This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202673.roa File: AS202673.roa (raw, json) Hash identifier: zOp9j9dt8z1kP5zbUw18FrsBwg7/wOQ6qJ/IIeqChoM= Subject key identifier: 6A:BF:A1:D2:92:A5:E2:5C:F3:B0:1C:F1:ED:3B:39:28:61:78:7D:CB Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 6DF1F9EDA35670B23E94D3BDD9D971B3C2D95C22 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202673.roa Signing time: Fri 23 Jan 2026 13:02:23 +0000 ROA not before: Fri 23 Jan 2026 12:57:23 +0000 ROA not after: Fri 22 Jan 2027 13:02:23 +0000 asID: 202673 IP address blocks: 155.117.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f1:f9:ed:a3:56:70:b2:3e:94:d3:bd:d9:d9:71:b3:c2:d9:5c:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 23 12:57:23 2026 GMT Not After : Jan 22 13:02:23 2027 GMT Subject: CN=6ABFA1D292A5E25CF3B01CF1ED3B392861787DCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a2:b1:82:be:4f:34:a6:97:3e:72:4e:67:57: 45:89:96:74:05:2d:e1:47:a6:8d:2f:0c:de:c5:58: a9:e9:53:e6:99:41:b9:7a:e1:0c:28:82:74:4c:a2: f8:f0:f2:e0:0d:c4:71:ea:e2:47:99:70:fd:e5:a3: 9e:57:8d:4c:52:c4:dd:d9:69:89:cb:3e:90:bb:14: 53:c9:95:c3:47:ac:a7:6b:18:7a:45:bc:02:5b:8c: 4d:50:8e:99:2b:af:db:1c:b8:88:85:f1:1f:e8:32: 46:b7:8b:c6:83:21:7c:f4:38:fe:95:7a:10:72:1b: b4:1b:ac:ce:04:00:ba:f8:d7:09:0b:10:06:81:80: 3c:14:d1:d3:cd:0c:42:49:81:69:5e:55:c9:cf:65: a3:c5:7b:d4:c8:75:c2:d7:64:e4:fa:f0:18:02:72: aa:50:89:b6:48:0c:dc:d5:aa:aa:93:f0:60:24:64: 57:a1:f5:eb:f7:01:1b:62:36:86:c4:0a:ff:7c:32: 40:58:dd:13:51:70:6b:5b:e0:27:ca:93:4d:06:03: cc:b3:fe:39:11:7f:af:e4:43:12:5d:5a:1f:90:d1: 0c:c6:17:54:71:2b:18:60:1b:78:ea:05:76:6a:e3: be:b4:23:df:4f:ff:1b:da:66:ac:2a:8a:f2:d3:d5: 36:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BF:A1:D2:92:A5:E2:5C:F3:B0:1C:F1:ED:3B:39:28:61:78:7D:CB X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202673.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.117.147.0/24 Signature Algorithm: sha256WithRSAEncryption a5:0a:ac:60:28:ed:90:22:88:63:43:a1:78:f4:0a:54:8b:f9: ea:c8:24:5e:6e:d2:9f:9f:5d:49:31:21:f2:64:71:91:27:ce: ff:33:77:42:57:d3:9d:fa:ff:6b:2f:93:65:57:e5:99:8b:09: 3a:89:4f:7f:8e:14:d3:2a:41:b3:85:70:9c:e9:b9:0e:b6:14: 33:82:d8:ee:67:01:06:72:c8:f2:65:69:04:5e:68:1f:9f:9f: 1f:eb:f5:e9:f6:af:f1:ed:f4:46:59:af:4b:12:ba:74:af:da: 46:51:53:88:2e:51:ad:03:66:97:d5:30:0f:4f:3a:45:41:e9: 8b:12:21:e1:1e:f0:02:8e:bd:9e:93:c5:56:96:96:2a:80:bf: dc:e3:ab:8f:18:58:33:a2:8b:5f:b9:7b:ff:6a:5c:ab:e9:8d: 80:45:80:43:b9:38:4e:44:46:5a:ed:72:f9:95:5b:f3:c0:a9: 5e:3e:15:b2:ae:d1:40:76:f2:e1:9a:d7:fe:3c:4b:15:a3:6c: 52:ac:cb:f1:8d:c1:1e:33:2d:fe:97:c2:de:eb:fe:ca:c5:00: e0:db:c1:5b:a2:48:57:b5:dd:ba:95:6c:c7:80:e5:7c:aa:19: 46:75:97:b9:2c:47:84:19:e2:14:c4:97:b7:17:c7:f7:84:7d: 85:44:ba:da -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUbfH57aNWcLI+lNO92dlxs8LZXCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMjMxMjU3MjNaFw0yNzAxMjIxMzAyMjNaMDMxMTAvBgNV BAMTKDZBQkZBMUQyOTJBNUUyNUNGM0IwMUNGMUVEM0IzOTI4NjE3ODdEQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZorGCvk80ppc+ck5nV0WJlnQF LeFHpo0vDN7FWKnpU+aZQbl64QwognRMovjw8uANxHHq4keZcP3lo55XjUxSxN3Z aYnLPpC7FFPJlcNHrKdrGHpFvAJbjE1Qjpkrr9scuIiF8R/oMka3i8aDIXz0OP6V ehByG7QbrM4EALr41wkLEAaBgDwU0dPNDEJJgWleVcnPZaPFe9TIdcLXZOT68BgC cqpQibZIDNzVqqqT8GAkZFeh9ev3ARtiNobECv98MkBY3RNRcGtb4CfKk00GA8yz /jkRf6/kQxJdWh+Q0QzGF1RxKxhgG3jqBXZq4760I99P/xvaZqwqivLT1TYxAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUar+h0pKl4lzzsBzx7Ts5KGF4fcswHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjAyNjczLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAm3WT MA0GCSqGSIb3DQEBCwUAA4IBAQClCqxgKO2QIohjQ6F49ApUi/nqyCRebtKfn11J MSHyZHGRJ87/M3dCV9Od+v9rL5NlV+WZiwk6iU9/jhTTKkGzhXCc6bkOthQzgtju ZwEGcsjyZWkEXmgfn58f6/Xp9q/x7fRGWa9LErp0r9pGUVOILlGtA2aX1TAPTzpF QemLEiHhHvACjr2ek8VWlpYqgL/c46uPGFgzootfuXv/alyr6Y2ARYBDuThOREZa 7XL5lVvzwKlePhWyrtFAdvLhmtf+PEsVo2xSrMvxjcEeMy3+l8Le6/7KxQDg28Fb okhXtd26lWzHgOV8qhlGdZe5LEeEGeIUxJe3F8f3hH2FRLra -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:24 2026 by rpki-client