This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215238.roa File: AS215238.roa (raw, json) Hash identifier: GkiYAV5fCQeJxsh8JiaFK0WMo8jw4KNDpupDf2e3ig8= Subject key identifier: 45:DB:18:A4:4B:73:75:8C:9E:24:98:BF:59:0A:07:EE:C0:CB:B1:AE Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 70073385E81DE047F6F3CAD6D0A761D65870968F Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215238.roa Signing time: Wed 04 Feb 2026 12:57:40 +0000 ROA not before: Wed 04 Feb 2026 12:52:40 +0000 ROA not after: Wed 03 Feb 2027 12:57:40 +0000 asID: 215238 IP address blocks: 185.231.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:07:33:85:e8:1d:e0:47:f6:f3:ca:d6:d0:a7:61:d6:58:70:96:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:40 2026 GMT Not After : Feb 3 12:57:40 2027 GMT Subject: CN=45DB18A44B73758C9E2498BF590A07EEC0CBB1AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5d:f5:49:54:a4:a6:a3:f0:48:7b:6d:b6:3b: bc:8a:2b:00:1c:a3:32:51:18:b3:bf:61:5c:14:6a: 61:7f:3d:2c:55:0c:cf:f4:5f:ba:e7:6b:e2:e6:98: dd:a6:4b:0e:f4:98:e7:fc:e0:55:84:dd:f7:be:92: 8a:48:91:e1:e1:65:ec:7c:fc:8c:d6:24:9d:1d:55: 2e:ad:47:ff:44:04:11:e6:73:d7:97:7a:ce:3f:71: cd:bb:d8:27:d0:07:4d:9c:e9:ff:0b:9b:1d:36:98: ac:04:f1:0e:b3:0c:ea:5b:a7:d8:50:07:78:4e:be: 08:46:5a:47:91:f1:3c:00:c2:32:84:e4:98:a9:56: 8a:33:01:44:30:db:ae:a1:2a:dc:8c:68:09:df:99: e0:5f:b1:b6:6e:b9:a4:fe:29:18:0e:86:0f:3c:6f: c5:cd:af:b3:e1:0b:9f:d5:2e:85:05:20:82:80:ac: 07:ef:d1:7e:6d:f7:0f:29:94:6d:c6:70:1b:1b:56: a5:63:7c:53:13:bd:bb:5c:8b:67:c2:6a:9c:5f:1e: 1d:06:24:0a:98:b4:62:59:75:42:e4:ca:e9:a6:61: 62:42:20:d3:78:af:a9:58:3f:dd:5b:64:3b:d4:cf: 6f:01:28:d1:fe:92:d7:57:cf:31:3e:2a:10:ea:d7: 80:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DB:18:A4:4B:73:75:8C:9E:24:98:BF:59:0A:07:EE:C0:CB:B1:AE X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.227.0/24 Signature Algorithm: sha256WithRSAEncryption 08:f3:15:5c:12:67:bd:d6:1f:0d:0f:5a:d9:f6:20:da:a0:23: 38:a0:a2:2e:54:73:76:21:18:fb:b7:5e:c4:6d:0f:1d:3a:7e: e7:b7:77:d6:15:05:54:39:c8:e2:ba:13:05:8b:05:af:6e:44: c8:93:23:68:9e:d1:0e:2f:26:de:14:fc:e7:c3:b6:21:ee:c7: ae:f8:2c:0c:31:09:67:f2:63:c9:04:53:ea:9d:a3:3f:30:2e: 1a:08:5f:7a:e3:97:e3:c7:bb:09:91:ad:71:ef:2b:f6:f3:1e: a8:c7:6e:e3:83:a8:86:1d:06:59:20:af:ae:6d:d8:00:5b:e5: 08:63:31:db:9e:a9:b8:39:fb:d3:73:c2:a0:58:22:cf:08:79: ca:af:d9:14:36:77:08:98:68:0c:e6:13:89:b9:ad:53:00:8f: 31:dd:53:86:3f:a4:54:06:8b:49:e2:62:36:31:77:a4:5d:9c: 83:bc:4b:43:07:a7:55:1a:45:d8:4b:3c:38:b5:9f:ff:6a:dd: 6b:d0:66:59:7e:3a:93:8d:f9:ec:6b:19:95:85:e8:5a:11:6b: 85:e6:e9:2d:8e:14:18:d5:ad:03:14:be:8f:93:32:f1:8c:5a: 07:90:5b:76:76:83:5d:6e:1c:42:11:b0:c5:c3:ef:5d:24:6b: bb:b9:e3:0b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUcAczhegd4Ef288rW0Kdh1lhwlo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNDBaFw0yNzAyMDMxMjU3NDBaMDMxMTAvBgNV BAMTKDQ1REIxOEE0NEI3Mzc1OEM5RTI0OThCRjU5MEEwN0VFQzBDQkIxQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVXfVJVKSmo/BIe222O7yKKwAc ozJRGLO/YVwUamF/PSxVDM/0X7rna+LmmN2mSw70mOf84FWE3fe+kopIkeHhZex8 /IzWJJ0dVS6tR/9EBBHmc9eXes4/cc272CfQB02c6f8Lmx02mKwE8Q6zDOpbp9hQ B3hOvghGWkeR8TwAwjKE5JipVoozAUQw266hKtyMaAnfmeBfsbZuuaT+KRgOhg88 b8XNr7PhC5/VLoUFIIKArAfv0X5t9w8plG3GcBsbVqVjfFMTvbtci2fCapxfHh0G JAqYtGJZdULkyummYWJCINN4r6lYP91bZDvUz28BKNH+ktdXzzE+KhDq14DxAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQURdsYpEtzdYyeJJi/WQoH7sDLsa4wHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjE1MjM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuefj MA0GCSqGSIb3DQEBCwUAA4IBAQAI8xVcEme91h8ND1rZ9iDaoCM4oKIuVHN2IRj7 t17EbQ8dOn7nt3fWFQVUOcjiuhMFiwWvbkTIkyNontEOLybeFPznw7Yh7seu+CwM MQln8mPJBFPqnaM/MC4aCF9645fjx7sJka1x7yv28x6ox27jg6iGHQZZIK+ubdgA W+UIYzHbnqm4OfvTc8KgWCLPCHnKr9kUNncImGgM5hOJua1TAI8x3VOGP6RUBotJ 4mI2MXekXZyDvEtDB6dVGkXYSzw4tZ//at1r0GZZfjqTjfnsaxmVhehaEWuF5ukt jhQY1a0DFL6PkzLxjFoHkFt2doNdbhxCEbDFw+9dJGu7ueML -----END CERTIFICATE-----Generated at Thu Feb 5 13:54:26 2026 by rpki-client