This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205886.roa File: AS205886.roa (raw, json) Hash identifier: kdpV4lDJKh9wWfXYfyURMtvjjB5q+0INH16ntOrm2oA= Subject key identifier: E0:0E:61:DA:18:9C:45:02:D5:05:4B:C6:10:1B:53:8C:78:05:5A:95 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 618A56C94A5FEC91ACC5F89DFD6E0E4A8AC377FD Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205886.roa Signing time: Sun 07 Dec 2025 04:11:18 +0000 ROA not before: Sun 07 Dec 2025 04:06:18 +0000 ROA not after: Sun 06 Dec 2026 04:11:18 +0000 asID: 205886 IP address blocks: 96.62.218.0/24 maxlen: 24 96.62.228.0/24 maxlen: 24 96.62.250.0/24 maxlen: 24 140.150.156.0/24 maxlen: 24 140.233.177.0/24 maxlen: 24 143.14.79.0/24 maxlen: 24 143.14.133.0/24 maxlen: 24 143.14.147.0/24 maxlen: 24 143.14.152.0/24 maxlen: 24 143.14.198.0/24 maxlen: 24 147.79.16.0/24 maxlen: 24 147.79.30.0/24 maxlen: 24 147.79.61.0/24 maxlen: 24 148.135.175.0/24 maxlen: 24 148.135.198.0/24 maxlen: 24 148.135.202.0/24 maxlen: 24 150.241.242.0/24 maxlen: 24 155.117.1.0/24 maxlen: 24 155.117.76.0/24 maxlen: 24 155.117.119.0/24 maxlen: 24 155.117.186.0/24 maxlen: 24 155.117.214.0/24 maxlen: 24 155.117.220.0/24 maxlen: 24 162.141.46.0/24 maxlen: 24 162.141.47.0/24 maxlen: 24 162.141.70.0/24 maxlen: 24 162.141.137.0/24 maxlen: 24 162.141.163.0/24 maxlen: 24 162.141.166.0/24 maxlen: 24 167.148.42.0/24 maxlen: 24 167.148.105.0/24 maxlen: 24 167.148.177.0/24 maxlen: 24 167.148.188.0/24 maxlen: 24 168.222.3.0/24 maxlen: 24 168.222.12.0/24 maxlen: 24 168.222.23.0/24 maxlen: 24 168.222.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:8a:56:c9:4a:5f:ec:91:ac:c5:f8:9d:fd:6e:0e:4a:8a:c3:77:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 7 04:06:18 2025 GMT Not After : Dec 6 04:11:18 2026 GMT Subject: CN=E00E61DA189C4502D5054BC6101B538C78055A95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fc:52:b5:ad:73:32:f5:7f:0a:17:39:bb:56: f9:31:80:6e:94:d5:b3:ad:4c:8b:c3:ba:e6:56:4e: dc:e8:ad:26:a1:3a:63:83:cf:a1:be:30:6c:7a:eb: 05:46:ed:b1:01:f9:37:c2:69:ea:e7:67:d8:50:ba: 05:27:74:a4:b2:e7:7c:9d:73:a1:6e:16:d8:f1:39: 35:c5:69:ce:7a:f6:b0:90:1a:ac:e6:95:d9:47:9c: 52:90:d7:eb:0b:4d:32:87:35:75:5c:7a:27:9b:87: fe:7e:9a:06:e9:e2:16:17:a8:0d:4d:98:d2:9f:9a: 3c:63:05:3f:94:82:1d:84:b7:d0:29:81:32:96:d7: c7:3c:8f:c7:fc:f1:97:7e:23:40:4d:9c:2e:ed:2c: 83:0e:25:c4:81:39:34:a0:09:4d:36:81:f9:04:dc: 9e:80:00:98:6a:91:16:85:59:e7:29:74:10:cf:c4: 2c:3c:5d:e3:de:da:70:ed:83:12:0f:0e:76:98:5d: f4:2a:c5:35:2b:9c:18:33:c1:b9:dc:7d:44:a3:48: 12:81:ee:03:0c:fe:24:81:5f:fb:a1:c0:c2:52:b2: 3b:a2:f0:d7:f9:50:12:3e:68:b7:02:df:9f:51:0e: a7:d5:10:34:ba:3c:6e:eb:12:c8:42:7c:0f:0d:85: f5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0E:61:DA:18:9C:45:02:D5:05:4B:C6:10:1B:53:8C:78:05:5A:95 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.62.218.0/24 96.62.228.0/24 96.62.250.0/24 140.150.156.0/24 140.233.177.0/24 143.14.79.0/24 143.14.133.0/24 143.14.147.0/24 143.14.152.0/24 143.14.198.0/24 147.79.16.0/24 147.79.30.0/24 147.79.61.0/24 148.135.175.0/24 148.135.198.0/24 148.135.202.0/24 150.241.242.0/24 155.117.1.0/24 155.117.76.0/24 155.117.119.0/24 155.117.186.0/24 155.117.214.0/24 155.117.220.0/24 162.141.46.0/23 162.141.70.0/24 162.141.137.0/24 162.141.163.0/24 162.141.166.0/24 167.148.42.0/24 167.148.105.0/24 167.148.177.0/24 167.148.188.0/24 168.222.3.0/24 168.222.12.0/24 168.222.23.0/24 168.222.61.0/24 Signature Algorithm: sha256WithRSAEncryption a4:ab:bd:13:40:c8:6e:ca:da:fd:a0:05:ab:88:72:af:58:5b: 46:f1:73:0b:f5:d4:9a:8b:68:3c:bd:e7:da:a2:7e:20:3b:9e: 2d:6b:bb:9f:d5:6a:94:2c:09:ca:94:8f:8b:19:a2:c8:9e:25: b8:28:95:5b:fb:78:aa:a2:4d:e8:3c:f5:ae:f9:99:7c:ea:02: 25:77:70:38:96:8c:28:00:dc:29:d2:d8:de:0c:fe:3f:fb:10: 00:61:88:45:dc:16:55:bb:a0:6d:9d:66:be:61:19:d3:0e:8d: 9d:37:fe:af:77:ce:23:53:90:bd:07:9e:c9:55:e7:1f:aa:d2: e1:01:43:1c:d9:73:1d:18:89:4b:cf:c4:43:0b:19:3a:c7:c3: 2d:15:9f:47:6c:9c:5a:ca:d1:a8:b6:4e:d6:5e:08:15:83:8c: 23:ab:15:ef:f6:61:66:1b:aa:f1:2b:9a:0f:34:ff:62:0f:d3: dd:48:c7:72:fe:28:5e:ab:2c:50:0a:38:90:0c:25:24:6c:cb: 7e:fa:23:71:c1:39:16:ec:1d:f2:82:cd:50:55:23:fe:0c:61: 76:39:7e:cf:5e:be:bb:5a:ee:87:42:ab:6c:88:87:5b:48:8e: 77:ee:47:2a:e9:d8:6c:bc:d7:00:83:24:b2:be:21:6f:5e:37: 0e:86:f5:3e -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUYYpWyUpf7JGsxfid/W4OSorDd/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMDcwNDA2MThaFw0yNjEyMDYwNDExMThaMDMxMTAvBgNV BAMTKEUwMEU2MURBMTg5QzQ1MDJENTA1NEJDNjEwMUI1MzhDNzgwNTVBOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/FK1rXMy9X8KFzm7VvkxgG6U 1bOtTIvDuuZWTtzorSahOmODz6G+MGx66wVG7bEB+TfCaernZ9hQugUndKSy53yd c6FuFtjxOTXFac569rCQGqzmldlHnFKQ1+sLTTKHNXVceiebh/5+mgbp4hYXqA1N mNKfmjxjBT+Ugh2Et9ApgTKW18c8j8f88Zd+I0BNnC7tLIMOJcSBOTSgCU02gfkE 3J6AAJhqkRaFWecpdBDPxCw8XePe2nDtgxIPDnaYXfQqxTUrnBgzwbncfUSjSBKB 7gMM/iSBX/uhwMJSsjui8Nf5UBI+aLcC359RDqfVEDS6PG7rEshCfA8NhfWTAgMB AAGjggLhMIIC3TAdBgNVHQ4EFgQU4A5h2hicRQLVBUvGEBtTjHgFWpUwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA1ODg2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMIH1BggrBgEFBQcBBwEB/wSB5TCB4jCB3wQCAAEwgdgD BABgPtoDBABgPuQDBABgPvoDBACMlpwDBACM6bEDBACPDk8DBACPDoUDBACPDpMD BACPDpgDBACPDsYDBACTTxADBACTTx4DBACTTz0DBACUh68DBACUh8YDBACUh8oD BACW8fIDBACbdQEDBACbdUwDBACbdXcDBACbdboDBACbddYDBACbddwDBAGijS4D BACijUYDBACijYkDBACijaMDBACijaYDBACnlCoDBACnlGkDBACnlLEDBACnlLwD BACo3gMDBACo3gwDBACo3hcDBACo3j0wDQYJKoZIhvcNAQELBQADggEBAKSrvRNA yG7K2v2gBauIcq9YW0bxcwv11JqLaDy959qifiA7ni1ru5/VapQsCcqUj4sZosie JbgolVv7eKqiTeg89a75mXzqAiV3cDiWjCgA3CnS2N4M/j/7EABhiEXcFlW7oG2d Zr5hGdMOjZ03/q93ziNTkL0HnslV5x+q0uEBQxzZcx0YiUvPxEMLGTrHwy0Vn0ds nFrK0ai2TtZeCBWDjCOrFe/2YWYbqvErmg80/2IP091Ix3L+KF6rLFAKOJAMJSRs y376I3HBORbsHfKCzVBVI/4MYXY5fs9evrta7odCq2yIh1tIjnfuRyrp2Gy81wCD JLK+IW9eNw6G9T4= -----END CERTIFICATE-----Generated at Sun Dec 7 11:10:07 2025 by rpki-client