This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: n7097TFEeh5oO/UV5d9YW7aYgMCqQclrkSTcSv7wAq8= Subject key identifier: BF:84:C7:B4:E3:84:B4:DE:02:4C:DF:D5:71:A0:9F:81:2B:69:8A:53 Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 26768A10095C9A28B85BEA74321EA46F84B765DB Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS16509.roa Signing time: Mon 26 Jan 2026 09:04:07 +0000 ROA not before: Mon 26 Jan 2026 08:59:07 +0000 ROA not after: Mon 25 Jan 2027 09:04:07 +0000 asID: 16509 IP address blocks: 85.8.144.0/23 maxlen: 24 85.8.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 14:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:76:8a:10:09:5c:9a:28:b8:5b:ea:74:32:1e:a4:6f:84:b7:65:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Jan 26 08:59:07 2026 GMT Not After : Jan 25 09:04:07 2027 GMT Subject: CN=BF84C7B4E384B4DE024CDFD571A09F812B698A53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a3:66:0e:93:96:0f:64:01:b6:39:3b:fc:54: c4:48:3c:bd:7f:03:25:a5:3f:4d:97:05:88:08:ef: e0:19:94:3b:f8:de:6f:2f:cf:8a:f2:52:24:1a:f5: 8e:fc:32:64:61:5d:b9:e0:56:bd:17:55:98:d0:89: 48:ce:9b:e4:aa:75:29:e9:17:bd:89:28:c0:d8:52: 44:8c:a0:5a:cb:68:28:6e:da:a7:c7:f8:35:1b:09: eb:65:9a:0c:e3:88:d5:b1:52:27:e2:d9:c6:b8:08: 14:7a:0e:3f:97:71:2d:9e:76:0e:8c:eb:68:6a:2c: 19:95:47:81:46:b4:14:e4:cc:ee:e1:ad:ba:9e:cf: 03:d1:2d:c6:23:e9:f9:34:93:9b:e1:9d:eb:91:40: c6:82:48:30:50:fb:b8:55:40:0e:5d:cc:52:e2:3a: f9:1b:5d:14:88:7f:c1:fa:24:f0:d3:75:6c:eb:aa: 67:c1:b2:6d:60:eb:bb:d0:ba:51:2f:dc:73:57:6b: a7:b6:5f:37:f9:75:3b:92:24:dd:f7:04:73:24:f0: 1e:17:a4:25:37:af:56:4d:7a:7c:91:ee:67:4e:1a: e8:e8:43:c9:ed:a4:76:73:40:58:aa:1c:b9:97:46: ff:ac:e7:74:18:83:37:23:8a:93:9f:29:0e:c3:27: 9f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:84:C7:B4:E3:84:B4:DE:02:4C:DF:D5:71:A0:9F:81:2B:69:8A:53 X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.8.144.0/22 Signature Algorithm: sha256WithRSAEncryption 50:5d:c6:a5:97:ed:83:ce:7c:65:27:8b:2b:c9:49:c6:71:81: d3:f2:6d:09:da:27:9b:3e:43:2f:d3:25:4b:56:27:36:f8:0a: b5:3a:c3:78:90:27:a4:ca:51:3f:30:e1:22:57:bb:d8:9e:22: f6:3f:e7:03:6c:8e:42:1f:da:ff:a6:82:0a:95:6b:56:ee:be: fc:ca:be:40:55:e0:5f:4e:a7:72:ad:3b:0b:9e:41:19:7e:50: 63:ad:38:49:40:25:a6:d6:b7:0f:6c:bf:ca:e2:99:21:eb:58: 9e:0c:7b:86:ce:69:85:86:77:fc:c6:07:f7:08:7c:d2:30:8b: 43:bc:57:71:bd:e0:60:00:9e:77:c4:bc:22:e4:06:4a:af:ff: 85:7b:9b:aa:54:c4:b1:d8:28:62:a6:1a:62:d8:02:59:24:82: ba:91:0e:a8:f2:01:d9:55:e4:2a:38:80:aa:7e:77:20:51:77: 20:02:19:8e:b6:01:34:30:19:81:ca:60:27:32:26:78:e8:13: 01:fb:62:11:31:56:4c:e9:e4:72:f6:61:cc:93:46:bc:a8:0d: 1f:ad:28:38:98:97:9e:dc:82:d6:c7:21:87:01:c7:24:d1:04: 48:9b:9b:83:e3:7e:c5:3e:10:f8:59:7e:25:80:93:62:fa:df: 9e:1e:45:2e -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUJnaKEAlcmii4W+p0Mh6kb4S3ZdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNjAxMjYwODU5MDdaFw0yNzAxMjUwOTA0MDdaMDMxMTAvBgNV BAMTKEJGODRDN0I0RTM4NEI0REUwMjRDREZENTcxQTA5RjgxMkI2OThBNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCno2YOk5YPZAG2OTv8VMRIPL1/ AyWlP02XBYgI7+AZlDv43m8vz4ryUiQa9Y78MmRhXbngVr0XVZjQiUjOm+SqdSnp F72JKMDYUkSMoFrLaChu2qfH+DUbCetlmgzjiNWxUifi2ca4CBR6Dj+XcS2edg6M 62hqLBmVR4FGtBTkzO7hrbqezwPRLcYj6fk0k5vhneuRQMaCSDBQ+7hVQA5dzFLi OvkbXRSIf8H6JPDTdWzrqmfBsm1g67vQulEv3HNXa6e2Xzf5dTuSJN33BHMk8B4X pCU3r1ZNenyR7mdOGujoQ8ntpHZzQFiqHLmXRv+s53QYgzcjipOfKQ7DJ58dAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUv4THtOOEtN4CTN/VcaCfgStpilMwHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMTY1MDkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJVCJAw DQYJKoZIhvcNAQELBQADggEBAFBdxqWX7YPOfGUniyvJScZxgdPybQnaJ5s+Qy/T JUtWJzb4CrU6w3iQJ6TKUT8w4SJXu9ieIvY/5wNsjkIf2v+mggqVa1buvvzKvkBV 4F9Op3KtOwueQRl+UGOtOElAJabWtw9sv8rimSHrWJ4Me4bOaYWGd/zGB/cIfNIw i0O8V3G94GAAnnfEvCLkBkqv/4V7m6pUxLHYKGKmGmLYAlkkgrqRDqjyAdlV5Co4 gKp+dyBRdyACGY62ATQwGYHKYCcyJnjoEwH7YhExVkzp5HL2YcyTRryoDR+tKDiY l57cgtbHIYcBxyTRBEibm4PjfsU+EPhZfiWAk2L6354eRS4= -----END CERTIFICATE-----Generated at Mon Feb 2 17:36:54 2026 by rpki-client