This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS203771.roa File: AS203771.roa (raw, json) Hash identifier: tagqz7HWLhz3vJPPzleu+qL6yZG4lUeXYYmzYiJihVk= Subject key identifier: D9:37:8B:54:EE:EC:2A:A2:C6:BA:A6:6A:86:88:70:43:C4:06:49:90 Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 4B78DD38DA72BA64F2ADFF172CB341D93D3F2FF9 Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS203771.roa Signing time: Tue 18 Nov 2025 15:02:57 +0000 ROA not before: Tue 18 Nov 2025 14:57:57 +0000 ROA not after: Tue 17 Nov 2026 15:02:57 +0000 asID: 203771 IP address blocks: 31.40.196.0/24 maxlen: 24 37.221.79.0/24 maxlen: 24 185.231.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Nov 2025 09:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:78:dd:38:da:72:ba:64:f2:ad:ff:17:2c:b3:41:d9:3d:3f:2f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Nov 18 14:57:57 2025 GMT Not After : Nov 17 15:02:57 2026 GMT Subject: CN=D9378B54EEEC2AA2C6BAA66A86887043C4064990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2a:df:d6:28:0f:e9:ee:d2:fa:4f:8c:61:2c: cb:f4:97:8c:ea:02:99:c5:e1:5f:25:e3:e8:4d:a9: d9:d5:79:ac:5e:5f:60:a7:99:7b:f6:45:e1:7b:2c: b1:cc:9e:7b:00:d3:5e:30:30:78:e5:6c:5b:3b:f6: fe:f6:dc:46:bf:18:ee:c2:ab:59:08:a3:97:1a:3f: f6:5b:75:a2:23:ca:24:28:3b:fa:30:49:a3:ac:65: 46:ff:e7:b6:20:3d:be:ea:17:cb:83:9a:ab:25:cc: fc:0b:c1:f2:43:c2:43:99:4d:48:3e:73:d4:53:78: c5:46:d2:9a:89:a2:b6:d6:97:68:d5:e9:f1:b8:02: 5f:58:d3:ae:55:04:dd:29:2f:23:2e:22:c3:1a:ea: 7e:5c:7c:0e:95:a2:6b:82:78:6b:72:f5:50:9d:e7: f6:73:c1:e6:95:d9:9b:66:47:a4:30:5a:81:22:4e: 7a:df:ae:39:e5:fc:eb:80:a3:19:7b:10:bc:95:30: 1e:af:9d:91:ce:d6:e0:f2:4a:f1:6c:21:83:21:5e: cc:e0:d7:1f:9f:1a:b6:1b:49:a3:cd:94:65:5c:e8: bd:a5:f8:f0:b3:84:26:0b:2d:ea:d3:f3:2e:77:8e: ec:27:c5:7c:47:d0:86:36:81:73:25:aa:4f:68:96: c2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:37:8B:54:EE:EC:2A:A2:C6:BA:A6:6A:86:88:70:43:C4:06:49:90 X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS203771.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.196.0/24 37.221.79.0/24 185.231.226.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:96:65:e9:e9:7d:e8:1e:27:cc:f3:95:f0:20:52:b9:c5:ca: fe:b7:b4:93:88:50:c3:cd:fb:ba:9f:0b:dc:35:e0:91:bd:3b: 49:69:45:83:d9:5c:60:dc:66:84:c6:a6:18:8c:03:3b:4f:c2: 30:42:77:3d:b1:13:df:f8:95:c4:dc:44:91:98:9f:bf:ee:81: e6:6b:af:70:bb:c8:03:a6:56:05:ef:61:73:67:7f:d7:17:ef: 26:f7:2d:8d:be:da:82:61:a8:0a:f1:57:53:10:12:45:ba:25: eb:c3:77:e3:30:10:5d:c5:48:95:c7:74:74:3b:ae:c1:ef:1b: f3:89:3f:2b:a5:f5:d3:e4:29:9f:3c:e4:a0:34:e0:7e:23:1e: 04:12:14:0d:91:e2:02:87:ec:0d:1b:4d:ad:f3:75:86:e1:2a: af:d4:56:aa:c2:23:1d:0b:38:0c:36:cb:0c:ed:19:dc:2f:b7: 77:7a:a4:eb:d9:d0:54:93:9c:40:ba:2f:89:86:dd:24:2a:32: 3f:18:b9:a7:83:d6:47:37:8a:1b:6b:2b:66:40:07:6c:60:90: c0:36:83:06:78:bb:c8:2d:da:fa:c7:3e:a4:95:50:b3:05:ef: 5d:50:38:70:6e:9b:ea:97:87:0d:1a:f8:0f:c1:c4:83:d5:c0: ee:d5:d1:02 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUS3jdONpyumTyrf8XLLNB2T0/L/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNTExMTgxNDU3NTdaFw0yNjExMTcxNTAyNTdaMDMxMTAvBgNV BAMTKEQ5Mzc4QjU0RUVFQzJBQTJDNkJBQTY2QTg2ODg3MDQzQzQwNjQ5OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAKt/WKA/p7tL6T4xhLMv0l4zq ApnF4V8l4+hNqdnVeaxeX2CnmXv2ReF7LLHMnnsA014wMHjlbFs79v723Ea/GO7C q1kIo5caP/ZbdaIjyiQoO/owSaOsZUb/57YgPb7qF8uDmqslzPwLwfJDwkOZTUg+ c9RTeMVG0pqJorbWl2jV6fG4Al9Y065VBN0pLyMuIsMa6n5cfA6VomuCeGty9VCd 5/ZzweaV2ZtmR6QwWoEiTnrfrjnl/OuAoxl7ELyVMB6vnZHO1uDySvFsIYMhXszg 1x+fGrYbSaPNlGVc6L2l+PCzhCYLLerT8y53juwnxXxH0IY2gXMlqk9olsKrAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQU2TeLVO7sKqLGuqZqhohwQ8QGSZAwHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjAzNzcxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHyjE AwQAJd1PAwQAuefiMA0GCSqGSIb3DQEBCwUAA4IBAQCblmXp6X3oHifM85XwIFK5 xcr+t7STiFDDzfu6nwvcNeCRvTtJaUWD2Vxg3GaExqYYjAM7T8IwQnc9sRPf+JXE 3ESRmJ+/7oHma69wu8gDplYF72FzZ3/XF+8m9y2NvtqCYagK8VdTEBJFuiXrw3fj MBBdxUiVx3R0O67B7xvziT8rpfXT5CmfPOSgNOB+Ix4EEhQNkeICh+wNG02t83WG 4Sqv1FaqwiMdCzgMNssM7RncL7d3eqTr2dBUk5xAui+Jht0kKjI/GLmng9ZHN4ob aytmQAdsYJDANoMGeLvILdr6xz6klVCzBe9dUDhwbpvql4cNGvgPwcSD1cDu1dEC -----END CERTIFICATE-----Generated at Fri Nov 21 18:23:13 2025 by rpki-client