This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS203771.roa File: AS203771.roa (raw, json) Hash identifier: NJxGxVsbIu8sXfwdYO2I/Y7ar7DHPOePkN7/lbN3d3U= Subject key identifier: 89:53:9B:21:E8:11:29:22:A6:08:C9:1B:B2:4D:19:81:F2:37:BB:BB Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 5A703510FB606735852F5E877B143FA9ADC0689A Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS203771.roa Signing time: Thu 22 Jan 2026 10:09:51 +0000 ROA not before: Thu 22 Jan 2026 10:04:51 +0000 ROA not after: Thu 21 Jan 2027 10:09:51 +0000 asID: 203771 IP address blocks: 31.40.196.0/24 maxlen: 24 37.221.79.0/24 maxlen: 24 185.231.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:70:35:10:fb:60:67:35:85:2f:5e:87:7b:14:3f:a9:ad:c0:68:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Jan 22 10:04:51 2026 GMT Not After : Jan 21 10:09:51 2027 GMT Subject: CN=89539B21E8112922A608C91BB24D1981F237BBBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:21:f8:d6:cc:32:eb:f3:80:76:ca:87:0d:c7: f0:64:94:5a:a5:80:61:e8:bc:79:70:f1:01:ed:ac: e2:25:67:c2:f5:a1:4f:b0:de:ee:0a:31:e2:b1:82: 91:7f:54:42:e6:42:29:97:a3:2b:ab:01:a8:a5:72: b5:df:f0:0c:b9:fc:ec:96:e0:e8:27:78:fd:9f:96: bd:b9:9d:3c:dd:15:c7:78:09:61:5b:ae:5d:df:f9: d9:c1:7a:e8:50:f1:c7:36:01:8f:35:93:77:e0:9c: f8:fa:9f:59:6c:7f:01:16:a6:eb:16:5a:b8:f2:a4: fb:44:33:ae:6b:96:99:9a:61:ce:de:b7:19:72:be: de:60:87:bd:ea:34:f0:0e:a8:f3:20:a4:78:ef:1a: 6e:39:84:2c:41:d1:4a:9d:5b:2d:e9:16:6a:2c:2b: ea:95:ca:7b:cb:f8:da:fe:a8:c5:5a:28:71:f6:02: 7d:ba:07:d0:d5:89:52:ba:03:21:16:d5:c4:2e:12: 5c:d1:c6:11:2c:8a:e3:ad:7d:87:7f:00:93:4e:5b: bb:4c:b0:01:62:e0:ba:a6:8c:81:77:10:bc:59:36: c0:43:a1:15:ac:07:4c:98:e2:69:10:7a:67:47:ea: e2:b2:92:f4:b5:e6:e9:08:e3:de:97:51:30:7e:02: bd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:53:9B:21:E8:11:29:22:A6:08:C9:1B:B2:4D:19:81:F2:37:BB:BB X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS203771.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.196.0/24 37.221.79.0/24 185.231.226.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:ac:41:4d:4a:c3:9d:47:6e:34:e0:4c:62:5f:d5:b0:25:3f: 77:3f:41:07:b6:b1:91:4c:f7:e2:d6:7d:8d:e7:e8:c5:b2:1c: 08:76:93:24:62:59:86:23:f2:60:5b:30:17:47:6f:a6:84:ca: a6:fd:87:0b:b3:10:26:3c:11:18:17:bd:d8:dc:f0:e2:69:06: 86:40:69:65:45:91:12:17:06:14:45:de:c1:d7:95:bd:5d:05: 7f:3d:cf:73:ce:04:0e:8a:da:0e:3c:0d:5a:b8:d2:77:cf:4f: b6:61:4b:d4:6a:4b:df:b8:a9:3c:58:cd:2d:cc:61:d5:76:8f: bc:8f:a4:33:e7:4c:52:7e:13:56:18:1c:fd:6c:ac:01:92:48: 96:b1:d3:df:84:72:ac:97:51:42:af:ee:1e:cd:5c:9d:21:26: 8a:90:49:51:be:b0:e2:5a:57:49:13:6f:e0:4e:da:a4:75:f0: 92:f1:fb:99:45:05:0a:29:be:e2:6d:ca:fd:a9:84:d9:6e:55: cd:49:25:af:3a:24:29:7b:e8:57:86:3f:94:8a:b9:2b:8b:fb: e4:64:72:96:4c:d1:23:7a:0c:d5:f8:8e:55:00:65:9f:b2:6b: c7:3b:d7:4c:91:85:16:a2:d6:3b:7f:78:d3:75:27:8c:cf:92: 5c:a3:be:72 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUWnA1EPtgZzWFL16HexQ/qa3AaJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNjAxMjIxMDA0NTFaFw0yNzAxMjExMDA5NTFaMDMxMTAvBgNV BAMTKDg5NTM5QjIxRTgxMTI5MjJBNjA4QzkxQkIyNEQxOTgxRjIzN0JCQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeIfjWzDLr84B2yocNx/BklFql gGHovHlw8QHtrOIlZ8L1oU+w3u4KMeKxgpF/VELmQimXoyurAailcrXf8Ay5/OyW 4OgneP2flr25nTzdFcd4CWFbrl3f+dnBeuhQ8cc2AY81k3fgnPj6n1lsfwEWpusW WrjypPtEM65rlpmaYc7etxlyvt5gh73qNPAOqPMgpHjvGm45hCxB0UqdWy3pFmos K+qVynvL+Nr+qMVaKHH2An26B9DViVK6AyEW1cQuElzRxhEsiuOtfYd/AJNOW7tM sAFi4LqmjIF3ELxZNsBDoRWsB0yY4mkQemdH6uKykvS15ukI496XUTB+Ar0xAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUiVObIegRKSKmCMkbsk0ZgfI3u7swHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjAzNzcxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHyjE AwQAJd1PAwQAuefiMA0GCSqGSIb3DQEBCwUAA4IBAQAsrEFNSsOdR2404ExiX9Ww JT93P0EHtrGRTPfi1n2N5+jFshwIdpMkYlmGI/JgWzAXR2+mhMqm/YcLsxAmPBEY F73Y3PDiaQaGQGllRZESFwYURd7B15W9XQV/Pc9zzgQOitoOPA1auNJ3z0+2YUvU akvfuKk8WM0tzGHVdo+8j6Qz50xSfhNWGBz9bKwBkkiWsdPfhHKsl1FCr+4ezVyd ISaKkElRvrDiWldJE2/gTtqkdfCS8fuZRQUKKb7ibcr9qYTZblXNSSWvOiQpe+hX hj+Uirkri/vkZHKWTNEjegzV+I5VAGWfsmvHO9dMkYUWotY7f3jTdSeMz5Jco75y -----END CERTIFICATE-----Generated at Sun Jan 25 22:18:12 2026 by rpki-client