This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206650.roa File: AS206650.roa (raw, json) Hash identifier: KYEtBBe9ehQvY95G/xAmxOe0vs9KRHvGeVBGp74ab4U= Subject key identifier: 94:CC:1A:33:E2:6F:36:1F:1E:4D:9A:0E:CD:13:10:AC:C9:60:E9:4B Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 21BB103000E98C457D4B96428CF6F47AFA1525FF Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206650.roa Signing time: Tue 25 Nov 2025 03:54:47 +0000 ROA not before: Tue 25 Nov 2025 03:49:47 +0000 ROA not after: Tue 24 Nov 2026 03:54:47 +0000 asID: 206650 IP address blocks: 168.222.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:bb:10:30:00:e9:8c:45:7d:4b:96:42:8c:f6:f4:7a:fa:15:25:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 25 03:49:47 2025 GMT Not After : Nov 24 03:54:47 2026 GMT Subject: CN=94CC1A33E26F361F1E4D9A0ECD1310ACC960E94B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e9:31:26:c7:ea:2f:b3:94:1a:cc:54:d9:d9: e4:95:0b:c8:ee:84:7e:37:22:f6:92:9e:1f:f4:ec: 52:39:3b:2b:2b:41:c5:33:e4:71:24:2e:96:5d:62: d5:32:d1:81:7b:db:41:4a:72:7e:78:b8:8c:50:8e: 5b:87:07:0c:f9:19:38:a1:bb:a1:d7:52:0d:ab:57: 8d:25:89:07:c3:44:86:3c:e5:a5:b9:48:79:9c:b4: 74:d4:ae:e7:02:f3:95:41:3c:57:8a:bb:a6:bb:17: bd:7e:b9:73:2d:0c:25:5b:56:5f:ec:3f:bb:54:08: d4:9e:68:bc:db:d6:8b:cb:9d:04:8c:7e:46:39:17: 5a:af:b7:f6:cd:72:13:89:a0:1a:63:1b:5d:44:0d: 67:55:72:34:e2:17:46:f0:ab:ea:e5:35:96:86:c1: 4f:83:4a:18:43:a2:dd:ab:e1:74:dc:ef:06:a7:e9: b7:1d:55:5d:10:e6:70:b7:97:a1:b8:a5:74:78:56: 73:e6:50:84:ba:df:8b:3b:86:b6:79:f3:41:92:14: 79:ca:84:2f:9f:e7:ca:57:ce:53:4b:b4:16:83:20: 23:06:71:24:4a:85:94:cf:f4:8e:8b:71:5d:67:c4: fb:e6:d6:26:0b:51:88:7b:6e:33:9d:31:7d:fc:ce: 45:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CC:1A:33:E2:6F:36:1F:1E:4D:9A:0E:CD:13:10:AC:C9:60:E9:4B X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.222.62.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:49:d7:57:7a:45:c1:e4:b5:df:65:b0:d7:4f:80:ab:cc:07: 5d:a0:4e:54:cc:79:7c:ba:26:39:0b:f5:eb:1b:37:97:5b:8a: 46:f9:13:76:a0:49:75:4c:a1:58:36:43:5d:09:06:ff:ae:c1: 70:ad:04:fb:92:19:29:54:7d:35:ed:4f:9f:74:03:0d:46:75: 61:9d:20:b6:5e:2f:08:9a:ef:a0:0e:19:86:40:d5:56:df:82: 22:3a:06:4a:db:d7:3b:9a:ee:a4:d8:28:54:e6:be:ec:de:1b: c3:b5:d7:03:27:62:bb:90:a3:8a:ad:d1:77:b2:30:47:91:05: 9c:58:17:31:59:f6:f4:9a:42:2b:37:f9:ca:cc:11:00:40:67: 37:fd:21:03:8e:ce:2a:b4:79:a5:28:53:b8:81:90:1b:c3:5f: e7:3c:64:9c:b2:a4:5d:d3:ad:46:98:9b:8d:07:d8:9b:a4:fb: 5b:4f:e7:2e:38:2e:c2:ba:39:18:43:d5:21:97:69:59:fa:e4: 5f:48:66:71:87:b5:78:8c:87:47:79:25:10:9b:8d:74:b0:ce: 30:52:6b:61:0c:cf:2f:72:02:14:88:26:02:ab:3c:0b:64:de: c7:14:a2:2d:10:52:f1:bb:c5:17:b4:ce:0a:cb:57:88:be:bf: 5a:f7:0f:61 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUIbsQMADpjEV9S5ZCjPb0evoVJf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMjUwMzQ5NDdaFw0yNjExMjQwMzU0NDdaMDMxMTAvBgNV BAMTKDk0Q0MxQTMzRTI2RjM2MUYxRTREOUEwRUNEMTMxMEFDQzk2MEU5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG6TEmx+ovs5QazFTZ2eSVC8ju hH43IvaSnh/07FI5OysrQcUz5HEkLpZdYtUy0YF720FKcn54uIxQjluHBwz5GTih u6HXUg2rV40liQfDRIY85aW5SHmctHTUrucC85VBPFeKu6a7F71+uXMtDCVbVl/s P7tUCNSeaLzb1ovLnQSMfkY5F1qvt/bNchOJoBpjG11EDWdVcjTiF0bwq+rlNZaG wU+DShhDot2r4XTc7wan6bcdVV0Q5nC3l6G4pXR4VnPmUIS634s7hrZ580GSFHnK hC+f58pXzlNLtBaDICMGcSRKhZTP9I6LcV1nxPvm1iYLUYh7bjOdMX38zkVNAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUlMwaM+JvNh8eTZoOzRMQrMlg6UswHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA2NjUwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqN4+ MA0GCSqGSIb3DQEBCwUAA4IBAQCKSddXekXB5LXfZbDXT4CrzAddoE5UzHl8uiY5 C/XrGzeXW4pG+RN2oEl1TKFYNkNdCQb/rsFwrQT7khkpVH017U+fdAMNRnVhnSC2 Xi8Imu+gDhmGQNVW34IiOgZK29c7mu6k2ChU5r7s3hvDtdcDJ2K7kKOKrdF3sjBH kQWcWBcxWfb0mkIrN/nKzBEAQGc3/SEDjs4qtHmlKFO4gZAbw1/nPGScsqRd061G mJuNB9ibpPtbT+cuOC7CujkYQ9Uhl2lZ+uRfSGZxh7V4jIdHeSUQm410sM4wUmth DM8vcgIUiCYCqzwLZN7HFKItEFLxu8UXtM4Ky1eIvr9a9w9h -----END CERTIFICATE-----Generated at Thu Dec 4 07:22:23 2025 by rpki-client