This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204535.roa File: AS204535.roa (raw, json) Hash identifier: 3q7j+7Sl5mHjfagr0UaN+WSmzsj55yZpxAtwVpEH3wA= Subject key identifier: 9F:74:19:EB:99:1B:D9:5C:41:A7:7F:74:A6:CB:51:D2:48:43:29:5E Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 1F69DEE1B75A319915F4A26F2399AF4D5A556A73 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204535.roa Signing time: Wed 12 Nov 2025 09:12:44 +0000 ROA not before: Wed 12 Nov 2025 09:07:44 +0000 ROA not after: Wed 11 Nov 2026 09:12:44 +0000 asID: 204535 IP address blocks: 2a13:9500:107::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:69:de:e1:b7:5a:31:99:15:f4:a2:6f:23:99:af:4d:5a:55:6a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 12 09:07:44 2025 GMT Not After : Nov 11 09:12:44 2026 GMT Subject: CN=9F7419EB991BD95C41A77F74A6CB51D24843295E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:00:79:16:32:a4:b2:47:e4:ee:ca:84:1a:5b: db:c8:a2:34:30:5e:b8:d2:31:03:81:a3:14:f3:1d: c7:e3:9b:f0:61:18:ea:97:6c:12:f3:6f:03:e0:99: ab:7e:2d:55:97:1c:5f:ed:53:cd:6a:37:5a:91:e7: 4b:66:3e:80:1f:f3:17:51:3c:48:25:10:29:0a:30: 04:48:7e:6c:d7:0c:09:8f:e8:53:7c:0f:9a:2d:48: 0e:d5:ce:72:cd:cb:da:dc:18:4d:70:06:31:85:95: 3a:cc:66:03:4e:08:c0:06:6a:cd:79:3a:96:5a:1c: 88:a9:2c:3a:c3:06:d4:2d:e9:bd:3b:41:d8:35:97: f1:4c:cf:db:db:c2:6b:55:05:11:02:a3:bb:75:9f: 68:35:dc:c9:80:b3:c8:77:e0:17:41:7e:7c:9b:6f: ac:68:22:b0:0e:0b:44:bb:d2:43:98:32:22:01:00: c9:cc:e0:9d:bb:f4:1e:05:76:65:2d:58:9f:b8:99: aa:38:3b:df:5e:d2:60:21:32:f1:11:6c:7f:d4:9c: 4a:db:99:bb:05:c5:6f:83:16:6e:21:54:e7:d9:7c: 1c:9d:98:09:42:fe:17:43:7c:d6:57:33:df:49:20: 98:c2:d2:64:a8:88:4e:28:2a:3d:51:c9:bb:27:c6: 67:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:74:19:EB:99:1B:D9:5C:41:A7:7F:74:A6:CB:51:D2:48:43:29:5E X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9500:107::/48 Signature Algorithm: sha256WithRSAEncryption 81:61:56:ee:a4:f6:c3:6a:12:44:70:80:cf:c6:3b:01:2e:71: 7f:4b:e7:e2:7a:c0:f5:7a:22:32:6f:73:9b:34:39:05:2a:e1: a0:3b:00:08:de:4a:01:fb:ab:39:9d:2e:3e:fe:fd:70:52:66: 91:f2:8a:90:d7:89:68:49:31:98:69:33:3c:47:01:54:98:54: 08:8e:6e:b3:e6:33:ec:33:d2:84:8f:3a:81:37:89:68:bf:63: 34:92:8a:ed:de:02:36:3a:41:b5:f7:2b:c3:54:02:60:b3:97: de:1f:2c:36:68:43:9e:78:17:e5:62:5d:d4:41:15:04:fb:26: be:2c:a0:86:1c:d5:17:18:72:8e:45:25:4a:fc:3f:56:f3:de: f6:bb:70:46:51:66:3d:18:6c:1f:2c:79:ed:4f:c1:e7:27:10: 09:08:53:67:ed:3f:0c:a8:c3:39:fa:af:9d:73:66:ed:db:b3: e4:b5:6c:60:4b:0e:6f:e2:a0:06:76:ef:88:23:8d:cb:0b:e8: 10:c4:5d:1e:bc:12:2b:10:16:c7:96:8c:28:7e:35:fa:45:b0: be:eb:e0:e6:28:d5:f8:df:4e:cf:17:1b:b6:0c:22:49:a1:82: 21:b2:80:31:5f:af:80:21:22:63:b2:8f:36:3c:18:10:e0:97: b3:13:d2:9e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUH2ne4bdaMZkV9KJvI5mvTVpVanMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMTIwOTA3NDRaFw0yNjExMTEwOTEyNDRaMDMxMTAvBgNV BAMTKDlGNzQxOUVCOTkxQkQ5NUM0MUE3N0Y3NEE2Q0I1MUQyNDg0MzI5NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6AHkWMqSyR+TuyoQaW9vIojQw XrjSMQOBoxTzHcfjm/BhGOqXbBLzbwPgmat+LVWXHF/tU81qN1qR50tmPoAf8xdR PEglECkKMARIfmzXDAmP6FN8D5otSA7VznLNy9rcGE1wBjGFlTrMZgNOCMAGas15 OpZaHIipLDrDBtQt6b07Qdg1l/FMz9vbwmtVBRECo7t1n2g13MmAs8h34BdBfnyb b6xoIrAOC0S70kOYMiIBAMnM4J279B4FdmUtWJ+4mao4O99e0mAhMvERbH/UnErb mbsFxW+DFm4hVOfZfBydmAlC/hdDfNZXM99JIJjC0mSoiE4oKj1RybsnxmdXAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUn3QZ65kb2VxBp390pstR0khDKV4wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA0NTM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV AAEHMA0GCSqGSIb3DQEBCwUAA4IBAQCBYVbupPbDahJEcIDPxjsBLnF/S+fiesD1 eiIyb3ObNDkFKuGgOwAI3koB+6s5nS4+/v1wUmaR8oqQ14loSTGYaTM8RwFUmFQI jm6z5jPsM9KEjzqBN4lov2M0kort3gI2OkG19yvDVAJgs5feHyw2aEOeeBflYl3U QRUE+ya+LKCGHNUXGHKORSVK/D9W8972u3BGUWY9GGwfLHntT8HnJxAJCFNn7T8M qMM5+q+dc2bt27PktWxgSw5v4qAGdu+II43LC+gQxF0evBIrEBbHlowofjX6RbC+ 6+DmKNX4307PFxu2DCJJoYIhsoAxX6+AISJjso82PBgQ4JezE9Ke -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:01 2025 by rpki-client