This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207338.roa File: AS207338.roa (raw, json) Hash identifier: 1UBBx88+j/bNIadwoTDJgtL1sDiQ6CgLBVivfLoKcoY= Subject key identifier: AE:0A:AB:BE:E4:AF:6C:FB:BA:7C:5B:99:2E:EA:49:30:5E:45:8E:E0 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 7A30753B06FE939F620325223B29A77DD16249C9 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207338.roa Signing time: Tue 06 Jan 2026 01:00:44 +0000 ROA not before: Tue 06 Jan 2026 00:55:44 +0000 ROA not after: Tue 05 Jan 2027 01:00:44 +0000 asID: 207338 IP address blocks: 2a14:7581:f50::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 14:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:30:75:3b:06:fe:93:9f:62:03:25:22:3b:29:a7:7d:d1:62:49:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 6 00:55:44 2026 GMT Not After : Jan 5 01:00:44 2027 GMT Subject: CN=AE0AABBEE4AF6CFBBA7C5B992EEA49305E458EE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ae:97:7a:6d:f9:6a:53:27:7f:bb:08:a1:9b: 1a:f0:50:d2:cb:20:0d:e8:de:57:ef:4c:15:05:0b: 15:c7:9a:aa:39:d8:2c:b4:17:d6:43:c8:11:38:76: dd:03:ec:b9:5c:28:d5:45:ef:02:2d:b9:42:1a:26: b4:48:f5:81:08:79:94:23:6a:e6:24:34:51:05:e0: 6f:2c:1b:9d:84:2f:4c:89:25:df:85:3e:f6:5d:b6: 8b:a6:8d:0e:c2:9e:12:8b:07:65:c3:60:d5:f9:cc: ee:45:62:2a:67:93:f3:64:49:50:b4:bb:4d:02:7d: f5:9e:75:05:46:42:4d:fd:75:0f:d1:ef:78:de:f2: d3:a1:b4:33:a4:ce:68:69:3b:64:63:06:e7:59:39: 9d:4f:6e:50:4d:93:29:b3:5a:4d:27:67:e7:78:d7: 7b:4e:70:5c:1d:db:89:12:c2:9a:2d:58:d6:43:a0: 72:e0:c2:f9:9a:77:e3:72:3a:25:75:38:e0:d6:2f: 65:66:5b:d9:cc:72:1c:32:6a:f4:12:2d:6f:9d:b4: 15:ff:f2:86:94:6c:4a:e0:32:c4:8f:38:1b:c3:7b: 4e:b0:45:a4:bb:fb:ca:84:f5:ee:c5:bd:2d:12:fb: 93:a6:95:dd:c0:68:a1:a6:91:7f:a4:cb:ac:fd:0b: e0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0A:AB:BE:E4:AF:6C:FB:BA:7C:5B:99:2E:EA:49:30:5E:45:8E:E0 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS207338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:f50::/44 Signature Algorithm: sha256WithRSAEncryption 96:61:0d:02:7c:20:76:c1:e6:57:44:06:65:f1:f0:b4:3c:4c: 54:04:fe:94:6d:1e:de:94:15:4f:f0:55:d6:e1:1e:67:fc:70: 87:e1:9d:13:0f:7d:4c:21:a7:b6:54:7e:54:1d:5b:1a:4f:ec: a7:9e:f0:43:c9:00:bf:69:2b:4b:df:d9:79:a2:0c:4e:cd:b1: 3c:d6:3a:c8:c4:33:37:ce:91:9f:f4:63:9f:e7:62:bd:a1:93: ab:f3:53:de:43:41:72:b0:20:9b:7a:1f:22:12:40:4c:19:c6: 18:e8:3a:a5:35:dc:1d:f9:c6:b8:1f:cc:21:62:4a:ef:83:c4: f4:b9:4f:b4:9d:b7:27:fd:fe:41:93:a8:83:6a:b4:fb:20:17: 9c:86:d2:75:35:4f:52:9e:67:5f:5b:a6:cd:66:ce:99:7a:ec: 6b:83:a1:8e:c1:ce:14:9b:92:53:8c:78:ea:a5:c1:82:3d:ca: 09:ef:05:8f:36:ae:a4:af:e6:1d:29:1c:2d:50:19:65:73:87: 91:64:1c:34:51:9c:75:e3:24:92:52:4f:c0:d3:12:d2:78:2b: 62:de:5c:f7:75:af:19:4f:41:ce:f3:f7:3d:8e:79:bb:ac:dd: 4c:b7:bc:19:85:fa:00:7b:90:cc:fe:5e:11:cd:47:88:23:1d: a6:1e:87:ba -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUejB1Owb+k59iAyUiOymnfdFiSckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMDYwMDU1NDRaFw0yNzAxMDUwMTAwNDRaMDMxMTAvBgNV BAMTKEFFMEFBQkJFRTRBRjZDRkJCQTdDNUI5OTJFRUE0OTMwNUU0NThFRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXrpd6bflqUyd/uwihmxrwUNLL IA3o3lfvTBUFCxXHmqo52Cy0F9ZDyBE4dt0D7LlcKNVF7wItuUIaJrRI9YEIeZQj auYkNFEF4G8sG52EL0yJJd+FPvZdtoumjQ7CnhKLB2XDYNX5zO5FYipnk/NkSVC0 u00CffWedQVGQk39dQ/R73je8tOhtDOkzmhpO2RjBudZOZ1PblBNkymzWk0nZ+d4 13tOcFwd24kSwpotWNZDoHLgwvmad+NyOiV1OODWL2VmW9nMchwyavQSLW+dtBX/ 8oaUbErgMsSPOBvDe06wRaS7+8qE9e7FvS0S+5Omld3AaKGmkX+ky6z9C+A1AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUrgqrvuSvbPu6fFuZLupJMF5FjuAwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjA3MzM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1 gQ9QMA0GCSqGSIb3DQEBCwUAA4IBAQCWYQ0CfCB2weZXRAZl8fC0PExUBP6UbR7e lBVP8FXW4R5n/HCH4Z0TD31MIae2VH5UHVsaT+ynnvBDyQC/aStL39l5ogxOzbE8 1jrIxDM3zpGf9GOf52K9oZOr81PeQ0FysCCbeh8iEkBMGcYY6DqlNdwd+ca4H8wh Ykrvg8T0uU+0nbcn/f5Bk6iDarT7IBechtJ1NU9SnmdfW6bNZs6Zeuxrg6GOwc4U m5JTjHjqpcGCPcoJ7wWPNq6kr+YdKRwtUBllc4eRZBw0UZx14ySSUk/A0xLSeCti 3lz3da8ZT0HO8/c9jnm7rN1Mt7wZhfoAe5DM/l4RzUeIIx2mHoe6 -----END CERTIFICATE-----Generated at Mon Feb 2 17:22:18 2026 by rpki-client