This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206098.roa File: AS206098.roa (raw, json) Hash identifier: 39zdq3vdGMWeRNi6EyGPAV4tMMQzfvKrGQz5z8CxcYA= Subject key identifier: BC:1B:40:53:16:21:5F:FB:39:BC:08:49:62:7F:A2:B3:73:03:3C:AC Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 6DC2E4F2B41FA65450E11629B8A24959BE0E778C Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206098.roa Signing time: Fri 09 Jan 2026 16:53:33 +0000 ROA not before: Fri 09 Jan 2026 16:48:33 +0000 ROA not after: Fri 08 Jan 2027 16:53:33 +0000 asID: 206098 IP address blocks: 2a0f:85c1:e14::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c2:e4:f2:b4:1f:a6:54:50:e1:16:29:b8:a2:49:59:be:0e:77:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Jan 9 16:48:33 2026 GMT Not After : Jan 8 16:53:33 2027 GMT Subject: CN=BC1B405316215FFB39BC0849627FA2B373033CAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:02:c1:f6:1f:ef:6d:cf:b5:68:43:17:64: 68:2f:de:55:12:f3:b7:53:cb:85:61:37:f1:62:76: 00:6e:65:ce:eb:13:84:a0:97:9d:f3:89:4c:ab:f0: d7:19:5a:39:71:05:f6:36:23:d7:46:e8:a2:fb:ea: b7:15:7a:27:a2:18:81:ac:91:c0:8a:b9:d0:00:1b: 8f:9b:be:9e:47:29:1f:a5:13:7b:d1:32:59:2d:db: 97:48:ab:3b:44:0a:3a:56:9c:ce:6b:f6:1e:73:b3: 95:b9:fe:88:cc:d3:05:b0:b6:5a:21:3a:de:70:10: d0:7e:25:36:ee:6e:86:d6:c9:69:18:0b:5f:f2:a5: da:0c:88:c0:a5:fa:d8:77:d2:09:08:57:a9:d0:45: 9e:79:b6:ba:60:da:da:47:05:49:c4:11:36:d8:28: 47:cf:4b:6b:c3:87:af:ad:40:27:00:45:b8:dd:d8: 7c:78:95:de:ac:9e:dc:3f:9a:c6:45:b3:5a:50:fa: 7f:aa:e2:98:2c:a7:c2:73:fe:75:5b:04:c1:b8:7c: 0c:2f:7d:76:8e:7b:6c:41:dc:82:fe:4d:d7:5e:d4: 4a:e1:c8:5d:81:10:8d:13:83:86:d9:cb:cd:01:57: 5a:6b:0b:c9:b7:f7:6c:d6:e7:3c:84:d6:b4:e9:7b: 0c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1B:40:53:16:21:5F:FB:39:BC:08:49:62:7F:A2:B3:73:03:3C:AC X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206098.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:e14::/48 Signature Algorithm: sha256WithRSAEncryption 27:1c:42:d9:be:d9:1b:a5:e2:a9:28:ef:64:94:a4:98:fd:1e: cc:db:03:62:c1:ff:28:bf:31:e3:26:dc:9a:15:25:f6:4b:73: eb:ad:1a:bd:ef:7c:c9:65:37:a2:fa:22:7d:e5:66:cf:3c:26: 5e:ff:96:06:c6:17:c9:df:68:e9:5a:e9:e2:75:1a:c9:68:a9: c7:fe:a0:f7:d7:5e:bf:e8:00:a8:82:0a:2d:86:ca:55:f2:b4: 41:56:6a:5d:8c:64:c9:fd:9a:03:79:a8:db:bb:96:a6:43:e6: 86:1f:f3:07:8e:8d:31:32:17:2b:6d:5a:47:d0:6b:a8:be:0b: 4a:b7:4f:36:c3:e3:f6:e3:74:d2:db:57:54:7b:42:2d:4e:ca: 04:88:be:20:7b:c3:7f:fe:9b:37:e4:2e:1e:e9:81:1b:5e:44: 7c:a3:6a:d4:9a:d4:a0:de:24:a7:6a:f3:de:e9:be:c1:17:01: 7c:0e:b0:c3:c8:db:a3:43:c4:7a:2b:23:a5:61:80:78:d7:3a: 0d:48:02:2b:8d:6e:9c:d8:b2:31:ad:fb:49:e5:f8:61:5c:23: e5:95:4b:31:8e:d7:db:07:a8:31:61:b4:de:dc:3d:d2:41:44: 1d:ac:96:e9:6e:c7:d6:bf:1e:79:26:18:d7:a6:cb:e6:46:15: fb:4f:c7:ea -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUbcLk8rQfplRQ4RYpuKJJWb4Od4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNjAxMDkxNjQ4MzNaFw0yNzAxMDgxNjUzMzNaMDMxMTAvBgNV BAMTKEJDMUI0MDUzMTYyMTVGRkIzOUJDMDg0OTYyN0ZBMkIzNzMwMzNDQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4awLB9h/vbc+1aEMXZGgv3lUS 87dTy4VhN/FidgBuZc7rE4Sgl53ziUyr8NcZWjlxBfY2I9dG6KL76rcVeieiGIGs kcCKudAAG4+bvp5HKR+lE3vRMlkt25dIqztECjpWnM5r9h5zs5W5/ojM0wWwtloh Ot5wENB+JTbubobWyWkYC1/ypdoMiMCl+th30gkIV6nQRZ55trpg2tpHBUnEETbY KEfPS2vDh6+tQCcARbjd2Hx4ld6sntw/msZFs1pQ+n+q4pgsp8Jz/nVbBMG4fAwv fXaOe2xB3IL+Tdde1ErhyF2BEI0Tg4bZy80BV1prC8m392zW5zyE1rTpewyFAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUvBtAUxYhX/s5vAhJYn+is3MDPKwwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA2MDk4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQ4UMA0GCSqGSIb3DQEBCwUAA4IBAQAnHELZvtkbpeKpKO9klKSY/R7M2wNiwf8o vzHjJtyaFSX2S3PrrRq973zJZTei+iJ95WbPPCZe/5YGxhfJ32jpWunidRrJaKnH /qD3116/6ACoggothspV8rRBVmpdjGTJ/ZoDeajbu5amQ+aGH/MHjo0xMhcrbVpH 0GuovgtKt082w+P243TS21dUe0ItTsoEiL4ge8N//ps35C4e6YEbXkR8o2rUmtSg 3iSnavPe6b7BFwF8DrDDyNujQ8R6KyOlYYB41zoNSAIrjW6c2LIxrftJ5fhhXCPl lUsxjtfbB6gxYbTe3D3SQUQdrJbpbsfWvx55JhjXpsvmRhX7T8fq -----END CERTIFICATE-----Generated at Mon Jan 19 20:57:05 2026 by rpki-client