This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203636.roa File: AS203636.roa (raw, json) Hash identifier: +jG4uSs/7yC1Z/G51AekWUMLY3tvvJY+Ej56ceJ72k4= Subject key identifier: B8:18:64:3F:8C:9A:A9:02:F7:5E:59:04:17:71:2B:45:03:E7:A8:BD Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 4FB024B78791911CB9B13DC4DEFFC43B2F7CE12B Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203636.roa Signing time: Wed 21 Jan 2026 00:17:56 +0000 ROA not before: Wed 21 Jan 2026 00:12:56 +0000 ROA not after: Wed 20 Jan 2027 00:17:56 +0000 asID: 203636 IP address blocks: 193.111.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b0:24:b7:87:91:91:1c:b9:b1:3d:c4:de:ff:c4:3b:2f:7c:e1:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Jan 21 00:12:56 2026 GMT Not After : Jan 20 00:17:56 2027 GMT Subject: CN=B818643F8C9AA902F75E590417712B4503E7A8BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3c:1b:37:86:94:14:23:e4:4a:fa:1a:c8:91: e1:a5:e2:eb:20:77:65:23:f2:38:b4:9f:48:7e:0f: 21:cb:97:b7:c0:04:c0:c2:a9:d6:bf:bd:5d:45:cb: c7:8a:e1:49:d2:d3:4a:81:5e:a2:f7:3c:da:2e:0e: f0:b8:9e:80:f2:42:90:41:8a:d7:b2:73:3a:be:89: 2d:f8:0b:8c:76:12:f9:dd:21:06:95:65:7d:45:08: 68:1f:81:8e:e8:8d:60:0d:3c:ee:c3:14:cf:65:56: 40:c2:9a:24:06:f8:d9:06:4e:de:60:38:d1:53:d1: dd:ac:02:6d:02:22:cb:58:da:64:d2:1d:5c:0a:30: f5:c2:12:9d:60:00:03:c2:18:17:16:bd:db:58:69: b0:a7:99:11:dc:02:c8:63:aa:95:de:cc:6c:fa:b0: 81:f6:c2:1e:c2:e1:1b:f9:13:5f:27:c4:71:eb:fa: 94:97:e9:70:2d:6d:23:89:79:92:27:58:07:f5:11: 3f:d8:0e:62:9a:61:c9:f6:35:86:a5:c9:78:90:34: 56:fe:ac:81:fb:cf:52:d8:ef:b7:a9:ff:ec:47:c1: cf:87:79:08:60:f6:cb:9c:ca:2a:8b:a6:eb:37:38: 71:1e:06:72:10:28:20:13:78:36:27:7e:3f:3b:ae: 58:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:18:64:3F:8C:9A:A9:02:F7:5E:59:04:17:71:2B:45:03:E7:A8:BD X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS203636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.116.0/24 Signature Algorithm: sha256WithRSAEncryption ba:c8:3d:74:e4:29:3f:85:16:f0:aa:1b:d2:4a:c0:19:fa:bc: 6c:3d:fc:cc:3d:24:42:f9:1a:d6:db:63:8b:e5:69:03:24:c3: 10:82:b0:a6:3f:8c:f6:14:f2:e7:7f:cf:d9:6c:31:35:c5:44: 3b:ce:ff:dd:a6:76:f7:48:21:3d:af:3c:b9:3c:5f:a0:8f:37: d6:c1:08:88:16:2f:01:fc:ff:2b:97:da:70:4a:e3:e1:34:0c: cf:53:51:bd:45:f2:f5:1e:43:5b:ee:aa:ab:af:ec:0a:5f:42: 90:16:d9:3b:a6:c1:c6:9e:2f:15:a8:fd:78:23:6f:73:cb:78: 2a:04:bd:c6:32:1a:6f:cc:c5:28:f9:12:27:3b:75:e9:50:cd: 3f:1f:37:a6:4b:0b:75:44:ed:1b:c1:12:26:61:84:44:09:e1: e8:71:b6:d9:26:df:dd:90:99:1e:50:be:c5:61:60:f7:82:b5: 2b:5a:20:ea:52:85:df:c7:c5:c8:9b:3f:bf:77:45:5d:5b:b1: 4f:b5:45:9f:c1:92:a3:d3:f0:4a:57:7f:30:d0:e2:90:3a:89: ea:cb:e8:46:6e:ba:64:5b:29:6b:df:a1:8f:6f:f5:88:ec:05: 23:1c:f5:cd:4a:97:54:34:94:c6:1a:a8:e1:16:b2:03:da:19: 06:08:e9:8b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUT7Akt4eRkRy5sT3E3v/EOy984SswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNjAxMjEwMDEyNTZaFw0yNzAxMjAwMDE3NTZaMDMxMTAvBgNV BAMTKEI4MTg2NDNGOEM5QUE5MDJGNzVFNTkwNDE3NzEyQjQ1MDNFN0E4QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWPBs3hpQUI+RK+hrIkeGl4usg d2Uj8ji0n0h+DyHLl7fABMDCqda/vV1Fy8eK4UnS00qBXqL3PNouDvC4noDyQpBB iteyczq+iS34C4x2EvndIQaVZX1FCGgfgY7ojWANPO7DFM9lVkDCmiQG+NkGTt5g ONFT0d2sAm0CIstY2mTSHVwKMPXCEp1gAAPCGBcWvdtYabCnmRHcAshjqpXezGz6 sIH2wh7C4Rv5E18nxHHr+pSX6XAtbSOJeZInWAf1ET/YDmKaYcn2NYalyXiQNFb+ rIH7z1LY77ep/+xHwc+HeQhg9sucyiqLpus3OHEeBnIQKCATeDYnfj87rljbAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUuBhkP4yaqQL3XlkEF3ErRQPnqL0wHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjAzNjM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW90 MA0GCSqGSIb3DQEBCwUAA4IBAQC6yD105Ck/hRbwqhvSSsAZ+rxsPfzMPSRC+RrW 22OL5WkDJMMQgrCmP4z2FPLnf8/ZbDE1xUQ7zv/dpnb3SCE9rzy5PF+gjzfWwQiI Fi8B/P8rl9pwSuPhNAzPU1G9RfL1HkNb7qqrr+wKX0KQFtk7psHGni8VqP14I29z y3gqBL3GMhpvzMUo+RInO3XpUM0/HzemSwt1RO0bwRImYYRECeHocbbZJt/dkJke UL7FYWD3grUrWiDqUoXfx8XImz+/d0VdW7FPtUWfwZKj0/BKV38w0OKQOonqy+hG brpkWylr36GPb/WI7AUjHPXNSpdUNJTGGqjhFrID2hkGCOmL -----END CERTIFICATE-----Generated at Sun Jan 25 18:21:05 2026 by rpki-client