This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS205886.roa File: AS205886.roa (raw, json) Hash identifier: Wu8nIXQ9NuoCJ5L3AW3OS6mzNwZNQcLYINJJPfD5ulE= Subject key identifier: 91:97:24:2D:76:CE:4E:29:2B:DF:39:A5:64:D3:71:03:79:2F:94:1E Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 3229B4F531FA82AEDE8309329667348D6D397AED Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS205886.roa Signing time: Sat 15 Nov 2025 08:43:26 +0000 ROA not before: Sat 15 Nov 2025 08:38:26 +0000 ROA not after: Sat 14 Nov 2026 08:43:26 +0000 asID: 205886 IP address blocks: 45.157.18.0/24 maxlen: 24 193.5.10.0/24 maxlen: 24 193.5.11.0/24 maxlen: 24 193.29.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:29:b4:f5:31:fa:82:ae:de:83:09:32:96:67:34:8d:6d:39:7a:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Nov 15 08:38:26 2025 GMT Not After : Nov 14 08:43:26 2026 GMT Subject: CN=9197242D76CE4E292BDF39A564D37103792F941E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:20:15:71:05:61:33:d3:d6:ff:94:75:1e:a5: 47:92:a5:f2:02:74:c4:a0:5b:99:7a:c8:f7:65:aa: 07:ba:e7:92:7e:8f:43:fb:ad:f4:f3:68:4a:ff:86: 58:28:b3:68:b8:bd:13:f5:3c:f5:e5:99:22:1d:bd: 40:e7:1f:16:9b:f4:ef:0b:fb:81:55:b5:85:5f:94: 85:db:88:a2:9a:d3:e3:54:73:58:83:28:2c:27:da: 7a:3f:be:59:79:12:21:f3:e2:6c:8e:06:01:50:6d: 3e:11:15:de:7c:a0:8e:c5:c5:d9:40:55:7f:ef:20: 44:53:7f:4e:fd:1d:d9:9b:d8:3c:f0:eb:0d:f9:f9: 05:fe:cc:9a:55:77:78:3a:79:e3:29:e1:d9:97:1d: d4:15:0b:ca:54:da:6e:1e:21:c2:6a:1a:e1:48:40: 87:82:a2:fa:50:48:8a:d0:bf:c3:1c:e6:f8:27:00: 51:f4:1f:2a:0f:f0:60:2d:3c:e7:f9:62:cc:73:a3: 38:98:a4:33:50:85:e1:b4:92:f0:cb:57:c8:78:15: 4c:5a:02:ad:41:7c:84:4e:76:7f:50:df:41:aa:16: 1b:5b:fe:02:ce:25:f4:b6:9b:86:3a:6f:38:64:63: 92:b9:69:f4:3f:cb:19:e6:1f:be:cb:bd:74:20:41: 91:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:97:24:2D:76:CE:4E:29:2B:DF:39:A5:64:D3:71:03:79:2F:94:1E X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS205886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.18.0/24 193.5.10.0/23 193.29.98.0/24 Signature Algorithm: sha256WithRSAEncryption 19:50:ef:59:9d:41:bc:52:9d:7b:1d:f7:7b:85:6f:01:53:da: 36:ca:89:10:96:bc:0a:29:d5:16:28:64:a9:88:c7:a1:39:6f: d3:d8:46:e9:2c:8d:e7:b4:fc:5b:95:a5:e1:0d:b6:38:ef:78: b1:b5:02:d5:be:b6:3c:0e:b7:a6:f9:f8:d7:66:b4:b1:2b:5f: b3:6d:9f:7c:47:51:ac:4e:21:19:80:be:ee:25:ad:c9:5a:bb: a7:b6:43:52:14:11:f9:8b:3e:1b:93:11:ea:36:5f:d6:99:2f: f1:17:47:70:20:97:b9:16:46:31:ab:a2:5e:0a:90:04:1e:ca: 6c:a6:d2:80:7e:d6:76:0d:b0:ac:1c:7b:ce:c4:63:2b:c3:50: da:8e:19:de:8f:4c:c8:25:e0:8a:a4:92:39:15:2b:62:a5:95: 68:93:ad:d7:f7:c9:92:65:90:2a:65:1f:a3:f5:60:08:4a:9e: 26:63:af:54:37:ce:01:90:d8:c3:62:32:2d:76:a2:a0:2f:ff: 9d:cb:cc:dd:66:06:44:23:fd:7a:d7:b6:1c:2b:85:50:3b:24: cd:95:9d:8d:19:77:eb:3e:e6:f2:36:6b:1b:9f:bd:c0:eb:62: 08:69:0b:ad:b1:69:89:26:9a:1d:c8:da:4d:78:e8:0c:ad:7f: 5f:20:e9:57 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUMim09TH6gq7egwkylmc0jW05eu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNTExMTUwODM4MjZaFw0yNjExMTQwODQzMjZaMDMxMTAvBgNV BAMTKDkxOTcyNDJENzZDRTRFMjkyQkRGMzlBNTY0RDM3MTAzNzkyRjk0MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYIBVxBWEz09b/lHUepUeSpfIC dMSgW5l6yPdlqge655J+j0P7rfTzaEr/hlgos2i4vRP1PPXlmSIdvUDnHxab9O8L +4FVtYVflIXbiKKa0+NUc1iDKCwn2no/vll5EiHz4myOBgFQbT4RFd58oI7FxdlA VX/vIERTf079Hdmb2Dzw6w35+QX+zJpVd3g6eeMp4dmXHdQVC8pU2m4eIcJqGuFI QIeCovpQSIrQv8Mc5vgnAFH0HyoP8GAtPOf5YsxzoziYpDNQheG0kvDLV8h4FUxa Aq1BfIROdn9Q30GqFhtb/gLOJfS2m4Y6bzhkY5K5afQ/yxnmH77LvXQgQZEjAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUkZckLXbOTikr3zmlZNNxA3kvlB4wHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjA1ODg2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZ0S AwQBwQUKAwQAwR1iMA0GCSqGSIb3DQEBCwUAA4IBAQAZUO9ZnUG8Up17Hfd7hW8B U9o2yokQlrwKKdUWKGSpiMehOW/T2EbpLI3ntPxblaXhDbY473ixtQLVvrY8Drem +fjXZrSxK1+zbZ98R1GsTiEZgL7uJa3JWruntkNSFBH5iz4bkxHqNl/WmS/xF0dw IJe5FkYxq6JeCpAEHspsptKAftZ2DbCsHHvOxGMrw1Dajhnej0zIJeCKpJI5FSti pZVok63X98mSZZAqZR+j9WAISp4mY69UN84BkNjDYjItdqKgL/+dy8zdZgZEI/16 17YcK4VQOyTNlZ2NGXfrPubyNmsbn73A62IIaQutsWmJJpodyNpNeOgMrX9fIOlX -----END CERTIFICATE-----Generated at Fri Dec 5 08:01:46 2025 by rpki-client