This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205021.roa File: AS205021.roa (raw, json) Hash identifier: bMVnzdu0udfLwL5xcjSSMrJgnhusuzO0uygAfnl5SpQ= Subject key identifier: D6:BA:9F:D8:46:2C:DD:E6:A0:F4:16:4B:8F:25:7A:E5:B1:64:FD:D8 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 23007AF5966EC22475BA2491645A84E2AEF242F4 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205021.roa Signing time: Tue 02 Dec 2025 17:05:23 +0000 ROA not before: Tue 02 Dec 2025 17:00:23 +0000 ROA not after: Tue 01 Dec 2026 17:05:23 +0000 asID: 205021 IP address blocks: 2a13:9500:10f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:00:7a:f5:96:6e:c2:24:75:ba:24:91:64:5a:84:e2:ae:f2:42:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 2 17:00:23 2025 GMT Not After : Dec 1 17:05:23 2026 GMT Subject: CN=D6BA9FD8462CDDE6A0F4164B8F257AE5B164FDD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:00:fa:67:05:86:d3:91:b9:4d:d5:5d:ec:dd: 00:a7:a8:51:45:e2:c5:11:41:ad:ee:9e:2e:61:2c: 67:6f:cf:e6:ac:de:81:e3:1b:1c:e6:ba:c3:a1:18: 21:56:92:ad:55:f8:fd:1e:39:4f:45:f6:0a:06:10: 02:21:f0:5c:c9:e4:74:71:91:86:12:d9:81:2f:b5: 7a:66:d9:b0:79:19:ac:3c:ef:8d:d5:47:5e:c3:89: d6:5b:cc:dd:33:a4:10:f9:be:0f:81:05:80:1d:2a: 34:ba:13:a8:94:91:72:16:31:b8:28:68:fa:1d:bd: 5f:44:f9:ad:5e:f3:96:64:e5:5e:f2:ef:f7:c7:ac: 4f:a3:0a:b8:8f:6a:5e:ce:fb:cf:75:46:45:20:d7: 21:39:3d:d5:83:b1:5e:50:e8:75:f2:ed:8e:b3:28: c0:46:35:16:58:75:96:b8:d7:82:ba:c7:51:ad:59: 3b:e4:11:17:c8:dc:54:b7:b1:c5:ad:1a:bf:7a:4f: dd:af:52:87:31:11:ba:02:29:23:72:b1:da:e0:21: 6e:08:ca:27:33:41:f4:ca:d5:99:f4:b8:4f:5a:f7: e2:95:ac:0a:ff:3c:5d:5e:c1:e0:a9:01:ea:37:22: 3e:0d:ad:d0:c8:10:29:ed:d5:46:ea:df:41:2c:dd: e6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BA:9F:D8:46:2C:DD:E6:A0:F4:16:4B:8F:25:7A:E5:B1:64:FD:D8 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205021.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9500:10f::/48 Signature Algorithm: sha256WithRSAEncryption 7d:b3:ed:65:24:14:38:df:66:86:e9:c0:98:8f:0a:8e:cd:b8: a4:51:b3:c5:0b:88:14:65:1d:aa:cb:3e:fb:01:1e:8e:9b:7c: 5e:0e:c1:89:c2:8c:3c:b2:67:19:26:e4:eb:40:57:36:5f:12: ec:6f:cd:1d:95:44:64:b0:97:88:d8:e8:5c:cd:81:73:00:4d: 0d:dd:ad:58:1d:84:4a:aa:58:36:2b:b4:e2:41:01:7d:94:3f: 80:c0:e4:39:28:0f:4b:bf:45:43:f7:b8:7b:b4:30:d8:90:7d: 66:d4:44:c9:22:11:a3:74:cc:d4:f5:b0:49:65:96:da:8a:d4: 7f:78:0d:0b:0a:48:8a:d0:ba:06:0a:09:46:33:1f:37:ec:fd: 5f:ef:5c:70:c4:58:c2:60:27:3b:82:11:ea:d8:18:9f:0d:60: 30:32:75:ab:16:1a:7a:5f:68:f8:ba:e2:1b:fc:e3:7d:60:8e: 12:2e:97:e8:e9:19:1f:c6:b5:c1:c7:c8:e9:a7:c1:1a:04:b0: c5:19:de:a1:fd:58:d6:f1:ce:9b:99:f4:c5:15:6c:57:4b:c7: 77:3f:d2:fb:9e:1d:d1:df:7c:d1:3d:2d:e7:a4:50:a6:da:0f: eb:89:17:af:fb:9b:32:f9:e2:d1:3c:a6:43:f4:71:0a:37:3e: d9:66:a6:e6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUIwB69ZZuwiR1uiSRZFqE4q7yQvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDIxNzAwMjNaFw0yNjEyMDExNzA1MjNaMDMxMTAvBgNV BAMTKEQ2QkE5RkQ4NDYyQ0RERTZBMEY0MTY0QjhGMjU3QUU1QjE2NEZERDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVAPpnBYbTkblN1V3s3QCnqFFF 4sURQa3uni5hLGdvz+as3oHjGxzmusOhGCFWkq1V+P0eOU9F9goGEAIh8FzJ5HRx kYYS2YEvtXpm2bB5Gaw8743VR17DidZbzN0zpBD5vg+BBYAdKjS6E6iUkXIWMbgo aPodvV9E+a1e85Zk5V7y7/fHrE+jCriPal7O+891RkUg1yE5PdWDsV5Q6HXy7Y6z KMBGNRZYdZa414K6x1GtWTvkERfI3FS3scWtGr96T92vUocxEboCKSNysdrgIW4I yiczQfTK1Zn0uE9a9+KVrAr/PF1eweCpAeo3Ij4NrdDIECnt1Ubq30Es3ebbAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU1rqf2EYs3eag9BZLjyV65bFk/dgwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA1MDIxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV AAEPMA0GCSqGSIb3DQEBCwUAA4IBAQB9s+1lJBQ432aG6cCYjwqOzbikUbPFC4gU ZR2qyz77AR6Om3xeDsGJwow8smcZJuTrQFc2XxLsb80dlURksJeI2OhczYFzAE0N 3a1YHYRKqlg2K7TiQQF9lD+AwOQ5KA9Lv0VD97h7tDDYkH1m1ETJIhGjdMzU9bBJ ZZbaitR/eA0LCkiK0LoGCglGMx837P1f71xwxFjCYCc7ghHq2BifDWAwMnWrFhp6 X2j4uuIb/ON9YI4SLpfo6RkfxrXBx8jpp8EaBLDFGd6h/VjW8c6bmfTFFWxXS8d3 P9L7nh3R33zRPS3npFCm2g/riRev+5sy+eLRPKZD9HEKNz7ZZqbm -----END CERTIFICATE-----Generated at Thu Dec 4 05:58:59 2025 by rpki-client