This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203057.roa File: AS203057.roa (raw, json) Hash identifier: EMFBxoEJqflU8ZpgSdNV8cYg3McLazPc79rVFPQZ628= Subject key identifier: 77:5E:B9:32:76:1A:49:3E:20:71:8B:D5:EF:8F:4C:B0:72:A7:44:B9 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 3978D1DFA8144AB857C581F0EC51F8E536D48609 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203057.roa Signing time: Wed 21 Jan 2026 07:37:35 +0000 ROA not before: Wed 21 Jan 2026 07:32:35 +0000 ROA not after: Wed 20 Jan 2027 07:37:35 +0000 asID: 203057 IP address blocks: 96.62.73.0/24 maxlen: 24 143.14.111.0/24 maxlen: 24 143.14.131.0/24 maxlen: 24 155.117.156.0/24 maxlen: 24 162.141.113.0/24 maxlen: 24 167.148.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:78:d1:df:a8:14:4a:b8:57:c5:81:f0:ec:51:f8:e5:36:d4:86:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 21 07:32:35 2026 GMT Not After : Jan 20 07:37:35 2027 GMT Subject: CN=775EB932761A493E20718BD5EF8F4CB072A744B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d5:f5:2e:f2:ee:f8:56:34:91:19:7a:b5:83: 01:2f:2f:a1:a5:65:b9:19:d7:5d:34:61:f1:0e:a2: c0:ac:a5:8d:f2:15:98:6c:82:e7:14:23:a5:fe:7c: cf:cd:96:ad:9b:98:3c:a1:a2:57:7c:d9:15:54:7f: e4:b9:2c:f5:69:0a:66:56:64:1d:02:2c:27:a6:35: 94:b4:97:29:bd:3c:af:79:fb:54:28:6d:94:74:d5: 91:06:57:6a:0f:f9:81:f9:98:ac:ce:c0:74:ca:b6: 99:48:68:38:70:40:92:89:41:ea:7d:87:48:e2:fd: da:04:a6:fc:57:c7:d9:26:83:24:77:75:cb:44:83: 60:d5:00:dd:92:59:81:b8:d4:aa:33:45:31:b7:0e: 52:a0:56:e7:fa:14:9e:d8:c5:b6:43:a5:c8:16:da: 78:02:a4:9d:15:e8:60:4a:a3:92:36:72:17:d3:16: 12:2f:c9:37:6f:bb:62:78:d1:37:ff:0a:5d:70:73: de:1e:72:65:38:60:da:ff:05:22:ad:a1:f9:ba:4b: d2:48:e9:b3:f2:c0:8c:43:f3:4a:6c:37:d6:82:56: b1:76:2a:80:8d:a4:38:b4:3c:5f:01:88:0b:a9:5c: 99:5c:90:af:c6:19:e8:04:3c:e7:59:3b:fc:06:57: 31:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5E:B9:32:76:1A:49:3E:20:71:8B:D5:EF:8F:4C:B0:72:A7:44:B9 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS203057.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.62.73.0/24 143.14.111.0/24 143.14.131.0/24 155.117.156.0/24 162.141.113.0/24 167.148.188.0/24 Signature Algorithm: sha256WithRSAEncryption 94:58:13:3d:24:0a:d1:0c:67:63:09:0c:d3:db:2a:98:1d:a5: b6:65:0d:c6:45:91:88:39:02:c0:e5:95:27:52:1b:06:29:db: 95:79:a8:60:c7:f4:42:4e:e3:83:c8:55:c4:19:d7:bb:a7:ff: 25:55:e0:d0:37:a7:d5:05:d5:1a:f9:9a:d3:cd:33:d5:0f:f8: 91:9b:74:a6:0d:ec:c9:7c:31:12:d3:8f:a3:66:21:05:1a:e5: c4:21:b8:45:51:d8:50:18:92:15:d5:34:3d:02:1b:fd:10:50: f5:3d:9f:7c:a6:8e:82:ff:84:41:a7:4d:3b:0f:63:9b:c4:c2: 53:28:9b:b6:61:66:02:71:7a:be:ff:ac:3c:eb:9f:41:11:91: 6e:28:37:c4:64:30:db:e8:06:96:5b:7b:09:7d:30:b2:0b:7f: d7:7e:a4:df:83:b5:12:90:e9:5e:d8:17:7a:69:8c:bf:21:18: 81:f4:7e:0a:fe:c4:82:65:01:20:c2:3e:58:10:93:15:c5:54: 82:2f:3f:3f:b0:bc:8f:f2:54:f8:22:7e:d6:fe:f6:82:39:82: 56:75:43:36:09:b2:42:4b:86:e8:be:3a:4c:7f:48:0e:dc:6f: 47:93:9a:de:4d:dd:e5:9b:57:02:d0:ba:e6:64:b6:45:ee:8d: ed:e6:18:da -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUOXjR36gUSrhXxYHw7FH45TbUhgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMjEwNzMyMzVaFw0yNzAxMjAwNzM3MzVaMDMxMTAvBgNV BAMTKDc3NUVCOTMyNzYxQTQ5M0UyMDcxOEJENUVGOEY0Q0IwNzJBNzQ0QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm1fUu8u74VjSRGXq1gwEvL6Gl ZbkZ1100YfEOosCspY3yFZhsgucUI6X+fM/Nlq2bmDyhold82RVUf+S5LPVpCmZW ZB0CLCemNZS0lym9PK95+1QobZR01ZEGV2oP+YH5mKzOwHTKtplIaDhwQJKJQep9 h0ji/doEpvxXx9kmgyR3dctEg2DVAN2SWYG41KozRTG3DlKgVuf6FJ7YxbZDpcgW 2ngCpJ0V6GBKo5I2chfTFhIvyTdvu2J40Tf/Cl1wc94ecmU4YNr/BSKtofm6S9JI 6bPywIxD80psN9aCVrF2KoCNpDi0PF8BiAupXJlckK/GGegEPOdZO/wGVzHXAgMB AAGjggIoMIICJDAdBgNVHQ4EFgQUd165MnYaST4gcYvV749MsHKnRLkwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjAzMDU3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAYD5J AwQAjw5vAwQAjw6DAwQAm3WcAwQAoo1xAwQAp5S8MA0GCSqGSIb3DQEBCwUAA4IB AQCUWBM9JArRDGdjCQzT2yqYHaW2ZQ3GRZGIOQLA5ZUnUhsGKduVeahgx/RCTuOD yFXEGde7p/8lVeDQN6fVBdUa+ZrTzTPVD/iRm3SmDezJfDES04+jZiEFGuXEIbhF UdhQGJIV1TQ9Ahv9EFD1PZ98po6C/4RBp007D2ObxMJTKJu2YWYCcXq+/6w8659B EZFuKDfEZDDb6AaWW3sJfTCyC3/XfqTfg7USkOle2Bd6aYy/IRiB9H4K/sSCZQEg wj5YEJMVxVSCLz8/sLyP8lT4In7W/vaCOYJWdUM2CbJCS4bovjpMf0gO3G9Hk5re Td3lm1cC0LrmZLZF7o3t5hja -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:19 2026 by rpki-client