This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS201640.roa File: AS201640.roa (raw, json) Hash identifier: rvaULW1zRwsGpC5pQ0EfLYEXyF0S4J3jYgYqN8M5i2g= Subject key identifier: EB:92:40:6B:A8:8C:1B:B2:15:B6:E5:2E:FF:19:68:1D:DD:A3:42:EC Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 1A43B14CA0B8E14DA2A4EC486D2D3BE7A47247D1 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS201640.roa Signing time: Thu 05 Feb 2026 17:40:30 +0000 ROA not before: Thu 05 Feb 2026 17:35:30 +0000 ROA not after: Thu 04 Feb 2027 17:40:30 +0000 asID: 201640 IP address blocks: 2a14:7584:2200::/39 maxlen: 39 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Feb 2026 01:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:43:b1:4c:a0:b8:e1:4d:a2:a4:ec:48:6d:2d:3b:e7:a4:72:47:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Feb 5 17:35:30 2026 GMT Not After : Feb 4 17:40:30 2027 GMT Subject: CN=EB92406BA88C1BB215B6E52EFF19681DDDA342EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ab:6b:71:ac:ad:19:b1:3a:bb:71:4f:2e:ae: 8b:fc:54:ba:b8:e9:26:f0:6f:71:ac:17:c0:a4:15: 99:2b:e0:c7:cc:91:bb:60:ae:f3:33:45:06:b8:0c: 68:08:c1:ef:5c:5d:31:66:b3:01:3d:b1:33:97:6d: 16:a7:c5:e0:2a:58:0f:5d:8a:72:fc:0c:3f:f5:9e: 04:9c:4a:a9:dc:83:d0:8f:ea:bd:2c:1a:97:60:a0: 92:8b:e5:32:2f:9d:b5:18:b2:3f:85:d6:d7:88:5c: 92:f5:42:fe:d1:b9:50:ef:09:72:69:76:77:f2:d6: 0f:bb:5b:75:b0:35:39:19:46:5d:60:f3:73:92:be: 54:0d:ed:de:c5:5e:eb:3f:4a:9b:65:3c:fa:51:9a: 05:51:63:65:0e:24:f9:b8:8b:fb:14:fb:d5:de:20: 43:4f:8c:aa:7f:30:90:3c:13:e9:70:db:04:d7:6c: 62:4d:6f:4e:aa:14:54:b1:4c:f2:d9:bf:ab:4a:2a: 85:f0:ac:04:e9:51:75:68:31:ed:17:de:65:de:91: 22:e3:cb:79:a3:af:54:b8:58:c3:a0:5c:9c:14:a8: eb:6c:00:d0:a1:d9:1f:44:50:88:bb:2c:97:93:2e: 70:a2:83:8a:78:17:7d:3b:c9:5f:41:66:61:c7:0c: 7e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:92:40:6B:A8:8C:1B:B2:15:B6:E5:2E:FF:19:68:1D:DD:A3:42:EC X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS201640.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:2200::/39 Signature Algorithm: sha256WithRSAEncryption 5a:7d:ce:99:3d:94:ff:2c:30:d6:ff:b1:72:22:64:9b:e5:9a: 80:ab:42:cd:86:e1:31:e1:f5:88:d0:83:c3:38:6c:35:fa:c5: aa:88:43:7f:90:00:fe:d4:3f:c3:72:72:01:ea:2a:1f:6f:51: 99:88:1a:73:90:92:c3:96:06:75:b2:e8:7f:00:0a:9d:d6:ab: 94:95:c2:82:91:ba:1f:a3:fc:3b:f9:94:7e:ec:2e:37:30:4e: 83:0d:66:bf:6b:97:dc:ba:2b:07:54:14:25:91:b9:47:37:34: fc:b5:2e:68:bc:91:63:ac:c9:9d:d9:8a:76:97:0e:2a:cf:6f: 01:30:41:35:9e:07:80:87:36:90:4d:fe:28:3c:5d:c9:9d:89: b1:b5:84:41:bc:04:59:eb:c6:6b:46:32:be:59:34:4b:e8:cb: e8:a2:70:78:09:8d:b1:30:04:7c:d5:49:1f:ae:f3:ee:21:7a: cf:f6:58:05:58:31:1c:52:72:28:b6:71:b3:5b:5b:56:c5:9a: ab:9a:36:d9:3c:7f:98:47:a9:ad:06:d9:8d:44:70:4a:ff:e7: 4d:74:fa:5b:d2:1e:8b:f3:6d:3f:66:e4:6a:03:b3:8f:b6:01: 04:f1:6b:16:a9:a6:d5:c5:54:0a:49:3e:db:62:ec:a6:a7:80: 36:3a:56:37 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUGkOxTKC44U2ipOxIbS0756RyR9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAyMDUxNzM1MzBaFw0yNzAyMDQxNzQwMzBaMDMxMTAvBgNV BAMTKEVCOTI0MDZCQTg4QzFCQjIxNUI2RTUyRUZGMTk2ODFERERBMzQyRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwq2txrK0ZsTq7cU8urov8VLq4 6Sbwb3GsF8CkFZkr4MfMkbtgrvMzRQa4DGgIwe9cXTFmswE9sTOXbRanxeAqWA9d inL8DD/1ngScSqncg9CP6r0sGpdgoJKL5TIvnbUYsj+F1teIXJL1Qv7RuVDvCXJp dnfy1g+7W3WwNTkZRl1g83OSvlQN7d7FXus/SptlPPpRmgVRY2UOJPm4i/sU+9Xe IENPjKp/MJA8E+lw2wTXbGJNb06qFFSxTPLZv6tKKoXwrATpUXVoMe0X3mXekSLj y3mjr1S4WMOgXJwUqOtsANCh2R9EUIi7LJeTLnCig4p4F307yV9BZmHHDH5XAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQU65JAa6iMG7IVtuUu/xloHd2jQuwwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjAxNjQwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBKhR1 hCIwDQYJKoZIhvcNAQELBQADggEBAFp9zpk9lP8sMNb/sXIiZJvlmoCrQs2G4THh 9YjQg8M4bDX6xaqIQ3+QAP7UP8NycgHqKh9vUZmIGnOQksOWBnWy6H8ACp3Wq5SV woKRuh+j/Dv5lH7sLjcwToMNZr9rl9y6KwdUFCWRuUc3NPy1Lmi8kWOsyZ3ZinaX DirPbwEwQTWeB4CHNpBN/ig8XcmdibG1hEG8BFnrxmtGMr5ZNEvoy+iicHgJjbEw BHzVSR+u8+4hes/2WAVYMRxScii2cbNbW1bFmquaNtk8f5hHqa0G2Y1EcEr/5010 +lvSHovzbT9m5GoDs4+2AQTxaxapptXFVApJPtti7KangDY6Vjc= -----END CERTIFICATE-----Generated at Sun Feb 8 08:10:15 2026 by rpki-client