This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa
File: AS64267.roa (raw, json)
Hash identifier: iONmCYwT8xWsnTNRQvzqr+B0kBDnClU0Y3mBSDSfYOM=
Subject key identifier: 5D:F0:70:F0:37:93:F5:CC:A7:17:B6:63:C4:4E:68:5E:5C:C1:78:F7
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0BE873520110B2600D868632243CB3C2B4BE0300
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa
Signing time: Wed 28 Jan 2026 15:41:06 +0000
ROA not before: Wed 28 Jan 2026 15:36:06 +0000
ROA not after: Wed 27 Jan 2027 15:41:06 +0000
asID: 64267
IP address blocks: 91.124.36.0/24 maxlen: 24
92.112.141.0/24 maxlen: 24
92.113.106.0/24 maxlen: 24
92.113.215.0/24 maxlen: 24
95.135.183.0/24 maxlen: 24
178.92.246.0/24 maxlen: 24
178.93.30.0/24 maxlen: 24
178.94.149.0/24 maxlen: 24
178.95.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:e8:73:52:01:10:b2:60:0d:86:86:32:24:3c:b3:c2:b4:be:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 28 15:36:06 2026 GMT
Not After : Jan 27 15:41:06 2027 GMT
Subject: CN=5DF070F03793F5CCA717B663C44E685E5CC178F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:79:53:69:a8:6e:1b:c1:c7:11:4b:85:9f:
c4:f6:89:65:6c:94:c2:3c:87:5c:a2:18:00:bc:53:
0b:8a:00:59:0e:3c:8a:28:55:67:60:19:8a:02:d9:
1d:39:3e:58:09:ae:18:d1:2e:87:64:b7:19:43:3b:
41:5d:c9:e0:0c:ea:65:4a:40:97:70:95:12:fa:bc:
56:36:3c:19:13:01:2f:93:b1:91:f9:1b:8d:fd:80:
71:38:88:bd:f6:66:22:6d:4c:52:a0:74:7a:cb:82:
2c:19:8b:5f:ab:9a:84:7d:7a:38:ec:5c:dd:fa:37:
2d:50:68:82:2d:b8:59:fa:ec:e1:f3:a9:0b:b8:27:
df:cf:bd:12:80:47:cc:0a:76:94:85:3e:8e:ca:f9:
7c:7f:13:d2:dc:48:af:ab:89:8f:a1:4c:c4:59:dd:
bb:c0:8a:c3:bd:d0:bd:9a:c9:ff:90:c9:ca:ea:51:
de:7b:06:a3:c8:d1:b2:69:7e:3a:c4:d0:47:af:6b:
df:f1:d2:a7:03:90:b1:03:ad:d8:ff:59:42:7c:23:
79:87:d0:a5:71:ef:97:96:61:ee:ce:f4:72:f6:45:
26:11:b5:19:6c:41:e1:ee:68:f3:d0:da:dc:95:58:
24:c4:c2:ec:df:86:1c:a0:34:ac:cc:56:be:81:92:
26:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F0:70:F0:37:93:F5:CC:A7:17:B6:63:C4:4E:68:5E:5C:C1:78:F7
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS64267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.36.0/24
92.112.141.0/24
92.113.106.0/24
92.113.215.0/24
95.135.183.0/24
178.92.246.0/24
178.93.30.0/24
178.94.149.0/24
178.95.225.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e6:56:b4:3d:cd:52:40:fe:bc:1d:fe:8d:20:61:0f:2d:07:
c1:d7:97:d5:46:b6:e1:7c:0f:1c:c7:c2:d6:3a:99:e1:d7:c6:
dc:33:2f:c1:60:ee:66:d8:5c:3e:73:a2:a0:86:3c:ea:7a:b1:
90:e0:5f:72:c6:2f:9a:df:2a:fc:52:24:8a:24:40:40:94:b5:
4a:e2:69:e1:fe:9f:1c:8b:af:72:fa:9c:9e:56:1d:f8:be:9e:
d7:c6:69:d0:f0:ec:4c:ca:b5:89:7b:24:53:10:6b:9e:5d:cb:
8a:ce:30:d2:36:b4:91:7c:29:54:b5:21:69:34:d7:e0:c7:e7:
35:b1:36:59:75:41:8b:2f:5e:0e:3b:44:99:a9:36:78:91:1d:
b0:f8:e0:31:b2:64:c5:78:e8:a0:fb:82:3e:21:82:d0:ae:3e:
c9:36:16:c4:b1:22:87:89:f1:95:f8:fb:64:b8:79:48:be:21:
7e:45:0d:ee:3e:0a:4d:17:f0:41:1f:17:9c:d6:03:0a:a4:dd:
d2:9b:9c:e7:74:6b:fa:3f:54:f5:73:8c:3d:cd:99:7d:17:4c:
27:8a:25:d9:12:5e:98:84:5c:4d:92:27:ce:05:4c:ce:80:71:
c5:2d:78:3c:dc:6b:fe:40:23:23:79:59:ca:88:49:3e:cd:07:
4b:d3:09:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 10:55:24 2026 by rpki-client