This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS216383.roa File: AS216383.roa (raw, json) Hash identifier: ILxrzOQ4140V8iI4QEN+fcTDD5si0qklev0we6U6t74= Subject key identifier: 22:6D:6B:AF:C5:35:4A:13:5F:70:61:75:D1:EB:20:22:AE:E2:C0:B7 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 6381EFDA9F7BFDBC4BD3280A859F8579A58F058B Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS216383.roa Signing time: Wed 04 Feb 2026 12:57:48 +0000 ROA not before: Wed 04 Feb 2026 12:52:48 +0000 ROA not after: Wed 03 Feb 2027 12:57:48 +0000 asID: 216383 IP address blocks: 193.111.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:81:ef:da:9f:7b:fd:bc:4b:d3:28:0a:85:9f:85:79:a5:8f:05:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:48 2026 GMT Not After : Feb 3 12:57:48 2027 GMT Subject: CN=226D6BAFC5354A135F706175D1EB2022AEE2C0B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1d:af:97:c7:6c:b7:34:3a:4e:73:79:af:d4: c3:28:79:dc:d6:d2:70:0f:9e:9b:cd:92:ec:78:16: 24:3b:b1:06:d5:46:17:53:0a:75:99:dd:24:21:c9: d1:2d:b7:db:46:82:ac:b5:5a:20:16:5c:2e:2b:2f: 8e:70:08:04:24:2d:3d:3a:f9:c1:9f:d8:75:c8:87: 09:55:fe:c4:bf:21:e6:2a:5a:22:18:29:f7:6f:1c: d0:7c:5a:01:74:29:8c:32:b4:99:85:84:04:c3:72: 0d:96:98:5b:5d:49:20:a5:e9:34:6c:8b:8e:ef:c2: 78:cf:3c:87:8d:b6:a0:8e:4c:a0:df:69:62:2c:42: c3:69:5d:16:a4:03:86:ac:77:2c:20:03:e5:b2:0d: 29:af:5e:a9:57:c3:4a:2a:8d:ea:da:9e:29:4d:79: 45:3c:82:ef:17:10:78:ef:dd:29:e7:4e:04:6a:f1: 5a:92:a3:ec:f0:30:d9:44:82:33:88:f8:05:08:dd: 40:06:fb:b0:f3:1c:dd:62:e3:c3:cb:ea:00:40:6c: 8f:d5:ab:94:b6:a9:b2:ff:0d:3e:91:87:f9:cf:fc: 2c:6d:cc:03:a7:15:77:e1:85:2f:f0:7e:49:62:bf: 87:63:c1:04:02:22:f8:a1:25:a2:89:3c:c1:ea:dd: b5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6D:6B:AF:C5:35:4A:13:5F:70:61:75:D1:EB:20:22:AE:E2:C0:B7 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS216383.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.76.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:8b:23:79:c8:44:77:ac:66:de:5a:53:4f:20:d7:30:7b:05: f4:38:33:0a:f9:f2:6f:64:93:19:4b:0e:7e:8e:b9:58:4e:3c: 09:67:6a:8b:39:d9:a4:9c:4c:2a:84:82:a5:20:15:20:c2:0b: 79:6e:fb:29:31:55:75:ce:95:c8:8a:97:07:3a:cf:19:4e:32: d9:3c:a0:9b:50:96:22:ff:d3:dc:43:2c:cb:67:44:29:ad:b9: a3:f6:5f:f9:d2:ba:c8:90:da:2d:56:41:e4:ad:39:0a:7f:78: 3c:76:2f:cc:b9:30:72:13:29:98:ed:dc:df:17:9c:02:0e:b9: 05:c5:49:93:87:81:00:0f:a7:45:00:3c:13:ca:8c:35:a6:9e: 59:6b:eb:79:bb:04:21:83:32:c5:a0:b9:b3:fd:0f:16:04:75: a2:18:cd:0e:88:6e:b1:11:92:fa:05:ef:1e:80:49:c8:32:62: 40:4d:6f:53:55:9a:c1:1c:6b:eb:49:e5:57:0c:dd:03:d2:48: 42:86:5c:79:e4:e3:29:cf:bd:13:77:1f:77:24:08:a9:46:39: 53:de:7a:5b:25:e7:e9:b5:94:f8:aa:09:69:32:15:27:26:bc: 9e:b0:50:13:f1:82:15:84:80:b0:67:4f:09:af:60:a8:b9:49: 06:98:e1:a8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUY4Hv2p97/bxL0ygKhZ+FeaWPBYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNDhaFw0yNzAyMDMxMjU3NDhaMDMxMTAvBgNV BAMTKDIyNkQ2QkFGQzUzNTRBMTM1RjcwNjE3NUQxRUIyMDIyQUVFMkMwQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsHa+Xx2y3NDpOc3mv1MMoedzW 0nAPnpvNkux4FiQ7sQbVRhdTCnWZ3SQhydEtt9tGgqy1WiAWXC4rL45wCAQkLT06 +cGf2HXIhwlV/sS/IeYqWiIYKfdvHNB8WgF0KYwytJmFhATDcg2WmFtdSSCl6TRs i47vwnjPPIeNtqCOTKDfaWIsQsNpXRakA4asdywgA+WyDSmvXqlXw0oqjeranilN eUU8gu8XEHjv3SnnTgRq8VqSo+zwMNlEgjOI+AUI3UAG+7DzHN1i48PL6gBAbI/V q5S2qbL/DT6Rh/nP/CxtzAOnFXfhhS/wfkliv4djwQQCIvihJaKJPMHq3bWFAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUIm1rr8U1ShNfcGF10esgIq7iwLcwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjE2MzgzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW9M MA0GCSqGSIb3DQEBCwUAA4IBAQCNiyN5yER3rGbeWlNPINcwewX0ODMK+fJvZJMZ Sw5+jrlYTjwJZ2qLOdmknEwqhIKlIBUgwgt5bvspMVV1zpXIipcHOs8ZTjLZPKCb UJYi/9PcQyzLZ0Qprbmj9l/50rrIkNotVkHkrTkKf3g8di/MuTByEymY7dzfF5wC DrkFxUmTh4EAD6dFADwTyow1pp5Za+t5uwQhgzLFoLmz/Q8WBHWiGM0OiG6xEZL6 Be8egEnIMmJATW9TVZrBHGvrSeVXDN0D0khChlx55OMpz70Tdx93JAipRjlT3npb JefptZT4qglpMhUnJryesFAT8YIVhICwZ08Jr2CouUkGmOGo -----END CERTIFICATE-----Generated at Thu Feb 5 13:59:03 2026 by rpki-client