This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207787.roa File: AS207787.roa (raw, json) Hash identifier: +hpPSE53WqqCR+QgrbdEp/tWEelgUBj+cu4+TVGdm5I= Subject key identifier: A7:79:9D:39:B1:9A:46:21:21:48:34:54:AE:D7:0D:8E:69:38:63:D2 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 78FD3596CDA4027871EC0A7943317F8738A06ABE Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207787.roa Signing time: Wed 10 Dec 2025 07:31:56 +0000 ROA not before: Wed 10 Dec 2025 07:26:56 +0000 ROA not after: Wed 09 Dec 2026 07:31:56 +0000 asID: 207787 IP address blocks: 2a13:9500:114::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:fd:35:96:cd:a4:02:78:71:ec:0a:79:43:31:7f:87:38:a0:6a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 10 07:26:56 2025 GMT Not After : Dec 9 07:31:56 2026 GMT Subject: CN=A7799D39B19A462121483454AED70D8E693863D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:31:a9:6d:c2:6d:1b:1d:31:56:a7:ed:f8: 96:72:19:d4:ca:12:29:69:55:ef:b6:2b:87:7d:89: 8f:d8:af:67:42:53:fd:1e:86:fd:88:1b:90:fc:17: ac:16:85:fc:f1:b9:31:df:75:8f:b7:b1:87:ed:3f: 51:c9:4a:7c:f8:7f:b5:bc:76:03:59:2f:7f:6e:0f: 9d:a2:b9:ec:4c:ba:d8:3b:7e:3d:6b:19:05:1b:40: da:7a:bb:2d:76:81:9b:4d:1b:2b:08:c7:e5:12:b2: fb:5b:84:61:1f:8a:a7:68:ff:73:b3:86:76:17:d8: f2:d5:6d:44:af:8f:de:94:af:39:66:6d:48:a4:7b: 3e:12:bc:9f:8b:ca:d4:cc:2d:0c:28:a8:08:58:6c: 50:a7:53:fe:21:f1:97:1b:ab:6f:58:4e:87:d6:0f: fd:ce:f3:20:40:3f:2e:60:d6:c7:fb:ff:62:9c:fe: dc:1b:78:3c:de:bf:9d:e8:04:2e:8b:64:91:c0:94: 6f:7e:b3:e2:b6:eb:14:f1:01:ae:66:9e:54:1b:6a: d9:04:9a:30:fc:d2:73:e4:f6:2f:a4:4e:74:be:ff: 4b:2d:23:d7:4a:0a:a3:1c:f9:c0:6b:71:ef:08:ab: d1:68:4d:50:20:62:7e:e0:eb:d6:f3:fe:6b:ee:d6: f8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:79:9D:39:B1:9A:46:21:21:48:34:54:AE:D7:0D:8E:69:38:63:D2 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207787.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9500:114::/48 Signature Algorithm: sha256WithRSAEncryption 16:7b:e3:3f:66:55:c1:dc:72:9b:f8:46:84:fd:c3:5e:f6:58: b2:70:6d:3e:d7:d4:28:a3:f3:db:78:48:ac:10:72:c4:c5:b2: b5:20:b3:22:0c:13:06:29:48:1d:06:de:65:fa:56:61:50:90: c6:e8:77:16:7d:50:0c:25:24:2d:a3:68:96:d5:6c:2e:09:f4: 3a:71:65:2b:c9:40:cd:5b:05:21:36:4d:c7:7a:a2:9e:1c:30: 23:71:02:f5:56:16:a0:f6:6a:9d:61:0e:74:c7:37:e2:c0:4b: 3c:81:34:2d:12:ed:1f:9c:16:27:57:c0:a6:f2:f6:ee:1c:3a: bd:0c:16:e6:e6:79:16:84:44:9e:0b:ab:c0:33:d9:be:5a:82: db:3f:07:3e:b0:b3:b5:91:cf:71:03:ab:e5:1d:cf:13:9b:f6: 5c:1a:93:91:38:c7:1b:11:55:05:42:5f:fc:3b:c4:e1:b6:a8: 93:ad:ba:25:f4:01:0b:9d:ea:b5:54:7a:eb:f6:11:c4:0b:cb: 2a:2a:19:62:31:14:7a:51:c7:24:54:22:15:e8:54:76:c6:5a: 78:6e:fc:ea:18:a7:f4:1a:8b:d0:21:2b:5b:71:de:c6:8d:79: c7:96:47:79:1e:5f:3d:7e:c0:28:92:fb:40:b9:80:9a:bf:b7: ea:5c:be:1f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUeP01ls2kAnhx7Ap5QzF/hzigar4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMTAwNzI2NTZaFw0yNjEyMDkwNzMxNTZaMDMxMTAvBgNV BAMTKEE3Nzk5RDM5QjE5QTQ2MjEyMTQ4MzQ1NEFFRDcwRDhFNjkzODYzRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC03zGpbcJtGx0xVqft+JZyGdTK EilpVe+2K4d9iY/Yr2dCU/0ehv2IG5D8F6wWhfzxuTHfdY+3sYftP1HJSnz4f7W8 dgNZL39uD52iuexMutg7fj1rGQUbQNp6uy12gZtNGysIx+USsvtbhGEfiqdo/3Oz hnYX2PLVbUSvj96UrzlmbUikez4SvJ+LytTMLQwoqAhYbFCnU/4h8Zcbq29YTofW D/3O8yBAPy5g1sf7/2Kc/twbeDzev53oBC6LZJHAlG9+s+K26xTxAa5mnlQbatkE mjD80nPk9i+kTnS+/0stI9dKCqMc+cBrce8Iq9FoTVAgYn7g69bz/mvu1vj7AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUp3mdObGaRiEhSDRUrtcNjmk4Y9IwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA3Nzg3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV AAEUMA0GCSqGSIb3DQEBCwUAA4IBAQAWe+M/ZlXB3HKb+EaE/cNe9liycG0+19Qo o/PbeEisEHLExbK1ILMiDBMGKUgdBt5l+lZhUJDG6HcWfVAMJSQto2iW1WwuCfQ6 cWUryUDNWwUhNk3HeqKeHDAjcQL1Vhag9mqdYQ50xzfiwEs8gTQtEu0fnBYnV8Cm 8vbuHDq9DBbm5nkWhESeC6vAM9m+WoLbPwc+sLO1kc9xA6vlHc8Tm/ZcGpOROMcb EVUFQl/8O8ThtqiTrbol9AELneq1VHrr9hHEC8sqKhliMRR6UcckVCIV6FR2xlp4 bvzqGKf0GovQIStbcd7GjXnHlkd5Hl89fsAokvtAuYCav7fqXL4f -----END CERTIFICATE-----Generated at Tue Dec 16 12:06:51 2025 by rpki-client