This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204603.roa File: AS204603.roa (raw, json) Hash identifier: 87EWA+UXodZivAyxqKivtd5D36sLI0E2Rq3j7iywlm0= Subject key identifier: 28:FF:1A:BA:C5:23:76:FB:0D:7C:09:C8:AF:A0:29:69:7E:E6:57:06 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 02106E4C277C2216BB897D9C1028C2EF43942DD5 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204603.roa Signing time: Wed 22 Oct 2025 14:10:44 +0000 ROA not before: Wed 22 Oct 2025 14:05:44 +0000 ROA not after: Wed 21 Oct 2026 14:10:44 +0000 asID: 204603 IP address blocks: 2a14:7580:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:10:6e:4c:27:7c:22:16:bb:89:7d:9c:10:28:c2:ef:43:94:2d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Oct 22 14:05:44 2025 GMT Not After : Oct 21 14:10:44 2026 GMT Subject: CN=28FF1ABAC52376FB0D7C09C8AFA029697EE65706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:a9:8b:5d:35:fc:07:51:6b:aa:3c:8f:78: 87:4d:16:b2:88:df:98:81:28:6b:75:17:06:56:37: 8d:d1:5c:b3:6d:a2:5e:a7:f8:50:ee:0f:48:b8:8d: ab:57:2a:32:11:8e:03:48:e4:0e:9f:74:cc:2a:72: 78:de:17:9b:83:d0:06:88:3e:f8:2f:a9:dd:b3:e9: 84:ff:11:78:d1:2b:b1:29:d1:a9:fc:3d:16:17:99: 78:ae:03:c2:fa:5a:19:44:83:fd:e1:24:93:51:10: 41:cb:5b:e5:71:a3:b4:df:1a:60:10:eb:c4:9d:e0: d7:02:61:c4:df:66:ad:76:cd:0e:60:74:db:1e:e1: 0c:5b:af:1a:a9:8d:0b:96:a5:41:f5:25:8b:09:d5: 71:ac:1f:ac:43:86:84:6d:1f:39:9b:be:77:64:84: 99:3c:5d:d9:24:7b:1a:55:c7:c8:e9:a4:fa:dc:26: 1c:21:5c:d0:db:6d:1d:c8:6c:92:31:5a:b3:1b:23: 65:6e:a4:eb:06:7d:84:c1:84:e7:3f:95:dd:55:da: 83:26:1a:70:aa:f5:7f:22:76:a7:33:6a:17:79:2b: a0:9f:12:3e:8f:2a:12:24:4b:c6:97:38:9f:c0:52: ce:8e:bf:46:80:c8:84:1c:9e:9f:7f:08:2d:ff:67: 5f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FF:1A:BA:C5:23:76:FB:0D:7C:09:C8:AF:A0:29:69:7E:E6:57:06 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204603.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 22:e4:21:aa:e9:45:bb:80:6c:ee:83:f0:83:b0:94:b1:d1:14: b5:68:25:82:11:31:07:c8:45:8b:b0:d5:45:16:89:6d:a8:39: 92:49:ef:6f:8f:83:87:d7:01:3f:e2:a0:6c:db:34:44:b8:eb: cc:8f:28:30:ac:4b:48:43:78:c4:6d:99:06:60:95:a8:e1:dd: 39:6c:4d:64:85:56:0e:2e:ec:22:6e:32:94:ac:49:3c:1f:82: 63:09:8b:3d:06:9b:2f:e9:57:bd:d8:eb:9a:d9:99:b0:3e:28: 19:71:9d:db:4e:ac:03:4e:50:b7:23:40:cf:e8:94:fe:76:4e: 09:02:2a:65:5a:c2:4d:49:75:0a:b3:71:cd:4b:3f:75:03:aa: 06:42:b3:6e:c2:12:ba:e8:36:90:66:fe:f7:cf:17:b0:d4:b8: dc:dd:fc:f3:40:df:e8:a5:7e:b6:7f:b2:38:2a:1c:96:4c:67: 2b:4a:02:9e:98:82:29:0d:da:cd:ff:92:bb:ed:77:26:2e:dd: 09:03:9f:11:0f:76:ab:12:a1:11:a0:57:62:06:22:ca:10:40: e6:e1:5b:69:79:5e:c9:b4:90:62:81:9f:bb:31:0f:7e:2e:14: 37:22:01:65:19:eb:5e:8c:49:c8:f8:8c:e1:2d:f1:02:24:f1: f8:1d:82:57 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUAhBuTCd8Iha7iX2cECjC70OULdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEwMjIxNDA1NDRaFw0yNjEwMjExNDEwNDRaMDMxMTAvBgNV BAMTKDI4RkYxQUJBQzUyMzc2RkIwRDdDMDlDOEFGQTAyOTY5N0VFNjU3MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP6qmLXTX8B1FrqjyPeIdNFrKI 35iBKGt1FwZWN43RXLNtol6n+FDuD0i4jatXKjIRjgNI5A6fdMwqcnjeF5uD0AaI Pvgvqd2z6YT/EXjRK7Ep0an8PRYXmXiuA8L6WhlEg/3hJJNREEHLW+Vxo7TfGmAQ 68Sd4NcCYcTfZq12zQ5gdNse4QxbrxqpjQuWpUH1JYsJ1XGsH6xDhoRtHzmbvndk hJk8XdkkexpVx8jppPrcJhwhXNDbbR3IbJIxWrMbI2VupOsGfYTBhOc/ld1V2oMm GnCq9X8idqczahd5K6CfEj6PKhIkS8aXOJ/AUs6Ov0aAyIQcnp9/CC3/Z1/VAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUKP8ausUjdvsNfAnIr6ApaX7mVwYwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjA0NjAzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1 gP//MA0GCSqGSIb3DQEBCwUAA4IBAQAi5CGq6UW7gGzug/CDsJSx0RS1aCWCETEH yEWLsNVFFoltqDmSSe9vj4OH1wE/4qBs2zREuOvMjygwrEtIQ3jEbZkGYJWo4d05 bE1khVYOLuwibjKUrEk8H4JjCYs9Bpsv6Ve92Oua2ZmwPigZcZ3bTqwDTlC3I0DP 6JT+dk4JAiplWsJNSXUKs3HNSz91A6oGQrNuwhK66DaQZv73zxew1Ljc3fzzQN/o pX62f7I4KhyWTGcrSgKemIIpDdrN/5K77XcmLt0JA58RD3arEqERoFdiBiLKEEDm 4VtpeV7JtJBigZ+7MQ9+LhQ3IgFlGetejEnI+IzhLfECJPH4HYJX -----END CERTIFICATE-----Generated at Fri Dec 5 19:12:18 2025 by rpki-client