This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207738.roa File: AS207738.roa (raw, json) Hash identifier: RAfFAiq7V1IIkeYwb3GcTI0E5Y+57gCGIJHaOBvMp5c= Subject key identifier: 4C:5B:09:21:3F:CD:CE:4D:A2:55:62:84:B7:D8:56:D6:AB:CF:39:C7 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 5648B57283149A7BBBAF3813352EF5844ED49AA9 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207738.roa Signing time: Fri 14 Nov 2025 01:51:23 +0000 ROA not before: Fri 14 Nov 2025 01:46:23 +0000 ROA not after: Fri 13 Nov 2026 01:51:23 +0000 asID: 207738 IP address blocks: 2a0f:85c1:d97::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:48:b5:72:83:14:9a:7b:bb:af:38:13:35:2e:f5:84:4e:d4:9a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Nov 14 01:46:23 2025 GMT Not After : Nov 13 01:51:23 2026 GMT Subject: CN=4C5B09213FCDCE4DA2556284B7D856D6ABCF39C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:24:a8:5c:60:2a:65:bc:70:63:47:e7:bd:c9: 79:3c:24:3d:9f:d5:ea:4b:7f:1e:c1:de:c8:4a:f6: cb:73:95:a0:65:0e:2e:36:cd:6d:31:2e:76:02:fe: 2d:fd:87:03:58:75:94:e9:2d:f6:4a:60:29:d6:a7: 69:69:3c:15:61:52:3b:a6:4f:90:32:56:ae:8f:65: b1:eb:27:83:52:5a:cf:57:1f:33:6c:2b:e1:5a:33: 9f:76:38:0e:04:17:e2:14:80:fa:2b:a6:99:36:80: 2f:1c:4d:99:9c:ca:22:fb:13:45:e8:a0:d6:62:32: 22:9c:fa:2d:b3:6e:91:10:34:9d:34:f9:42:ae:0d: cc:f8:2f:7e:d6:68:93:49:63:ea:56:a8:ad:00:cc: a6:67:c3:6e:0a:4b:31:e2:71:d5:bc:87:6c:98:18: 82:ab:a1:82:24:c2:15:79:55:84:ce:e7:e6:cb:33: 7f:76:5c:72:e6:8f:a9:61:29:48:56:de:ff:a6:93: 49:06:0f:ad:84:4c:d3:61:f2:bf:45:b6:c9:b1:25: 2b:16:10:2a:22:88:9a:8a:d4:ce:01:f8:9f:87:52: d3:e9:95:2d:e8:bc:85:36:27:27:06:98:d9:76:54: 8c:69:d5:ad:e1:e8:6e:a9:e8:1b:23:25:b2:3e:d3: e2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5B:09:21:3F:CD:CE:4D:A2:55:62:84:B7:D8:56:D6:AB:CF:39:C7 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:d97::/48 Signature Algorithm: sha256WithRSAEncryption 8f:e1:d5:5d:98:bb:a6:8f:b7:44:ac:8a:06:fa:a5:f4:98:0f: 26:58:51:ba:d7:dd:e9:ff:fa:89:fb:4f:05:06:1c:c0:d1:14: 23:87:a2:f9:2c:d8:43:6e:2b:2c:62:a2:22:b5:c5:d3:00:66: 70:df:51:42:65:9f:71:73:6b:4a:e1:8d:c0:cf:2d:9b:84:d3: 62:aa:9b:fd:40:9b:95:5e:de:18:85:d5:7c:30:20:bf:ab:14: 97:b6:1b:01:38:c8:51:a3:aa:4c:3d:c9:2f:6c:15:a7:34:86: ff:8a:9f:d3:46:30:5c:7b:30:f5:ae:31:70:29:e3:e0:e1:35: ad:af:65:cd:75:7e:60:53:03:2c:ef:f9:f2:d6:0f:9c:52:0c: 38:7a:19:c9:bd:ec:f6:06:53:a1:44:18:8f:1a:eb:56:2a:ae: 6d:f4:77:1a:45:ea:aa:6b:ff:24:6b:a8:d7:54:cc:13:70:6f: ff:24:27:d0:7a:b8:54:5d:c1:09:d3:f1:56:20:76:b6:ff:f4: ac:be:b9:66:fa:68:bd:77:2d:95:fc:d3:c4:47:5d:ff:08:48: b7:8f:41:d2:f2:1a:8e:96:51:2d:52:4b:89:b5:5d:a2:16:8a: e4:1b:f2:50:6a:9a:30:f8:b4:6d:85:2b:9c:7d:cc:55:a3:98: 05:5c:34:81 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUVki1coMUmnu7rzgTNS71hE7UmqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTExMTQwMTQ2MjNaFw0yNjExMTMwMTUxMjNaMDMxMTAvBgNV BAMTKDRDNUIwOTIxM0ZDRENFNERBMjU1NjI4NEI3RDg1NkQ2QUJDRjM5QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjJKhcYCplvHBjR+e9yXk8JD2f 1epLfx7B3shK9stzlaBlDi42zW0xLnYC/i39hwNYdZTpLfZKYCnWp2lpPBVhUjum T5AyVq6PZbHrJ4NSWs9XHzNsK+FaM592OA4EF+IUgPorppk2gC8cTZmcyiL7E0Xo oNZiMiKc+i2zbpEQNJ00+UKuDcz4L37WaJNJY+pWqK0AzKZnw24KSzHicdW8h2yY GIKroYIkwhV5VYTO5+bLM392XHLmj6lhKUhW3v+mk0kGD62ETNNh8r9FtsmxJSsW ECoiiJqK1M4B+J+HUtPplS3ovIU2JycGmNl2VIxp1a3h6G6p6BsjJbI+0+KLAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUTFsJIT/Nzk2iVWKEt9hW1qvPOccwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA3NzM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQ2XMA0GCSqGSIb3DQEBCwUAA4IBAQCP4dVdmLumj7dErIoG+qX0mA8mWFG6193p //qJ+08FBhzA0RQjh6L5LNhDbissYqIitcXTAGZw31FCZZ9xc2tK4Y3Azy2bhNNi qpv9QJuVXt4YhdV8MCC/qxSXthsBOMhRo6pMPckvbBWnNIb/ip/TRjBcezD1rjFw KePg4TWtr2XNdX5gUwMs7/ny1g+cUgw4ehnJvez2BlOhRBiPGutWKq5t9HcaReqq a/8ka6jXVMwTcG//JCfQerhUXcEJ0/FWIHa2//Ssvrlm+mi9dy2V/NPER13/CEi3 j0HS8hqOllEtUkuJtV2iForkG/JQapow+LRthSucfcxVo5gFXDSB -----END CERTIFICATE-----Generated at Fri Dec 5 16:35:44 2025 by rpki-client