This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202464.roa File: AS202464.roa (raw, json) Hash identifier: ZcZ+JopwKzSulaVLSWAMazg9DMmq3+8V4iaBpOooFwQ= Subject key identifier: 09:40:DA:B5:68:28:E5:80:C7:1D:D8:88:9A:2E:C8:86:23:16:F0:91 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 3CDFB7B79B3F20638AF2E917EF2B534CF7FD1381 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202464.roa Signing time: Fri 09 Jan 2026 11:43:08 +0000 ROA not before: Fri 09 Jan 2026 11:38:08 +0000 ROA not after: Fri 08 Jan 2027 11:43:08 +0000 asID: 202464 IP address blocks: 2a14:7580:ffea::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:df:b7:b7:9b:3f:20:63:8a:f2:e9:17:ef:2b:53:4c:f7:fd:13:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 9 11:38:08 2026 GMT Not After : Jan 8 11:43:08 2027 GMT Subject: CN=0940DAB56828E580C71DD8889A2EC8862316F091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5a:fa:e7:34:a8:4e:73:b8:fd:0c:8f:d7:e7: af:0d:2d:46:60:d6:ce:d0:fc:c5:83:25:0c:c3:44: 48:cb:70:7e:bd:9c:ce:6e:41:19:68:e0:33:f1:25: 2a:c5:41:7c:d8:91:db:69:f4:03:16:df:e4:8d:b0: 0f:41:7d:fe:fe:cb:89:82:e1:28:e7:66:0b:09:6d: 95:87:67:cd:21:9b:ea:63:72:22:ad:8b:fa:ff:66: 51:fa:49:9e:1d:ab:f2:9b:96:76:fd:58:07:90:f0: 94:a2:30:8a:5e:23:0e:38:0b:88:41:fc:7c:75:72: c5:7c:02:f8:e1:ed:34:04:ec:2a:e7:67:da:5b:da: 68:7f:83:35:d3:4a:58:f7:ef:85:a9:09:b2:f1:c6: 64:7b:94:b0:c7:d5:bc:99:0b:36:a3:e5:c6:14:82: 89:d0:1d:b5:92:b8:f7:e9:6c:31:0a:53:d7:e6:c7: c3:f1:bf:cf:92:e9:8a:14:bc:95:de:13:56:75:42: 69:dc:17:4e:6a:c6:3c:d0:ff:4f:f0:27:8f:5e:a8: 4f:80:df:ae:02:5d:f0:9f:bf:6c:62:59:c5:70:f2: 44:b0:ea:1c:0e:8e:f9:e1:31:09:fc:89:63:cc:e5: e4:41:2b:ba:dd:e9:4b:4f:62:a7:e3:0c:cb:4a:c3: 9b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:40:DA:B5:68:28:E5:80:C7:1D:D8:88:9A:2E:C8:86:23:16:F0:91 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202464.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ffea::/48 Signature Algorithm: sha256WithRSAEncryption 47:e2:d4:17:24:e9:af:d1:32:b5:2f:f8:f0:12:a7:6d:01:91: 21:da:c8:d4:e8:40:98:c2:ac:e2:c5:cf:31:18:07:a3:f3:09: 43:32:a7:1f:40:21:ee:90:58:44:a3:f5:cc:b2:9e:73:f9:60: 35:73:00:87:1d:8b:a3:e9:11:d3:01:76:d1:4b:03:1b:5f:57: 5c:eb:a5:8c:98:21:2a:e8:1f:81:eb:cc:db:b0:ba:a1:d3:a7: 02:b2:05:31:a5:c4:dd:f2:2e:9c:47:1a:e3:47:e6:7a:ac:f0: 0d:76:59:fd:7c:a6:43:dd:de:bf:29:d9:27:66:4e:3f:16:09: c1:ef:3a:80:af:43:12:d0:90:24:9f:d5:62:7c:c5:bf:2c:a1: dd:ad:36:0e:ed:34:9d:04:a8:99:2b:39:8b:fd:cb:8e:4b:13: 72:af:d7:29:42:85:2a:20:3e:5b:d6:a1:d0:b8:19:b4:36:08: 31:6c:ad:14:21:a3:e0:4d:53:b4:08:99:f1:ef:da:fa:06:1c: 66:fe:e0:b2:d4:a4:eb:fc:2d:2d:26:46:24:52:5d:17:2c:96: 50:42:ee:41:4e:b1:5f:f5:12:ff:71:94:ab:1f:b0:60:d2:9a: b1:00:37:a9:f9:4b:e8:b2:1c:94:ce:40:2d:d0:13:0f:10:39: 81:25:60:9c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUPN+3t5s/IGOK8ukX7ytTTPf9E4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMDkxMTM4MDhaFw0yNzAxMDgxMTQzMDhaMDMxMTAvBgNV BAMTKDA5NDBEQUI1NjgyOEU1ODBDNzFERDg4ODlBMkVDODg2MjMxNkYwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbWvrnNKhOc7j9DI/X568NLUZg 1s7Q/MWDJQzDREjLcH69nM5uQRlo4DPxJSrFQXzYkdtp9AMW3+SNsA9Bff7+y4mC 4SjnZgsJbZWHZ80hm+pjciKti/r/ZlH6SZ4dq/Kblnb9WAeQ8JSiMIpeIw44C4hB /Hx1csV8Avjh7TQE7CrnZ9pb2mh/gzXTSlj374WpCbLxxmR7lLDH1byZCzaj5cYU gonQHbWSuPfpbDEKU9fmx8Pxv8+S6YoUvJXeE1Z1QmncF05qxjzQ/0/wJ49eqE+A 364CXfCfv2xiWcVw8kSw6hwOjvnhMQn8iWPM5eRBK7rd6UtPYqfjDMtKw5v/AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUCUDatWgo5YDHHdiImi7IhiMW8JEwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjAyNDY0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1 gP/qMA0GCSqGSIb3DQEBCwUAA4IBAQBH4tQXJOmv0TK1L/jwEqdtAZEh2sjU6ECY wqzixc8xGAej8wlDMqcfQCHukFhEo/XMsp5z+WA1cwCHHYuj6RHTAXbRSwMbX1dc 66WMmCEq6B+B68zbsLqh06cCsgUxpcTd8i6cRxrjR+Z6rPANdln9fKZD3d6/Kdkn Zk4/FgnB7zqAr0MS0JAkn9VifMW/LKHdrTYO7TSdBKiZKzmL/cuOSxNyr9cpQoUq ID5b1qHQuBm0NggxbK0UIaPgTVO0CJnx79r6Bhxm/uCy1KTr/C0tJkYkUl0XLJZQ Qu5BTrFf9RL/cZSrH7Bg0pqxADep+UvoshyUzkAt0BMPEDmBJWCc -----END CERTIFICATE-----Generated at Tue Jan 20 22:19:40 2026 by rpki-client