This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213865.roa File: AS213865.roa (raw, json) Hash identifier: ZO/82L2kYSvRGyoBSMjyGqqiYuBZea1ify7/VEPyFaU= Subject key identifier: B7:1A:1F:6F:C5:E1:57:FF:C2:6C:E8:29:B0:1A:8A:F6:4B:42:27:74 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 63104E67C1B5A5D45D7FCD3325C789EB4B1E2552 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213865.roa Signing time: Wed 04 Feb 2026 12:57:34 +0000 ROA not before: Wed 04 Feb 2026 12:52:34 +0000 ROA not after: Wed 03 Feb 2027 12:57:34 +0000 asID: 213865 IP address blocks: 31.40.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:10:4e:67:c1:b5:a5:d4:5d:7f:cd:33:25:c7:89:eb:4b:1e:25:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:34 2026 GMT Not After : Feb 3 12:57:34 2027 GMT Subject: CN=B71A1F6FC5E157FFC26CE829B01A8AF64B422774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bd:b9:0a:8a:4c:4c:67:db:86:d6:14:09:45: 9a:35:35:f3:3e:20:34:89:ed:e4:eb:80:fc:d1:3a: 2d:b6:26:58:0b:ec:1d:87:a0:0f:8e:a4:bf:5c:79: 38:96:59:c5:81:65:ab:8a:18:b4:9e:eb:60:34:c7: c1:f4:87:c4:35:db:db:f6:bc:71:fb:22:b0:23:17: 12:fe:49:b3:74:58:d8:97:3e:21:07:82:fd:6e:7d: 75:b5:0f:f7:7f:73:ca:85:01:de:9a:9a:c2:b3:fe: b1:77:11:02:33:93:88:eb:06:6b:0d:b8:0c:15:7e: 64:74:9a:6f:28:7e:2d:31:4d:9d:0c:84:53:88:8c: d7:f5:8d:12:8f:6e:be:2a:79:14:9c:17:00:0c:20: 06:24:83:41:af:04:1f:20:a7:5b:33:40:be:14:2a: 02:07:90:e8:93:74:86:0a:ae:b3:fd:f8:30:d8:9a: f6:4c:85:62:f2:62:81:5a:21:96:6a:b2:28:8e:39: 40:c1:26:98:6f:26:1f:f0:38:31:78:ef:95:12:d7: 4c:52:87:a6:17:20:f4:9c:66:c9:4c:38:d0:df:58: 8a:65:80:b0:25:22:b8:4e:0e:bf:f0:0e:7a:d3:ae: 39:4d:b6:23:19:04:e3:e3:f7:fe:ac:fe:da:1e:ea: 20:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:1A:1F:6F:C5:E1:57:FF:C2:6C:E8:29:B0:1A:8A:F6:4B:42:27:74 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS213865.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.207.0/24 Signature Algorithm: sha256WithRSAEncryption e2:ed:96:92:a7:22:19:6d:76:b4:01:ba:7a:13:54:54:04:8f: ab:6b:c5:c0:e2:05:14:b9:e6:ae:dc:3c:94:7d:56:c6:a9:8c: ff:88:1b:d7:ff:40:b0:64:f9:68:da:2e:73:b6:70:c5:74:e5: 6c:93:4f:e6:1c:5c:1f:39:38:fa:d7:1a:67:d6:78:1b:4a:78: 2e:2f:3e:36:17:7e:3c:c6:23:7e:62:6a:74:05:01:3d:03:33: 63:05:e8:01:87:e9:c7:bc:ae:f5:0c:db:67:12:5b:13:16:e0: c4:95:de:e8:66:9d:a6:91:fe:4d:8a:81:82:b0:2a:3f:e1:48: 6f:14:6e:78:a4:12:4a:2b:4d:a8:40:e3:40:f8:f5:4c:c2:a7: 50:e7:6c:dc:fa:34:cd:a5:db:1d:58:c6:54:c7:bb:f1:74:91: 84:1d:0c:80:60:af:52:a2:58:4a:bd:26:35:bc:bf:76:9b:03: 3c:f4:ce:df:54:66:fb:ae:a4:93:a6:d6:99:5d:bc:bb:3f:d4: b3:cd:26:76:f9:27:29:34:df:e4:87:e7:b8:e2:bf:b3:28:29: d2:6b:8e:f6:5c:45:ff:6d:e6:39:be:18:03:5a:4c:a9:24:37: f5:6e:1e:c2:fa:68:62:27:ca:b6:c5:75:93:f6:2a:38:f2:93: 0b:1b:f2:7b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUYxBOZ8G1pdRdf80zJceJ60seJVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyMzRaFw0yNzAyMDMxMjU3MzRaMDMxMTAvBgNV BAMTKEI3MUExRjZGQzVFMTU3RkZDMjZDRTgyOUIwMUE4QUY2NEI0MjI3NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAvbkKikxMZ9uG1hQJRZo1NfM+ IDSJ7eTrgPzROi22JlgL7B2HoA+OpL9ceTiWWcWBZauKGLSe62A0x8H0h8Q129v2 vHH7IrAjFxL+SbN0WNiXPiEHgv1ufXW1D/d/c8qFAd6amsKz/rF3EQIzk4jrBmsN uAwVfmR0mm8ofi0xTZ0MhFOIjNf1jRKPbr4qeRScFwAMIAYkg0GvBB8gp1szQL4U KgIHkOiTdIYKrrP9+DDYmvZMhWLyYoFaIZZqsiiOOUDBJphvJh/wODF475US10xS h6YXIPScZslMONDfWIplgLAlIrhODr/wDnrTrjlNtiMZBOPj9/6s/toe6iAdAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUtxofb8XhV//CbOgpsBqK9ktCJ3QwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjEzODY1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyjP MA0GCSqGSIb3DQEBCwUAA4IBAQDi7ZaSpyIZbXa0Abp6E1RUBI+ra8XA4gUUueau 3DyUfVbGqYz/iBvX/0CwZPlo2i5ztnDFdOVsk0/mHFwfOTj61xpn1ngbSnguLz42 F348xiN+Ymp0BQE9AzNjBegBh+nHvK71DNtnElsTFuDEld7oZp2mkf5NioGCsCo/ 4UhvFG54pBJKK02oQONA+PVMwqdQ52zc+jTNpdsdWMZUx7vxdJGEHQyAYK9SolhK vSY1vL92mwM89M7fVGb7rqSTptaZXby7P9SzzSZ2+ScpNN/kh+e44r+zKCnSa472 XEX/beY5vhgDWkypJDf1bh7C+mhiJ8q2xXWT9io48pMLG/J7 -----END CERTIFICATE-----Generated at Thu Feb 5 13:59:24 2026 by rpki-client