This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS202627.roa
File: AS202627.roa (raw, json)
Hash identifier: Y+3XTOH6LuhDiTAuJPAqLPDCJCHGrrnSEMqgFenmJSQ=
Subject key identifier: 68:A2:BA:ED:FA:14:A2:AC:AD:E0:F6:77:FB:84:35:BE:D5:A8:50:92
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 4E5506D6E0BC0BFE131762EA5B551795FC3BC635
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS202627.roa
Signing time: Fri 16 Jan 2026 14:18:45 +0000
ROA not before: Fri 16 Jan 2026 14:13:45 +0000
ROA not after: Fri 15 Jan 2027 14:18:45 +0000
asID: 202627
IP address blocks: 193.111.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 03:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:55:06:d6:e0:bc:0b:fe:13:17:62:ea:5b:55:17:95:fc:3b:c6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jan 16 14:13:45 2026 GMT
Not After : Jan 15 14:18:45 2027 GMT
Subject: CN=68A2BAEDFA14A2ACADE0F677FB8435BED5A85092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d6:f2:15:22:ce:30:2c:3d:fd:45:70:9b:4c:
82:d2:6b:53:2e:24:c0:04:35:f6:d8:03:46:e0:de:
83:0e:9f:5f:73:77:00:32:1f:14:74:3c:d4:26:bb:
5c:7c:ac:5c:c7:67:75:45:90:d8:0a:94:26:8c:19:
de:6d:9a:4f:07:d8:66:4d:99:c9:37:0f:43:2a:d1:
96:68:78:61:c2:c0:f8:3e:f6:f4:03:f6:f4:33:8d:
8a:68:7c:4a:63:94:bf:49:06:ae:ca:d1:e3:c2:c5:
cd:61:17:7b:ac:36:f0:5f:d5:0d:ea:77:ec:9a:fd:
9b:d1:ff:5e:61:3b:70:fc:63:2e:02:07:09:ab:08:
fe:6f:c4:c3:1e:b0:3e:57:e4:5a:33:48:eb:53:ca:
41:9f:88:56:44:31:26:08:32:0a:17:29:a4:c2:dd:
b5:be:9c:c2:96:4e:84:2c:a8:3d:b3:d4:7a:2a:fd:
70:03:20:9f:cd:d3:f8:30:7f:a3:b9:8f:9a:78:76:
25:b4:1d:de:58:c9:bc:c4:99:dd:5d:51:1d:4d:be:
61:1c:78:a3:50:05:f7:f4:52:13:b9:63:ca:12:01:
0c:b1:86:5f:97:7f:52:9d:0d:b3:10:12:d5:20:f0:
28:22:1b:65:18:03:92:2f:04:23:16:df:c1:d8:75:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A2:BA:ED:FA:14:A2:AC:AD:E0:F6:77:FB:84:35:BE:D5:A8:50:92
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS202627.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.124.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d4:67:97:73:7f:43:d0:53:5c:3d:89:ba:f8:70:5f:55:b8:
f2:59:39:aa:22:c9:2b:19:e7:18:e8:ff:19:64:b7:fa:7e:0e:
ec:89:cb:6e:4a:ff:79:33:1f:5e:0e:4d:f7:e2:4d:8b:fa:3d:
ad:6f:af:57:1e:30:35:5e:7d:0b:39:02:d0:98:91:98:81:c3:
f0:ae:9c:49:27:80:15:a5:05:64:98:ae:2f:74:85:ea:62:05:
5f:0d:34:ac:39:94:d9:d8:2c:79:83:0c:13:f7:76:f5:34:34:
20:18:11:72:85:a2:55:ec:0e:93:46:32:74:5b:b6:35:1b:9b:
c6:ca:90:12:dc:78:94:96:c3:13:7a:a5:e1:28:e2:2a:3f:fa:
4b:72:85:ba:59:89:d4:d9:69:4b:6e:d3:7e:a3:db:1a:d7:b6:
fd:d9:d9:7f:db:f5:aa:0d:e8:72:f9:01:0e:e9:d0:14:f4:03:
02:18:bd:09:a6:97:49:74:6c:14:3b:3e:34:91:9b:77:3d:ff:
c9:de:9a:d4:42:e4:93:40:a7:22:ae:14:cf:b5:70:65:13:1f:
38:58:e0:a2:c7:39:33:1d:9f:0c:db:1d:cb:90:05:ce:cb:75:
29:e0:97:1e:5d:10:4f:5c:07:e6:97:38:14:4d:b3:b7:e8:7b:
6a:eb:4f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 14:37:21 2026 by rpki-client