This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215189.roa File: AS215189.roa (raw, json) Hash identifier: mNSSflE3n66yhls2VmS4/ftCcNBzjt0YJX2+j3NPC8g= Subject key identifier: 6C:34:83:E2:14:EF:86:5D:35:8C:0C:BC:F8:21:B6:94:A3:68:47:67 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 5EB841A5FCC12ED82544E6890201EDE8A3A1ABAB Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215189.roa Signing time: Wed 04 Feb 2026 12:57:41 +0000 ROA not before: Wed 04 Feb 2026 12:52:41 +0000 ROA not after: Wed 03 Feb 2027 12:57:41 +0000 asID: 215189 IP address blocks: 139.28.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b8:41:a5:fc:c1:2e:d8:25:44:e6:89:02:01:ed:e8:a3:a1:ab:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:41 2026 GMT Not After : Feb 3 12:57:41 2027 GMT Subject: CN=6C3483E214EF865D358C0CBCF821B694A3684767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6b:d9:65:79:3c:75:ff:4e:fb:1d:d2:55:31: 29:23:6c:d6:51:26:fb:77:18:19:3c:aa:d3:9e:f1: 7a:a9:eb:d3:e8:0b:5c:8a:51:1b:5d:a3:8c:f3:b9: bf:20:be:98:ac:17:d6:59:21:d9:05:fa:e1:38:5d: d9:2c:2e:99:29:b6:46:92:ea:66:1a:8d:d4:0b:88: 27:79:4d:44:bd:21:fc:3d:e6:de:61:d8:84:88:a8: 7d:fd:73:7e:e6:67:3f:d4:6f:34:de:af:62:ab:f9: ba:98:5d:ad:c8:27:db:f8:26:16:0f:d0:7d:9b:52: a2:9b:f4:14:07:d6:11:07:61:0a:3f:8d:25:df:5f: 50:fe:57:d0:89:a8:3e:83:57:3c:cf:8e:80:30:fc: aa:5a:e6:0e:c4:05:fe:65:88:8d:26:43:30:42:bf: 39:fc:e4:2e:e4:b3:06:eb:2e:fb:1d:c2:91:d8:28: 56:43:98:f7:fc:4f:c8:90:27:a6:6e:e7:a7:13:ea: 4e:7c:e1:1c:74:80:d3:fc:c2:33:e8:0c:72:b7:5d: 57:cb:88:98:64:dc:ec:e4:be:f2:b4:7c:49:f9:2f: 40:4c:b2:e0:f3:61:9b:19:92:d9:ad:63:07:47:5d: 55:3c:9b:d3:ac:c9:75:d0:02:54:e7:39:a0:fd:02: 61:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:34:83:E2:14:EF:86:5D:35:8C:0C:BC:F8:21:B6:94:A3:68:47:67 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215189.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.51.0/24 Signature Algorithm: sha256WithRSAEncryption 11:1e:a4:77:15:8a:49:c5:ad:81:81:5c:7e:66:28:f6:9b:cc: ec:a6:3c:f8:28:9f:57:14:3a:66:fe:58:d2:e8:25:00:8b:f6: 53:ef:4d:68:9a:c1:40:5e:49:f4:7c:f6:31:8a:45:b2:e6:4e: 4a:29:e4:b5:97:2e:27:09:4f:be:df:42:72:45:93:81:b5:f7: 69:3a:2d:5e:d5:62:34:cd:54:24:32:d4:0e:9c:ed:11:12:f9: ab:a3:da:0c:a7:d7:6b:50:56:ab:b4:dc:1b:1c:2d:5e:0e:f8: f3:d8:b4:77:a7:d8:ad:22:6e:b7:1c:2e:ba:c7:6b:7a:e7:fa: de:0a:57:d7:6f:e7:34:b1:1d:73:87:0d:28:16:a0:1c:9f:5f: 23:c5:f8:0b:2b:3e:36:6c:18:07:44:22:55:7c:b4:48:7a:54: 8e:e5:d7:36:d6:f7:ff:1c:02:34:2b:0c:49:36:d4:6b:2f:ed: 8e:3c:ac:0a:9b:f8:63:50:2b:4a:36:34:bc:83:ad:fd:13:91: 66:8f:e9:a6:7e:c6:de:af:08:d6:85:b6:e0:ca:f8:92:25:52: 07:e5:15:05:27:18:eb:6d:b1:79:eb:67:fe:40:c1:93:a9:4a: 2b:d5:51:2b:00:99:fc:7d:91:39:e5:66:06:bb:24:19:cb:a3: 8c:29:20:65 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUXrhBpfzBLtglROaJAgHt6KOhq6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNDFaFw0yNzAyMDMxMjU3NDFaMDMxMTAvBgNV BAMTKDZDMzQ4M0UyMTRFRjg2NUQzNThDMENCQ0Y4MjFCNjk0QTM2ODQ3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCia9lleTx1/077HdJVMSkjbNZR Jvt3GBk8qtOe8Xqp69PoC1yKURtdo4zzub8gvpisF9ZZIdkF+uE4XdksLpkptkaS 6mYajdQLiCd5TUS9Ifw95t5h2ISIqH39c37mZz/UbzTer2Kr+bqYXa3IJ9v4JhYP 0H2bUqKb9BQH1hEHYQo/jSXfX1D+V9CJqD6DVzzPjoAw/Kpa5g7EBf5liI0mQzBC vzn85C7kswbrLvsdwpHYKFZDmPf8T8iQJ6Zu56cT6k584Rx0gNP8wjPoDHK3XVfL iJhk3OzkvvK0fEn5L0BMsuDzYZsZktmtYwdHXVU8m9OsyXXQAlTnOaD9AmGpAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUbDSD4hTvhl01jAy8+CG2lKNoR2cwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjE1MTg5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAixwz MA0GCSqGSIb3DQEBCwUAA4IBAQARHqR3FYpJxa2BgVx+Zij2m8zspjz4KJ9XFDpm /ljS6CUAi/ZT701omsFAXkn0fPYxikWy5k5KKeS1ly4nCU++30JyRZOBtfdpOi1e 1WI0zVQkMtQOnO0REvmro9oMp9drUFartNwbHC1eDvjz2LR3p9itIm63HC66x2t6 5/reClfXb+c0sR1zhw0oFqAcn18jxfgLKz42bBgHRCJVfLRIelSO5dc21vf/HAI0 KwxJNtRrL+2OPKwKm/hjUCtKNjS8g639E5Fmj+mmfsberwjWhbbgyviSJVIH5RUF JxjrbbF562f+QMGTqUor1VErAJn8fZE55WYGuyQZy6OMKSBl -----END CERTIFICATE-----Generated at Thu Feb 5 13:54:29 2026 by rpki-client