This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS47377.roa
File: AS47377.roa (raw, json)
Hash identifier: fSd8j9eEz64Yn1ZX0LYwToNE2t9ml0Q1IYZGqwENSKc=
Subject key identifier: 4C:5E:05:B0:94:3B:0A:06:B3:8F:15:8D:99:4D:72:9D:90:85:3B:16
Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Certificate serial: 2C6855AD7E67BB93A56C2195D8075E57DE720871
Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS47377.roa
Signing time: Wed 04 Feb 2026 12:57:52 +0000
ROA not before: Wed 04 Feb 2026 12:52:52 +0000
ROA not after: Wed 03 Feb 2027 12:57:52 +0000
asID: 47377
IP address blocks: 83.171.247.0/24 maxlen: 24
188.119.70.0/24 maxlen: 24
193.32.186.0/24 maxlen: 24
193.32.187.0/24 maxlen: 24
193.32.206.0/24 maxlen: 24
193.187.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:68:55:ad:7e:67:bb:93:a5:6c:21:95:d8:07:5e:57:de:72:08:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c
Validity
Not Before: Feb 4 12:52:52 2026 GMT
Not After : Feb 3 12:57:52 2027 GMT
Subject: CN=4C5E05B0943B0A06B38F158D994D729D90853B16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:39:19:39:b5:ef:63:ca:c4:06:29:ff:85:
c8:4f:23:82:79:5f:c5:f4:9e:27:e0:89:b7:41:8b:
c3:a2:cb:af:a6:0e:c9:63:96:3a:e2:ff:fc:6e:39:
6f:db:7d:6e:72:b6:da:34:2f:b7:f4:17:4e:67:95:
e6:9d:24:e5:0d:f6:d8:76:97:50:8d:95:7a:ba:4b:
96:13:9a:75:be:96:78:1f:29:2d:50:f4:4e:ff:cb:
ce:69:27:43:55:99:72:c3:78:ea:5f:ce:2a:62:8e:
53:d5:89:5e:83:37:25:4f:6c:29:c8:55:da:e2:73:
96:b0:63:c3:a5:d1:f6:29:72:04:4e:f3:df:74:b6:
95:21:84:fa:11:30:12:80:24:38:3f:02:2d:b7:59:
9a:6f:f5:9a:2c:db:2e:87:4d:61:b2:7a:32:34:da:
6c:37:dc:fa:28:50:e8:d9:ca:b8:1e:2c:29:df:8f:
f9:b0:57:67:9f:9e:d4:a8:fc:e8:23:1b:55:9d:7d:
c2:d2:f9:c2:f6:fc:fa:0b:5d:39:45:cc:5e:e5:9e:
25:75:31:08:ce:6a:7d:c2:db:63:50:b6:70:59:4f:
ea:e9:de:bc:51:db:b4:ad:99:a5:6f:28:0d:14:e9:
e6:c5:89:ab:b5:f2:80:60:e5:81:4f:7f:20:2d:91:
11:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5E:05:B0:94:3B:0A:06:B3:8F:15:8D:99:4D:72:9D:90:85:3B:16
X509v3 Authority Key Identifier:
keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS47377.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.247.0/24
188.119.70.0/24
193.32.186.0/23
193.32.206.0/24
193.187.135.0/24
Signature Algorithm: sha256WithRSAEncryption
e7:cc:e7:03:d3:96:83:c4:65:c5:29:2e:a1:1b:87:07:d4:a4:
5b:4b:7f:4f:ca:f3:8b:b4:7e:c4:d7:31:3c:8a:75:fd:75:52:
7e:1d:8c:5c:83:f6:df:a5:af:a2:1c:91:4a:6c:05:a1:54:dd:
0d:2d:32:be:04:93:9b:e2:94:cf:c5:b0:3c:44:14:61:54:70:
91:3c:ee:0f:57:a4:99:69:c5:92:7c:ff:9c:a9:2c:da:65:2c:
57:54:33:41:01:3a:2c:d6:da:3c:31:fb:34:6e:a9:17:a6:ea:
f1:ac:a6:33:8c:52:05:dc:86:2a:93:95:9a:e3:2f:1b:59:13:
86:26:73:0f:98:0c:79:7a:3d:61:8e:ba:98:55:2c:de:d0:3f:
6b:3d:ea:b1:cc:79:a2:18:a9:f7:84:92:48:f6:53:18:0d:27:
94:f9:d3:37:73:ea:67:ca:22:86:a2:47:72:f5:b0:1b:54:3b:
16:c4:ee:a1:9e:b4:2c:ea:25:f7:62:f2:ef:65:45:23:eb:10:
5a:7d:f1:51:dc:e0:b5:ea:8a:00:04:e6:56:c9:df:6e:06:75:
91:34:32:72:dc:a2:8e:45:06:32:73:de:64:07:d3:ed:56:c2:
4b:d5:87:87:06:5e:e6:a2:fe:08:5f:75:07:ba:61:75:bc:d4:
0d:3c:e1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 13:53:02 2026 by rpki-client