This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210667.roa File: AS210667.roa (raw, json) Hash identifier: hwHHU4Dt48Hk8iadkaTHF7yebgyVCq9/HNS8PLeKNX0= Subject key identifier: 97:F1:66:F6:41:EB:C5:0A:5A:99:FE:E3:4E:CE:34:B8:BA:DA:87:14 Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 5A568DF6A889B265502F1EBA5BFC884B955C20DB Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210667.roa Signing time: Mon 01 Dec 2025 23:10:45 +0000 ROA not before: Mon 01 Dec 2025 23:05:45 +0000 ROA not after: Mon 30 Nov 2026 23:10:45 +0000 asID: 210667 IP address blocks: 193.111.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:56:8d:f6:a8:89:b2:65:50:2f:1e:ba:5b:fc:88:4b:95:5c:20:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Dec 1 23:05:45 2025 GMT Not After : Nov 30 23:10:45 2026 GMT Subject: CN=97F166F641EBC50A5A99FEE34ECE34B8BADA8714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0d:35:5c:17:05:e2:d3:3f:2b:39:4d:06:23: 6c:9d:33:d4:c7:3d:00:6a:75:ac:79:3b:80:e3:0a: 2a:4a:98:6c:88:e2:80:b4:b0:b2:95:94:9b:ac:9b: f3:67:3b:d9:a1:3c:d5:cf:ff:62:61:bf:80:94:04: da:39:66:87:9e:bd:f3:16:51:6b:5f:ea:b6:e7:ed: 08:bd:bc:7f:11:85:93:ef:1a:97:51:44:95:3d:28: e8:1b:95:a6:55:8e:6a:57:21:d8:e0:5f:57:03:b5: 77:e1:22:66:8b:13:78:94:9f:87:f5:ff:42:45:d4: 78:3e:c4:13:71:87:e6:22:ab:83:d5:bc:e7:99:33: 65:19:18:2e:b8:36:c6:5c:3f:15:74:8d:2d:40:b7: 29:39:3d:84:48:86:ec:df:d1:46:54:58:68:4a:7a: 44:aa:ea:a1:98:e0:48:a7:81:fb:c3:f9:35:e6:7a: 9c:20:af:db:9b:34:5c:aa:68:be:5e:81:7b:58:66: a2:a7:75:e0:4a:84:59:ab:a0:66:64:cc:3e:4c:a1: 9e:7c:eb:42:ca:1c:0f:23:22:29:e8:5e:85:fd:ce: 00:05:1c:11:a2:c3:e7:72:1e:85:cd:63:13:91:a7: f4:ff:8e:39:a8:f3:c4:ed:f6:c1:e5:06:cd:93:de: 42:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F1:66:F6:41:EB:C5:0A:5A:99:FE:E3:4E:CE:34:B8:BA:DA:87:14 X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210667.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.124.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:36:90:f7:a3:98:aa:88:2e:5c:f7:ce:a5:ee:f7:99:8c:69: 00:1d:16:93:14:79:92:8f:a4:b0:84:d0:79:78:14:f9:c1:99: df:85:00:f1:13:41:ee:17:73:aa:a0:54:8d:7c:15:07:35:7f: 13:d7:e0:2e:5f:52:15:ae:1d:67:02:8b:5c:3b:f0:cd:a8:56: 7f:1b:2a:c4:9c:dd:4c:9e:ca:ed:b2:e4:94:d9:22:cf:65:77: 98:e8:50:09:db:05:32:a6:d6:12:2a:66:40:9b:18:9e:dc:c0: ab:18:e7:c5:3f:fa:bf:91:7b:ed:cb:cb:d3:e7:86:5c:67:99: 5b:9b:50:56:43:4d:03:0e:94:e2:a3:8e:77:bd:f5:ea:57:29: c6:16:5b:67:df:12:d4:1f:13:5d:92:30:f8:e5:85:e3:c3:11: a6:47:b2:ad:05:e8:1c:de:0d:18:d5:24:dc:ea:57:3f:d2:b6: f3:a1:85:d9:ed:74:fc:b9:e9:3b:33:25:94:62:f7:f6:56:21: 64:30:a2:87:7a:22:c7:f3:66:ba:5f:41:da:16:9d:c5:fa:7c: 72:b5:eb:76:b5:f3:bc:97:28:b7:85:f1:59:1a:52:bb:92:ba: 16:8c:9c:ee:99:85:a5:ed:31:ca:e7:fe:8a:d6:24:dd:37:be: 2f:c6:62:ca -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUWlaN9qiJsmVQLx66W/yIS5VcINswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNTEyMDEyMzA1NDVaFw0yNjExMzAyMzEwNDVaMDMxMTAvBgNV BAMTKDk3RjE2NkY2NDFFQkM1MEE1QTk5RkVFMzRFQ0UzNEI4QkFEQTg3MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxDTVcFwXi0z8rOU0GI2ydM9TH PQBqdax5O4DjCipKmGyI4oC0sLKVlJusm/NnO9mhPNXP/2Jhv4CUBNo5ZoeevfMW UWtf6rbn7Qi9vH8RhZPvGpdRRJU9KOgblaZVjmpXIdjgX1cDtXfhImaLE3iUn4f1 /0JF1Hg+xBNxh+Yiq4PVvOeZM2UZGC64NsZcPxV0jS1Atyk5PYRIhuzf0UZUWGhK ekSq6qGY4EingfvD+TXmepwgr9ubNFyqaL5egXtYZqKndeBKhFmroGZkzD5MoZ58 60LKHA8jIinoXoX9zgAFHBGiw+dyHoXNYxORp/T/jjmo88Tt9sHlBs2T3kJ7AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUl/Fm9kHrxQpamf7jTs40uLrahxQwHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjEwNjY3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW98 MA0GCSqGSIb3DQEBCwUAA4IBAQAcNpD3o5iqiC5c986l7veZjGkAHRaTFHmSj6Sw hNB5eBT5wZnfhQDxE0HuF3OqoFSNfBUHNX8T1+AuX1IVrh1nAotcO/DNqFZ/GyrE nN1MnsrtsuSU2SLPZXeY6FAJ2wUyptYSKmZAmxie3MCrGOfFP/q/kXvty8vT54Zc Z5lbm1BWQ00DDpTio453vfXqVynGFltn3xLUHxNdkjD45YXjwxGmR7KtBegc3g0Y 1STc6lc/0rbzoYXZ7XT8uek7MyWUYvf2ViFkMKKHeiLH82a6X0HaFp3F+nxytet2 tfO8lyi3hfFZGlK7kroWjJzumYWl7THK5/6K1iTdN74vxmLK -----END CERTIFICATE-----Generated at Fri Dec 5 07:59:49 2025 by rpki-client