This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210940.roa File: AS210940.roa (raw, json) Hash identifier: oYurSaYdMP2aZ5fEzgwT0VDyszWHeSiScyZ63Ngu9HQ= Subject key identifier: CD:C0:12:8F:CF:71:0C:4A:17:54:0D:F5:FF:9B:4C:9C:34:59:5B:2A Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 7AB34EEDCE050CA210A4BD0A660EAA78EDC3133D Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210940.roa Signing time: Wed 07 Jan 2026 23:45:30 +0000 ROA not before: Wed 07 Jan 2026 23:40:30 +0000 ROA not after: Wed 06 Jan 2027 23:45:30 +0000 asID: 210940 IP address blocks: 45.157.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 03:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b3:4e:ed:ce:05:0c:a2:10:a4:bd:0a:66:0e:aa:78:ed:c3:13:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Jan 7 23:40:30 2026 GMT Not After : Jan 6 23:45:30 2027 GMT Subject: CN=CDC0128FCF710C4A17540DF5FF9B4C9C34595B2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:22:b2:1c:ae:20:aa:51:63:49:f0:5b:ce:e6: 57:3f:7c:7a:48:ee:4f:13:c9:d1:5b:ec:57:62:af: be:48:f9:8f:b6:7a:ff:fe:5f:10:df:fa:3f:5e:5e: c8:9f:1b:f5:7e:c5:56:82:92:26:ff:7c:38:ed:92: 92:43:c6:7f:ab:b6:9b:e2:4c:40:d8:24:40:75:7b: 2e:fd:5e:ff:4c:10:30:5e:75:18:8c:8d:e7:d8:55: 5c:45:93:6e:40:e0:a9:41:68:14:56:ff:dc:5a:cf: e9:86:b0:4d:d3:f4:e2:31:73:2d:3e:2f:a1:21:26: 9c:ca:56:2d:60:20:82:ff:b7:82:ad:07:c8:e5:16: 35:2c:32:aa:29:df:c4:8a:09:1f:2a:55:99:a8:5a: 2c:c7:33:76:86:22:86:19:9e:41:6f:0e:95:f3:0b: 39:85:1c:33:ac:c9:1c:5c:69:0b:51:e1:84:54:4c: 7c:18:d9:cb:e2:d9:6f:b0:10:34:84:3f:27:1b:bb: 5c:ce:18:3e:94:07:77:02:b4:8c:a1:74:10:67:57: c1:27:36:e1:d0:f3:12:11:66:35:c4:fb:68:df:6f: 6a:c6:5a:dd:ef:eb:c8:ec:01:17:75:9e:aa:3d:f0: 34:31:36:64:9b:ec:cb:a6:c6:2e:a2:6b:58:e4:ec: f5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C0:12:8F:CF:71:0C:4A:17:54:0D:F5:FF:9B:4C:9C:34:59:5B:2A X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210940.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.16.0/24 Signature Algorithm: sha256WithRSAEncryption 84:08:91:ee:a3:02:8a:3c:ed:7a:7f:47:42:00:33:20:a1:28: e2:f3:47:3e:f5:35:1c:5f:90:04:ac:45:c5:97:15:77:6a:d2: 44:d5:71:35:53:14:75:40:af:61:b4:24:b8:d5:e7:e0:51:3c: fb:fb:dc:7e:e3:f5:cd:98:1e:7c:ad:13:96:98:a3:bf:a6:fa: 44:f7:76:24:6c:52:87:c9:82:1a:77:96:e7:83:2c:8b:d7:69: 06:f4:67:53:35:a0:d2:53:4e:68:70:87:16:30:a8:e6:5b:9f: ec:97:8f:30:8a:5c:a4:9c:db:7c:00:60:24:ba:57:8c:16:b9: b6:39:49:3c:3b:d0:50:80:28:d5:2b:ba:1c:dc:15:2b:8d:52: 62:12:4a:3a:72:d1:3a:83:aa:1e:ab:96:74:0d:ed:85:49:32: a7:4e:8d:34:22:0f:ab:94:3f:7c:6e:0a:a2:bf:80:93:f3:8a: e5:7d:9f:26:75:fb:d8:3e:c0:f4:e9:5c:72:a2:92:a9:78:10: 20:a3:96:e8:b9:93:ee:1f:c7:a0:f4:84:67:7a:cd:64:de:83: b6:a8:23:f3:4e:bd:98:14:bd:88:a3:8d:68:d9:6f:3f:97:40: 7b:42:8c:b8:bf:d9:dd:7a:82:08:52:f6:8e:96:33:0f:dc:2f: e7:9f:06:77 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUerNO7c4FDKIQpL0KZg6qeO3DEz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNjAxMDcyMzQwMzBaFw0yNzAxMDYyMzQ1MzBaMDMxMTAvBgNV BAMTKENEQzAxMjhGQ0Y3MTBDNEExNzU0MERGNUZGOUI0QzlDMzQ1OTVCMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjIrIcriCqUWNJ8FvO5lc/fHpI 7k8TydFb7Fdir75I+Y+2ev/+XxDf+j9eXsifG/V+xVaCkib/fDjtkpJDxn+rtpvi TEDYJEB1ey79Xv9MEDBedRiMjefYVVxFk25A4KlBaBRW/9xaz+mGsE3T9OIxcy0+ L6EhJpzKVi1gIIL/t4KtB8jlFjUsMqop38SKCR8qVZmoWizHM3aGIoYZnkFvDpXz CzmFHDOsyRxcaQtR4YRUTHwY2cvi2W+wEDSEPycbu1zOGD6UB3cCtIyhdBBnV8En NuHQ8xIRZjXE+2jfb2rGWt3v68jsARd1nqo98DQxNmSb7Mumxi6ia1jk7PV9AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUzcASj89xDEoXVA31/5tMnDRZWyowHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjEwOTQwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ0Q MA0GCSqGSIb3DQEBCwUAA4IBAQCECJHuowKKPO16f0dCADMgoSji80c+9TUcX5AE rEXFlxV3atJE1XE1UxR1QK9htCS41efgUTz7+9x+4/XNmB58rROWmKO/pvpE93Yk bFKHyYIad5bngyyL12kG9GdTNaDSU05ocIcWMKjmW5/sl48wilyknNt8AGAkuleM Frm2OUk8O9BQgCjVK7oc3BUrjVJiEko6ctE6g6oeq5Z0De2FSTKnTo00Ig+rlD98 bgqiv4CT84rlfZ8mdfvYPsD06VxyopKpeBAgo5bouZPuH8eg9IRnes1k3oO2qCPz Tr2YFL2Io41o2W8/l0B7Qoy4v9ndeoIIUvaOljMP3C/nnwZ3 -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:22 2026 by rpki-client