This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55201.roa File: AS55201.roa (raw, json) Hash identifier: d/KEb3URApmJM92K+VaOfnWYJvSi0+lInJ+saUxLKrM= Subject key identifier: 1C:B2:71:4C:DC:EB:32:2C:53:A2:10:CF:0C:1F:F7:00:0F:1C:F7:DB Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 45B3EC8761D142C2D93EFD58D325AA38F1F30E84 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55201.roa Signing time: Fri 12 Dec 2025 09:15:27 +0000 ROA not before: Fri 12 Dec 2025 09:10:27 +0000 ROA not after: Fri 11 Dec 2026 09:15:27 +0000 asID: 55201 IP address blocks: 96.62.0.0/19 maxlen: 24 96.62.37.0/24 maxlen: 24 96.62.45.0/24 maxlen: 24 96.62.47.0/24 maxlen: 24 96.62.48.0/23 maxlen: 24 96.62.50.0/23 maxlen: 24 96.62.52.0/23 maxlen: 24 96.62.54.0/24 maxlen: 24 96.62.55.0/24 maxlen: 24 96.62.56.0/24 maxlen: 24 96.62.57.0/24 maxlen: 24 96.62.58.0/24 maxlen: 24 96.62.60.0/23 maxlen: 24 96.62.62.0/23 maxlen: 24 96.62.79.0/24 maxlen: 24 96.62.80.0/23 maxlen: 24 96.62.82.0/23 maxlen: 24 96.62.85.0/24 maxlen: 24 96.62.86.0/23 maxlen: 24 96.62.88.0/24 maxlen: 24 96.62.90.0/23 maxlen: 24 96.62.92.0/23 maxlen: 24 96.62.94.0/23 maxlen: 24 96.62.98.0/23 maxlen: 24 96.62.135.0/24 maxlen: 24 96.62.149.0/24 maxlen: 24 96.62.150.0/24 maxlen: 24 96.62.151.0/24 maxlen: 24 143.14.78.0/24 maxlen: 24 148.135.216.0/23 maxlen: 24 148.135.218.0/23 maxlen: 24 148.135.224.0/23 maxlen: 24 148.135.226.0/23 maxlen: 24 148.135.232.0/23 maxlen: 24 148.135.234.0/23 maxlen: 24 148.135.240.0/23 maxlen: 24 148.135.242.0/23 maxlen: 24 148.135.248.0/23 maxlen: 24 148.135.250.0/23 maxlen: 24 150.241.146.0/23 maxlen: 24 150.241.148.0/23 maxlen: 24 150.241.150.0/23 maxlen: 24 150.241.152.0/23 maxlen: 24 150.241.154.0/23 maxlen: 24 150.241.156.0/23 maxlen: 24 150.241.158.0/23 maxlen: 24 150.241.160.0/23 maxlen: 24 150.241.162.0/23 maxlen: 24 150.241.164.0/23 maxlen: 24 150.241.166.0/23 maxlen: 24 150.241.168.0/23 maxlen: 24 150.241.170.0/23 maxlen: 24 150.241.172.0/23 maxlen: 24 150.241.176.0/23 maxlen: 24 150.241.178.0/23 maxlen: 24 150.241.180.0/23 maxlen: 24 150.241.182.0/23 maxlen: 24 150.241.184.0/23 maxlen: 24 150.241.186.0/23 maxlen: 24 150.241.188.0/23 maxlen: 24 150.241.190.0/23 maxlen: 24 167.148.97.0/24 maxlen: 24 167.148.98.0/24 maxlen: 24 167.148.104.0/24 maxlen: 24 167.148.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:b3:ec:87:61:d1:42:c2:d9:3e:fd:58:d3:25:aa:38:f1:f3:0e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 12 09:10:27 2025 GMT Not After : Dec 11 09:15:27 2026 GMT Subject: CN=1CB2714CDCEB322C53A210CF0C1FF7000F1CF7DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5b:99:20:28:7c:7d:02:71:87:89:34:51:0f: ce:75:56:1b:dc:e2:80:ef:da:94:e0:a0:3a:b6:dc: 22:b7:4c:ca:89:fc:f7:36:3d:35:be:12:b7:ab:29: b9:7b:6f:45:60:97:07:c9:84:97:84:82:e7:cb:79: 2b:81:e8:43:f5:d1:58:fb:19:dd:77:77:08:f4:42: c5:fb:02:fe:8f:fb:34:f6:6b:19:90:46:52:e6:1f: 45:89:38:e7:98:c2:c9:5b:48:7a:dd:ec:06:df:f6: 34:fe:57:3c:16:f7:28:2a:33:d3:b1:c0:85:87:2e: f5:ca:49:b2:cf:67:fa:5f:d9:65:8b:0d:f3:a1:90: 1b:11:a5:1a:56:fe:49:58:cb:d3:b6:59:c0:8e:10: c7:4e:10:55:e7:10:52:04:c1:fc:10:7c:bc:f3:0a: fe:d0:02:13:7c:87:b8:6f:e7:5c:08:3c:83:81:67: d3:6f:ee:b3:7d:1f:81:0b:64:e4:aa:cf:36:2e:e4: 64:98:f3:66:2b:12:37:11:c8:49:b1:b9:c7:7d:42: 52:86:fc:5f:38:0a:9c:a5:b1:b6:f6:77:ac:c1:54: fe:19:bd:ad:74:d3:37:68:36:dd:f0:6b:f6:54:93: bd:43:78:49:6e:b7:01:c3:9b:9d:a1:f8:de:88:4d: 88:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B2:71:4C:DC:EB:32:2C:53:A2:10:CF:0C:1F:F7:00:0F:1C:F7:DB X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS55201.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.62.0.0/19 96.62.37.0/24 96.62.45.0/24 96.62.47.0-96.62.58.255 96.62.60.0/22 96.62.79.0-96.62.83.255 96.62.85.0-96.62.88.255 96.62.90.0-96.62.95.255 96.62.98.0/23 96.62.135.0/24 96.62.149.0-96.62.151.255 143.14.78.0/24 148.135.216.0/22 148.135.224.0/22 148.135.232.0/22 148.135.240.0/22 148.135.248.0/22 150.241.146.0-150.241.173.255 150.241.176.0/20 167.148.97.0-167.148.98.255 167.148.104.0/24 167.148.112.0/24 Signature Algorithm: sha256WithRSAEncryption 77:76:3e:cc:cc:bf:56:49:7d:de:c8:16:90:f4:70:71:c2:99: c9:60:dc:4e:07:98:dd:99:a3:b0:14:fb:c9:23:f4:80:f8:4d: b8:4a:26:a2:20:65:e3:74:ef:68:9f:21:7e:08:a4:94:49:1b: cb:c4:40:e0:e2:a6:d0:37:07:92:66:70:4e:72:9e:06:18:cc: bc:bc:2a:49:fe:0d:ae:28:30:7f:9c:24:ed:77:8b:8c:90:9b: 57:33:53:93:b6:99:65:7b:ba:97:7d:b4:89:46:48:4e:ce:bd: fc:1b:7c:ef:c1:46:91:29:09:2e:b5:3c:dc:97:c8:54:45:c1: e1:6c:6b:53:cb:78:af:b0:cb:95:5a:22:54:2b:a6:bf:e0:cc: 4d:1b:bc:ef:ee:95:62:95:84:1a:24:23:fa:ec:3b:7b:ab:f2: 51:93:cc:26:f4:b7:50:83:4d:df:db:c6:04:44:14:ae:cd:4d: 17:7d:93:c5:38:05:78:50:1f:8c:bd:69:12:89:86:3d:87:59: ba:49:cf:72:20:b4:b9:35:2a:d1:51:41:05:21:d1:86:30:b4: 45:0b:02:3b:bb:ec:76:e8:9c:0a:f6:dd:7d:af:7c:3e:27:59: 26:51:50:43:92:4f:eb:8c:30:a3:63:73:8c:d4:4e:34:67:da: 2d:6e:19:e6 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIURbPsh2HRQsLZPv1Y0yWqOPHzDoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMTIwOTEwMjdaFw0yNjEyMTEwOTE1MjdaMDMxMTAvBgNV BAMTKDFDQjI3MTRDRENFQjMyMkM1M0EyMTBDRjBDMUZGNzAwMEYxQ0Y3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZW5kgKHx9AnGHiTRRD851Vhvc 4oDv2pTgoDq23CK3TMqJ/Pc2PTW+ErerKbl7b0VglwfJhJeEgufLeSuB6EP10Vj7 Gd13dwj0QsX7Av6P+zT2axmQRlLmH0WJOOeYwslbSHrd7Abf9jT+VzwW9ygqM9Ox wIWHLvXKSbLPZ/pf2WWLDfOhkBsRpRpW/klYy9O2WcCOEMdOEFXnEFIEwfwQfLzz Cv7QAhN8h7hv51wIPIOBZ9Nv7rN9H4ELZOSqzzYu5GSY82YrEjcRyEmxucd9QlKG /F84Cpylsbb2d6zBVP4Zva100zdoNt3wa/ZUk71DeElutwHDm52h+N6ITYi7AgMB AAGjggLEMIICwDAdBgNVHQ4EFgQUHLJxTNzrMixTohDPDB/3AA8c99swHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNTUyMDEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwgdkGCCsGAQUFBwEHAQH/BIHJMIHGMIHDBAIAATCBvAME BWA+AAMEAGA+JQMEAGA+LTAMAwQAYD4vAwQAYD46AwQCYD48MAwDBABgPk8DBAJg PlAwDAMEAGA+VQMEAGA+WDAMAwQBYD5aAwQFYD5AAwQBYD5iAwQAYD6HMAwDBABg PpUDBANgPpADBACPDk4DBAKUh9gDBAKUh+ADBAKUh+gDBAKUh/ADBAKUh/gwDAME AZbxkgMEAZbxrAMEBJbxsDAMAwQAp5RhAwQAp5RiAwQAp5RoAwQAp5RwMA0GCSqG SIb3DQEBCwUAA4IBAQB3dj7MzL9WSX3eyBaQ9HBxwpnJYNxOB5jdmaOwFPvJI/SA +E24SiaiIGXjdO9onyF+CKSUSRvLxEDg4qbQNweSZnBOcp4GGMy8vCpJ/g2uKDB/ nCTtd4uMkJtXM1OTtplle7qXfbSJRkhOzr38G3zvwUaRKQkutTzcl8hURcHhbGtT y3ivsMuVWiJUK6a/4MxNG7zv7pVilYQaJCP67Dt7q/JRk8wm9LdQg03f28YERBSu zU0XfZPFOAV4UB+MvWkSiYY9h1m6Sc9yILS5NSrRUUEFIdGGMLRFCwI7u+x26JwK 9t19r3w+J1kmUVBDkk/rjDCjY3OM1E40Z9otbhnm -----END CERTIFICATE-----Generated at Wed Dec 17 20:49:38 2025 by rpki-client