This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273824.roa File: AS273824.roa (raw, json) Hash identifier: lsVZKAJ7bW+CYjPZsFqs/PRtqclIc9V38s3Xef6W3JA= Subject key identifier: C9:94:1C:C0:E7:C4:E7:8B:76:D1:64:23:A7:70:75:EB:83:09:38:15 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 3FA2BBCD8FAA457749990345B32040F259137DD0 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273824.roa Signing time: Thu 29 Jan 2026 19:05:45 +0000 ROA not before: Thu 29 Jan 2026 19:00:45 +0000 ROA not after: Thu 28 Jan 2027 19:05:45 +0000 asID: 273824 IP address blocks: 178.95.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 05:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a2:bb:cd:8f:aa:45:77:49:99:03:45:b3:20:40:f2:59:13:7d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Jan 29 19:00:45 2026 GMT Not After : Jan 28 19:05:45 2027 GMT Subject: CN=C9941CC0E7C4E78B76D16423A77075EB83093815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:cc:33:70:63:74:33:8b:2d:fe:c9:61:18: 11:12:9a:0e:e1:18:90:47:e1:9b:cc:26:64:c6:d1: e4:ba:f5:73:45:e7:ac:6e:9c:9a:66:be:d5:99:7d: 11:a4:89:61:15:b9:2a:0b:46:44:44:b4:c8:f5:29: 19:8c:a6:80:08:b7:f7:47:c9:77:1f:a2:8e:b7:52: d7:b8:ec:e6:b6:6a:28:3b:a7:a4:a2:94:98:ff:6c: 2f:d1:df:94:e7:60:2a:3c:7e:84:45:2b:b7:00:be: 62:46:70:80:3c:a4:61:df:ad:b4:39:e1:4e:75:18: 17:b0:9f:ad:00:86:77:4e:37:8c:71:9d:7a:7b:ec: 94:77:f4:11:12:48:94:3f:61:2f:75:fd:1a:33:22: 92:70:c7:53:48:de:e2:af:ed:c0:bb:9d:a8:dd:df: 68:e8:34:fb:eb:0c:f9:36:9b:07:47:81:f9:8a:76: 93:5a:02:66:ab:63:70:7e:d5:b2:fc:43:c5:de:e1: eb:2e:a7:32:be:e7:71:d6:b6:5e:4d:43:be:e3:a9: 42:66:12:52:fc:2c:7a:84:a5:2d:d2:37:79:68:39: bf:b7:3b:c6:02:45:c5:e3:f1:b1:6b:c9:79:78:55: 1f:08:b9:28:bd:f2:18:ac:57:c0:47:bd:a3:2c:be: e3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:94:1C:C0:E7:C4:E7:8B:76:D1:64:23:A7:70:75:EB:83:09:38:15 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273824.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.95.208.0/22 Signature Algorithm: sha256WithRSAEncryption 03:3e:93:30:20:ee:97:9e:17:ca:72:a4:47:29:8d:38:ec:28: 18:74:e1:59:d5:c7:04:8f:cc:d1:9d:b8:d3:8d:7e:85:54:bf: 73:df:01:46:78:04:ed:60:cb:38:d3:a9:9b:a1:29:f0:4a:be: c4:51:90:d7:2e:d4:1b:73:6c:4d:3b:e4:aa:58:c7:48:ca:a3: 0c:91:79:01:79:25:32:34:70:50:d1:97:a8:81:0a:00:0a:a3: 8e:89:1c:aa:0e:f4:32:a3:65:6a:e9:0d:57:09:ec:3c:eb:c1: 2c:0c:d4:09:dc:ce:13:fa:4a:d0:3d:74:4d:7f:da:7d:20:95: 8d:a9:0a:82:1d:50:9c:af:4b:da:f5:6b:d2:1b:ad:20:df:82: 73:cf:07:4e:17:63:82:f7:b6:a8:bd:8c:c5:c7:a9:35:e3:14: d6:99:17:b5:78:9d:82:17:5b:6e:5b:d6:28:dd:25:81:e3:87: 26:54:c1:8b:7a:48:0f:6d:14:b9:87:b6:f6:14:d6:b3:ad:a5: 4a:ca:57:13:7b:27:e2:29:c4:61:da:b1:e6:37:da:c0:c3:71: de:7d:99:ca:e4:49:5b:ee:d7:61:3f:9b:e2:f6:0a:93:56:5f: ea:f7:5b:1d:04:1c:41:a0:36:d3:4b:62:5e:9b:d7:d6:d0:3c: 1b:cf:95:1c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUP6K7zY+qRXdJmQNFsyBA8lkTfdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNjAxMjkxOTAwNDVaFw0yNzAxMjgxOTA1NDVaMDMxMTAvBgNV BAMTKEM5OTQxQ0MwRTdDNEU3OEI3NkQxNjQyM0E3NzA3NUVCODMwOTM4MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0PswzcGN0M4st/slhGBESmg7h GJBH4ZvMJmTG0eS69XNF56xunJpmvtWZfRGkiWEVuSoLRkREtMj1KRmMpoAIt/dH yXcfoo63Ute47Oa2aig7p6SilJj/bC/R35TnYCo8foRFK7cAvmJGcIA8pGHfrbQ5 4U51GBewn60AhndON4xxnXp77JR39BESSJQ/YS91/RozIpJwx1NI3uKv7cC7najd 32joNPvrDPk2mwdHgfmKdpNaAmarY3B+1bL8Q8Xe4esupzK+53HWtl5NQ77jqUJm ElL8LHqEpS3SN3loOb+3O8YCRcXj8bFryXl4VR8IuSi98hisV8BHvaMsvuNLAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUyZQcwOfE54t20WQjp3B164MJOBUwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjczODI0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsl/Q MA0GCSqGSIb3DQEBCwUAA4IBAQADPpMwIO6XnhfKcqRHKY047CgYdOFZ1ccEj8zR nbjTjX6FVL9z3wFGeATtYMs406mboSnwSr7EUZDXLtQbc2xNO+SqWMdIyqMMkXkB eSUyNHBQ0ZeogQoACqOOiRyqDvQyo2Vq6Q1XCew868EsDNQJ3M4T+krQPXRNf9p9 IJWNqQqCHVCcr0va9WvSG60g34JzzwdOF2OC97aovYzFx6k14xTWmRe1eJ2CF1tu W9Yo3SWB44cmVMGLekgPbRS5h7b2FNazraVKylcTeyfiKcRh2rHmN9rAw3HefZnK 5Elb7tdhP5vi9gqTVl/q91sdBBxBoDbTS2Jem9fW0Dwbz5Uc -----END CERTIFICATE-----Generated at Fri Jan 30 08:16:19 2026 by rpki-client