This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210940.roa File: AS210940.roa (raw, json) Hash identifier: ozTrdqcR8VWGw7wNrLKBJkIXrV9kz+MAVMAPT+D9Jgc= Subject key identifier: A8:11:4E:30:40:76:39:D2:E3:F9:8C:95:A0:43:E1:92:8C:E1:E1:08 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 3611EF0BD0E4B77A7396785E8E91CAC6C5AE7799 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210940.roa Signing time: Wed 24 Dec 2025 16:14:24 +0000 ROA not before: Wed 24 Dec 2025 16:09:24 +0000 ROA not after: Wed 23 Dec 2026 16:14:24 +0000 asID: 210940 IP address blocks: 2a14:7580:ff10::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:11:ef:0b:d0:e4:b7:7a:73:96:78:5e:8e:91:ca:c6:c5:ae:77:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 24 16:09:24 2025 GMT Not After : Dec 23 16:14:24 2026 GMT Subject: CN=A8114E30407639D2E3F98C95A043E1928CE1E108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8f:8c:39:bf:05:6c:8d:a7:68:d7:ad:10:03: 81:ae:8d:e0:38:9a:62:86:6b:51:e1:0f:62:4a:0c: 4c:d7:b4:d2:81:21:95:d7:9d:24:03:c2:74:14:d5: b7:4b:ac:28:7b:6b:66:69:79:ce:f8:13:64:37:32: 82:a8:fc:57:ad:2a:6e:db:9a:c3:e9:17:8e:32:12: 7c:33:5c:cc:0b:59:f6:ea:3e:fa:5e:4f:95:80:30: 1d:0d:f9:aa:98:18:69:5c:d5:47:1e:a7:54:ac:23: a1:9e:a9:70:d8:4f:29:e4:d9:97:55:1a:99:32:b1: 17:0f:3d:ab:91:24:70:23:91:c1:36:81:dd:6d:c4: 44:36:27:7b:57:d5:9b:43:ed:27:b4:35:af:c5:69: 12:35:68:8f:99:8b:fd:87:fe:5c:4f:f8:39:fb:58: bc:6f:95:83:16:d0:c1:0a:fb:3d:25:bd:bf:bc:b8: e3:38:b9:99:17:3a:f8:d2:cb:56:38:f6:8c:fb:a6: ae:d6:b8:80:42:00:8f:50:51:40:30:de:ab:27:b0: 80:62:ac:27:0e:96:37:69:54:b5:06:ee:06:2b:33: cd:5a:e9:94:72:89:2a:19:bd:89:b9:89:18:7d:91: a8:28:ca:f4:d3:3a:8e:ba:0a:be:a2:f7:b8:73:00: 1b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:11:4E:30:40:76:39:D2:E3:F9:8C:95:A0:43:E1:92:8C:E1:E1:08 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210940.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff10::/44 Signature Algorithm: sha256WithRSAEncryption 53:9c:70:0b:63:e0:1e:ab:de:ba:73:97:2d:82:a5:ca:1d:70: 03:8c:b0:5c:4c:62:3c:71:72:8a:9d:c7:60:91:f1:83:21:27: cf:ce:b4:ed:42:d0:c6:22:28:08:f7:42:9f:7d:fe:04:f0:e5: 35:c6:c3:7c:1d:d7:c4:41:c7:26:cf:4e:6d:fd:32:96:dd:fb: 75:7f:e3:2f:cc:46:85:2e:d7:0d:da:c4:33:e4:98:8c:86:10: 12:f0:f5:1d:58:ee:d5:96:63:e2:7d:f1:d0:36:88:6d:3a:f3: b6:28:31:37:4a:bc:7a:99:d7:ce:c9:88:a3:80:a3:6f:1d:31: 23:4a:bf:3b:ff:fa:96:f5:57:1f:2b:46:27:49:ab:8f:aa:7e: 24:da:ef:1e:1c:10:0b:2f:f5:8b:05:00:f9:3f:f1:3b:6c:06: 09:1f:47:f5:c2:72:90:44:f9:da:e0:fc:a1:cb:f1:de:7c:2b: 26:56:8a:36:2b:9f:63:a2:b1:d5:0b:e6:53:9c:10:d1:a0:21: 8d:bc:00:a9:e1:ea:dc:b5:b7:5a:6e:2c:77:03:3e:94:05:dc: 4b:8d:b3:67:b4:14:95:7b:62:d5:62:cf:ac:3b:7d:d6:9e:ab: d7:c3:2e:72:2f:80:6f:3b:b3:c7:78:0f:fe:9f:be:74:34:77: af:29:8f:39 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUNhHvC9Dkt3pzlnhejpHKxsWud5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMjQxNjA5MjRaFw0yNjEyMjMxNjE0MjRaMDMxMTAvBgNV BAMTKEE4MTE0RTMwNDA3NjM5RDJFM0Y5OEM5NUEwNDNFMTkyOENFMUUxMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrj4w5vwVsjado160QA4GujeA4 mmKGa1HhD2JKDEzXtNKBIZXXnSQDwnQU1bdLrCh7a2Zpec74E2Q3MoKo/FetKm7b msPpF44yEnwzXMwLWfbqPvpeT5WAMB0N+aqYGGlc1Ucep1SsI6GeqXDYTynk2ZdV GpkysRcPPauRJHAjkcE2gd1txEQ2J3tX1ZtD7Se0Na/FaRI1aI+Zi/2H/lxP+Dn7 WLxvlYMW0MEK+z0lvb+8uOM4uZkXOvjSy1Y49oz7pq7WuIBCAI9QUUAw3qsnsIBi rCcOljdpVLUG7gYrM81a6ZRyiSoZvYm5iRh9kagoyvTTOo66Cr6i97hzABu9AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUqBFOMEB2OdLj+YyVoEPhkozh4QgwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjEwOTQwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1 gP8QMA0GCSqGSIb3DQEBCwUAA4IBAQBTnHALY+Aeq966c5ctgqXKHXADjLBcTGI8 cXKKncdgkfGDISfPzrTtQtDGIigI90Kfff4E8OU1xsN8HdfEQccmz05t/TKW3ft1 f+MvzEaFLtcN2sQz5JiMhhAS8PUdWO7VlmPiffHQNohtOvO2KDE3Srx6mdfOyYij gKNvHTEjSr87//qW9VcfK0YnSauPqn4k2u8eHBALL/WLBQD5P/E7bAYJH0f1wnKQ RPna4Pyhy/HefCsmVoo2K59jorHVC+ZTnBDRoCGNvACp4erctbdabix3Az6UBdxL jbNntBSVe2LVYs+sO33WnqvXwy5yL4BvO7PHeA/+n750NHevKY85 -----END CERTIFICATE-----Generated at Mon Jan 19 18:08:30 2026 by rpki-client