This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202736.roa
File: AS202736.roa (raw, json)
Hash identifier: 8nEBK7vkOhl4yigY5oxYoaBtV4Ka44DFsKsBvlolkhU=
Subject key identifier: 6A:F5:BC:35:DF:2F:62:07:90:AF:84:4B:F6:30:46:A7:49:95:25:E8
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7C1D19B8C00156CC2DD9A6F21D12C454FBC33D07
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202736.roa
Signing time: Fri 12 Dec 2025 09:15:26 +0000
ROA not before: Fri 12 Dec 2025 09:10:26 +0000
ROA not after: Fri 11 Dec 2026 09:15:26 +0000
asID: 202736
IP address blocks: 92.112.23.0/24 maxlen: 24
95.135.147.0/24 maxlen: 24
95.135.188.0/24 maxlen: 24
178.94.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:1d:19:b8:c0:01:56:cc:2d:d9:a6:f2:1d:12:c4:54:fb:c3:3d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Dec 12 09:10:26 2025 GMT
Not After : Dec 11 09:15:26 2026 GMT
Subject: CN=6AF5BC35DF2F620790AF844BF63046A7499525E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:87:f0:08:35:84:bd:3f:73:50:b0:06:79:f4:
73:49:e3:d7:50:b8:d0:64:9c:9a:6b:ad:5b:c0:ea:
31:6d:8e:9e:65:9b:b4:0d:5d:9f:69:03:7c:04:b7:
37:4a:e7:7c:7e:6d:e8:e5:34:ef:0b:34:9b:bb:08:
33:37:82:53:53:82:4b:9a:82:1b:20:10:81:c6:73:
64:09:7e:62:9a:8b:12:12:b0:fa:39:ac:d7:b1:2d:
69:e7:28:fe:e1:6c:2e:52:ef:7f:a8:a9:ab:d5:fb:
a1:d5:f4:ce:0c:2e:38:eb:a9:0e:c7:d7:88:cf:e2:
13:ba:67:57:51:83:97:fa:64:06:d7:b3:55:78:a8:
38:b4:4b:9a:5a:c9:7a:b2:4e:71:3b:c3:96:f0:d8:
09:4d:f6:ec:66:36:54:b7:9c:a0:eb:0b:02:a6:6d:
ba:57:31:30:fe:be:4b:02:57:c7:2f:a6:0b:3a:12:
69:81:a3:78:77:94:b1:ac:84:d0:e0:2f:45:5b:b0:
e1:0c:5b:d8:bd:f6:bf:52:54:7f:02:71:26:2a:7a:
fa:ee:76:74:db:11:05:6d:c7:39:63:91:f6:c4:7b:
9e:42:f7:9a:28:23:33:9b:fa:f8:ac:27:3d:db:2c:
c1:e4:f8:ff:d9:56:9c:16:82:41:7d:b8:91:f6:c7:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F5:BC:35:DF:2F:62:07:90:AF:84:4B:F6:30:46:A7:49:95:25:E8
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS202736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.23.0/24
95.135.147.0/24
95.135.188.0/24
178.94.142.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:7a:06:f9:9e:30:25:4b:15:c1:3f:cf:ed:72:ad:ae:c1:c0:
05:3d:35:fb:69:ec:49:a2:50:fe:4e:8d:22:8d:f3:23:f8:fd:
87:a5:41:05:a9:a7:86:8d:39:84:ae:66:b1:0a:f7:5f:0f:68:
7a:0a:96:91:6a:58:26:6d:4a:91:94:92:ab:3f:e7:63:ab:e1:
ca:7d:a8:20:53:3f:54:aa:ed:10:a4:b5:19:e8:ad:dd:cd:7f:
22:7c:d7:ca:d8:25:3a:a7:32:8d:f6:2f:b0:4a:8e:26:54:d9:
34:4c:79:78:b2:6c:ba:b7:1a:6b:d7:f4:b1:56:77:65:a1:c6:
d9:94:dd:ee:32:e9:ad:74:f6:e6:ff:60:ef:b7:f2:6a:cb:01:
cc:68:10:c2:9f:2e:49:d7:08:43:10:b1:a1:a4:c8:49:d6:d6:
c5:1b:0d:d3:86:1a:c5:b6:29:68:ed:dd:39:7c:c8:10:85:16:
bd:83:8d:36:13:33:55:bf:f0:04:73:49:f8:e1:74:35:4e:7e:
a9:5e:1e:c2:de:5a:dc:3a:da:1f:55:bd:d7:3a:44:01:62:45:
97:aa:ab:88:36:60:1d:61:3f:93:7c:bf:3b:14:01:66:fe:64:
7f:2d:05:04:03:da:7b:a8:2c:18:a7:05:5b:27:20:df:54:dc:
61:09:a3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 07:33:16 2026 by rpki-client