This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206533.roa File: AS206533.roa (raw, json) Hash identifier: y51dme+4IHLN9fSe+XbwPdcEe49D4dXrtUDnpfBcEbQ= Subject key identifier: 27:13:0B:01:D9:C8:17:99:AD:F4:FA:4C:C1:E8:3C:9D:EB:B4:9D:EA Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 69D577434BB32BC80E19EF03635BCCDE5964708F Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206533.roa Signing time: Fri 14 Nov 2025 01:51:15 +0000 ROA not before: Fri 14 Nov 2025 01:46:15 +0000 ROA not after: Fri 13 Nov 2026 01:51:15 +0000 asID: 206533 IP address blocks: 2a0f:85c1:d6a::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d5:77:43:4b:b3:2b:c8:0e:19:ef:03:63:5b:cc:de:59:64:70:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Nov 14 01:46:15 2025 GMT Not After : Nov 13 01:51:15 2026 GMT Subject: CN=27130B01D9C81799ADF4FA4CC1E83C9DEBB49DEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ac:a3:2a:00:39:d0:37:b3:2d:7c:ca:36:5c: 35:a3:a6:45:78:c4:17:76:4d:b4:37:7e:8a:60:dd: 98:59:4f:4b:ae:1a:66:a4:b5:b0:db:3a:e3:2e:9e: b4:f4:82:08:ea:de:1d:e9:be:6b:78:1c:18:59:12: 59:d0:ca:bb:7a:e0:e5:94:5e:73:b7:1a:ba:ef:30: 29:3e:52:d7:bb:32:23:7c:94:f9:aa:dc:8f:77:5d: b6:8b:1c:2b:3e:68:44:8b:7b:b5:b0:a0:a8:9d:e4: 9f:d9:9f:a7:7d:2d:40:16:14:95:9d:51:ce:39:4b: 98:fc:ff:36:25:42:c5:c8:a7:33:7e:2c:da:1e:b8: f3:c4:0f:e3:b5:ad:0d:1b:db:7b:a8:8d:ab:93:c4: 7d:a6:75:f5:54:70:a4:1f:b5:89:0b:3e:5a:e8:d2: 46:12:f3:8e:43:98:c7:af:30:01:90:d6:5c:4f:25: 30:c6:ff:ca:b0:83:ba:d3:e7:cd:19:09:25:74:3a: 74:06:45:ae:49:32:11:a6:6f:37:4b:fb:03:ab:73: 80:1d:fa:86:9c:55:42:59:6c:ee:31:13:9e:f5:03: 5d:94:61:00:f5:bc:e5:69:95:80:b7:e8:7c:11:5f: 2b:34:93:45:aa:b1:ef:15:be:d0:d9:bf:3f:4d:1b: e8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:13:0B:01:D9:C8:17:99:AD:F4:FA:4C:C1:E8:3C:9D:EB:B4:9D:EA X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:d6a::/48 Signature Algorithm: sha256WithRSAEncryption 84:1c:64:ec:8b:80:25:12:bd:b8:7b:10:74:25:9d:33:ba:59: f6:ee:ee:8f:6d:4f:19:87:fa:44:bd:0f:0a:f0:19:c3:65:85: 52:23:1d:9c:75:f8:3a:6b:36:80:d6:b4:a7:be:56:7d:1c:6f: 80:98:a1:2d:04:e9:c0:38:6c:9e:e3:fe:bc:b1:79:89:0b:ff: 2d:57:de:0f:31:65:dd:11:79:16:7a:32:89:28:77:35:25:3f: 40:9c:47:8c:e8:f3:01:23:d5:13:65:1a:bc:a2:30:3d:ff:ae: 65:e0:a1:c3:0e:14:b2:fb:a7:2a:f2:1b:2f:b5:c1:dc:ac:00: 38:77:3c:e8:31:8a:8f:f5:ea:6f:69:15:1f:cf:f6:e5:0a:c9: 48:a6:fa:90:9c:3f:e6:55:5a:d0:af:06:a2:5f:8b:88:eb:fa: 9d:3a:d3:3a:05:da:b8:cd:ca:ac:43:7c:03:f9:13:2b:1f:13: 5b:00:59:be:00:67:a1:45:3b:3f:25:10:1c:90:b8:8f:bb:4e: ac:32:b0:f3:af:69:da:41:c2:48:84:8e:94:70:71:81:dd:33: 7c:d0:09:a5:39:0d:67:71:38:f4:9e:e5:a0:65:e5:48:5c:39: 53:3d:79:04:17:71:d0:c1:8e:1a:f4:58:75:23:d0:d9:42:0d: 85:5f:0d:6f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUadV3Q0uzK8gOGe8DY1vM3llkcI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTExMTQwMTQ2MTVaFw0yNjExMTMwMTUxMTVaMDMxMTAvBgNV BAMTKDI3MTMwQjAxRDlDODE3OTlBREY0RkE0Q0MxRTgzQzlERUJCNDlERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrKMqADnQN7MtfMo2XDWjpkV4 xBd2TbQ3fopg3ZhZT0uuGmaktbDbOuMunrT0ggjq3h3pvmt4HBhZElnQyrt64OWU XnO3GrrvMCk+Ute7MiN8lPmq3I93XbaLHCs+aESLe7WwoKid5J/Zn6d9LUAWFJWd Uc45S5j8/zYlQsXIpzN+LNoeuPPED+O1rQ0b23uojauTxH2mdfVUcKQftYkLPlro 0kYS845DmMevMAGQ1lxPJTDG/8qwg7rT580ZCSV0OnQGRa5JMhGmbzdL+wOrc4Ad +oacVUJZbO4xE571A12UYQD1vOVplYC36HwRXys0k0Wqse8VvtDZvz9NG+hHAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUJxMLAdnIF5mt9PpMweg8neu0neowHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA2NTMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQ1qMA0GCSqGSIb3DQEBCwUAA4IBAQCEHGTsi4AlEr24exB0JZ0zuln27u6PbU8Z h/pEvQ8K8BnDZYVSIx2cdfg6azaA1rSnvlZ9HG+AmKEtBOnAOGye4/68sXmJC/8t V94PMWXdEXkWejKJKHc1JT9AnEeM6PMBI9UTZRq8ojA9/65l4KHDDhSy+6cq8hsv tcHcrAA4dzzoMYqP9epvaRUfz/blCslIpvqQnD/mVVrQrwaiX4uI6/qdOtM6Bdq4 zcqsQ3wD+RMrHxNbAFm+AGehRTs/JRAckLiPu06sMrDzr2naQcJIhI6UcHGB3TN8 0AmlOQ1ncTj0nuWgZeVIXDlTPXkEF3HQwY4a9Fh1I9DZQg2FXw1v -----END CERTIFICATE-----Generated at Fri Dec 5 16:35:39 2025 by rpki-client