This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS393406.roa File: AS393406.roa (raw, json) Hash identifier: Au/VDJNefh4X6g2kuGHSWAm0c4mhuZWGuo1eFUC0H48= Subject key identifier: C8:8E:9A:04:DB:AA:7C:89:E8:6D:2F:4E:13:CA:C7:DA:27:6D:B8:68 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 2AAFC0CF878646998C364257109877AF3A52F54C Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS393406.roa Signing time: Wed 04 Feb 2026 12:57:47 +0000 ROA not before: Wed 04 Feb 2026 12:52:47 +0000 ROA not after: Wed 03 Feb 2027 12:57:47 +0000 asID: 393406 IP address blocks: 193.187.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 16:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:af:c0:cf:87:86:46:99:8c:36:42:57:10:98:77:af:3a:52:f5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:47 2026 GMT Not After : Feb 3 12:57:47 2027 GMT Subject: CN=C88E9A04DBAA7C89E86D2F4E13CAC7DA276DB868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0b:2b:98:c9:aa:5e:3b:7a:91:7b:99:1f:de: 2d:9e:2d:55:49:8d:81:77:4c:b4:49:2c:94:6d:93: 2a:e9:26:7b:ea:b9:07:5c:73:3a:6c:75:c5:68:31: 72:36:db:6a:43:30:cc:11:91:bd:c6:95:d9:63:ca: 50:f0:c7:43:2e:7d:75:c2:39:3e:37:78:44:ae:b6: 18:5b:6e:16:17:5e:7f:d2:fc:87:23:45:85:05:90: 1d:2f:70:a0:88:1a:d2:00:86:16:c0:cb:ba:60:a3: ff:de:00:44:8a:76:e9:45:5f:5b:a9:d7:40:da:f8: 8f:93:5f:97:03:c8:a6:de:46:97:8f:15:5f:69:b5: ce:1a:f1:55:f1:90:8b:a6:72:f5:25:7c:09:c6:75: aa:19:82:4e:07:6c:cb:46:74:e9:dd:29:e4:27:c6: de:59:58:81:fb:11:76:85:3f:8c:8f:64:a9:bd:b5: 3e:66:3a:91:71:b5:06:24:9e:de:6e:60:07:46:db: f1:a9:82:94:5d:53:87:b6:b1:f7:12:6a:0d:24:a6: 63:7a:9c:7f:73:ce:d0:9a:5a:74:08:26:09:af:25: ae:9a:20:d6:ae:7e:d8:ef:e1:42:56:87:92:48:ff: 42:f8:b7:66:da:46:7f:52:d3:da:8d:48:18:b0:8c: f3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8E:9A:04:DB:AA:7C:89:E8:6D:2F:4E:13:CA:C7:DA:27:6D:B8:68 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS393406.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.187.110.0/24 Signature Algorithm: sha256WithRSAEncryption 43:b4:d8:1b:a7:ff:8e:3e:25:1a:18:4f:60:4b:97:17:86:b2: bd:f8:d2:77:bc:00:dd:bf:1f:a5:c5:e2:6c:af:69:70:ac:c0: 38:f1:a3:7c:91:59:d4:bc:38:60:51:09:75:72:00:6f:e7:4e: 46:18:a9:52:22:60:99:be:04:8d:1c:28:25:7d:61:a0:4f:79: 57:b5:54:94:3a:f0:da:60:8e:d5:96:63:f6:ff:d2:4a:dc:b9: b5:0e:bf:f3:14:2a:6d:f6:d1:6b:08:fd:4f:2e:42:f6:7c:75: af:54:62:36:c1:2c:09:2e:f2:99:35:0d:d7:b1:46:8f:35:76: 57:95:39:50:84:35:c7:e3:85:ff:e7:0d:70:f1:c7:5a:62:59: d4:94:86:d8:2f:d2:26:d9:b2:f0:80:1e:72:50:5a:99:41:04: 23:d8:b4:65:58:69:f4:3e:0a:f0:c4:5b:1e:a0:02:89:c5:df: 29:93:6d:76:d8:14:bd:01:11:05:9e:03:71:0a:ca:a6:98:4d: 62:2d:a6:5f:22:1e:47:16:df:7c:3d:2b:54:ea:f2:0b:92:eb: 61:9e:52:7a:9c:4f:62:0e:22:25:2e:f9:6a:d8:e8:00:38:65: 18:84:da:1b:45:05:0a:b0:5d:40:27:b3:a6:59:ec:f2:8b:73: eb:55:aa:08 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUKq/Az4eGRpmMNkJXEJh3rzpS9UwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNDdaFw0yNzAyMDMxMjU3NDdaMDMxMTAvBgNV BAMTKEM4OEU5QTA0REJBQTdDODlFODZEMkY0RTEzQ0FDN0RBMjc2REI4NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPCyuYyapeO3qRe5kf3i2eLVVJ jYF3TLRJLJRtkyrpJnvquQdcczpsdcVoMXI222pDMMwRkb3GldljylDwx0MufXXC OT43eESuthhbbhYXXn/S/IcjRYUFkB0vcKCIGtIAhhbAy7pgo//eAESKdulFX1up 10Da+I+TX5cDyKbeRpePFV9ptc4a8VXxkIumcvUlfAnGdaoZgk4HbMtGdOndKeQn xt5ZWIH7EXaFP4yPZKm9tT5mOpFxtQYknt5uYAdG2/GpgpRdU4e2sfcSag0kpmN6 nH9zztCaWnQIJgmvJa6aINauftjv4UJWh5JI/0L4t2baRn9S09qNSBiwjPOVAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUyI6aBNuqfInobS9OE8rH2idtuGgwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMzkzNDA2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbtu MA0GCSqGSIb3DQEBCwUAA4IBAQBDtNgbp/+OPiUaGE9gS5cXhrK9+NJ3vADdvx+l xeJsr2lwrMA48aN8kVnUvDhgUQl1cgBv505GGKlSImCZvgSNHCglfWGgT3lXtVSU OvDaYI7VlmP2/9JK3Lm1Dr/zFCpt9tFrCP1PLkL2fHWvVGI2wSwJLvKZNQ3XsUaP NXZXlTlQhDXH44X/5w1w8cdaYlnUlIbYL9Im2bLwgB5yUFqZQQQj2LRlWGn0Pgrw xFseoAKJxd8pk2122BS9AREFngNxCsqmmE1iLaZfIh5HFt98PStU6vILkuthnlJ6 nE9iDiIlLvlq2OgAOGUYhNobRQUKsF1AJ7OmWezyi3PrVaoI -----END CERTIFICATE-----Generated at Thu Feb 5 10:37:21 2026 by rpki-client