This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205838.roa File: AS205838.roa (raw, json) Hash identifier: Q3wlKwN7jW/suuEx3u4668KJHuvVKA3NSZmhMWU/FmA= Subject key identifier: 71:00:25:D3:48:BB:1F:52:A5:30:27:07:BF:05:D0:74:3F:01:02:50 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 5752BF77F928CCF75D4E00BE99CC065FBFB36CF8 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205838.roa Signing time: Fri 28 Nov 2025 03:21:06 +0000 ROA not before: Fri 28 Nov 2025 03:16:06 +0000 ROA not after: Fri 27 Nov 2026 03:21:06 +0000 asID: 205838 IP address blocks: 2a0f:85c1:cdd::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:52:bf:77:f9:28:cc:f7:5d:4e:00:be:99:cc:06:5f:bf:b3:6c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Nov 28 03:16:06 2025 GMT Not After : Nov 27 03:21:06 2026 GMT Subject: CN=710025D348BB1F52A5302707BF05D0743F010250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:0a:c7:d9:8c:33:76:1a:a8:97:77:42:11: 13:28:97:bc:b0:62:93:d8:21:3a:2d:74:50:18:d4: 75:bc:b5:c3:34:c2:5d:81:2b:88:25:2e:95:31:a8: 29:a1:d1:eb:a7:44:c3:98:bd:13:b0:13:01:53:51: 33:2d:71:2f:f3:ba:ab:9c:ee:cd:cb:de:50:d7:9f: 6a:51:2f:b0:08:40:81:42:a9:27:7f:a1:02:62:93: d8:c4:04:42:f5:56:c7:8e:50:cd:56:79:66:75:53: 37:84:e3:a0:69:c0:76:76:28:7e:44:5b:30:42:9b: 99:1f:44:a4:c9:06:76:8e:91:f3:4c:cc:50:a9:79: dd:7e:4e:4a:74:c4:3c:07:22:c7:a8:de:0a:da:b3: f3:e2:87:6b:fc:e0:91:bb:d1:5d:66:89:8b:74:59: 4b:3a:27:59:2c:ec:0f:e2:66:36:32:57:89:3c:d9: f8:2c:46:1a:c9:1b:55:75:01:01:45:ba:16:9d:5c: 70:b9:f7:bd:f7:9f:6d:15:4e:06:0c:60:f4:4a:ae: 61:25:8b:d1:6b:f8:26:4e:cc:83:f4:f1:89:fb:52: 2c:2e:37:12:9d:7e:27:55:72:da:38:67:f3:06:65: 53:90:59:6c:9f:9d:25:49:37:3b:a3:32:69:fc:8b: f6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:00:25:D3:48:BB:1F:52:A5:30:27:07:BF:05:D0:74:3F:01:02:50 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS205838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:cdd::/48 Signature Algorithm: sha256WithRSAEncryption 98:76:bd:1e:ee:a8:ed:fa:f2:e3:d3:72:75:41:87:e5:0f:79: 2d:e4:89:bc:d4:2e:dc:27:8a:bb:f0:e3:c3:05:a4:7f:d1:7d: 84:a7:b3:96:1f:86:f7:16:d1:da:ec:f1:42:08:b7:13:e1:27: 80:9b:8e:d2:d3:a4:69:3f:ed:41:89:f3:7e:c1:06:39:ba:7c: 9b:0a:cf:2c:fb:a8:81:82:a7:0e:95:3f:ba:e0:ef:20:16:ea: 19:a1:17:7c:7d:76:51:74:c7:65:bd:89:b4:b6:ba:bd:da:0a: 34:02:10:4a:8c:0e:59:3a:44:c0:24:ab:cf:78:c7:c0:58:24: f9:ae:64:9c:4a:0d:d6:d9:08:91:8b:2b:04:28:16:ea:18:5d: a0:63:9b:97:d2:58:4f:07:ce:a2:22:1d:19:0e:98:87:dc:88: e3:de:2d:62:1c:de:cc:c0:33:d8:1f:03:76:85:8e:a1:05:6a: 4e:bd:e2:5f:5d:e2:5d:50:d2:9f:8c:4e:eb:a6:67:a9:8a:28: ce:6c:58:77:68:57:6b:d3:e3:58:67:77:d2:8b:e2:02:84:b6: 16:e4:00:e7:67:a6:c5:54:57:df:77:9b:a1:a1:2f:a5:d3:74: cb:92:13:81:5e:a0:7d:1d:f6:17:13:dd:27:71:7d:ff:e1:81: 20:81:f7:06 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUV1K/d/kozPddTgC+mcwGX7+zbPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTExMjgwMzE2MDZaFw0yNjExMjcwMzIxMDZaMDMxMTAvBgNV BAMTKDcxMDAyNUQzNDhCQjFGNTJBNTMwMjcwN0JGMDVEMDc0M0YwMTAyNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq6grH2Ywzdhqol3dCERMol7yw YpPYITotdFAY1HW8tcM0wl2BK4glLpUxqCmh0eunRMOYvROwEwFTUTMtcS/zuquc 7s3L3lDXn2pRL7AIQIFCqSd/oQJik9jEBEL1VseOUM1WeWZ1UzeE46BpwHZ2KH5E WzBCm5kfRKTJBnaOkfNMzFCped1+Tkp0xDwHIseo3gras/Pih2v84JG70V1miYt0 WUs6J1ks7A/iZjYyV4k82fgsRhrJG1V1AQFFuhadXHC59733n20VTgYMYPRKrmEl i9Fr+CZOzIP08Yn7UiwuNxKdfidVcto4Z/MGZVOQWWyfnSVJNzujMmn8i/YhAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUcQAl00i7H1KlMCcHvwXQdD8BAlAwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA1ODM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQzdMA0GCSqGSIb3DQEBCwUAA4IBAQCYdr0e7qjt+vLj03J1QYflD3kt5Im81C7c J4q78OPDBaR/0X2Ep7OWH4b3FtHa7PFCCLcT4SeAm47S06RpP+1BifN+wQY5unyb Cs8s+6iBgqcOlT+64O8gFuoZoRd8fXZRdMdlvYm0trq92go0AhBKjA5ZOkTAJKvP eMfAWCT5rmScSg3W2QiRiysEKBbqGF2gY5uX0lhPB86iIh0ZDpiH3Ijj3i1iHN7M wDPYHwN2hY6hBWpOveJfXeJdUNKfjE7rpmepiijObFh3aFdr0+NYZ3fSi+IChLYW 5ADnZ6bFVFffd5uhoS+l03TLkhOBXqB9HfYXE90ncX3/4YEggfcG -----END CERTIFICATE-----Generated at Thu Dec 4 07:30:38 2025 by rpki-client