This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204150.roa File: AS204150.roa (raw, json) Hash identifier: iPdI2FKgnRLbYL9IZNKQ5kJYQ+536KOatiD6kQxTkNo= Subject key identifier: E7:60:1A:FC:96:20:E0:C6:E7:CA:A3:63:E1:5D:52:42:A2:8C:16:C3 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 7A25D2AFE7A7F0539B5A51ABBCB553E2179EB866 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204150.roa Signing time: Sat 22 Nov 2025 00:58:56 +0000 ROA not before: Sat 22 Nov 2025 00:53:56 +0000 ROA not after: Sat 21 Nov 2026 00:58:56 +0000 asID: 204150 IP address blocks: 2a14:7580:fff0::/48 maxlen: 48 2a14:7583:fe00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:25:d2:af:e7:a7:f0:53:9b:5a:51:ab:bc:b5:53:e2:17:9e:b8:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Nov 22 00:53:56 2025 GMT Not After : Nov 21 00:58:56 2026 GMT Subject: CN=E7601AFC9620E0C6E7CAA363E15D5242A28C16C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:61:6f:37:9f:ba:81:ab:c7:68:bf:2a:04:59: d5:ca:4c:2b:0e:55:00:8b:87:32:4e:6c:ea:ac:fe: 14:13:6c:14:dc:36:1c:39:20:c5:8d:68:fe:19:6a: 72:6f:12:4c:4e:41:7d:f2:5f:06:56:da:c6:62:a1: d1:e7:01:9c:1f:45:02:54:68:0b:1e:ea:47:55:8e: ac:e9:09:70:16:bc:11:62:65:d8:0d:ee:e4:b5:de: e2:ab:06:5c:60:84:a4:d9:31:02:d4:04:2f:78:f8: 80:93:ae:87:f6:36:9a:e5:6a:25:f0:a1:4d:e3:5d: 66:be:76:d5:3f:8a:7a:c4:39:4c:c8:d1:b0:3a:12: 60:58:a8:56:15:04:82:26:ed:be:de:57:c6:85:96: ab:d3:bd:f8:f3:d0:90:5a:9c:e1:e4:36:41:cb:29: 65:aa:88:c2:0f:c6:0a:45:4b:6f:5e:fa:a0:ed:bd: 7d:e1:3a:b9:39:1e:83:53:f3:24:d2:9a:58:8d:ce: 85:b2:2d:16:b1:67:06:3a:90:96:55:a9:61:89:28: 8d:ec:fd:ad:70:f7:77:81:d2:63:e7:f7:2d:02:e5: 8a:99:ac:fe:ef:7d:31:16:d8:2e:72:22:12:9a:30: a2:ae:85:10:76:a7:74:15:14:45:d8:63:c3:44:5d: 86:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:60:1A:FC:96:20:E0:C6:E7:CA:A3:63:E1:5D:52:42:A2:8C:16:C3 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204150.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:fff0::/48 2a14:7583:fe00::/40 Signature Algorithm: sha256WithRSAEncryption 1b:b0:6c:ad:c5:76:00:f7:78:d2:20:74:2e:07:06:db:2f:5f: 57:01:31:7b:f1:c1:d9:5c:07:83:12:6a:17:44:44:e1:68:00: ed:ae:c5:d8:69:40:54:a3:0f:1e:3c:db:70:11:f4:b4:1d:ba: 1b:3a:cb:a4:bb:65:d2:aa:66:2f:58:0c:fb:a2:8b:83:0d:97: 50:7c:a1:f9:ff:f0:b5:59:35:93:94:9a:33:1c:dd:5e:85:04: 8c:e2:89:82:43:35:27:fd:5d:fb:f9:b4:0c:1e:a1:2e:36:b8: e9:9e:08:37:fb:dc:f7:f4:68:3f:82:59:19:b1:b5:e6:5a:62: 69:9d:0c:da:c0:1a:ce:c1:60:32:36:bd:7e:b2:b2:da:63:34: d8:d7:6e:9f:60:d2:b1:cc:d1:61:98:a9:9d:a0:a3:3a:1c:f7: f5:80:f8:fc:e6:8e:39:cd:d1:12:dd:41:e3:9c:24:5a:27:99: bc:db:07:80:5e:5a:de:34:f0:a9:2d:9c:da:4a:9f:f2:e7:3b: 9a:28:a5:82:4a:0a:39:df:d3:fe:18:fb:1e:e1:87:40:1e:c0: 55:99:29:9f:aa:24:74:5c:c3:88:04:f5:a6:b3:b5:ba:d4:fc: 73:cb:d4:c0:21:00:7a:a4:f2:3a:58:05:79:39:91:8b:e8:10: 9f:1a:66:42 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUeiXSr+en8FObWlGrvLVT4heeuGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTExMjIwMDUzNTZaFw0yNjExMjEwMDU4NTZaMDMxMTAvBgNV BAMTKEU3NjAxQUZDOTYyMEUwQzZFN0NBQTM2M0UxNUQ1MjQyQTI4QzE2QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZYW83n7qBq8dovyoEWdXKTCsO VQCLhzJObOqs/hQTbBTcNhw5IMWNaP4ZanJvEkxOQX3yXwZW2sZiodHnAZwfRQJU aAse6kdVjqzpCXAWvBFiZdgN7uS13uKrBlxghKTZMQLUBC94+ICTrof2NprlaiXw oU3jXWa+dtU/inrEOUzI0bA6EmBYqFYVBIIm7b7eV8aFlqvTvfjz0JBanOHkNkHL KWWqiMIPxgpFS29e+qDtvX3hOrk5HoNT8yTSmliNzoWyLRaxZwY6kJZVqWGJKI3s /a1w93eB0mPn9y0C5YqZrP7vfTEW2C5yIhKaMKKuhRB2p3QVFEXYY8NEXYa7AgMB AAGjggIVMIICETAdBgNVHQ4EFgQU52Aa/JYg4MbnyqNj4V1SQqKMFsMwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjA0MTUwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKhR1 gP/wAwYAKhR1g/4wDQYJKoZIhvcNAQELBQADggEBABuwbK3FdgD3eNIgdC4HBtsv X1cBMXvxwdlcB4MSahdEROFoAO2uxdhpQFSjDx4823AR9LQduhs6y6S7ZdKqZi9Y DPuii4MNl1B8ofn/8LVZNZOUmjMc3V6FBIziiYJDNSf9Xfv5tAweoS42uOmeCDf7 3Pf0aD+CWRmxteZaYmmdDNrAGs7BYDI2vX6ystpjNNjXbp9g0rHM0WGYqZ2gozoc 9/WA+PzmjjnN0RLdQeOcJFonmbzbB4BeWt408KktnNpKn/LnO5oopYJKCjnf0/4Y +x7hh0AewFWZKZ+qJHRcw4gE9aaztbrU/HPL1MAhAHqk8jpYBXk5kYvoEJ8aZkI= -----END CERTIFICATE-----Generated at Sat Nov 22 22:04:44 2025 by rpki-client