This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS201907.roa File: AS201907.roa (raw, json) Hash identifier: hMCebMFt70SoFUdLbluEtzeurIY2XP3SapogvKeQcpI= Subject key identifier: 46:8B:4E:3D:EE:CC:D2:87:E3:B1:B2:D3:CC:BD:DD:A1:8C:ED:37:FA Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 3A439D009BFD8170433E2A4AF9B2B8975D885C51 Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS201907.roa Signing time: Fri 30 Jan 2026 12:23:45 +0000 ROA not before: Fri 30 Jan 2026 12:18:45 +0000 ROA not after: Fri 29 Jan 2027 12:23:45 +0000 asID: 201907 IP address blocks: 85.8.144.0/23 maxlen: 24 85.8.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 14:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:43:9d:00:9b:fd:81:70:43:3e:2a:4a:f9:b2:b8:97:5d:88:5c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Jan 30 12:18:45 2026 GMT Not After : Jan 29 12:23:45 2027 GMT Subject: CN=468B4E3DEECCD287E3B1B2D3CCBDDDA18CED37FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f1:b9:b9:58:15:8e:04:f9:08:80:9d:10:ec: 71:eb:f4:4e:30:b9:6d:74:ef:8a:49:ae:7b:fe:e7: bb:2a:d5:02:93:5d:37:b4:2b:d6:15:7a:e4:22:a1: c0:e6:9b:98:f6:ee:4a:b5:25:9c:21:58:4e:ca:5d: c9:bb:35:88:ff:d6:9c:91:9e:16:51:b8:0f:58:12: 27:40:25:02:1b:cf:ca:66:65:4e:09:6f:18:89:82: 88:ed:d2:24:80:99:f0:37:f4:bc:6a:b5:2d:6a:80: 63:9d:49:0e:bc:58:2c:8c:33:81:49:a7:55:5a:cc: 54:a8:cf:1c:a5:11:4b:f5:9d:c8:46:c1:23:9d:d1: a8:9a:56:85:b5:1a:17:45:37:aa:c6:db:55:62:87: 02:85:08:ec:a0:5d:9e:3c:41:ae:ea:31:f8:e2:27: ad:4a:f5:02:71:4e:58:fa:7e:64:89:7a:3f:5f:ba: 60:85:9c:8a:6a:85:b0:55:a8:d3:0b:6b:5b:ab:e5: ab:54:86:af:11:27:df:74:32:17:9b:e3:fe:b4:a6: 09:9a:8d:27:34:41:5c:8a:62:f8:a5:2c:d0:95:d2: 9e:2c:a4:31:89:1e:94:8a:52:1c:37:60:9f:65:93: 7d:64:ad:ac:74:7f:a9:d6:51:87:b2:b0:d3:b6:e5: 6d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8B:4E:3D:EE:CC:D2:87:E3:B1:B2:D3:CC:BD:DD:A1:8C:ED:37:FA X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS201907.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.8.144.0/22 Signature Algorithm: sha256WithRSAEncryption 87:7a:c3:51:e9:b2:ee:e5:75:aa:f8:dc:b6:27:a5:ec:be:60: 79:e7:b2:25:e0:2c:ca:fe:c2:c1:06:8e:25:46:9e:75:0e:36: 87:ae:d2:5e:60:42:a0:3f:90:8c:84:8a:c9:f4:15:93:ba:6e: 59:62:63:1c:47:84:d5:fe:19:f2:95:59:41:82:12:2e:3d:88: 2a:d2:7a:2b:f8:75:cc:8b:e9:b4:2f:e0:e2:af:25:48:3c:59: 58:91:44:03:69:e3:ac:2a:88:09:87:4e:1a:cd:75:74:b0:21: 12:ff:ca:19:27:64:3a:13:24:4e:58:46:be:f5:80:bd:3a:1e: 3e:bc:68:6b:29:f4:02:10:47:c3:1a:f0:09:7c:47:f9:a2:bf: 9b:25:c7:28:f4:e8:19:46:ff:4e:9d:23:bc:d9:11:6c:bc:09: c3:32:23:d3:a3:9b:9f:41:5f:3b:0f:eb:11:0c:94:3b:dd:55: 91:04:cd:33:ba:d7:07:73:25:a7:6c:2f:12:ec:0c:0a:4e:16: 7b:4a:1e:b5:01:71:6c:55:aa:4c:eb:b6:7f:84:c0:d9:37:00: e7:58:00:02:eb:5e:2c:e1:aa:96:61:8c:84:cc:9e:17:e8:97: ac:84:25:fc:10:79:54:fd:f6:a8:ea:21:b0:5a:9b:c1:44:55: ba:58:b3:f2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUOkOdAJv9gXBDPipK+bK4l12IXFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNjAxMzAxMjE4NDVaFw0yNzAxMjkxMjIzNDVaMDMxMTAvBgNV BAMTKDQ2OEI0RTNERUVDQ0QyODdFM0IxQjJEM0NDQkREREExOENFRDM3RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr8bm5WBWOBPkIgJ0Q7HHr9E4w uW1074pJrnv+57sq1QKTXTe0K9YVeuQiocDmm5j27kq1JZwhWE7KXcm7NYj/1pyR nhZRuA9YEidAJQIbz8pmZU4JbxiJgojt0iSAmfA39LxqtS1qgGOdSQ68WCyMM4FJ p1VazFSozxylEUv1nchGwSOd0aiaVoW1GhdFN6rG21VihwKFCOygXZ48Qa7qMfji J61K9QJxTlj6fmSJej9fumCFnIpqhbBVqNMLa1ur5atUhq8RJ990Mheb4/60pgma jSc0QVyKYvilLNCV0p4spDGJHpSKUhw3YJ9lk31krax0f6nWUYeysNO25W35AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQURotOPe7M0ofjsbLTzL3doYztN/owHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjAxOTA3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVQiQ MA0GCSqGSIb3DQEBCwUAA4IBAQCHesNR6bLu5XWq+Ny2J6XsvmB557Il4CzK/sLB Bo4lRp51DjaHrtJeYEKgP5CMhIrJ9BWTum5ZYmMcR4TV/hnylVlBghIuPYgq0nor +HXMi+m0L+DiryVIPFlYkUQDaeOsKogJh04azXV0sCES/8oZJ2Q6EyROWEa+9YC9 Oh4+vGhrKfQCEEfDGvAJfEf5or+bJcco9OgZRv9OnSO82RFsvAnDMiPTo5ufQV87 D+sRDJQ73VWRBM0zutcHcyWnbC8S7AwKThZ7Sh61AXFsVapM67Z/hMDZNwDnWAAC 614s4aqWYYyEzJ4X6JeshCX8EHlU/fao6iGwWpvBRFW6WLPy -----END CERTIFICATE-----Generated at Mon Feb 2 17:36:53 2026 by rpki-client