This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205514.roa File: AS205514.roa (raw, json) Hash identifier: kmMv7RyhuTwxPfxTYgIN0mxqH2VF7BmwJtusUu5qI2M= Subject key identifier: 65:91:72:44:1F:6C:1B:12:74:DA:F1:C6:79:56:22:0C:E4:32:B8:E8 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 5DF58B1539ED8088A7A2611FCECDA616A4486B5D Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205514.roa Signing time: Fri 09 Jan 2026 16:53:11 +0000 ROA not before: Fri 09 Jan 2026 16:48:11 +0000 ROA not after: Fri 08 Jan 2027 16:53:11 +0000 asID: 205514 IP address blocks: 2a0f:85c1:e22::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f5:8b:15:39:ed:80:88:a7:a2:61:1f:ce:cd:a6:16:a4:48:6b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Jan 9 16:48:11 2026 GMT Not After : Jan 8 16:53:11 2027 GMT Subject: CN=659172441F6C1B1274DAF1C67956220CE432B8E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:73:b5:c1:e0:91:de:c5:a9:60:00:4b:61:e0: 6f:d3:17:d8:8d:66:77:2f:8c:87:08:ec:32:ef:9c: 4a:24:3e:fe:09:40:bc:3d:5f:4f:94:6c:6e:2e:d4: 73:3d:45:1a:18:f0:9d:12:3f:3d:de:cc:36:54:73: 56:19:92:6a:97:7b:7d:9d:69:c0:ce:3a:46:c0:eb: ab:b6:6e:81:65:6d:0a:ce:69:a1:0a:19:7c:be:0c: 10:43:44:6b:84:56:b7:e0:2d:5a:90:ca:4a:70:72: 9e:cb:1f:9c:ea:d6:32:86:f0:e4:e8:b8:01:b2:89: 70:86:6f:df:1a:e8:ca:6a:25:6f:b9:9c:ba:7c:8d: 85:25:75:21:fc:c2:5f:5c:c8:f8:d1:80:de:41:5a: be:a4:48:a5:c2:03:72:6d:c3:73:86:4d:65:26:16: 5c:44:29:07:38:57:ff:c8:b7:3b:d8:e3:cd:bb:36: f3:f1:c9:a1:75:e7:79:f6:20:cf:75:d4:52:cb:a7: 79:d1:b9:7d:8f:0a:b0:02:8d:22:9f:f7:17:57:2e: f3:53:a4:2d:06:cd:dc:d1:32:9c:8a:32:56:5f:4b: a1:0b:1f:b8:cc:aa:46:8c:f2:fb:50:cc:90:df:fe: 4b:ad:b5:bb:44:da:fe:b9:9e:2f:0a:2b:26:21:01: a4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:91:72:44:1F:6C:1B:12:74:DA:F1:C6:79:56:22:0C:E4:32:B8:E8 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205514.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:e22::/48 Signature Algorithm: sha256WithRSAEncryption d3:71:17:b4:4a:1e:7d:f5:20:9a:38:08:aa:e7:b2:2c:c9:d5: f5:bd:97:b2:85:18:e4:d6:b6:75:c1:b2:87:02:bb:61:c0:61: b6:ed:1f:02:68:d0:cb:19:c8:ee:7b:7e:86:7d:4b:2b:82:f1: 19:56:b7:48:74:3f:34:a1:e7:6d:76:31:3b:b3:54:28:77:05: a4:06:89:1c:c3:e9:5f:36:40:f1:6c:34:2e:68:97:6b:f7:df: e0:4b:27:2d:2d:0d:b1:14:25:1a:66:81:b6:10:82:4f:46:fd: 84:99:c1:ae:4c:ca:cc:60:0b:0f:d4:a7:fd:f6:a4:35:4b:fe: 47:58:8a:4c:16:c5:c8:04:f3:76:a9:25:b8:50:78:b5:91:be: 96:cd:b6:a7:1f:81:f3:0d:df:b6:8f:49:8f:28:f7:17:24:98: 54:4e:09:b4:90:9e:e0:05:20:dd:bd:d5:8e:53:41:89:c9:a5: 10:a6:0d:73:d0:94:7e:54:69:f3:6c:76:56:a0:ed:c9:c5:d8: f3:ad:07:fd:13:ce:89:f4:e1:03:8f:ba:37:ff:c5:69:ec:3b: ba:ec:c2:68:25:b2:c4:c1:0c:aa:6d:d4:04:5c:8d:55:43:b6: a3:09:c2:5a:62:c9:7d:45:de:6e:c3:6d:5c:ae:f8:b3:3f:0e: c4:2c:da:62 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUXfWLFTntgIinomEfzs2mFqRIa10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNjAxMDkxNjQ4MTFaFw0yNzAxMDgxNjUzMTFaMDMxMTAvBgNV BAMTKDY1OTE3MjQ0MUY2QzFCMTI3NERBRjFDNjc5NTYyMjBDRTQzMkI4RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuc7XB4JHexalgAEth4G/TF9iN ZncvjIcI7DLvnEokPv4JQLw9X0+UbG4u1HM9RRoY8J0SPz3ezDZUc1YZkmqXe32d acDOOkbA66u2boFlbQrOaaEKGXy+DBBDRGuEVrfgLVqQykpwcp7LH5zq1jKG8OTo uAGyiXCGb98a6MpqJW+5nLp8jYUldSH8wl9cyPjRgN5BWr6kSKXCA3Jtw3OGTWUm FlxEKQc4V//ItzvY4827NvPxyaF153n2IM911FLLp3nRuX2PCrACjSKf9xdXLvNT pC0GzdzRMpyKMlZfS6ELH7jMqkaM8vtQzJDf/kuttbtE2v65ni8KKyYhAaQbAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUZZFyRB9sGxJ02vHGeVYiDOQyuOgwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA1NTE0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQ4iMA0GCSqGSIb3DQEBCwUAA4IBAQDTcRe0Sh599SCaOAiq57IsydX1vZeyhRjk 1rZ1wbKHArthwGG27R8CaNDLGcjue36GfUsrgvEZVrdIdD80oedtdjE7s1QodwWk Bokcw+lfNkDxbDQuaJdr99/gSyctLQ2xFCUaZoG2EIJPRv2EmcGuTMrMYAsP1Kf9 9qQ1S/5HWIpMFsXIBPN2qSW4UHi1kb6WzbanH4HzDd+2j0mPKPcXJJhUTgm0kJ7g BSDdvdWOU0GJyaUQpg1z0JR+VGnzbHZWoO3JxdjzrQf9E86J9OEDj7o3/8Vp7Du6 7MJoJbLEwQyqbdQEXI1VQ7ajCcJaYsl9Rd5uw21crvizPw7ELNpi -----END CERTIFICATE-----Generated at Mon Jan 19 20:57:05 2026 by rpki-client