This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206781.roa File: AS206781.roa (raw, json) Hash identifier: 8Q5h+Mhvc9sJ+v7wVJ0CfVou671hHR475GzfPC+fcD4= Subject key identifier: 33:D2:FF:0B:32:60:CD:1B:F7:D8:66:C6:4F:36:77:A8:1D:BC:20:55 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 70A69CD2D9E725B23AE3783CC8DEEA343FFA506E Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206781.roa Signing time: Fri 02 Jan 2026 14:00:37 +0000 ROA not before: Fri 02 Jan 2026 13:55:37 +0000 ROA not after: Fri 01 Jan 2027 14:00:37 +0000 asID: 206781 IP address blocks: 96.62.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a6:9c:d2:d9:e7:25:b2:3a:e3:78:3c:c8:de:ea:34:3f:fa:50:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 2 13:55:37 2026 GMT Not After : Jan 1 14:00:37 2027 GMT Subject: CN=33D2FF0B3260CD1BF7D866C64F3677A81DBC2055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c6:cc:d0:40:a1:84:1c:21:fe:82:d8:38:c7: e0:e1:03:5b:c7:67:19:77:9d:49:08:9f:ed:43:df: a9:0e:d6:e3:e7:73:f6:82:6c:3d:ab:b6:92:77:d2: b3:56:43:2d:ed:7d:d2:20:5e:7f:98:a1:73:be:4a: 4a:76:dc:33:d9:8a:47:d1:c1:d3:1c:82:17:fa:fa: 17:24:6b:b6:b8:cc:cb:b4:f4:8c:f6:05:95:8a:89: 6b:09:60:bd:99:41:33:26:0f:a5:27:1a:64:3e:a0: a7:43:6b:3c:e2:b4:d3:4f:bf:73:44:47:77:62:55: 07:79:85:16:2b:0e:90:15:ef:5c:44:e6:48:bd:5f: a6:a1:cc:0f:59:8c:b2:5f:db:a6:22:10:c4:f9:c0: 3e:ea:a1:ee:8b:33:b2:a4:e5:98:94:83:0e:c6:8f: ab:a7:88:6f:05:b2:e5:c1:e0:e5:e8:c3:86:74:7c: d8:c1:37:bd:ad:53:e3:6c:80:75:21:41:eb:92:b2: bf:fc:d5:95:45:e9:0a:1a:3f:14:f8:5f:32:6b:2b: c0:da:97:55:b4:eb:30:82:1f:a6:96:e1:19:71:2d: 5e:e0:a3:9c:04:e7:75:a7:51:f1:7c:6d:68:64:25: 21:14:e2:27:12:9d:18:92:57:bc:51:f8:f5:74:a6: e0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D2:FF:0B:32:60:CD:1B:F7:D8:66:C6:4F:36:77:A8:1D:BC:20:55 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206781.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.62.115.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:bf:e0:6f:1d:c5:a6:d2:fa:2b:06:e1:f7:6a:18:bf:81:cb: 1a:30:4b:7b:66:ae:8d:77:7f:4e:0c:05:a1:e7:a1:87:67:c6: bd:fa:eb:42:d3:c1:91:99:4c:04:b8:78:24:d6:53:54:a8:c1: 9f:91:b1:2b:c4:d8:8f:b5:de:1a:35:31:43:a7:3f:d9:1e:b0: 17:b0:15:a5:d2:96:f7:b9:c6:9a:91:40:aa:73:b6:a8:a6:7e: d1:3a:2b:ca:90:8b:a4:1e:eb:42:c3:7e:82:20:9a:a9:24:0c: f5:eb:f7:fa:9f:43:cf:b0:ed:25:45:eb:72:1a:ff:1a:30:15: 90:25:c4:5f:cf:e6:4c:05:c9:f2:57:12:c5:cd:71:d4:25:0e: cf:17:0a:da:a7:7c:8c:59:1d:08:7e:d3:13:b6:7b:f8:2a:05: 27:5c:f2:ab:3e:ca:ff:63:ef:85:c0:1c:ec:9d:df:70:cd:ad: 1f:ae:c0:8a:af:87:2a:56:f7:e2:ae:5e:1d:99:22:1e:c9:e4: b7:4a:4d:8c:cc:a2:88:78:1f:c4:c5:64:fe:ac:d1:de:d2:63: 5a:3b:ce:d5:1f:7c:80:24:dd:fc:4f:c5:2c:c9:7b:1b:cd:a5: 78:97:55:9f:03:cd:ab:4d:e5:bf:57:e1:87:46:32:02:a6:08: 10:68:6e:a2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUcKac0tnnJbI643g8yN7qND/6UG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMDIxMzU1MzdaFw0yNzAxMDExNDAwMzdaMDMxMTAvBgNV BAMTKDMzRDJGRjBCMzI2MENEMUJGN0Q4NjZDNjRGMzY3N0E4MURCQzIwNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzxszQQKGEHCH+gtg4x+DhA1vH Zxl3nUkIn+1D36kO1uPnc/aCbD2rtpJ30rNWQy3tfdIgXn+YoXO+Skp23DPZikfR wdMcghf6+hcka7a4zMu09Iz2BZWKiWsJYL2ZQTMmD6UnGmQ+oKdDazzitNNPv3NE R3diVQd5hRYrDpAV71xE5ki9X6ahzA9ZjLJf26YiEMT5wD7qoe6LM7Kk5ZiUgw7G j6uniG8FsuXB4OXow4Z0fNjBN72tU+NsgHUhQeuSsr/81ZVF6QoaPxT4XzJrK8Da l1W06zCCH6aW4RlxLV7go5wE53WnUfF8bWhkJSEU4icSnRiSV7xR+PV0puDRAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUM9L/CzJgzRv32GbGTzZ3qB28IFUwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA2NzgxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYD5z MA0GCSqGSIb3DQEBCwUAA4IBAQAPv+BvHcWm0vorBuH3ahi/gcsaMEt7Zq6Nd39O DAWh56GHZ8a9+utC08GRmUwEuHgk1lNUqMGfkbErxNiPtd4aNTFDpz/ZHrAXsBWl 0pb3ucaakUCqc7aopn7ROivKkIukHutCw36CIJqpJAz16/f6n0PPsO0lRetyGv8a MBWQJcRfz+ZMBcnyVxLFzXHUJQ7PFwrap3yMWR0IftMTtnv4KgUnXPKrPsr/Y++F wBzsnd9wza0frsCKr4cqVvfirl4dmSIeyeS3Sk2MzKKIeB/ExWT+rNHe0mNaO87V H3yAJN38T8UsyXsbzaV4l1WfA82rTeW/V+GHRjICpggQaG6i -----END CERTIFICATE-----Generated at Mon Jan 19 08:14:24 2026 by rpki-client