This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206000.roa File: AS206000.roa (raw, json) Hash identifier: RkDM4dyEybpTYsnx+7KIqoAFz+Dk7cPvELLRovNW03w= Subject key identifier: 8B:E6:11:58:A5:46:81:69:8B:C6:99:AB:67:93:FD:87:FD:73:F0:73 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 2FF86919F2E4D4DD24B11AEB73AB8FF12B2FD4D0 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206000.roa Signing time: Fri 28 Nov 2025 03:21:32 +0000 ROA not before: Fri 28 Nov 2025 03:16:32 +0000 ROA not after: Fri 27 Nov 2026 03:21:32 +0000 asID: 206000 IP address blocks: 2a0f:85c1:cd8::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f8:69:19:f2:e4:d4:dd:24:b1:1a:eb:73:ab:8f:f1:2b:2f:d4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Nov 28 03:16:32 2025 GMT Not After : Nov 27 03:21:32 2026 GMT Subject: CN=8BE61158A54681698BC699AB6793FD87FD73F073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3d:89:44:92:72:6e:ff:9a:6a:33:1c:fc:44: 80:48:fd:a1:8d:b4:21:87:e3:ba:8f:78:e5:d5:86: 4a:53:97:5d:4e:a8:06:03:05:53:ff:3d:5a:e4:e5: 26:e8:de:53:7b:98:d0:bc:e8:cc:0f:04:cb:86:87: 5e:8b:1a:91:78:6f:94:82:8d:86:47:05:d7:15:8f: bf:b5:d7:0e:a3:da:3d:4e:6b:66:62:57:cb:36:48: 14:0f:dd:df:69:ed:b6:e8:31:f4:0c:a3:5c:ec:08: 80:90:3d:92:a8:3c:1d:c2:d5:3a:29:2b:c3:4e:8c: 10:77:25:9e:14:aa:00:0e:d1:5e:2c:3e:5c:ea:81: 29:a1:3c:3e:3e:c6:e4:78:66:99:bb:43:e4:a6:af: 77:1a:53:7c:37:0a:40:df:66:7d:81:2a:f7:f1:a1: c6:17:3f:24:bb:b1:d2:3c:08:8d:cc:e4:71:05:fb: 1d:31:77:dd:c6:79:ff:1d:a1:64:e7:4e:56:9d:d0: da:c5:5b:cd:4a:d6:94:48:d0:2b:e2:ed:55:06:61: 11:f3:0c:f5:ee:d8:3e:c0:df:bb:b6:a3:51:07:d2: 56:54:2a:ad:45:2a:b5:08:b5:bd:ad:e9:01:56:c2: 99:1d:34:8f:4d:d4:d6:cc:4d:b8:09:2f:c3:58:50: de:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E6:11:58:A5:46:81:69:8B:C6:99:AB:67:93:FD:87:FD:73:F0:73 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206000.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:cd8::/48 Signature Algorithm: sha256WithRSAEncryption b9:07:88:fa:dd:f1:b9:9f:8c:8d:43:8b:47:b2:c2:7f:53:c3: d8:f2:a4:31:a0:61:52:0f:b7:cd:52:bf:ec:6e:21:46:d9:b3: 63:0b:f7:dc:00:56:5c:93:de:e6:5d:c5:8d:12:c1:2b:dc:a1: 0e:ca:32:75:cd:50:6e:4b:8f:1e:84:24:a5:37:dc:37:b8:8d: 47:fd:8b:97:78:ef:f5:97:73:3f:9b:62:e5:bc:cc:e4:44:c9: 80:0c:f0:c4:d4:34:1a:e3:2e:b3:ee:44:21:73:49:17:87:4b: 2f:2c:d7:a2:65:6b:34:d1:52:ac:6b:eb:7b:e7:fe:f3:a8:13: 10:20:e4:11:bc:93:d8:cb:85:f5:42:d2:45:bb:31:64:32:4f: db:79:b8:6f:54:b6:a8:43:8d:1c:0e:3f:33:8b:79:35:68:dc: 4d:4e:14:2f:77:29:c6:99:24:01:a1:83:c9:eb:49:9d:b8:a3: 84:b4:ab:80:27:34:99:5f:a0:1b:82:49:bd:7b:e3:79:b6:f0: 7c:be:5f:28:ee:84:90:a7:c9:69:ee:6e:f4:c1:9b:aa:ea:b0: 33:d6:6c:71:38:49:d7:0d:11:2f:09:d1:a6:f9:69:b6:93:20: 10:4a:d4:a9:14:fe:5d:1e:4b:f5:52:46:13:9f:27:93:3c:23: 9d:59:4e:df -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUL/hpGfLk1N0ksRrrc6uP8Ssv1NAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTExMjgwMzE2MzJaFw0yNjExMjcwMzIxMzJaMDMxMTAvBgNV BAMTKDhCRTYxMTU4QTU0NjgxNjk4QkM2OTlBQjY3OTNGRDg3RkQ3M0YwNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/PYlEknJu/5pqMxz8RIBI/aGN tCGH47qPeOXVhkpTl11OqAYDBVP/PVrk5Sbo3lN7mNC86MwPBMuGh16LGpF4b5SC jYZHBdcVj7+11w6j2j1Oa2ZiV8s2SBQP3d9p7bboMfQMo1zsCICQPZKoPB3C1Top K8NOjBB3JZ4UqgAO0V4sPlzqgSmhPD4+xuR4Zpm7Q+Smr3caU3w3CkDfZn2BKvfx ocYXPyS7sdI8CI3M5HEF+x0xd93Gef8doWTnTlad0NrFW81K1pRI0Cvi7VUGYRHz DPXu2D7A37u2o1EH0lZUKq1FKrUItb2t6QFWwpkdNI9N1NbMTbgJL8NYUN5DAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUi+YRWKVGgWmLxpmrZ5P9h/1z8HMwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA2MDAwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQzYMA0GCSqGSIb3DQEBCwUAA4IBAQC5B4j63fG5n4yNQ4tHssJ/U8PY8qQxoGFS D7fNUr/sbiFG2bNjC/fcAFZck97mXcWNEsEr3KEOyjJ1zVBuS48ehCSlN9w3uI1H /YuXeO/1l3M/m2LlvMzkRMmADPDE1DQa4y6z7kQhc0kXh0svLNeiZWs00VKsa+t7 5/7zqBMQIOQRvJPYy4X1QtJFuzFkMk/bebhvVLaoQ40cDj8zi3k1aNxNThQvdynG mSQBoYPJ60mduKOEtKuAJzSZX6Abgkm9e+N5tvB8vl8o7oSQp8lp7m70wZuq6rAz 1mxxOEnXDREvCdGm+Wm2kyAQStSpFP5dHkv1UkYTnyeTPCOdWU7f -----END CERTIFICATE-----Generated at Fri Dec 5 16:35:47 2025 by rpki-client