This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203057.roa File: AS203057.roa (raw, json) Hash identifier: vWLdvPqCxQDnzRt7PLcRHxE3HOT/fj3Qz8Gfza5ZPoQ= Subject key identifier: E8:55:F8:AE:14:9B:25:3A:42:C2:E4:09:74:E4:B1:1E:BF:28:A7:C2 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 61214DE72DE7EEBBE829C3C4183175B3B473F20E Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203057.roa Signing time: Mon 19 Jan 2026 06:23:22 +0000 ROA not before: Mon 19 Jan 2026 06:18:22 +0000 ROA not after: Mon 18 Jan 2027 06:23:22 +0000 asID: 203057 IP address blocks: 46.202.225.0/24 maxlen: 24 91.124.33.0/24 maxlen: 24 178.93.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:21:4d:e7:2d:e7:ee:bb:e8:29:c3:c4:18:31:75:b3:b4:73:f2:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Jan 19 06:18:22 2026 GMT Not After : Jan 18 06:23:22 2027 GMT Subject: CN=E855F8AE149B253A42C2E40974E4B11EBF28A7C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:84:f5:15:b1:ef:fc:a6:f6:2b:6d:b8:7a: 82:a6:da:b6:05:6b:61:ff:25:05:47:af:09:f9:fb: b4:63:20:1b:8e:4c:5f:69:78:85:08:aa:08:39:09: 11:8b:08:bf:40:f7:36:9d:3c:af:a0:26:f1:5c:26: 7e:2d:ca:a1:98:a7:af:7a:cc:6f:60:f7:06:f2:52: 1a:d8:a5:b6:17:80:b2:21:b9:1d:5b:b4:3c:25:a8: c7:fc:84:74:ca:8c:f0:b6:5f:ec:2b:63:9b:f2:28: f7:71:56:a7:ab:5f:a8:81:0e:55:1b:09:e6:8b:f6: 56:e0:34:b6:a9:46:7f:25:f7:20:ab:1d:8f:f0:ec: 1c:55:c5:7a:ff:2a:d4:38:34:66:b6:61:7e:49:6d: ea:83:df:a6:2e:00:f4:06:27:ec:cd:f2:7b:d1:c4: 7a:fd:86:ab:00:b4:b9:1b:07:5b:c3:cc:9c:01:e5: 02:22:ae:b6:68:a8:81:e6:41:87:1f:db:c3:4b:57: 3b:ce:a2:f8:8d:97:3c:db:0b:14:d3:fd:7e:f5:15: cc:a6:51:72:c9:d7:5e:2e:3f:9b:ce:bd:8d:3c:70: d6:98:65:3e:49:2e:df:81:ff:18:8c:b8:46:78:85: 74:d0:43:44:60:e2:25:f4:d9:81:27:26:1e:4c:97: f1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:55:F8:AE:14:9B:25:3A:42:C2:E4:09:74:E4:B1:1E:BF:28:A7:C2 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS203057.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.202.225.0/24 91.124.33.0/24 178.93.237.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:c2:0e:fc:06:af:ed:75:f8:f8:e5:36:38:9c:e0:13:55:7e: 33:78:cd:94:b1:c8:c9:ec:63:99:59:ab:73:4c:81:03:b9:52: 9c:e2:80:6f:53:46:ac:3f:9b:36:59:d3:79:c8:d3:79:30:fb: 6c:ce:86:f5:36:5c:30:94:70:78:5f:21:75:18:03:05:63:8d: eb:cd:5b:8c:44:c0:0e:ee:df:a5:8a:34:67:99:54:49:4c:d8: 9d:d8:05:20:88:c2:f6:89:1c:51:90:9a:4b:32:18:b7:0c:48: 81:1f:83:5b:ff:71:ba:14:ae:ce:79:a1:28:50:1f:e1:1f:5b: 9d:19:80:6e:61:b5:04:05:a5:c5:15:a3:db:da:41:9c:6a:13: 24:30:ee:fe:54:b4:ab:96:8a:4d:f7:a3:25:cf:dd:87:ad:43: 97:07:a3:f3:b2:c3:3e:fd:9a:f4:bf:e0:4c:c4:d8:a8:a4:86: f1:fa:53:43:34:04:15:4c:3d:42:5e:12:db:f4:5b:42:57:d9: c2:f7:1c:2b:8b:54:d0:0e:9b:c8:a3:72:39:a5:67:56:bd:5a: bd:8e:04:ec:aa:00:6e:f5:b1:f6:84:3e:69:f5:76:a6:40:09: c9:f5:aa:40:d4:99:4d:67:ea:ae:de:9f:8e:07:80:93:24:77: 9e:79:06:2b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUYSFN5y3n7rvoKcPEGDF1s7Rz8g4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNjAxMTkwNjE4MjJaFw0yNzAxMTgwNjIzMjJaMDMxMTAvBgNV BAMTKEU4NTVGOEFFMTQ5QjI1M0E0MkMyRTQwOTc0RTRCMTFFQkYyOEE3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vYT1FbHv/Kb2K224eoKm2rYF a2H/JQVHrwn5+7RjIBuOTF9peIUIqgg5CRGLCL9A9zadPK+gJvFcJn4tyqGYp696 zG9g9wbyUhrYpbYXgLIhuR1btDwlqMf8hHTKjPC2X+wrY5vyKPdxVqerX6iBDlUb CeaL9lbgNLapRn8l9yCrHY/w7BxVxXr/KtQ4NGa2YX5JbeqD36YuAPQGJ+zN8nvR xHr9hqsAtLkbB1vDzJwB5QIirrZoqIHmQYcf28NLVzvOoviNlzzbCxTT/X71Fcym UXLJ114uP5vOvY08cNaYZT5JLt+B/xiMuEZ4hXTQQ0Rg4iX02YEnJh5Ml/EbAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQU6FX4rhSbJTpCwuQJdOSxHr8op8IwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjAzMDU3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALsrh AwQAW3whAwQAsl3tMA0GCSqGSIb3DQEBCwUAA4IBAQAOwg78Bq/tdfj45TY4nOAT VX4zeM2UscjJ7GOZWatzTIEDuVKc4oBvU0asP5s2WdN5yNN5MPtszob1NlwwlHB4 XyF1GAMFY43rzVuMRMAO7t+lijRnmVRJTNid2AUgiML2iRxRkJpLMhi3DEiBH4Nb /3G6FK7OeaEoUB/hH1udGYBuYbUEBaXFFaPb2kGcahMkMO7+VLSrlopN96Mlz92H rUOXB6PzssM+/Zr0v+BMxNiopIbx+lNDNAQVTD1CXhLb9FtCV9nC9xwri1TQDpvI o3I5pWdWvVq9jgTsqgBu9bH2hD5p9XamQAnJ9apA1JlNZ+qu3p+OB4CTJHeeeQYr -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:19 2026 by rpki-client