This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS202194.roa File: AS202194.roa (raw, json) Hash identifier: Xx4MEQhymfOhskv3RODqzLTblxmmjIwgpaXCZuMllTc= Subject key identifier: E0:65:19:E5:E9:2F:9D:C5:05:98:7F:99:72:61:7C:50:85:08:88:10 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 2F3BB3F9A84F11E1AA43E6140FD1FD42869C8CAE Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS202194.roa Signing time: Fri 16 Jan 2026 13:15:03 +0000 ROA not before: Fri 16 Jan 2026 13:10:03 +0000 ROA not after: Fri 15 Jan 2027 13:15:03 +0000 asID: 202194 IP address blocks: 2a0f:85c1:e26::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3b:b3:f9:a8:4f:11:e1:aa:43:e6:14:0f:d1:fd:42:86:9c:8c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Jan 16 13:10:03 2026 GMT Not After : Jan 15 13:15:03 2027 GMT Subject: CN=E06519E5E92F9DC505987F9972617C5085088810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ca:5c:29:34:90:76:c5:08:05:ec:15:8f:3e: cc:fa:5e:0d:db:57:5f:15:1a:a7:fe:7b:eb:a0:13: ba:cb:f5:3e:f7:c5:1d:78:03:c6:48:d3:8a:b0:25: d9:59:d8:b5:a0:29:88:ff:43:84:16:56:4a:88:ed: 28:cf:8d:27:41:4a:ca:e9:cc:1a:6e:00:09:ed:d7: f0:25:e6:8c:2b:9b:82:21:ea:43:9b:34:d7:6a:07: cb:cf:03:d5:c0:a0:41:17:0d:a0:4e:3d:82:da:75: fb:2d:52:59:30:e9:0d:9d:63:a9:f2:20:bb:79:2e: fa:1b:0b:ea:22:32:61:83:f3:ee:d0:64:7c:ef:9a: 1b:e7:ab:2f:3a:f1:5a:8c:81:31:5b:a0:f3:52:cd: 19:81:a2:cc:91:3d:26:04:b9:b2:98:47:5d:79:72: 8e:b9:08:e6:4e:a6:05:78:2e:d2:f2:63:37:85:91: f8:93:77:89:8e:7f:ba:74:ac:50:9c:4e:ff:9b:7b: f8:30:55:25:4a:44:48:a8:a3:46:21:f7:f6:12:5b: 71:19:bb:7f:79:08:66:39:6d:b4:24:f9:17:93:dc: 14:22:39:d6:cf:ac:af:53:4b:2b:79:0e:2e:54:83: 69:22:67:fa:b2:4b:9f:70:a6:c3:47:fd:3d:ae:f6: 50:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:65:19:E5:E9:2F:9D:C5:05:98:7F:99:72:61:7C:50:85:08:88:10 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS202194.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:e26::/48 Signature Algorithm: sha256WithRSAEncryption a7:46:df:ed:7e:d8:8c:bd:bd:42:b2:35:fa:4d:e6:c3:2e:c6: c6:e8:34:b3:d0:fb:c0:e4:3c:6d:e1:3c:9d:bc:3c:13:c1:79: 3a:c5:0f:0f:d6:a9:92:4e:46:2a:ca:ad:d3:0f:24:38:ba:e2: b0:f4:1d:d3:37:c7:7c:31:38:da:6a:87:b9:15:e7:b6:ba:0c: 2d:48:5c:13:f4:a9:df:ee:9e:03:db:ce:4f:79:ec:36:5c:f7: 3e:49:ee:0f:0b:b9:0e:55:b9:1b:ea:93:bc:e9:ce:41:b6:62: 7b:70:c9:8c:ab:3a:ec:5c:27:29:5c:3d:f2:31:4d:0f:4b:cc: e5:4a:27:7c:15:cc:29:a5:25:bb:34:3b:db:15:b8:76:36:0f: c4:e0:5e:cd:09:ca:eb:66:5e:ba:e3:54:a3:2e:0c:5f:9f:ba: d0:0d:f6:81:53:71:01:e8:86:4b:cc:64:39:e3:6a:59:55:ef: ac:10:2a:66:c7:b6:d7:9c:18:26:3a:95:22:4e:de:b7:52:3d: f6:db:a7:35:d7:71:69:5c:c4:48:2b:f8:c8:62:70:f7:31:4e: 93:59:28:51:23:ca:3f:7f:ba:de:02:cb:3a:41:11:5e:47:fc: eb:cd:db:e3:bc:0d:0c:c3:86:c3:fe:76:29:0d:eb:7a:53:18: 2d:ac:15:5f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIULzuz+ahPEeGqQ+YUD9H9QoacjK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNjAxMTYxMzEwMDNaFw0yNzAxMTUxMzE1MDNaMDMxMTAvBgNV BAMTKEUwNjUxOUU1RTkyRjlEQzUwNTk4N0Y5OTcyNjE3QzUwODUwODg4MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkylwpNJB2xQgF7BWPPsz6Xg3b V18VGqf+e+ugE7rL9T73xR14A8ZI04qwJdlZ2LWgKYj/Q4QWVkqI7SjPjSdBSsrp zBpuAAnt1/Al5owrm4Ih6kObNNdqB8vPA9XAoEEXDaBOPYLadfstUlkw6Q2dY6ny ILt5LvobC+oiMmGD8+7QZHzvmhvnqy868VqMgTFboPNSzRmBosyRPSYEubKYR115 co65COZOpgV4LtLyYzeFkfiTd4mOf7p0rFCcTv+be/gwVSVKREioo0Yh9/YSW3EZ u395CGY5bbQk+ReT3BQiOdbPrK9TSyt5Di5Ug2kiZ/qyS59wpsNH/T2u9lBLAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU4GUZ5ekvncUFmH+ZcmF8UIUIiBAwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjAyMTk0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQ4mMA0GCSqGSIb3DQEBCwUAA4IBAQCnRt/tftiMvb1CsjX6TebDLsbG6DSz0PvA 5Dxt4TydvDwTwXk6xQ8P1qmSTkYqyq3TDyQ4uuKw9B3TN8d8MTjaaoe5Fee2ugwt SFwT9Knf7p4D285Peew2XPc+Se4PC7kOVbkb6pO86c5BtmJ7cMmMqzrsXCcpXD3y MU0PS8zlSid8FcwppSW7NDvbFbh2Ng/E4F7NCcrrZl6641SjLgxfn7rQDfaBU3EB 6IZLzGQ542pZVe+sECpmx7bXnBgmOpUiTt63Uj3226c113FpXMRIK/jIYnD3MU6T WShRI8o/f7reAss6QRFeR/zrzdvjvA0Mw4bD/nYpDet6UxgtrBVf -----END CERTIFICATE-----Generated at Mon Jan 19 20:57:06 2026 by rpki-client