This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS47952.roa File: AS47952.roa (raw, json) Hash identifier: lwhZz0+mAeu7OfVwXwJq7R4XqmnEeaDqivxfIQG959w= Subject key identifier: AE:8E:AB:02:4B:18:EF:F1:ED:56:D9:3B:70:AF:F7:A6:7E:32:67:6F Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 4AD5A4B6FA83362546825F8277C6B69302BEEE35 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS47952.roa Signing time: Wed 04 Feb 2026 12:57:50 +0000 ROA not before: Wed 04 Feb 2026 12:52:50 +0000 ROA not after: Wed 03 Feb 2027 12:57:50 +0000 asID: 47952 IP address blocks: 81.90.176.0/24 maxlen: 24 81.90.177.0/24 maxlen: 24 81.90.178.0/24 maxlen: 24 81.90.179.0/24 maxlen: 24 193.138.172.0/24 maxlen: 24 193.138.173.0/24 maxlen: 24 193.138.174.0/24 maxlen: 24 193.138.175.0/24 maxlen: 24 194.56.184.0/24 maxlen: 24 194.56.185.0/24 maxlen: 24 194.56.186.0/24 maxlen: 24 194.56.187.0/24 maxlen: 24 212.103.36.0/22 maxlen: 24 212.103.36.0/24 maxlen: 24 212.103.37.0/24 maxlen: 24 212.103.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d5:a4:b6:fa:83:36:25:46:82:5f:82:77:c6:b6:93:02:be:ee:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:50 2026 GMT Not After : Feb 3 12:57:50 2027 GMT Subject: CN=AE8EAB024B18EFF1ED56D93B70AFF7A67E32676F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4e:4b:93:55:ad:21:8a:a3:60:09:7f:bf:2b: 88:5f:5e:d5:2a:15:a7:62:e6:5d:18:5a:d5:b4:f5: 50:c8:f4:53:e5:cd:36:69:1e:18:d1:2d:e6:d1:2a: 28:a5:c6:89:53:c1:4f:9a:27:86:40:d9:7a:df:fa: 19:76:af:87:a3:af:66:ca:4e:14:6f:b6:bc:4c:04: 85:97:3b:eb:2f:ad:d1:f0:ad:84:d9:45:95:d3:fa: b4:bb:57:5c:4d:33:ba:79:69:2f:44:c7:26:a0:07: 09:9f:c6:ab:fa:b9:c7:d4:93:9c:01:5a:a7:1b:17: b4:5b:2d:27:0d:b0:aa:57:6a:de:12:e8:38:89:2c: df:3e:c5:d5:ab:19:35:ac:e5:02:07:d1:82:c6:a9: fd:0c:9d:9f:84:34:d0:14:7d:cb:39:26:ef:38:8b: 57:9b:e7:5e:70:90:10:bf:01:8b:d7:ab:e4:ee:96: cf:ca:88:f8:e1:37:e4:99:7f:c5:b7:51:73:e4:f0: d1:cf:2f:21:6e:ab:f0:f3:1f:1b:31:ff:66:d2:52: 36:fa:e6:20:51:86:a6:93:63:d2:d9:43:17:95:e7: 87:a0:38:27:64:47:1e:77:3f:9b:e7:3f:0e:a9:d2: 08:18:fd:aa:63:cf:45:29:51:86:bd:55:ca:10:4f: 36:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8E:AB:02:4B:18:EF:F1:ED:56:D9:3B:70:AF:F7:A6:7E:32:67:6F X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS47952.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.90.176.0/22 193.138.172.0/22 194.56.184.0/22 212.103.36.0/22 Signature Algorithm: sha256WithRSAEncryption 59:07:92:a6:91:11:73:8d:35:28:da:19:d1:b7:9c:cd:3f:c3: 9e:15:8a:8a:bc:17:60:38:a2:db:f0:d1:b7:4b:7e:58:65:b6: 47:06:30:35:0f:0d:b3:5e:71:6e:a3:71:83:3a:7d:28:db:0c: c1:f1:cd:93:5f:06:02:8c:4f:b9:48:57:6d:ab:5f:51:37:13: 7f:fa:8f:5f:a3:1b:d4:46:1a:aa:fc:00:4f:a1:68:d2:21:f4: 1a:2b:af:9f:56:bb:88:ab:9d:76:6e:66:5c:99:cc:63:f5:3d: ef:84:d0:da:24:2e:f4:2c:b3:23:63:1e:a9:4c:a6:57:39:d9: 45:12:ee:7b:01:a9:93:6e:ea:6f:dd:1d:44:8f:98:98:8f:12: 6a:c8:98:af:a8:29:60:0a:12:e3:33:1f:cf:ab:c3:ae:e3:dc: 03:1a:2d:5f:15:4b:87:ed:ea:fd:ed:67:ba:b6:e9:5b:60:99: c9:4a:48:f6:3a:17:2a:9e:9a:db:cf:5b:90:c9:45:a8:90:6d: 20:88:ee:8d:52:15:1d:7e:fe:00:7e:69:83:eb:4e:cc:f1:f0: cc:a2:75:75:ac:92:75:6c:2a:72:d6:bc:5a:9f:6f:eb:ae:ce: 52:c6:be:e5:29:62:ea:06:d7:06:8b:a4:32:34:14:36:87:c4: b3:d0:49:c7 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgIUStWktvqDNiVGgl+Cd8a2kwK+7jUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNTBaFw0yNzAyMDMxMjU3NTBaMDMxMTAvBgNV BAMTKEFFOEVBQjAyNEIxOEVGRjFFRDU2RDkzQjcwQUZGN0E2N0UzMjY3NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtTkuTVa0hiqNgCX+/K4hfXtUq Fadi5l0YWtW09VDI9FPlzTZpHhjRLebRKiilxolTwU+aJ4ZA2Xrf+hl2r4ejr2bK ThRvtrxMBIWXO+svrdHwrYTZRZXT+rS7V1xNM7p5aS9ExyagBwmfxqv6ucfUk5wB WqcbF7RbLScNsKpXat4S6DiJLN8+xdWrGTWs5QIH0YLGqf0MnZ+ENNAUfcs5Ju84 i1eb515wkBC/AYvXq+Tuls/KiPjhN+SZf8W3UXPk8NHPLyFuq/DzHxsx/2bSUjb6 5iBRhqaTY9LZQxeV54egOCdkRx53P5vnPw6p0ggY/apjz0UpUYa9VcoQTzbBAgMB AAGjggIbMIICFzAdBgNVHQ4EFgQUro6rAksY7/HtVtk7cK/3pn4yZ28wHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTNDc5NTIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAJRWrAD BALBiqwDBALCOLgDBALUZyQwDQYJKoZIhvcNAQELBQADggEBAFkHkqaREXONNSja GdG3nM0/w54Vioq8F2A4otvw0bdLflhltkcGMDUPDbNecW6jcYM6fSjbDMHxzZNf BgKMT7lIV22rX1E3E3/6j1+jG9RGGqr8AE+haNIh9Borr59Wu4irnXZuZlyZzGP1 Pe+E0NokLvQssyNjHqlMplc52UUS7nsBqZNu6m/dHUSPmJiPEmrImK+oKWAKEuMz H8+rw67j3AMaLV8VS4ft6v3tZ7q26VtgmclKSPY6FyqemtvPW5DJRaiQbSCI7o1S FR1+/gB+aYPrTszx8MyidXWsknVsKnLWvFqfb+uuzlLGvuUpYuoG1waLpDI0FDaH xLPQScc= -----END CERTIFICATE-----Generated at Thu Feb 5 13:53:01 2026 by rpki-client