This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44382.roa
File: AS44382.roa (raw, json)
Hash identifier: ey/FXKMaMVtNv3gLhFi/43RaJNxcMQK5xCINwW6UATo=
Subject key identifier: 4C:6C:7C:D9:CC:FD:60:74:5D:A8:2E:B4:3D:F7:C3:CC:E5:E8:AC:54
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 6E0B44D1D9F9A392ACE80D7F902E7CA1A08B9F38
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44382.roa
Signing time: Wed 04 Feb 2026 12:57:46 +0000
ROA not before: Wed 04 Feb 2026 12:52:46 +0000
ROA not after: Wed 03 Feb 2027 12:57:46 +0000
asID: 44382
IP address blocks: 31.40.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:0b:44:d1:d9:f9:a3:92:ac:e8:0d:7f:90:2e:7c:a1:a0:8b:9f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Feb 4 12:52:46 2026 GMT
Not After : Feb 3 12:57:46 2027 GMT
Subject: CN=4C6C7CD9CCFD60745DA82EB43DF7C3CCE5E8AC54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:85:78:ec:e9:6d:5a:8c:a8:4a:cc:b4:28:
4a:39:16:0d:9e:34:37:96:04:ca:e3:3c:ed:e4:33:
2d:67:53:fc:4e:06:cf:4a:e8:12:b3:f0:b1:aa:27:
db:a5:b3:b9:fb:7f:9d:67:17:d0:9d:9e:40:7b:ec:
01:fb:7b:c9:3a:3b:1a:85:29:70:95:c8:aa:67:3f:
8d:c8:0a:f4:53:ef:73:14:7e:40:01:b7:54:96:de:
6a:64:57:1f:48:3f:5a:e0:25:e3:a3:5e:ee:18:e1:
12:ba:86:ac:8d:88:23:58:be:c9:37:a9:34:16:f7:
14:85:35:b0:09:60:6a:cd:87:ec:fd:f4:75:a0:3f:
3b:21:42:f6:17:b3:bf:da:b7:b1:eb:91:6d:5a:92:
ac:07:36:c4:48:d9:67:ae:8d:dd:5b:2a:46:bb:c8:
ec:1e:d1:34:54:d0:50:e2:7c:8f:11:60:8b:1d:2e:
85:7e:d7:e5:35:f4:67:1e:b8:c0:0e:0b:d9:f5:d5:
ad:d5:ce:26:c8:c9:3d:d2:ea:7d:79:e1:d1:e2:39:
27:6c:7b:e5:79:56:d9:01:ed:3a:80:ca:32:3e:c2:
5a:2c:9e:8e:9a:87:e6:2b:03:5a:dd:fa:47:de:73:
1c:cb:d3:23:a0:aa:21:7e:32:76:0b:63:5d:fa:b2:
2c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6C:7C:D9:CC:FD:60:74:5D:A8:2E:B4:3D:F7:C3:CC:E5:E8:AC:54
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44382.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.204.0/24
Signature Algorithm: sha256WithRSAEncryption
79:22:7d:f1:8c:c6:52:69:a0:d3:40:89:99:69:53:0e:f2:72:
64:87:1f:cc:58:d5:e5:d4:d6:72:88:f3:37:a3:45:7e:58:1e:
f9:9e:6b:13:93:f8:eb:a0:20:a3:cf:b0:3d:92:0a:d3:6e:f7:
a6:e7:6d:1b:d2:65:b2:ef:8f:5a:54:c7:b4:6e:85:30:fd:be:
af:cf:8b:67:ad:0f:cb:bd:13:57:c6:e8:7c:fd:16:4d:ab:47:
9a:f9:2a:a7:c8:31:b0:5d:17:68:95:45:69:25:c0:4d:26:83:
b5:b6:f9:31:e3:fa:56:1a:43:ad:40:26:4a:dc:9d:76:af:4e:
b6:a4:1c:f5:73:cb:c9:d4:bb:45:e7:c1:f2:1d:15:fe:21:fc:
ce:7d:24:76:cc:aa:c1:50:33:3a:7b:46:3e:d1:b2:81:0f:5a:
07:51:23:c4:30:bf:83:22:1a:11:35:40:8a:e0:63:c3:84:37:
ba:1d:f1:6b:90:e8:10:e5:3a:1f:eb:9b:8e:56:60:48:80:91:
05:5f:71:8b:7e:99:bf:ea:47:4e:16:dd:86:3e:c2:d7:ff:e6:
c6:47:4d:b8:2f:f5:be:1d:06:c3:2b:7d:fb:86:95:2d:37:a3:
cc:90:d2:f1:0f:b6:34:66:e8:b0:3d:fd:f4:7b:e8:17:5a:cb:
dd:37:f3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 13:53:54 2026 by rpki-client