This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203559.roa File: AS203559.roa (raw, json) Hash identifier: bllLZjVZOlrSOw3nA3kG7VCDNhUNLSFbpMEyzFAUze4= Subject key identifier: C9:94:D4:FB:91:24:02:37:99:22:38:ED:71:EB:35:D1:86:E1:A6:87 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 0253F9FF5B81CBD9B4CFFC602531D9486CF6EC6C Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203559.roa Signing time: Fri 21 Nov 2025 16:03:11 +0000 ROA not before: Fri 21 Nov 2025 15:58:11 +0000 ROA not after: Fri 20 Nov 2026 16:03:11 +0000 asID: 203559 IP address blocks: 2a13:9500:10d::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:53:f9:ff:5b:81:cb:d9:b4:cf:fc:60:25:31:d9:48:6c:f6:ec:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 21 15:58:11 2025 GMT Not After : Nov 20 16:03:11 2026 GMT Subject: CN=C994D4FB91240237992238ED71EB35D186E1A687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3e:3b:7c:26:94:3f:d1:20:09:9b:a9:df:76: 19:18:fb:33:7a:84:6b:53:19:6d:3b:46:3a:b1:6e: 42:d1:05:5f:b9:71:1e:99:6a:c4:13:c1:86:e3:09: f3:e8:2f:12:e5:21:29:ce:d8:75:aa:c9:eb:a0:b2: 79:9d:10:f7:3f:26:0f:6a:51:4e:a6:d9:12:62:aa: 6f:43:5a:48:63:1d:f4:be:e4:da:05:0c:81:dc:f5: 66:77:aa:db:5c:ca:84:91:c8:44:70:af:2c:1e:93: 95:9c:2e:e0:03:5a:13:09:9e:31:fd:5f:f1:e7:9c: af:fd:25:36:3c:aa:f8:15:b6:e2:5e:e4:9d:04:2c: 33:47:b0:48:45:01:56:fe:6c:91:7e:83:c6:13:09: 2c:0a:76:15:32:f9:4c:1a:21:75:5e:6b:41:21:b7: 2e:a8:1b:f2:f9:19:d1:2b:1a:88:f6:94:98:9d:70: c8:b7:a3:dd:5c:ad:7f:47:3c:5f:6d:da:68:2f:b4: b0:02:08:3e:ad:c0:b8:93:90:97:b9:e0:76:f7:0a: 8e:bb:79:51:6b:9a:21:90:3f:aa:45:2e:f7:41:37: 5d:c1:e4:44:38:70:39:82:6d:9a:d8:1a:46:01:3d: 48:19:f8:5e:82:24:63:2f:de:a5:de:dc:33:d7:47: c2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:94:D4:FB:91:24:02:37:99:22:38:ED:71:EB:35:D1:86:E1:A6:87 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203559.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9500:10d::/48 Signature Algorithm: sha256WithRSAEncryption 98:11:92:6d:e6:a9:31:03:3a:ec:5e:fd:c4:ef:b7:85:20:ed: ea:67:36:18:52:9d:77:8a:b4:00:be:95:30:5c:2f:71:9e:c3: f6:7b:05:f1:d4:47:bc:74:c8:2a:ba:73:71:6c:b9:04:f7:68: 4a:ce:d7:24:d9:69:9a:93:d9:b5:1e:c9:fe:93:8c:2c:64:30: de:20:fc:4e:99:f4:bb:b2:d8:b4:d6:b7:1b:5d:cc:f5:f4:e0: e7:a8:06:3f:9d:95:ca:a8:1b:93:54:26:e5:02:04:fe:77:f6: ca:ef:2b:13:16:14:aa:17:95:8c:01:19:f3:9d:66:0b:66:ec: e9:a1:d2:fb:98:c3:42:9c:e0:3e:72:9f:7f:f2:08:44:2f:10: 17:94:5a:b5:b8:09:87:8d:78:1c:72:a3:3f:e9:40:0c:b5:b9: d2:e7:7f:68:a1:ea:65:ed:71:c4:64:42:63:78:8a:04:a1:ae: 59:08:f3:59:a4:0a:0f:4f:01:97:7b:fa:03:a8:75:c4:b4:6d: 34:dc:c7:0a:24:1d:b0:cc:15:f5:0a:8c:60:07:0e:89:af:d5: a0:85:8b:e4:25:57:0f:88:ca:cf:9b:be:27:8e:14:18:9c:50: 72:65:4d:96:3f:17:33:83:78:b1:73:f4:33:95:2b:9f:97:9b: 1c:b9:95:5c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUAlP5/1uBy9m0z/xgJTHZSGz27GwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjExNTU4MTFaFw0yNjExMjAxNjAzMTFaMDMxMTAvBgNV BAMTKEM5OTRENEZCOTEyNDAyMzc5OTIyMzhFRDcxRUIzNUQxODZFMUE2ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxPjt8JpQ/0SAJm6nfdhkY+zN6 hGtTGW07RjqxbkLRBV+5cR6ZasQTwYbjCfPoLxLlISnO2HWqyeugsnmdEPc/Jg9q UU6m2RJiqm9DWkhjHfS+5NoFDIHc9WZ3qttcyoSRyERwrywek5WcLuADWhMJnjH9 X/HnnK/9JTY8qvgVtuJe5J0ELDNHsEhFAVb+bJF+g8YTCSwKdhUy+UwaIXVea0Eh ty6oG/L5GdErGoj2lJidcMi3o91crX9HPF9t2mgvtLACCD6twLiTkJe54Hb3Co67 eVFrmiGQP6pFLvdBN13B5EQ4cDmCbZrYGkYBPUgZ+F6CJGMv3qXe3DPXR8KxAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUyZTU+5EkAjeZIjjtces10YbhpocwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAzNTU5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV AAENMA0GCSqGSIb3DQEBCwUAA4IBAQCYEZJt5qkxAzrsXv3E77eFIO3qZzYYUp13 irQAvpUwXC9xnsP2ewXx1Ee8dMgqunNxbLkE92hKztck2Wmak9m1Hsn+k4wsZDDe IPxOmfS7sti01rcbXcz19ODnqAY/nZXKqBuTVCblAgT+d/bK7ysTFhSqF5WMARnz nWYLZuzpodL7mMNCnOA+cp9/8ghELxAXlFq1uAmHjXgccqM/6UAMtbnS539ooepl 7XHEZEJjeIoEoa5ZCPNZpAoPTwGXe/oDqHXEtG003McKJB2wzBX1CoxgBw6Jr9Wg hYvkJVcPiMrPm74njhQYnFByZU2WPxczg3ixc/QzlSufl5scuZVc -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:43 2025 by rpki-client