This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS216472.roa File: AS216472.roa (raw, json) Hash identifier: IBBrGlbimqOU5Mryq+anMFUNxae6aPj1NB2dqGD3CFc= Subject key identifier: 92:97:FA:29:C6:3E:FD:81:0F:15:E6:9C:94:E9:7D:DD:D1:29:49:78 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 5E664BC19BA80E61A4937618FF3DEF684CDD54B5 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS216472.roa Signing time: Wed 04 Feb 2026 12:57:52 +0000 ROA not before: Wed 04 Feb 2026 12:52:52 +0000 ROA not after: Wed 03 Feb 2027 12:57:52 +0000 asID: 216472 IP address blocks: 139.28.48.0/24 maxlen: 24 139.28.49.0/24 maxlen: 24 185.254.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:66:4b:c1:9b:a8:0e:61:a4:93:76:18:ff:3d:ef:68:4c:dd:54:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:52 2026 GMT Not After : Feb 3 12:57:52 2027 GMT Subject: CN=9297FA29C63EFD810F15E69C94E97DDDD1294978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fd:4d:f6:16:a6:55:d5:3a:40:9e:eb:2f:fb: 05:71:83:31:cb:f2:a9:39:59:24:f8:e1:d4:f2:82: 7d:28:88:51:a2:ca:22:01:66:cf:8f:10:96:10:1b: b2:0c:03:ca:86:a8:9a:c3:c2:41:fe:36:06:67:68: c1:f2:ea:ad:a6:61:69:19:1b:30:73:50:83:1e:35: c9:a6:3f:c2:60:e0:a7:24:93:13:2e:fb:83:5c:d1: 7c:4e:ab:b2:47:ab:2b:4f:e1:00:1f:2f:cc:28:9d: 3c:48:f3:5d:eb:37:61:a0:1f:57:1a:ad:2e:1c:e8: c6:ba:1e:4b:14:e7:f7:34:81:cd:c1:09:88:f0:33: db:8c:8a:93:9e:d4:a0:fe:54:c1:7e:7e:56:9e:c3: 4c:d8:ae:9d:f9:e9:f5:20:cd:d8:bf:0b:89:8e:b7: 27:33:e6:21:9d:ed:9c:8b:fd:01:d9:bf:4d:79:cd: 3c:d0:31:bc:e6:d7:16:77:21:80:c9:36:05:fc:95: 88:9f:57:a7:56:68:40:0f:d0:e2:9f:56:d1:fd:ee: 29:f2:61:f2:77:33:2a:45:16:85:0b:5f:6f:f7:13: bf:15:16:23:f3:bd:77:7e:01:ad:7b:8b:59:ed:72: 1f:86:57:93:2d:91:41:ba:22:31:03:cc:59:cc:a6: 74:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:97:FA:29:C6:3E:FD:81:0F:15:E6:9C:94:E9:7D:DD:D1:29:49:78 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS216472.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.48.0/23 185.254.55.0/24 Signature Algorithm: sha256WithRSAEncryption 28:77:6a:3a:f2:d3:33:f6:57:7b:b3:78:4c:7b:4b:95:b5:3b: fd:1d:e1:74:c3:98:9d:0b:29:12:60:8b:db:93:58:4b:fd:c6: f7:42:a4:ed:99:c8:37:a5:57:d3:1d:64:b2:02:e5:0a:d8:2d: b5:89:a7:f0:88:ba:8c:07:50:ee:6d:b1:55:b2:15:aa:9b:64: 4f:31:71:c6:be:f8:69:ca:ca:c6:bf:33:95:26:72:ed:ed:bf: d1:1f:eb:66:57:a2:63:79:44:28:be:ba:4a:cf:06:45:25:df: 80:bc:d8:35:87:7e:12:e3:fe:75:58:62:40:c5:97:2f:9b:39: ca:3d:97:84:1b:5d:5b:b0:b8:88:b1:4e:3c:e5:b2:48:fc:35: 76:be:8e:80:05:62:ee:16:3c:12:60:98:59:ba:79:51:95:6d: 5b:5a:d9:1d:4e:ca:02:59:93:18:6d:98:75:5f:30:d8:c3:f3: e2:a4:9e:59:50:a6:ad:78:f7:13:aa:4f:7e:29:75:15:49:26: 42:7d:6f:cb:0a:27:b8:e2:7e:fa:79:7e:ee:6e:01:bb:1c:71: a2:9c:16:cc:1b:85:fb:85:e8:ed:e6:78:e3:79:24:f2:c4:dd: 87:c7:ec:8d:5e:cd:80:b3:06:91:10:47:56:e6:97:aa:30:da: 77:70:0d:bc -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUXmZLwZuoDmGkk3YY/z3vaEzdVLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNTJaFw0yNzAyMDMxMjU3NTJaMDMxMTAvBgNV BAMTKDkyOTdGQTI5QzYzRUZEODEwRjE1RTY5Qzk0RTk3RERERDEyOTQ5NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV/U32FqZV1TpAnusv+wVxgzHL 8qk5WST44dTygn0oiFGiyiIBZs+PEJYQG7IMA8qGqJrDwkH+NgZnaMHy6q2mYWkZ GzBzUIMeNcmmP8Jg4KckkxMu+4Nc0XxOq7JHqytP4QAfL8wonTxI813rN2GgH1ca rS4c6Ma6HksU5/c0gc3BCYjwM9uMipOe1KD+VMF+flaew0zYrp356fUgzdi/C4mO tycz5iGd7ZyL/QHZv015zTzQMbzm1xZ3IYDJNgX8lYifV6dWaEAP0OKfVtH97iny YfJ3MypFFoULX2/3E78VFiPzvXd+Aa17i1ntch+GV5MtkUG6IjEDzFnMpnQPAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUkpf6KcY+/YEPFeaclOl93dEpSXgwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjE2NDcyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBixww AwQAuf43MA0GCSqGSIb3DQEBCwUAA4IBAQAod2o68tMz9ld7s3hMe0uVtTv9HeF0 w5idCykSYIvbk1hL/cb3QqTtmcg3pVfTHWSyAuUK2C21iafwiLqMB1DubbFVshWq m2RPMXHGvvhpysrGvzOVJnLt7b/RH+tmV6JjeUQovrpKzwZFJd+AvNg1h34S4/51 WGJAxZcvmznKPZeEG11bsLiIsU485bJI/DV2vo6ABWLuFjwSYJhZunlRlW1bWtkd TsoCWZMYbZh1XzDYw/PipJ5ZUKatePcTqk9+KXUVSSZCfW/LCie44n76eX7ubgG7 HHGinBbMG4X7hejt5njjeSTyxN2Hx+yNXs2AswaREEdW5peqMNp3cA28 -----END CERTIFICATE-----Generated at Thu Feb 5 13:59:04 2026 by rpki-client