This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS49981.roa File: AS49981.roa (raw, json) Hash identifier: Zzy5ULPel6ZOFUJzbavB7RMzlpHhmGGMuR7BceZp2sk= Subject key identifier: 59:37:6A:2A:EF:91:A6:5E:51:1D:B9:3E:46:58:B1:74:43:5B:EF:49 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 43D3DBD1B4742E871C6F218DECFA1BBC89B32175 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS49981.roa Signing time: Wed 04 Feb 2026 12:57:40 +0000 ROA not before: Wed 04 Feb 2026 12:52:40 +0000 ROA not after: Wed 03 Feb 2027 12:57:40 +0000 asID: 49981 IP address blocks: 212.87.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d3:db:d1:b4:74:2e:87:1c:6f:21:8d:ec:fa:1b:bc:89:b3:21:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:40 2026 GMT Not After : Feb 3 12:57:40 2027 GMT Subject: CN=59376A2AEF91A65E511DB93E4658B174435BEF49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1f:fb:41:81:aa:d6:3f:45:b1:52:b8:d0:5e: b6:61:2c:30:55:44:88:35:e8:a9:bd:3a:d4:3c:ec: fb:2a:11:b8:da:c6:86:92:8e:78:d5:8b:e5:c8:b4: 5c:43:0d:af:b9:74:df:ae:37:29:25:60:2b:65:5d: 50:21:81:f7:a0:35:4e:31:6a:d4:44:a3:e8:f4:91: ba:a2:c6:95:74:af:c3:9d:79:82:ef:13:dc:54:79: bb:2f:97:86:7d:86:93:84:db:e6:87:e8:37:1d:1e: 6c:df:8e:95:25:a4:d5:94:98:0f:41:16:0f:32:fc: e0:fc:1f:36:63:f3:8b:7a:3d:6b:31:5c:50:5f:f2: 04:51:17:20:e2:01:f4:3d:f3:af:71:94:28:fa:55: 61:62:db:77:a4:f7:b7:1b:12:04:cb:8c:ae:63:16: 9f:60:bc:aa:90:0f:fe:b1:0a:eb:87:57:4d:c3:f4: eb:f1:4b:cf:95:2c:cf:9b:e8:0e:a2:59:40:86:c6: 6a:de:a8:05:5e:bd:ac:b6:3b:26:48:44:62:a5:c4: d7:ec:70:6c:b3:f0:4e:e6:81:d6:d0:93:f5:1b:d9: 37:7b:18:e2:48:26:ca:88:c3:1e:de:4e:0f:f7:5d: f0:5a:0e:62:e2:04:43:73:3a:51:10:36:cc:7c:ff: 3c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:37:6A:2A:EF:91:A6:5E:51:1D:B9:3E:46:58:B1:74:43:5B:EF:49 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS49981.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.87.197.0/24 Signature Algorithm: sha256WithRSAEncryption 00:92:9a:e5:26:5e:93:cb:49:b7:b7:3e:89:87:ca:ed:80:69: 95:1b:b6:4f:23:b4:40:38:d0:36:b6:0d:a9:bc:1d:b1:1f:a4: c2:29:a4:7d:d4:c9:18:e3:be:c8:93:79:f7:bd:76:67:c5:d1: 4d:85:89:27:92:b3:a6:7b:3d:d7:f6:0d:f6:45:79:07:24:51: c6:bb:5c:c2:1d:67:00:6f:c8:f4:4e:38:5c:e6:fd:b2:5d:3e: be:ba:11:84:2c:3a:12:ad:a4:36:77:07:1d:5f:3b:d8:b9:5b: a0:51:d6:e7:53:11:9f:dd:b2:37:72:ca:a3:21:07:eb:f5:4a: d5:34:2f:2a:65:4a:e4:81:13:c8:15:44:9f:21:35:ce:3b:70: bc:e5:45:07:6f:87:4b:f1:17:1d:9f:7d:cf:2c:f2:a0:3a:a7: ee:20:8e:64:16:73:e7:0b:99:df:55:37:65:dd:4e:d0:ed:73: 88:49:86:9c:a0:5b:fb:05:fa:75:4b:14:f5:20:cc:c8:f2:46: b0:fc:7b:56:cc:f3:0d:a5:64:2b:ed:77:1b:af:8d:22:cc:62: 20:97:5a:65:17:cc:52:6b:84:37:3c:a9:1c:51:51:65:51:55: ee:1b:56:6e:62:05:c2:07:87:80:09:7e:94:e4:84:c7:69:d1: 57:71:b5:c4 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUQ9Pb0bR0LoccbyGN7PobvImzIXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNDBaFw0yNzAyMDMxMjU3NDBaMDMxMTAvBgNV BAMTKDU5Mzc2QTJBRUY5MUE2NUU1MTFEQjkzRTQ2NThCMTc0NDM1QkVGNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGH/tBgarWP0WxUrjQXrZhLDBV RIg16Km9OtQ87PsqEbjaxoaSjnjVi+XItFxDDa+5dN+uNyklYCtlXVAhgfegNU4x atREo+j0kbqixpV0r8OdeYLvE9xUebsvl4Z9hpOE2+aH6DcdHmzfjpUlpNWUmA9B Fg8y/OD8HzZj84t6PWsxXFBf8gRRFyDiAfQ9869xlCj6VWFi23ek97cbEgTLjK5j Fp9gvKqQD/6xCuuHV03D9OvxS8+VLM+b6A6iWUCGxmreqAVevay2OyZIRGKlxNfs cGyz8E7mgdbQk/Ub2Td7GOJIJsqIwx7eTg/3XfBaDmLiBENzOlEQNsx8/zwXAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUWTdqKu+Rpl5RHbk+RlixdENb70kwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTNDk5ODEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADUV8Uw DQYJKoZIhvcNAQELBQADggEBAACSmuUmXpPLSbe3PomHyu2AaZUbtk8jtEA40Da2 Dam8HbEfpMIppH3UyRjjvsiTefe9dmfF0U2FiSeSs6Z7Pdf2DfZFeQckUca7XMId ZwBvyPROOFzm/bJdPr66EYQsOhKtpDZ3Bx1fO9i5W6BR1udTEZ/dsjdyyqMhB+v1 StU0LyplSuSBE8gVRJ8hNc47cLzlRQdvh0vxFx2ffc8s8qA6p+4gjmQWc+cLmd9V N2XdTtDtc4hJhpygW/sF+nVLFPUgzMjyRrD8e1bM8w2lZCvtdxuvjSLMYiCXWmUX zFJrhDc8qRxRUWVRVe4bVm5iBcIHh4AJfpTkhMdp0VdxtcQ= -----END CERTIFICATE-----Generated at Thu Feb 5 13:53:52 2026 by rpki-client