This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206119.roa File: AS206119.roa (raw, json) Hash identifier: I87HhwyBJ3dMIIeUSwuzUqvk7gEh5ZvfI6N8XlL2y+A= Subject key identifier: 8C:28:B1:87:36:3B:83:7D:88:69:13:5D:94:16:A6:9A:24:E3:02:BB Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 1DB1C3274E192A290BD58B82CA35D0BE05AB35F4 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206119.roa Signing time: Sun 09 Nov 2025 19:11:03 +0000 ROA not before: Sun 09 Nov 2025 19:06:03 +0000 ROA not after: Sun 08 Nov 2026 19:11:03 +0000 asID: 206119 IP address blocks: 167.148.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b1:c3:27:4e:19:2a:29:0b:d5:8b:82:ca:35:d0:be:05:ab:35:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 9 19:06:03 2025 GMT Not After : Nov 8 19:11:03 2026 GMT Subject: CN=8C28B187363B837D8869135D9416A69A24E302BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:df:b2:db:80:f0:6f:df:5e:a0:27:9e:b4:bf: fc:96:4b:6b:95:66:fc:f6:61:83:31:a4:e2:49:41: 52:2b:6a:48:e0:9f:f8:95:52:8c:e7:32:d0:22:fc: 51:9a:f4:a0:75:e0:e9:43:6e:8c:56:bd:b9:c8:5c: d0:ef:fa:86:af:de:30:64:cf:06:17:02:b7:cc:a6: 3d:c0:10:28:35:6a:5f:7d:73:04:b6:50:66:1b:67: fb:4d:20:4d:c7:5f:ec:0d:86:86:70:41:55:87:a7: 2b:a8:d4:e9:e2:44:e7:f6:16:24:5f:61:bc:98:7e: 48:54:67:7f:d6:21:81:36:36:aa:e7:49:a1:4f:df: 40:cc:5e:9f:3a:37:16:e6:46:ff:30:a8:60:f5:b2: 42:a3:b1:6f:87:86:4d:c7:75:c5:d7:2d:b2:49:ef: 1f:47:45:81:8d:81:c8:26:0d:55:ea:61:e9:aa:85: 55:77:6e:2e:31:e5:64:75:61:6b:9b:e1:e1:c8:20: a0:c3:f3:8d:98:b8:33:34:ba:ae:3c:fb:fc:f7:b0: 17:e4:8c:7d:b6:fb:72:41:50:8c:37:49:4f:4c:2c: af:c2:1d:fd:3b:ae:be:63:19:93:eb:36:94:eb:8e: ba:89:9f:f4:09:d8:d9:2a:fb:1a:1f:2b:62:17:cc: 15:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:28:B1:87:36:3B:83:7D:88:69:13:5D:94:16:A6:9A:24:E3:02:BB X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206119.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.148.136.0/24 Signature Algorithm: sha256WithRSAEncryption 52:55:5c:9c:c9:c9:cd:4e:de:c4:1e:04:52:fb:f6:45:c1:a3: dc:ff:cd:c3:18:5f:bf:e4:85:2d:d4:54:c7:38:1e:52:c5:82: 0c:e9:ef:94:02:46:91:b8:50:0f:c4:0e:2f:69:5f:7d:97:ad: a3:54:42:17:97:76:bf:89:ef:0c:ed:83:bb:26:65:85:05:91: 35:b8:99:04:b1:5e:3c:5e:6c:13:75:a9:28:13:97:54:46:04: a0:bc:53:ad:43:54:47:57:6c:9c:86:fd:10:44:d8:b2:ff:0e: 17:94:06:81:98:30:21:5d:6c:ed:d4:32:ba:4d:f1:89:98:d6: 35:ce:94:44:65:9b:8d:20:af:09:e9:a4:15:1c:46:35:cd:65: fc:5c:fe:73:7b:51:4a:24:a3:b8:1f:8c:8f:da:4a:43:37:b9: dc:eb:d6:10:d4:f1:31:74:6e:d4:6c:5a:32:bd:57:64:38:07: 8e:ce:2f:29:2c:17:36:f3:5a:b0:36:2a:76:db:d6:51:e3:96: c7:fe:62:4f:98:3c:02:c5:db:1c:66:1c:d5:b3:a0:c5:de:74: 2c:59:25:e7:b0:ed:73:16:77:8c:e4:d6:b1:5c:f7:2b:98:04: 1b:62:f3:50:a9:bc:be:f5:fc:27:e6:b6:b0:37:10:b8:c0:c1: 71:f9:fd:03 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUHbHDJ04ZKikL1YuCyjXQvgWrNfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMDkxOTA2MDNaFw0yNjExMDgxOTExMDNaMDMxMTAvBgNV BAMTKDhDMjhCMTg3MzYzQjgzN0Q4ODY5MTM1RDk0MTZBNjlBMjRFMzAyQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL37LbgPBv316gJ560v/yWS2uV Zvz2YYMxpOJJQVIrakjgn/iVUoznMtAi/FGa9KB14OlDboxWvbnIXNDv+oav3jBk zwYXArfMpj3AECg1al99cwS2UGYbZ/tNIE3HX+wNhoZwQVWHpyuo1OniROf2FiRf YbyYfkhUZ3/WIYE2NqrnSaFP30DMXp86NxbmRv8wqGD1skKjsW+Hhk3HdcXXLbJJ 7x9HRYGNgcgmDVXqYemqhVV3bi4x5WR1YWub4eHIIKDD842YuDM0uq48+/z3sBfk jH22+3JBUIw3SU9MLK/CHf07rr5jGZPrNpTrjrqJn/QJ2Nkq+xofK2IXzBW/AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUjCixhzY7g32IaRNdlBammiTjArswHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA2MTE5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp5SI MA0GCSqGSIb3DQEBCwUAA4IBAQBSVVycycnNTt7EHgRS+/ZFwaPc/83DGF+/5IUt 1FTHOB5SxYIM6e+UAkaRuFAPxA4vaV99l62jVEIXl3a/ie8M7YO7JmWFBZE1uJkE sV48XmwTdakoE5dURgSgvFOtQ1RHV2ychv0QRNiy/w4XlAaBmDAhXWzt1DK6TfGJ mNY1zpREZZuNIK8J6aQVHEY1zWX8XP5ze1FKJKO4H4yP2kpDN7nc69YQ1PExdG7U bFoyvVdkOAeOzi8pLBc281qwNip229ZR45bH/mJPmDwCxdscZhzVs6DF3nQsWSXn sO1zFneM5NaxXPcrmAQbYvNQqby+9fwn5rawNxC4wMFx+f0D -----END CERTIFICATE-----Generated at Fri Dec 5 05:06:11 2025 by rpki-client