This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS59920.roa File: AS59920.roa (raw, json) Hash identifier: GP/SErIWgMqDCzensnCkJL8laE9NTpa93GT4z1H1fog= Subject key identifier: 90:46:20:1D:9F:FE:36:CF:F8:AF:5B:EE:4D:18:5E:63:5F:D3:3E:AE Certificate issuer: /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Certificate serial: 526680687C5B6E18490C62848979343FF354F7DA Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS59920.roa Signing time: Fri 04 Jul 2025 07:51:29 +0000 ROA not before: Fri 04 Jul 2025 07:46:29 +0000 ROA not after: Fri 03 Jul 2026 07:51:29 +0000 asID: 59920 IP address blocks: 2a07:54c1:5000::/36 maxlen: 48 Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 52:66:80:68:7c:5b:6e:18:49:0c:62:84:89:79:34:3f:f3:54:f7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8 Validity Not Before: Jul 4 07:46:29 2025 GMT Not After : Jul 3 07:51:29 2026 GMT Subject: CN=9046201D9FFE36CFF8AF5BEE4D185E635FD33EAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:55:ca:66:33:1e:55:c4:53:20:c2:c6:e7:c5: c0:94:ef:64:4f:26:b5:9f:7d:0c:01:dc:a6:c7:25: a8:3f:d7:d5:2a:d2:5d:e2:be:16:4f:ec:a9:a0:5b: 4f:35:ed:23:00:43:d8:05:0b:ef:7a:ee:86:9e:f5: be:b2:d1:67:df:4e:26:b1:6f:eb:c7:63:e2:72:4f: 04:7f:7c:20:f9:3f:00:86:a6:21:60:7a:4e:3c:44: d5:e3:6f:7c:99:55:1d:83:89:e4:af:ee:37:4d:cd: 96:86:c9:f9:be:90:ac:a2:06:c8:7a:22:87:56:b8: 8e:cb:16:1b:5c:00:bb:f1:e0:1f:62:71:16:5c:bf: ed:e3:5b:23:7c:b0:e4:97:28:64:21:e5:39:05:25: 42:43:1b:74:be:8a:33:6c:24:8d:44:f2:f5:e1:6f: 38:d2:03:b3:e7:7f:2b:52:39:0c:11:85:03:d3:99: 95:1f:76:5e:32:3c:2a:8a:35:fd:c5:60:f6:74:c5: f1:f0:d8:25:b8:44:b1:a2:5f:f1:05:05:d4:ef:34: e4:77:29:61:7c:e9:c9:86:bc:82:c5:ce:90:4c:a6: ed:5c:f8:82:78:ad:83:97:27:38:c9:96:f5:98:c1: e8:a7:58:6f:5e:62:1a:c1:f9:e2:21:8f:81:70:e6: 5d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:46:20:1D:9F:FE:36:CF:F8:AF:5B:EE:4D:18:5E:63:5F:D3:3E:AE X509v3 Authority Key Identifier: keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS59920.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:54c1:5000::/36 Signature Algorithm: sha256WithRSAEncryption 34:90:ed:5a:27:9f:ab:57:6c:81:ec:0c:33:b6:ab:9e:49:c8: d9:bb:23:a3:64:aa:20:06:8a:c4:e5:f7:9e:da:e8:8a:d7:b5: c2:1d:dd:42:45:64:1f:0b:e2:89:08:ce:81:95:a2:3e:e4:96: 73:1f:85:0f:95:fd:25:e3:53:70:82:b8:cb:c3:5a:31:fd:2c: 5d:2d:82:be:ce:60:6b:59:b1:65:34:f1:9d:af:b5:97:ff:95: f6:75:00:68:14:d7:fd:42:b9:63:05:e1:97:de:8f:44:31:03: f7:fb:34:93:3d:3c:e4:ac:48:b4:4c:2e:43:5d:e9:3e:b4:b0: 54:1a:27:8e:4c:de:2b:56:75:f1:0f:14:7a:db:b9:01:e8:ec: 42:cd:96:fe:c7:b0:81:03:f9:4a:8a:05:1c:f2:c3:23:36:ff: 9f:10:3e:e1:64:2d:36:ea:c2:e7:cd:fb:b9:15:13:86:f3:17: 8b:cd:cc:f1:04:32:a0:40:e4:98:6f:3e:f5:b3:62:11:fa:c1: ec:a7:54:58:f6:78:88:26:57:72:22:d1:f5:53:2d:74:f2:47: b8:6d:a7:f7:ab:a9:9e:68:e7:f8:7f:6c:c8:c3:06:0f:26:fc: ca:f5:11:2c:ec:84:a3:e9:ff:15:aa:51:10:91:1e:9d:14:a7: 34:53:26:0c -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUUmaAaHxbbhhJDGKEiXk0P/NU99owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjlaFw0yNjA3MDMwNzUxMjlaMDMxMTAvBgNV BAMTKDkwNDYyMDFEOUZGRTM2Q0ZGOEFGNUJFRTREMTg1RTYzNUZEMzNFQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtVcpmMx5VxFMgwsbnxcCU72RP JrWffQwB3KbHJag/19Uq0l3ivhZP7KmgW0817SMAQ9gFC+967oae9b6y0WffTiax b+vHY+JyTwR/fCD5PwCGpiFgek48RNXjb3yZVR2DieSv7jdNzZaGyfm+kKyiBsh6 IodWuI7LFhtcALvx4B9icRZcv+3jWyN8sOSXKGQh5TkFJUJDG3S+ijNsJI1E8vXh bzjSA7PnfytSOQwRhQPTmZUfdl4yPCqKNf3FYPZ0xfHw2CW4RLGiX/EFBdTvNOR3 KWF86cmGvILFzpBMpu1c+IJ4rYOXJzjJlvWYweinWG9eYhrB+eIhj4Fw5l07AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUkEYgHZ/+Ns/4r1vuTRheY1/TPq4wHwYDVR0j BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNTk5MjAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqB1TB UDANBgkqhkiG9w0BAQsFAAOCAQEANJDtWiefq1dsgewMM7arnknI2bsjo2SqIAaK xOX3ntroite1wh3dQkVkHwviiQjOgZWiPuSWcx+FD5X9JeNTcIK4y8NaMf0sXS2C vs5ga1mxZTTxna+1l/+V9nUAaBTX/UK5YwXhl96PRDED9/s0kz085KxItEwuQ13p PrSwVBonjkzeK1Z18Q8Uetu5AejsQs2W/sewgQP5SooFHPLDIzb/nxA+4WQtNurC 5837uRUThvMXi83M8QQyoEDkmG8+9bNiEfrB7KdUWPZ4iCZXciLR9VMtdPJHuG2n 96upnmjn+H9syMMGDyb8yvURLOyEo+n/FapREJEenRSnNFMmDA== -----END CERTIFICATE-----Generated at Sat Nov 22 22:04:48 2025 by rpki-client