This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204293.roa File: AS204293.roa (raw, json) Hash identifier: m8ByrHDuXstDpGRdhLa9jWIqeW8jbgMpeQzlwZV21Rk= Subject key identifier: 8E:C1:96:26:AF:40:D9:C7:CC:95:C0:A6:6C:82:62:C4:0B:AD:F1:43 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 03C3A7997A53B2C8214A879590944531A79D1709 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204293.roa Signing time: Thu 06 Nov 2025 14:28:06 +0000 ROA not before: Thu 06 Nov 2025 14:23:06 +0000 ROA not after: Thu 05 Nov 2026 14:28:06 +0000 asID: 204293 IP address blocks: 2a0f:85c1:d98::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c3:a7:99:7a:53:b2:c8:21:4a:87:95:90:94:45:31:a7:9d:17:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Nov 6 14:23:06 2025 GMT Not After : Nov 5 14:28:06 2026 GMT Subject: CN=8EC19626AF40D9C7CC95C0A66C8262C40BADF143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8b:a2:f3:d5:87:5b:69:b6:3b:26:c9:e2:1f: 3c:34:0f:8d:14:81:f2:a7:31:40:a5:8a:0f:17:36: 3a:95:dc:6b:92:b4:07:56:0a:6d:4c:72:65:d6:85: c9:df:08:74:67:71:b5:5d:8c:97:a5:74:02:2e:1a: 62:ed:e8:aa:65:5b:3f:96:45:67:0a:a5:5e:a5:3f: 16:7c:70:73:72:94:fd:19:0e:70:7e:5c:08:f4:12: 5b:9a:74:af:8a:de:94:44:2c:8d:32:38:80:0b:58: 5e:29:01:d7:75:aa:1d:78:c8:c2:8a:d2:32:0e:11: 57:a8:56:14:2d:3c:6b:34:58:83:2a:84:3f:ee:12: 46:f2:04:cb:16:28:07:07:fb:59:6c:bb:ae:d5:72: 13:a6:0c:7b:22:b5:cc:89:95:5f:b0:1b:d9:1a:e5: 4f:a5:83:3e:be:c4:ee:f2:f2:31:f0:c5:68:57:4d: 35:3e:b4:9b:e7:e7:53:1b:f3:fa:cf:1c:18:28:84: 8c:59:98:8c:8a:19:eb:f0:f3:d9:83:c5:cf:bc:0b: 1a:29:43:dd:da:44:d6:9c:29:15:fc:bc:bd:0b:d1: 03:88:6f:2f:76:9e:d9:51:c3:50:17:fb:43:18:9d: 0f:3b:ba:13:e5:36:73:0f:6e:39:db:12:a7:80:38: d1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C1:96:26:AF:40:D9:C7:CC:95:C0:A6:6C:82:62:C4:0B:AD:F1:43 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS204293.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:d98::/48 Signature Algorithm: sha256WithRSAEncryption e4:7e:8f:64:a0:fd:47:18:96:49:30:10:4a:87:35:e1:01:b9: df:dc:45:33:85:ed:8f:fd:4e:c1:e1:83:ca:8b:74:9b:8a:b5: 88:85:c0:f5:4a:8b:1f:f3:a4:de:46:61:53:f1:c9:32:b3:32: 50:6e:5f:1d:3f:9a:56:08:c9:56:4b:1b:ac:2a:59:33:81:8b: 2a:85:e3:f5:20:48:1b:6b:1d:a6:66:6a:3d:48:60:ab:ec:ca: 53:ba:1d:25:66:4a:39:f2:b1:2d:2c:6a:bb:82:79:75:43:20: ae:19:4d:47:77:3a:fd:df:d5:fb:f0:a8:03:08:a4:80:c8:eb: c6:05:5d:2d:56:59:0f:63:10:a0:73:ee:8a:c2:c6:79:21:c4: 23:50:71:c7:2d:58:8b:9b:b3:72:f3:cb:2a:30:cd:66:86:ba: 9b:33:44:9e:71:0b:7a:18:70:93:8c:87:2e:90:4d:39:c7:7a: 24:fb:97:27:5d:d3:60:b9:ea:ae:bb:18:9d:38:9f:4c:81:1f: 50:8a:ec:60:8e:8a:9f:86:76:d1:ec:98:91:43:e6:d1:79:38: 58:6d:38:98:a7:6f:b4:31:a1:64:35:2b:80:74:d9:1a:9d:95: 45:ec:73:a8:cf:80:e5:33:2b:20:79:7a:4f:67:93:ee:bd:d8: 1f:e5:9a:01 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUA8OnmXpTssghSoeVkJRFMaedFwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTExMDYxNDIzMDZaFw0yNjExMDUxNDI4MDZaMDMxMTAvBgNV BAMTKDhFQzE5NjI2QUY0MEQ5QzdDQzk1QzBBNjZDODI2MkM0MEJBREYxNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCci6Lz1YdbabY7JsniHzw0D40U gfKnMUClig8XNjqV3GuStAdWCm1McmXWhcnfCHRncbVdjJeldAIuGmLt6KplWz+W RWcKpV6lPxZ8cHNylP0ZDnB+XAj0EluadK+K3pRELI0yOIALWF4pAdd1qh14yMKK 0jIOEVeoVhQtPGs0WIMqhD/uEkbyBMsWKAcH+1lsu67VchOmDHsitcyJlV+wG9ka 5U+lgz6+xO7y8jHwxWhXTTU+tJvn51Mb8/rPHBgohIxZmIyKGevw89mDxc+8Cxop Q93aRNacKRX8vL0L0QOIby92ntlRw1AX+0MYnQ87uhPlNnMPbjnbEqeAONFVAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUjsGWJq9A2cfMlcCmbIJixAut8UMwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA0MjkzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQ2YMA0GCSqGSIb3DQEBCwUAA4IBAQDkfo9koP1HGJZJMBBKhzXhAbnf3EUzhe2P /U7B4YPKi3SbirWIhcD1Sosf86TeRmFT8ckyszJQbl8dP5pWCMlWSxusKlkzgYsq heP1IEgbax2mZmo9SGCr7MpTuh0lZko58rEtLGq7gnl1QyCuGU1Hdzr939X78KgD CKSAyOvGBV0tVlkPYxCgc+6KwsZ5IcQjUHHHLViLm7Ny88sqMM1mhrqbM0SecQt6 GHCTjIcukE05x3ok+5cnXdNguequuxidOJ9MgR9QiuxgjoqfhnbR7JiRQ+bReThY bTiYp2+0MaFkNSuAdNkanZVF7HOoz4DlMysgeXpPZ5Puvdgf5ZoB -----END CERTIFICATE-----Generated at Fri Dec 5 16:35:38 2025 by rpki-client