This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS57397.roa File: AS57397.roa (raw, json) Hash identifier: fxW3jvFbo0HzG3FmZT+jY8RcbznKdMTpI1kMziw83u8= Subject key identifier: A1:52:CC:56:FC:A1:8A:5A:B0:D3:02:5F:EB:55:B2:83:7D:BB:8C:28 Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 43AB01734DB19060C5B577308C7F18AA66F30F9E Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS57397.roa Signing time: Wed 04 Feb 2026 12:57:37 +0000 ROA not before: Wed 04 Feb 2026 12:52:37 +0000 ROA not after: Wed 03 Feb 2027 12:57:37 +0000 asID: 57397 IP address blocks: 37.221.78.0/24 maxlen: 24 185.231.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ab:01:73:4d:b1:90:60:c5:b5:77:30:8c:7f:18:aa:66:f3:0f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:37 2026 GMT Not After : Feb 3 12:57:37 2027 GMT Subject: CN=A152CC56FCA18A5AB0D3025FEB55B2837DBB8C28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fc:f1:72:6c:4b:df:15:d0:1a:f3:ac:68:ef: e1:09:6d:2a:fb:ec:c8:3f:53:61:76:7c:fe:3d:c5: 5d:b9:94:8c:fa:15:f2:dc:df:3f:28:43:3d:e3:92: cc:83:af:fb:a1:58:db:c5:54:02:1f:1c:95:38:68: dd:a0:46:12:8d:b9:d1:84:da:76:74:21:70:86:60: b2:cc:63:a9:93:95:e1:c7:c4:04:b3:22:3e:69:39: 82:40:af:bf:95:41:db:7c:1b:d5:9a:dc:04:65:77: 07:94:06:12:8c:db:cd:1e:72:38:f1:e7:d1:26:00: ae:1b:36:97:f1:84:7d:0c:37:26:a2:cb:51:b9:d2: f1:66:4c:4b:e0:32:df:aa:5f:69:48:75:71:66:d0: 85:5a:63:f7:03:6d:99:3b:13:28:a0:fd:2a:13:a3: ad:e3:cd:e6:55:e8:5a:3d:11:dc:97:6c:2b:2b:55: da:bb:83:dd:16:ad:d6:2c:25:07:7e:92:0a:37:85: 52:2e:4c:51:5e:27:f7:5b:2e:66:8b:ec:15:1f:e2: ce:18:98:fc:d9:13:c7:53:aa:24:92:83:a6:75:cd: 24:a5:95:17:fd:7c:5f:8b:7c:7b:4a:ec:57:1a:d1: a3:17:44:0d:b5:f6:50:f4:aa:ba:b0:a9:aa:b5:f1: 1c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:52:CC:56:FC:A1:8A:5A:B0:D3:02:5F:EB:55:B2:83:7D:BB:8C:28 X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS57397.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.78.0/24 185.231.224.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:cf:c6:ee:ed:90:c6:6f:0f:03:fa:bb:e9:e7:0a:75:ac:dd: ed:04:b5:04:82:51:d7:51:f6:e7:c4:bd:b9:c6:9a:e1:a1:da: 3a:5d:c7:bf:f1:ce:06:a5:d0:07:6d:72:32:fc:05:05:f2:06: 6e:74:fc:a1:e4:3a:bf:9a:f2:93:7d:a3:26:35:5f:c8:e6:d0: 36:dc:63:37:14:2a:a3:3f:c5:a6:6f:7c:24:d3:d8:61:07:d7: 63:43:97:9c:bb:c6:ce:65:63:77:76:3a:9b:d0:88:04:54:35: 5a:f4:a4:1c:dd:5f:e9:20:64:02:57:7e:e5:9a:6e:db:31:03: 25:ed:68:e9:93:78:cb:39:1c:33:9f:0b:e7:2b:22:6d:d8:b9: 7f:4a:b4:9e:5d:e3:97:5d:cb:61:bd:8e:75:3c:80:44:3a:cc: 9a:a3:bb:2d:9d:c4:83:c9:76:a8:cd:59:f2:08:41:58:89:d0: 4d:dd:45:73:88:43:48:21:81:c9:5e:48:50:e6:3a:f3:96:53: 70:23:17:04:b2:2a:93:d0:71:bc:f8:a7:66:f7:69:8e:7a:97: 2c:ca:9c:ed:79:01:c6:26:04:79:a2:eb:5d:f5:1c:bd:eb:68: 19:fc:61:59:4f:e0:ab:ad:12:5f:8b:68:2e:9a:1d:fb:63:33: 4a:3d:4a:42 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUQ6sBc02xkGDFtXcwjH8YqmbzD54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyMzdaFw0yNzAyMDMxMjU3MzdaMDMxMTAvBgNV BAMTKEExNTJDQzU2RkNBMThBNUFCMEQzMDI1RkVCNTVCMjgzN0RCQjhDMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj/PFybEvfFdAa86xo7+EJbSr7 7Mg/U2F2fP49xV25lIz6FfLc3z8oQz3jksyDr/uhWNvFVAIfHJU4aN2gRhKNudGE 2nZ0IXCGYLLMY6mTleHHxASzIj5pOYJAr7+VQdt8G9Wa3ARldweUBhKM280ecjjx 59EmAK4bNpfxhH0MNyaiy1G50vFmTEvgMt+qX2lIdXFm0IVaY/cDbZk7Eyig/SoT o63jzeZV6Fo9EdyXbCsrVdq7g90WrdYsJQd+kgo3hVIuTFFeJ/dbLmaL7BUf4s4Y mPzZE8dTqiSSg6Z1zSSllRf9fF+LfHtK7Fca0aMXRA219lD0qrqwqaq18RwhAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUoVLMVvyhilqw0wJf61Wyg327jCgwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTNTczOTcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAAl3U4D BAC55+AwDQYJKoZIhvcNAQELBQADggEBAGzPxu7tkMZvDwP6u+nnCnWs3e0EtQSC UddR9ufEvbnGmuGh2jpdx7/xzgal0AdtcjL8BQXyBm50/KHkOr+a8pN9oyY1X8jm 0DbcYzcUKqM/xaZvfCTT2GEH12NDl5y7xs5lY3d2OpvQiARUNVr0pBzdX+kgZAJX fuWabtsxAyXtaOmTeMs5HDOfC+crIm3YuX9KtJ5d45ddy2G9jnU8gEQ6zJqjuy2d xIPJdqjNWfIIQViJ0E3dRXOIQ0ghgcleSFDmOvOWU3AjFwSyKpPQcbz4p2b3aY56 lyzKnO15AcYmBHmi6131HL3raBn8YVlP4KutEl+LaC6aHftjM0o9SkI= -----END CERTIFICATE-----Generated at Thu Feb 5 13:59:24 2026 by rpki-client