a2:79:9b:2a:be:
1d:b7:6e:7d:b3:fd:d6:45:27:23:91:01:f9:79:c8:77:da:f3:
5f:11:da:20:4d:69:5a:a7:7b:4f:b8:ef:1c:29:de:48:10:b0:
03:2a:61:3b:3f:3b:c2:38:66:4e:71:f0:dd:79:86:10:1c:3a:
d8:bd:65:f6:27:e1:2c:ff:0b:c5:c1:10:85:ed:64:f9:c8:62:
6d:3a:51:6c:ad:6b:1e:05:6a:4a:65:f1:de:86:3d:40:d8:e1:
64:65:0f:5d:97:ed:12:99:5f:13:4c:06:76:54:5f:2a:f0:f8:
68:0a:e9:2d:ba:01:bf:b3:88:ef:91:8e:dd:ac:2a:ce:e5:b0:
17:ae:40:61:7d:9c:36:1d:af:48:d1:43:72:eb:5b:82:2f:ad:
4a:20:83:97:23:65:00:9b:d1:9a:cb:d5:8c:5b:f0:24:f1:b4:
6a:27:f0:f2:1c:e6:28:0b:dd:6d:da:fe:ec:7a:93:f9:d7:a2:
fb:6b:52:b6:76:d1:54:3e:dc:7d:10:76:fc:67:64:eb:f8:cc:
72:d4:7d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 13:52:23 2026 by rpki-client