This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205474.roa File: AS205474.roa (raw, json) Hash identifier: g0vcO1Jfeb9HtbXD48AHk7rSSF4w7139MftrUp1ez5w= Subject key identifier: 06:F2:0E:CA:1A:BE:05:58:99:A4:8D:49:1A:1F:7A:EF:72:21:98:03 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 79159DAC885699754301510814E42A9BF3A1ADC3 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205474.roa Signing time: Fri 28 Nov 2025 03:21:25 +0000 ROA not before: Fri 28 Nov 2025 03:16:25 +0000 ROA not after: Fri 27 Nov 2026 03:21:25 +0000 asID: 205474 IP address blocks: 2a0f:85c1:ce9::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:15:9d:ac:88:56:99:75:43:01:51:08:14:e4:2a:9b:f3:a1:ad:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Nov 28 03:16:25 2025 GMT Not After : Nov 27 03:21:25 2026 GMT Subject: CN=06F20ECA1ABE055899A48D491A1F7AEF72219803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:be:8e:72:c9:73:5e:42:af:02:11:95:55:79: 35:5d:52:b7:e4:c6:25:bc:f7:d1:83:f7:17:40:00: 42:e5:77:9c:fc:7f:a3:4e:b7:a6:5c:86:b5:cf:d0: 6d:62:cd:00:5e:d4:33:40:37:10:77:7f:25:0f:db: dd:4f:f2:20:48:fb:f0:ac:b7:f7:41:62:2d:90:25: 6d:0f:c7:a0:72:b4:a9:a5:71:dc:e5:26:46:7a:97: 00:00:1d:ed:68:68:67:90:e3:7d:14:d9:9f:c2:76: 38:be:f4:15:1f:02:e7:eb:26:a7:57:1d:0d:36:96: c7:b6:a5:78:18:2f:da:5b:49:f3:1e:80:56:c7:1b: 2f:bd:06:de:d7:ed:14:6c:8f:51:cf:55:91:da:ce: 78:2c:b0:e7:07:78:3b:86:c2:c4:cd:4a:5f:7e:1e: 84:24:83:70:a4:58:d1:cc:63:21:f6:ea:8e:23:58: 14:d8:7a:c2:05:1b:e9:4d:ec:43:9c:ae:b9:4e:74: 6f:47:a7:dc:82:4e:f3:ff:97:18:81:01:ea:ae:cd: 1d:5b:30:9f:c7:8f:4d:10:9e:c5:d3:aa:45:ae:bc: 63:f1:2a:8b:3e:05:b9:1f:02:73:87:a2:9c:a7:4e: 00:7c:d2:9f:f9:57:35:27:ee:aa:71:60:5f:3e:89: 17:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F2:0E:CA:1A:BE:05:58:99:A4:8D:49:1A:1F:7A:EF:72:21:98:03 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205474.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:ce9::/48 Signature Algorithm: sha256WithRSAEncryption de:b1:da:7c:a4:b3:67:ca:10:8c:e7:97:53:bc:83:08:76:a7: 00:09:64:53:e4:80:21:42:23:0e:a3:31:64:4b:f5:ca:4e:fb: 13:19:ac:86:e7:42:fb:27:8f:23:f9:e6:24:b8:b9:07:e1:7c: 52:90:ee:6b:0e:24:2e:46:ea:78:ec:9e:a3:6b:37:dd:0a:4f: c0:72:46:e4:1e:d3:c6:64:24:97:9b:7c:7b:e4:fe:53:53:df: 4b:c4:4b:d8:56:65:e6:0f:32:28:99:f7:ce:f9:54:09:64:69: 36:c8:83:c5:1a:f4:51:b4:79:0a:95:d0:fe:ce:ee:b2:57:28: b0:e5:d4:81:c8:9b:71:17:da:6d:cb:22:05:c1:ad:cd:a2:df: 0f:a4:74:e8:ab:e5:31:d7:08:ad:ef:e8:98:82:bb:42:a4:79: b9:21:57:7a:4b:46:02:04:af:01:40:73:fe:f1:45:67:ec:3b: 4d:37:ff:cf:64:06:35:c2:2f:1e:8c:8e:93:9c:74:d8:c8:aa: fe:fe:7d:0a:94:a0:34:04:55:bf:4a:49:43:0c:45:12:d7:a8: d5:60:84:3a:db:8a:39:f3:ab:77:67:13:37:4a:d3:cd:0f:5a: 20:48:d5:47:08:b6:de:e6:68:f8:73:40:74:b3:c4:8d:4c:7e: c9:68:1c:67 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUeRWdrIhWmXVDAVEIFOQqm/OhrcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTExMjgwMzE2MjVaFw0yNjExMjcwMzIxMjVaMDMxMTAvBgNV BAMTKDA2RjIwRUNBMUFCRTA1NTg5OUE0OEQ0OTFBMUY3QUVGNzIyMTk4MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYvo5yyXNeQq8CEZVVeTVdUrfk xiW899GD9xdAAELld5z8f6NOt6ZchrXP0G1izQBe1DNANxB3fyUP291P8iBI+/Cs t/dBYi2QJW0Px6BytKmlcdzlJkZ6lwAAHe1oaGeQ430U2Z/Cdji+9BUfAufrJqdX HQ02lse2pXgYL9pbSfMegFbHGy+9Bt7X7RRsj1HPVZHazngssOcHeDuGwsTNSl9+ HoQkg3CkWNHMYyH26o4jWBTYesIFG+lN7EOcrrlOdG9Hp9yCTvP/lxiBAequzR1b MJ/Hj00QnsXTqkWuvGPxKos+BbkfAnOHopynTgB80p/5VzUn7qpxYF8+iRfRAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUBvIOyhq+BViZpI1JGh9673IhmAMwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA1NDc0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQzpMA0GCSqGSIb3DQEBCwUAA4IBAQDesdp8pLNnyhCM55dTvIMIdqcACWRT5IAh QiMOozFkS/XKTvsTGayG50L7J48j+eYkuLkH4XxSkO5rDiQuRup47J6jazfdCk/A ckbkHtPGZCSXm3x75P5TU99LxEvYVmXmDzIomffO+VQJZGk2yIPFGvRRtHkKldD+ zu6yVyiw5dSByJtxF9ptyyIFwa3Not8PpHToq+Ux1wit7+iYgrtCpHm5IVd6S0YC BK8BQHP+8UVn7DtNN//PZAY1wi8ejI6TnHTYyKr+/n0KlKA0BFW/SklDDEUS16jV YIQ624o586t3ZxM3StPND1ogSNVHCLbe5mj4c0B0s8SNTH7JaBxn -----END CERTIFICATE-----Generated at Fri Dec 5 16:35:43 2025 by rpki-client