This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215291.roa File: AS215291.roa (raw, json) Hash identifier: PQIHwSM/ip7DuwpzRe8AtdrpjnQ/BPJtz0dH06JCFHw= Subject key identifier: FE:C5:87:38:53:E8:4C:22:88:21:AC:4D:7F:1A:06:F4:99:44:1F:41 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 4F2F6A918BCE58158468A8D9E9CD90D95CA70930 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215291.roa Signing time: Wed 04 Feb 2026 12:57:44 +0000 ROA not before: Wed 04 Feb 2026 12:52:44 +0000 ROA not after: Wed 03 Feb 2027 12:57:44 +0000 asID: 215291 IP address blocks: 194.93.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:2f:6a:91:8b:ce:58:15:84:68:a8:d9:e9:cd:90:d9:5c:a7:09:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:44 2026 GMT Not After : Feb 3 12:57:44 2027 GMT Subject: CN=FEC5873853E84C228821AC4D7F1A06F499441F41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6a:8c:bf:c7:eb:62:e0:b6:93:02:f4:0c:81: ba:45:c1:8c:7a:33:e5:a5:e4:42:03:a9:15:e8:3c: 98:1f:f0:28:f8:a2:88:91:c3:21:4f:13:2e:b9:eb: 1c:6f:1a:2c:f4:e1:cd:30:5a:09:2d:b7:13:1b:c2: a5:2e:cb:44:ac:47:5e:1e:d0:00:d2:01:de:82:89: 80:a9:6e:11:83:d4:74:e4:41:19:fa:77:6f:ef:cc: f0:af:e8:3f:1b:c4:d2:d4:6e:82:f8:fd:7a:cc:d0: f8:03:8e:7b:1d:31:9b:47:11:28:44:2b:46:70:1f: 8f:58:32:6a:72:01:32:fb:65:27:8a:20:31:89:9e: 8e:f7:32:dd:95:17:05:38:e6:0d:79:c2:62:50:1f: d7:52:bf:bf:15:5c:73:08:32:63:60:34:76:8f:65: f4:27:c9:03:3e:79:2f:af:bd:1b:47:d8:d9:70:4f: d0:37:1e:0a:1f:8f:b4:dd:28:70:de:5a:10:49:b4: a2:ac:90:68:34:48:02:d0:3b:fb:4a:fb:3f:47:1d: 66:57:39:47:de:10:0e:eb:8d:49:5a:a8:ac:84:d2: b7:02:8e:7a:78:29:6f:88:0a:94:93:2c:eb:dc:6a: 88:47:4c:ce:4d:34:37:dd:0d:12:3c:1e:8a:23:68: 66:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C5:87:38:53:E8:4C:22:88:21:AC:4D:7F:1A:06:F4:99:44:1F:41 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215291.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.93.48.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:0e:f2:90:82:3f:57:6a:0a:bd:d5:7a:c9:43:66:5a:8d:94: 93:ec:33:ac:66:0a:7d:0a:e0:b9:cb:08:0c:57:0a:85:57:9b: a7:a5:29:e1:28:fa:56:0f:f1:c0:ba:b5:d2:ec:dc:e9:bc:83: 93:71:5d:4e:6c:6e:77:c1:f9:de:e5:43:22:4e:df:81:49:75: e8:49:ee:bd:3c:dc:f0:74:33:f1:4c:9d:2f:ea:63:63:e1:da: 1b:14:01:d1:d3:18:49:2a:4e:46:c1:3e:21:41:76:d5:43:95: ef:a1:75:8d:a5:bd:cf:a1:12:44:fe:c2:65:d4:1d:86:5c:ea: 3d:3c:9d:2c:1b:11:92:e6:5b:b4:56:3e:f9:5f:28:51:b4:07: a5:ef:8b:3a:8c:fb:c6:b9:fa:25:a0:ec:89:e3:c9:e7:54:bc: 02:09:57:2e:13:ab:21:3b:7e:a9:cf:cc:6c:33:c6:8e:cf:2d: 52:63:9e:1a:46:d3:16:74:3a:42:e1:3b:4a:c5:96:e8:4c:64: cb:9c:75:7c:7b:8f:dd:ca:7f:4e:b8:24:ff:ba:79:55:d3:b3: 33:99:ba:4d:a6:e1:31:89:f9:5d:cd:cf:bf:d9:08:2d:cf:81: 24:96:b8:d4:56:8d:89:53:b4:ac:3b:ae:7f:2d:72:57:94:2c: 2c:5a:2c:94 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUTy9qkYvOWBWEaKjZ6c2Q2VynCTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNDRaFw0yNzAyMDMxMjU3NDRaMDMxMTAvBgNV BAMTKEZFQzU4NzM4NTNFODRDMjI4ODIxQUM0RDdGMUEwNkY0OTk0NDFGNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuaoy/x+ti4LaTAvQMgbpFwYx6 M+Wl5EIDqRXoPJgf8Cj4ooiRwyFPEy656xxvGiz04c0wWgkttxMbwqUuy0SsR14e 0ADSAd6CiYCpbhGD1HTkQRn6d2/vzPCv6D8bxNLUboL4/XrM0PgDjnsdMZtHEShE K0ZwH49YMmpyATL7ZSeKIDGJno73Mt2VFwU45g15wmJQH9dSv78VXHMIMmNgNHaP ZfQnyQM+eS+vvRtH2NlwT9A3Hgofj7TdKHDeWhBJtKKskGg0SALQO/tK+z9HHWZX OUfeEA7rjUlaqKyE0rcCjnp4KW+ICpSTLOvcaohHTM5NNDfdDRI8HoojaGbxAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU/sWHOFPoTCKIIaxNfxoG9JlEH0EwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjE1MjkxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwl0w MA0GCSqGSIb3DQEBCwUAA4IBAQA+DvKQgj9Xagq91XrJQ2ZajZST7DOsZgp9CuC5 ywgMVwqFV5unpSnhKPpWD/HAurXS7NzpvIOTcV1ObG53wfne5UMiTt+BSXXoSe69 PNzwdDPxTJ0v6mNj4dobFAHR0xhJKk5GwT4hQXbVQ5XvoXWNpb3PoRJE/sJl1B2G XOo9PJ0sGxGS5lu0Vj75XyhRtAel74s6jPvGufoloOyJ48nnVLwCCVcuE6shO36p z8xsM8aOzy1SY54aRtMWdDpC4TtKxZboTGTLnHV8e4/dyn9OuCT/unlV07MzmbpN puExifldzc+/2Qgtz4EklrjUVo2JU7SsO65/LXJXlCwsWiyU -----END CERTIFICATE-----Generated at Thu Feb 5 13:54:28 2026 by rpki-client