This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205840.roa File: AS205840.roa (raw, json) Hash identifier: MuwIZlpsKfb6aKz6ejGk2hVf20ZNedkxR7JDDOnm+Qo= Subject key identifier: E9:70:72:8A:32:9C:5D:66:6F:05:C0:73:FE:B3:63:87:72:09:65:06 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 41BA78C3780F168469803AF6DFED52D226552A9F Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205840.roa Signing time: Fri 02 Jan 2026 15:18:20 +0000 ROA not before: Fri 02 Jan 2026 15:13:20 +0000 ROA not after: Fri 01 Jan 2027 15:18:20 +0000 asID: 205840 IP address blocks: 96.62.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ba:78:c3:78:0f:16:84:69:80:3a:f6:df:ed:52:d2:26:55:2a:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 2 15:13:20 2026 GMT Not After : Jan 1 15:18:20 2027 GMT Subject: CN=E970728A329C5D666F05C073FEB3638772096506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d2:57:32:e0:a2:37:16:d3:f6:9d:0f:5a:79: 7f:6e:90:04:08:1a:bb:6d:cf:7a:3e:9e:d3:5d:77: 2a:0b:e7:23:d6:d4:56:30:93:fe:d7:c0:10:57:08: ef:c0:5c:02:b4:a6:b7:b5:35:e3:15:33:ff:10:49: 2e:d5:56:dd:8c:58:88:36:ed:50:74:b6:77:4e:e7: df:72:eb:1f:57:16:43:82:fc:31:fd:da:60:20:77: 07:ce:b8:89:1d:b8:ab:e3:1f:c8:28:e3:b0:75:87: 96:b3:34:08:d6:ca:3e:39:74:3d:7f:b8:9d:78:db: cc:92:92:a1:aa:bb:d8:e7:c2:0e:e8:17:e4:4b:ab: 92:30:9e:17:e7:f0:3e:34:a0:54:42:a6:34:3c:c2: eb:d4:f9:0b:87:df:8f:9e:a9:df:be:2f:db:e0:98: 27:36:6d:ea:a3:4e:b3:fd:3c:a9:5a:88:39:bc:2d: ae:3c:60:11:fc:1d:ad:67:96:b7:e2:ce:ab:0a:2b: 3c:1c:d7:d6:79:4b:8c:54:9b:ab:81:55:f5:2c:b5: 99:67:8b:06:2c:bd:4f:72:98:de:a1:17:d8:4a:72: 83:f6:f4:0c:c7:ba:d8:c4:f1:ce:dd:24:c7:89:e2: da:dd:9f:07:f1:41:fd:58:35:63:59:57:d9:40:42: 20:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:70:72:8A:32:9C:5D:66:6F:05:C0:73:FE:B3:63:87:72:09:65:06 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205840.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.62.100.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:65:73:be:27:df:bf:57:77:6c:d7:97:90:bd:3d:37:2e:13: 8d:68:a4:c3:f0:4b:59:05:22:64:7a:78:71:f7:a8:e6:ef:26: 03:fe:7f:04:00:ed:8e:f0:55:e3:17:27:33:1c:20:78:61:ef: 2c:72:53:c4:db:f5:d9:00:00:32:87:41:da:0b:e4:6e:af:bb: a5:59:79:8f:87:d2:7e:7d:49:5a:0c:c7:97:2c:f9:74:19:71: 45:13:a5:89:d3:4a:2f:82:1a:36:c8:ed:f8:af:34:4b:c8:4e: a8:12:01:5f:73:d6:32:7d:52:3e:8d:fd:89:1a:a1:3a:b3:40: 9c:36:10:ec:c8:9f:d1:5c:7b:46:10:33:15:79:13:23:e2:12: f2:8d:5e:cc:04:52:b5:f0:f9:e0:c1:d5:8c:00:41:39:ab:4f: f9:f0:02:57:1a:56:c5:c9:c0:af:75:41:1a:5f:d1:38:2c:6c: bd:8d:3f:66:e9:ff:e5:46:0a:df:95:15:a1:d0:dd:3f:53:ac: ab:b5:de:66:68:7c:03:f4:51:5c:eb:64:09:50:52:de:98:83: af:25:33:5e:91:3f:d3:93:55:d9:82:04:12:46:6c:c5:2e:07: fa:bc:58:3a:43:f6:a1:54:7e:93:c1:68:77:6d:ea:d6:59:a6: 3a:d6:4e:a2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUQbp4w3gPFoRpgDr23+1S0iZVKp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMDIxNTEzMjBaFw0yNzAxMDExNTE4MjBaMDMxMTAvBgNV BAMTKEU5NzA3MjhBMzI5QzVENjY2RjA1QzA3M0ZFQjM2Mzg3NzIwOTY1MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ0lcy4KI3FtP2nQ9aeX9ukAQI Grttz3o+ntNddyoL5yPW1FYwk/7XwBBXCO/AXAK0pre1NeMVM/8QSS7VVt2MWIg2 7VB0tndO599y6x9XFkOC/DH92mAgdwfOuIkduKvjH8go47B1h5azNAjWyj45dD1/ uJ1428ySkqGqu9jnwg7oF+RLq5Iwnhfn8D40oFRCpjQ8wuvU+QuH34+eqd++L9vg mCc2beqjTrP9PKlaiDm8La48YBH8Ha1nlrfizqsKKzwc19Z5S4xUm6uBVfUstZln iwYsvU9ymN6hF9hKcoP29AzHutjE8c7dJMeJ4trdnwfxQf1YNWNZV9lAQiAbAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU6XByijKcXWZvBcBz/rNjh3IJZQYwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA1ODQwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYD5k MA0GCSqGSIb3DQEBCwUAA4IBAQBLZXO+J9+/V3ds15eQvT03LhONaKTD8EtZBSJk enhx96jm7yYD/n8EAO2O8FXjFyczHCB4Ye8sclPE2/XZAAAyh0HaC+Rur7ulWXmP h9J+fUlaDMeXLPl0GXFFE6WJ00ovgho2yO34rzRLyE6oEgFfc9YyfVI+jf2JGqE6 s0CcNhDsyJ/RXHtGEDMVeRMj4hLyjV7MBFK18PngwdWMAEE5q0/58AJXGlbFycCv dUEaX9E4LGy9jT9m6f/lRgrflRWh0N0/U6yrtd5maHwD9FFc62QJUFLemIOvJTNe kT/Tk1XZggQSRmzFLgf6vFg6Q/ahVH6TwWh3berWWaY61k6i -----END CERTIFICATE-----Generated at Mon Jan 19 08:14:26 2026 by rpki-client