This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215645.roa File: AS215645.roa (raw, json) Hash identifier: Dqk5jDJJjprqtApdOn80Wpr9r4Sc3Gg5uSmVM0v9qiA= Subject key identifier: 47:0F:CE:B0:52:DC:65:F3:89:32:81:16:3E:CC:49:2A:F1:D1:EB:F7 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 2F34CDEEA1DEAA222EAF4E43F81882826D262C06 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215645.roa Signing time: Wed 04 Feb 2026 12:57:33 +0000 ROA not before: Wed 04 Feb 2026 12:52:33 +0000 ROA not after: Wed 03 Feb 2027 12:57:33 +0000 asID: 215645 IP address blocks: 31.40.197.0/24 maxlen: 24 85.235.73.0/24 maxlen: 24 85.235.74.0/24 maxlen: 24 217.18.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:34:cd:ee:a1:de:aa:22:2e:af:4e:43:f8:18:82:82:6d:26:2c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:33 2026 GMT Not After : Feb 3 12:57:33 2027 GMT Subject: CN=470FCEB052DC65F3893281163ECC492AF1D1EBF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c1:32:a2:12:29:1a:71:73:06:7a:ac:92:2c: 4b:d9:bf:38:4a:87:cf:8a:1d:d4:65:e2:d0:80:92: 23:f8:31:c9:a9:4b:f9:8b:40:05:2b:cc:11:be:58: 3b:c1:83:7d:df:e3:48:0d:cf:e3:54:b8:0e:a0:05: 99:aa:21:e6:43:d0:cb:dd:05:2f:26:3e:0f:ac:b3: 5f:07:49:0d:85:9b:6b:bd:fe:cb:bd:99:ff:92:83: da:c9:e5:64:88:61:e7:a7:94:49:46:ba:5d:48:27: b3:d6:83:ad:9a:f9:03:ca:9b:94:66:9d:6f:a7:3f: 44:7d:01:89:07:88:0f:1e:9c:81:53:15:2f:c5:d7: be:4e:ca:22:e2:d8:f6:48:10:60:a7:16:ba:8e:12: a4:3e:95:5e:f2:76:9d:c8:03:ee:a5:69:1a:28:83: df:c6:f2:b3:8b:5d:6e:57:eb:d0:67:9d:97:8d:70: a9:87:06:be:7a:5f:cc:c1:8f:66:51:7f:9a:28:bb: 98:e4:13:57:c0:24:50:0a:0a:8d:e3:34:1e:7c:49: 9e:fc:8e:a4:93:38:27:d3:85:a3:c6:25:32:9e:09: 6f:0b:3b:40:50:a4:0a:d8:e6:cc:ba:38:f3:22:52: fa:9d:77:d2:10:1a:30:b9:7a:d8:b8:53:35:8f:d4: e6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0F:CE:B0:52:DC:65:F3:89:32:81:16:3E:CC:49:2A:F1:D1:EB:F7 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS215645.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.197.0/24 85.235.73.0-85.235.74.255 217.18.208.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:9f:58:c8:1f:c2:9e:b6:d3:c4:ea:eb:f9:4d:cf:99:5a:da: f5:31:a6:3d:88:09:b1:c0:56:bf:ec:4b:19:76:d1:36:fa:83: 9d:eb:d5:e5:b7:06:ae:0f:ba:8f:29:b1:7c:e3:3f:62:9c:7c: 24:27:ca:7d:28:ea:81:30:74:47:b8:49:d3:2f:94:3e:02:97: 6d:2a:ce:c1:15:05:97:29:be:72:70:de:18:82:d9:47:ab:df: 6b:09:67:82:98:8f:e3:de:ad:20:e4:98:b7:e5:87:75:43:94: 73:21:65:b4:4a:55:89:78:8e:97:41:89:b6:bc:a4:85:a0:c6: e3:10:ff:15:41:b7:de:bb:15:42:89:0e:aa:7f:cd:a9:a6:1a: 7f:dc:38:e0:31:1a:b5:35:b0:f5:16:1c:f6:5b:ba:85:93:ff: bc:27:a6:90:4b:4b:98:2e:8a:66:18:fc:c5:55:d1:ea:50:14: 70:e7:f0:9b:01:34:6b:44:7f:8a:8e:ba:9c:c8:57:39:8d:ee: 57:49:57:95:5c:b7:d5:1c:0a:b2:5f:2d:1a:6a:81:e9:48:1c: 52:65:a6:87:10:dd:7f:9f:88:32:7d:71:11:11:a8:5c:d4:fb: 23:6b:92:67:08:ca:40:74:1a:80:10:68:24:95:3b:d2:01:c0: 17:39:e3:be -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIULzTN7qHeqiIur05D+BiCgm0mLAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyMzNaFw0yNzAyMDMxMjU3MzNaMDMxMTAvBgNV BAMTKDQ3MEZDRUIwNTJEQzY1RjM4OTMyODExNjNFQ0M0OTJBRjFEMUVCRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcwTKiEikacXMGeqySLEvZvzhK h8+KHdRl4tCAkiP4McmpS/mLQAUrzBG+WDvBg33f40gNz+NUuA6gBZmqIeZD0Mvd BS8mPg+ss18HSQ2Fm2u9/su9mf+Sg9rJ5WSIYeenlElGul1IJ7PWg62a+QPKm5Rm nW+nP0R9AYkHiA8enIFTFS/F175OyiLi2PZIEGCnFrqOEqQ+lV7ydp3IA+6laRoo g9/G8rOLXW5X69BnnZeNcKmHBr56X8zBj2ZRf5oou5jkE1fAJFAKCo3jNB58SZ78 jqSTOCfThaPGJTKeCW8LO0BQpArY5sy6OPMiUvqdd9IQGjC5eti4UzWP1OYvAgMB AAGjggIeMIICGjAdBgNVHQ4EFgQURw/OsFLcZfOJMoEWPsxJKvHR6/cwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjE1NjQ1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAHyjF MAwDBABV60kDBABV60oDBADZEtAwDQYJKoZIhvcNAQELBQADggEBAJ+fWMgfwp62 08Tq6/lNz5la2vUxpj2ICbHAVr/sSxl20Tb6g53r1eW3Bq4Puo8psXzjP2KcfCQn yn0o6oEwdEe4SdMvlD4Cl20qzsEVBZcpvnJw3hiC2Uer32sJZ4KYj+PerSDkmLfl h3VDlHMhZbRKVYl4jpdBiba8pIWgxuMQ/xVBt967FUKJDqp/zammGn/cOOAxGrU1 sPUWHPZbuoWT/7wnppBLS5guimYY/MVV0epQFHDn8JsBNGtEf4qOupzIVzmN7ldJ V5Vct9UcCrJfLRpqgelIHFJlpocQ3X+fiDJ9cRERqFzU+yNrkmcIykB0GoAQaCSV O9IBwBc5474= -----END CERTIFICATE-----Generated at Thu Feb 5 13:52:19 2026 by rpki-client