This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202322.roa File: AS202322.roa (raw, json) Hash identifier: 2gZZetBI4rbCYoMYFpHf5zRnxS382WHEwOuHqtE81I8= Subject key identifier: 6E:35:90:04:8B:98:D9:2E:79:69:41:A5:95:B8:C7:D5:5D:7B:CA:69 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 6167B2091B27C91F8A41C96A09D93A4989AAF267 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202322.roa Signing time: Fri 16 Jan 2026 16:08:57 +0000 ROA not before: Fri 16 Jan 2026 16:03:57 +0000 ROA not after: Fri 15 Jan 2027 16:08:57 +0000 asID: 202322 IP address blocks: 2a14:7581:f70::/44 maxlen: 48 2a14:7581:f71::/48 maxlen: 48 2a14:7581:f72::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:67:b2:09:1b:27:c9:1f:8a:41:c9:6a:09:d9:3a:49:89:aa:f2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 16 16:03:57 2026 GMT Not After : Jan 15 16:08:57 2027 GMT Subject: CN=6E3590048B98D92E796941A595B8C7D55D7BCA69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fe:3c:17:cb:59:3b:ab:9b:bc:be:60:e5:f9: ad:ee:3a:c4:b5:50:5d:8e:09:de:ce:ac:f7:7e:fc: 71:1c:76:35:7d:92:40:ed:4f:f9:90:43:3a:f3:bf: 45:a2:8c:c2:8d:fb:8b:d5:d7:85:7f:18:8c:5d:97: 81:41:0f:1e:59:fe:4b:ff:51:a7:95:57:3b:9f:e8: a6:da:77:e6:d5:ac:86:e3:80:27:34:9d:d7:d1:73: 31:b2:b3:c9:55:88:85:fc:b3:5b:6a:72:2c:fc:91: 9d:98:5c:b5:e8:c3:6b:53:41:e8:80:a0:8b:9c:7a: 58:ed:6f:fd:ed:45:d5:a2:29:5e:a3:b8:6e:25:50: 42:25:a3:da:75:0e:96:1c:61:dd:a3:c5:7b:d9:59: ea:40:58:d8:b9:5e:94:12:0e:c7:91:c5:2f:9a:81: e6:89:d2:65:0d:e7:2c:e3:c2:34:b2:cb:a5:5b:a0: 9c:17:33:39:e4:d0:0d:a8:36:da:da:d4:74:80:e6: a2:ce:6e:a1:f1:34:50:17:f8:5e:dd:f2:5d:5d:90: cf:61:89:e4:72:7e:c5:8a:91:52:91:56:ab:46:61: f8:ec:af:73:38:d5:d9:dc:8e:59:9d:65:07:3c:fb: dd:68:6f:1c:a1:f6:be:81:17:4c:96:fe:1c:00:b2: e2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:35:90:04:8B:98:D9:2E:79:69:41:A5:95:B8:C7:D5:5D:7B:CA:69 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202322.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:f70::/44 Signature Algorithm: sha256WithRSAEncryption 5a:fc:36:9b:a5:7b:a3:7b:4b:3c:db:48:1b:f9:bf:e6:af:7f: 49:3c:b6:8f:56:ac:e7:18:5a:97:f0:a8:ba:f1:c8:2c:03:c5: fc:8d:77:c5:98:51:5e:fa:80:ac:1f:89:43:7d:09:a0:23:6c: 35:39:53:d0:d7:e2:e5:70:10:ad:42:9b:1b:d2:04:c1:e9:ca: 50:8d:8d:c0:8f:69:eb:54:ca:d6:f2:6d:2e:3a:fc:0b:97:fd: 0c:d5:0d:bc:68:83:c9:c1:c7:13:9e:7d:65:1f:5c:6a:42:0c: 27:21:36:42:b5:ae:c1:ac:2f:60:a8:50:03:e9:ea:ad:d3:05: 82:6b:52:04:5a:70:5e:ca:17:17:96:0a:a3:8c:81:c2:f9:4a: e5:4b:3f:ef:59:b0:b9:02:a8:67:69:ba:4a:a5:5d:a0:d0:0d: c4:91:72:e1:a8:d0:ae:79:c6:34:eb:27:93:de:e6:a3:d4:b5: b8:18:16:e8:57:95:7b:b0:e0:31:c7:72:88:e3:94:60:5f:db: e9:d2:f7:c7:6a:3d:dc:f3:c5:99:38:78:14:46:42:42:1c:42: 99:e1:b7:7e:38:b9:3e:d6:d1:81:51:44:d3:bf:f9:0b:85:0e: 56:54:0c:91:ad:27:4e:46:92:bf:1b:67:10:30:94:11:c4:cf: 84:7b:85:06 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUYWeyCRsnyR+KQclqCdk6SYmq8mcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMTYxNjAzNTdaFw0yNzAxMTUxNjA4NTdaMDMxMTAvBgNV BAMTKDZFMzU5MDA0OEI5OEQ5MkU3OTY5NDFBNTk1QjhDN0Q1NUQ3QkNBNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp/jwXy1k7q5u8vmDl+a3uOsS1 UF2OCd7OrPd+/HEcdjV9kkDtT/mQQzrzv0WijMKN+4vV14V/GIxdl4FBDx5Z/kv/ UaeVVzuf6Kbad+bVrIbjgCc0ndfRczGys8lViIX8s1tqciz8kZ2YXLXow2tTQeiA oIuceljtb/3tRdWiKV6juG4lUEIlo9p1DpYcYd2jxXvZWepAWNi5XpQSDseRxS+a geaJ0mUN5yzjwjSyy6VboJwXMznk0A2oNtra1HSA5qLObqHxNFAX+F7d8l1dkM9h ieRyfsWKkVKRVqtGYfjsr3M41dncjlmdZQc8+91obxyh9r6BF0yW/hwAsuLLAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUbjWQBIuY2S55aUGllbjH1V17ymkwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjAyMzIyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1 gQ9wMA0GCSqGSIb3DQEBCwUAA4IBAQBa/DabpXuje0s820gb+b/mr39JPLaPVqzn GFqX8Ki68cgsA8X8jXfFmFFe+oCsH4lDfQmgI2w1OVPQ1+LlcBCtQpsb0gTB6cpQ jY3Aj2nrVMrW8m0uOvwLl/0M1Q28aIPJwccTnn1lH1xqQgwnITZCta7BrC9gqFAD 6eqt0wWCa1IEWnBeyhcXlgqjjIHC+UrlSz/vWbC5AqhnabpKpV2g0A3EkXLhqNCu ecY06yeT3uaj1LW4GBboV5V7sOAxx3KI45RgX9vp0vfHaj3c88WZOHgURkJCHEKZ 4bd+OLk+1tGBUUTTv/kLhQ5WVAyRrSdORpK/G2cQMJQRxM+Ee4UG -----END CERTIFICATE-----Generated at Tue Jan 20 22:19:40 2026 by rpki-client