This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44620.roa File: AS44620.roa (raw, json) Hash identifier: eD98CTlGZZRHFbtzGe6zIZKSrWHaSXWfwIroZX+Ej5Y= Subject key identifier: F5:55:BB:73:68:43:DB:7B:35:A2:7B:59:42:97:20:A1:3B:C8:F4:ED Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 3F3F6925F2961D053E63228F543844A2EFCC19F8 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44620.roa Signing time: Wed 04 Feb 2026 12:57:38 +0000 ROA not before: Wed 04 Feb 2026 12:52:38 +0000 ROA not after: Wed 03 Feb 2027 12:57:38 +0000 asID: 44620 IP address blocks: 212.87.198.0/24 maxlen: 24 212.87.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:3f:69:25:f2:96:1d:05:3e:63:22:8f:54:38:44:a2:ef:cc:19:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:38 2026 GMT Not After : Feb 3 12:57:38 2027 GMT Subject: CN=F555BB736843DB7B35A27B59429720A13BC8F4ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b5:0a:50:69:46:a8:91:eb:87:fe:93:24:ea: 53:de:90:ad:a2:cb:9a:c8:18:d4:6c:e7:28:8b:40: b3:6f:f5:80:28:4d:6c:19:9d:e7:3b:2f:01:bf:8b: e8:1d:c2:4a:b1:a3:6a:59:6e:da:8b:0a:70:ca:d7: c6:38:37:96:1d:5b:c2:19:f5:b5:d7:0d:57:9d:b3: 01:c3:db:8a:70:fb:8b:22:3f:af:9d:50:7c:72:58: c4:c8:e5:28:15:08:ef:80:63:dd:07:e6:12:7c:72: 2a:ac:82:be:8f:a6:2b:62:a9:36:63:fc:8c:cf:26: e7:b8:aa:e5:5e:10:f5:6a:cd:1b:0a:14:b0:a4:b9: 05:f2:1e:a5:f3:99:68:25:da:54:c2:e8:a3:09:dc: 5d:02:ca:59:9b:22:b9:d5:7d:dd:d7:f4:fd:20:db: a5:73:a6:ff:b8:a6:69:5f:76:83:5c:50:8f:70:d9: 0b:30:eb:c9:b6:5b:ef:e3:46:3f:bf:3d:87:58:50: 68:55:2c:4b:69:ed:90:5a:33:bb:40:71:77:29:62: 5e:e5:fe:fb:b6:56:0c:c2:20:ae:56:8b:c5:35:04: 89:a7:ea:d2:c8:23:36:86:ed:dd:b5:2f:68:88:b0: 88:3b:28:b6:39:67:3f:83:4c:77:84:a6:8c:6a:f0: 1e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:55:BB:73:68:43:DB:7B:35:A2:7B:59:42:97:20:A1:3B:C8:F4:ED X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS44620.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.87.198.0/23 Signature Algorithm: sha256WithRSAEncryption be:65:39:ce:6a:98:64:03:b9:c0:49:71:fb:8a:c8:0e:3a:73: 5e:7e:1a:77:1e:cb:65:94:60:96:c2:0d:fd:21:d0:33:27:82: f6:d4:98:b5:78:9a:32:4c:3d:da:2c:be:03:d1:98:c4:3f:fd: 3b:de:f7:05:1f:d9:77:4e:4b:72:b3:3c:18:ad:3b:52:81:92: 2f:1e:b6:fc:41:36:c3:48:5d:9a:7d:41:f6:04:6e:72:5c:28: 96:fe:6a:c1:a5:5d:b5:07:97:37:9a:e0:6c:4c:2f:25:8f:98: dc:fe:b2:af:dc:61:cc:38:3f:c6:b1:e3:dc:d5:4d:94:79:c7: fc:74:78:4f:83:31:e5:fe:6e:53:b8:cb:57:59:80:76:73:32: 28:c5:9b:ba:4a:a9:c6:b1:ae:28:95:2d:ea:5a:aa:28:cd:2b: bd:56:93:aa:8b:6e:f4:d1:da:c5:cd:dd:6a:19:bf:05:ec:44: 07:76:1e:36:ef:af:06:20:1d:01:93:90:cb:f8:d3:24:eb:15: f7:ea:1b:9e:25:79:9a:19:c9:51:ce:5b:73:c0:bc:28:39:21: 03:6d:b8:95:de:b1:1c:75:3e:b0:67:8e:fa:ef:d0:76:72:fa: 4f:43:52:fc:a5:78:52:65:99:0d:e1:7c:4c:77:05:d6:31:46: 31:ab:87:a4 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUPz9pJfKWHQU+YyKPVDhEou/MGfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyMzhaFw0yNzAyMDMxMjU3MzhaMDMxMTAvBgNV BAMTKEY1NTVCQjczNjg0M0RCN0IzNUEyN0I1OTQyOTcyMEExM0JDOEY0RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+tQpQaUaokeuH/pMk6lPekK2i y5rIGNRs5yiLQLNv9YAoTWwZnec7LwG/i+gdwkqxo2pZbtqLCnDK18Y4N5YdW8IZ 9bXXDVedswHD24pw+4siP6+dUHxyWMTI5SgVCO+AY90H5hJ8ciqsgr6PpitiqTZj /IzPJue4quVeEPVqzRsKFLCkuQXyHqXzmWgl2lTC6KMJ3F0CylmbIrnVfd3X9P0g 26Vzpv+4pmlfdoNcUI9w2Qsw68m2W+/jRj+/PYdYUGhVLEtp7ZBaM7tAcXcpYl7l /vu2VgzCIK5Wi8U1BImn6tLIIzaG7d21L2iIsIg7KLY5Zz+DTHeEpoxq8B7dAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQU9VW7c2hD23s1ontZQpcgoTvI9O0wHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTNDQ2MjAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHUV8Yw DQYJKoZIhvcNAQELBQADggEBAL5lOc5qmGQDucBJcfuKyA46c15+Gncey2WUYJbC Df0h0DMngvbUmLV4mjJMPdosvgPRmMQ//Tve9wUf2XdOS3KzPBitO1KBki8etvxB NsNIXZp9QfYEbnJcKJb+asGlXbUHlzea4GxMLyWPmNz+sq/cYcw4P8ax49zVTZR5 x/x0eE+DMeX+blO4y1dZgHZzMijFm7pKqcaxriiVLepaqijNK71Wk6qLbvTR2sXN 3WoZvwXsRAd2HjbvrwYgHQGTkMv40yTrFffqG54leZoZyVHOW3PAvCg5IQNtuJXe sRx1PrBnjvrv0HZy+k9DUvyleFJlmQ3hfEx3BdYxRjGrh6Q= -----END CERTIFICATE-----Generated at Thu Feb 5 13:53:01 2026 by rpki-client