This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215073.roa File: AS215073.roa (raw, json) Hash identifier: hhAO3QBcAYnOC9wtPNReGCWVeNcYE9343Ldu9/e2k5g= Subject key identifier: FB:EE:AA:B8:F7:C0:45:52:5C:06:63:B1:C3:BB:2C:88:B9:F4:FA:56 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 772C6573D5A250D031DEC20473EDF14DE4A44276 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215073.roa Signing time: Wed 04 Feb 2026 12:57:33 +0000 ROA not before: Wed 04 Feb 2026 12:52:33 +0000 ROA not after: Wed 03 Feb 2027 12:57:33 +0000 asID: 215073 IP address blocks: 217.18.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:2c:65:73:d5:a2:50:d0:31:de:c2:04:73:ed:f1:4d:e4:a4:42:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:33 2026 GMT Not After : Feb 3 12:57:33 2027 GMT Subject: CN=FBEEAAB8F7C045525C0663B1C3BB2C88B9F4FA56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:53:e2:cc:45:de:81:98:ff:83:15:96:98:a3: ab:20:f5:ed:c3:fd:fa:c8:10:39:20:32:b7:83:04: b8:94:c6:74:81:6a:eb:db:13:0f:02:62:a5:3e:ae: 28:1a:6f:0e:56:dd:42:29:4a:9f:95:f8:d3:75:0f: 06:f9:4b:2f:99:8c:00:27:3c:52:15:fc:68:a7:d0: 84:e9:bf:db:97:ae:a1:de:9f:ac:64:2f:5c:6e:4e: b3:31:96:f8:40:31:71:36:c4:2e:45:fa:69:b2:d3: 28:81:8e:06:3a:c3:aa:de:e8:46:bf:df:4f:ee:01: 95:cf:2b:6f:2d:29:89:41:1c:1c:6b:10:5f:a6:f4: b6:3f:4f:4f:86:44:31:90:29:cf:71:51:9d:ac:2d: d9:96:58:55:4f:0f:a5:bf:c8:72:b5:10:ed:1d:ec: 9c:e6:c2:7c:2a:22:e4:d0:a7:63:20:26:bb:77:8a: 70:d4:e4:69:f4:0b:f8:8f:53:a8:88:f6:65:9d:f4: 7e:1f:b7:69:89:ec:88:4a:69:e2:81:89:d2:e6:59: ed:ba:88:8e:26:c7:0c:cb:63:0d:ff:81:99:26:88: 69:46:14:d6:62:08:56:bd:31:66:4a:01:c9:0f:4b: d3:dc:41:4a:0f:31:03:02:1d:b7:71:7b:73:d1:01: 64:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EE:AA:B8:F7:C0:45:52:5C:06:63:B1:C3:BB:2C:88:B9:F4:FA:56 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215073.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.18.211.0/24 Signature Algorithm: sha256WithRSAEncryption de:aa:72:40:ba:8f:90:03:0f:5a:7a:5c:63:48:bd:f6:e4:24: 44:7b:09:ea:16:d7:35:18:9f:a0:91:3a:d9:e8:a3:2d:1e:93: ea:39:3c:80:2a:e1:c4:ab:21:85:db:9a:30:72:60:28:0a:01: 90:c8:77:30:22:73:2c:ea:fb:4d:e4:be:63:66:d4:e5:2f:89: 61:45:d0:93:3d:0f:f3:15:f2:bd:a4:44:59:81:f0:5a:2f:90: b7:8c:14:16:31:34:21:de:a3:5b:f7:c4:55:e8:53:82:7a:6c: 9c:77:9f:f3:1b:e6:d2:1e:fc:06:fa:58:c0:b3:f3:30:6e:c3: c6:cf:bd:01:ce:c2:f1:b4:63:f4:51:b2:aa:05:c1:59:96:ce: c0:3d:ed:ca:03:2b:01:d6:84:7d:67:97:99:bd:46:33:f5:bd: 9e:cb:70:f9:b0:57:a4:a4:a6:e6:0c:f2:a4:0c:47:78:62:a9: d9:ec:8a:39:1f:e1:f5:49:e2:d1:ee:7d:10:49:61:4a:20:dd: c9:9a:ba:79:a3:d0:5e:e7:08:e2:15:cb:c8:8d:29:06:0c:18: d4:5c:15:61:ea:cd:b9:07:0e:93:37:6e:3a:f2:c2:ce:73:29: 87:05:78:59:3d:50:1f:b7:10:6c:b1:be:97:7e:c9:11:d4:29: 0c:69:3c:f8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUdyxlc9WiUNAx3sIEc+3xTeSkQnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyMzNaFw0yNzAyMDMxMjU3MzNaMDMxMTAvBgNV BAMTKEZCRUVBQUI4RjdDMDQ1NTI1QzA2NjNCMUMzQkIyQzg4QjlGNEZBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVU+LMRd6BmP+DFZaYo6sg9e3D /frIEDkgMreDBLiUxnSBauvbEw8CYqU+rigabw5W3UIpSp+V+NN1Dwb5Sy+ZjAAn PFIV/Gin0ITpv9uXrqHen6xkL1xuTrMxlvhAMXE2xC5F+mmy0yiBjgY6w6re6Ea/ 30/uAZXPK28tKYlBHBxrEF+m9LY/T0+GRDGQKc9xUZ2sLdmWWFVPD6W/yHK1EO0d 7JzmwnwqIuTQp2MgJrt3inDU5Gn0C/iPU6iI9mWd9H4ft2mJ7IhKaeKBidLmWe26 iI4mxwzLYw3/gZkmiGlGFNZiCFa9MWZKAckPS9PcQUoPMQMCHbdxe3PRAWT/AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU++6quPfARVJcBmOxw7ssiLn0+lYwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjE1MDczLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RLT MA0GCSqGSIb3DQEBCwUAA4IBAQDeqnJAuo+QAw9aelxjSL325CREewnqFtc1GJ+g kTrZ6KMtHpPqOTyAKuHEqyGF25owcmAoCgGQyHcwInMs6vtN5L5jZtTlL4lhRdCT PQ/zFfK9pERZgfBaL5C3jBQWMTQh3qNb98RV6FOCemycd5/zG+bSHvwG+ljAs/Mw bsPGz70BzsLxtGP0UbKqBcFZls7APe3KAysB1oR9Z5eZvUYz9b2ey3D5sFekpKbm DPKkDEd4YqnZ7Io5H+H1SeLR7n0QSWFKIN3Jmrp5o9Be5wjiFcvIjSkGDBjUXBVh 6s25Bw6TN2468sLOcymHBXhZPVAftxBssb6XfskR1CkMaTz4 -----END CERTIFICATE-----Generated at Thu Feb 5 13:59:04 2026 by rpki-client