This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205886.roa File: AS205886.roa (raw, json) Hash identifier: OgU9MILn+0uei3bCgHcd6HmcHLZ1FTV8xb34B6Xncqg= Subject key identifier: 9C:2A:04:2D:4D:DB:2D:C9:0C:CD:CF:86:20:81:33:94:E8:D1:C4:DF Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 1CDC854BEC866310B7CC92AF3A7A9DD7EF15EEA7 Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205886.roa Signing time: Mon 15 Dec 2025 08:20:47 +0000 ROA not before: Mon 15 Dec 2025 08:15:47 +0000 ROA not after: Mon 14 Dec 2026 08:20:47 +0000 asID: 205886 IP address blocks: 143.20.8.0/24 maxlen: 24 143.20.74.0/24 maxlen: 24 143.20.179.0/24 maxlen: 24 143.20.206.0/24 maxlen: 24 143.20.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 02:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:dc:85:4b:ec:86:63:10:b7:cc:92:af:3a:7a:9d:d7:ef:15:ee:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Dec 15 08:15:47 2025 GMT Not After : Dec 14 08:20:47 2026 GMT Subject: CN=9C2A042D4DDB2DC90CCDCF8620813394E8D1C4DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4f:6d:d0:a0:6b:6e:af:e3:30:64:37:11:56: eb:af:09:26:5f:ea:bd:b6:39:dc:f5:33:db:0d:16: ee:22:c8:7b:a2:8f:18:8a:50:40:b2:57:89:be:0b: 1e:6e:45:e5:74:2f:57:35:d1:f9:d1:ff:e2:40:31: 34:16:b4:f0:91:f6:e2:d9:21:33:50:07:3b:6c:ca: 35:92:8d:fd:fe:e3:f6:32:3b:e2:a4:2f:48:51:9d: 01:02:3a:2b:64:47:e3:a4:5a:b6:bf:2b:18:cf:91: bd:e1:3c:d9:ba:d0:bd:bf:5b:fb:c6:8e:05:ef:db: bb:2e:dc:42:08:02:62:0a:a8:e9:0b:2e:78:41:5b: ca:9b:62:db:00:aa:d8:12:b5:4f:9b:f5:dd:f3:d2: 55:47:bf:20:bc:32:55:de:88:32:0b:58:95:4e:ae: 8d:b8:cf:0a:19:9a:31:b5:f4:ff:85:ba:12:10:af: bc:c7:b0:ba:67:f2:62:ff:57:8a:4b:38:17:79:57: b1:53:98:86:ec:52:24:ab:66:64:16:de:6a:b7:85: f4:42:9d:65:29:03:46:74:63:24:ef:34:92:15:e3: a3:37:1a:55:da:09:24:f1:0c:b8:ec:bc:eb:2f:9c: b2:6c:2b:e0:93:ed:05:bc:73:c2:81:5c:c8:ea:c8: ab:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2A:04:2D:4D:DB:2D:C9:0C:CD:CF:86:20:81:33:94:E8:D1:C4:DF X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS205886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.8.0/24 143.20.74.0/24 143.20.179.0/24 143.20.206.0/24 143.20.221.0/24 Signature Algorithm: sha256WithRSAEncryption 64:09:39:22:18:31:75:ed:92:f2:9f:13:cc:44:f9:dc:7b:91: bd:0c:f5:bf:77:eb:7b:ce:4f:52:e7:e9:f0:d6:f1:f2:3c:71: dc:7d:36:68:71:30:e0:5e:35:af:73:fd:75:c4:94:d4:57:5a: 14:25:59:3c:51:fb:1b:07:b2:f6:d6:0a:8d:f9:e6:5a:f6:19: 22:78:d2:48:56:bc:c1:c9:34:1e:6d:27:ab:e8:bd:5e:80:21: 78:5c:61:2c:af:ad:8a:c2:0b:df:0f:9f:f3:63:f3:65:af:cb: e5:80:64:ab:10:2e:e0:22:53:8f:ba:d7:34:7d:b9:98:cd:63: ea:74:cb:76:e8:91:c2:67:c6:46:b4:2d:9a:1d:ab:15:ba:69: 20:ac:dc:66:05:f0:1a:57:2f:36:59:90:c9:62:0d:28:fb:16: d7:49:36:66:e0:92:04:3a:6b:b9:fc:1c:b3:83:98:3b:1d:99: 51:55:c1:54:44:1c:d1:a8:66:ad:0b:14:7e:cb:df:da:4a:a8: 48:9f:74:4b:0b:82:f9:20:65:a9:12:b8:f2:f5:aa:d5:47:0f: ba:dc:ac:0e:f3:30:e4:5e:4a:e8:30:47:61:c2:e2:df:62:c7: 3e:37:11:64:64:b2:49:67:61:c7:b4:69:d7:dd:f7:01:ca:92: 84:92:d9:5a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUHNyFS+yGYxC3zJKvOnqd1+8V7qcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTEyMTUwODE1NDdaFw0yNjEyMTQwODIwNDdaMDMxMTAvBgNV BAMTKDlDMkEwNDJENEREQjJEQzkwQ0NEQ0Y4NjIwODEzMzk0RThEMUM0REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmT23QoGtur+MwZDcRVuuvCSZf 6r22Odz1M9sNFu4iyHuijxiKUECyV4m+Cx5uReV0L1c10fnR/+JAMTQWtPCR9uLZ ITNQBztsyjWSjf3+4/YyO+KkL0hRnQECOitkR+OkWra/KxjPkb3hPNm60L2/W/vG jgXv27su3EIIAmIKqOkLLnhBW8qbYtsAqtgStU+b9d3z0lVHvyC8MlXeiDILWJVO ro24zwoZmjG19P+FuhIQr7zHsLpn8mL/V4pLOBd5V7FTmIbsUiSrZmQW3mq3hfRC nWUpA0Z0YyTvNJIV46M3GlXaCSTxDLjsvOsvnLJsK+CT7QW8c8KBXMjqyKsjAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUnCoELU3bLckMzc+GIIEzlOjRxN8wHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjA1ODg2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAjxQI AwQAjxRKAwQAjxSzAwQAjxTOAwQAjxTdMA0GCSqGSIb3DQEBCwUAA4IBAQBkCTki GDF17ZLynxPMRPnce5G9DPW/d+t7zk9S5+nw1vHyPHHcfTZocTDgXjWvc/11xJTU V1oUJVk8UfsbB7L21gqN+eZa9hkieNJIVrzByTQebSer6L1egCF4XGEsr62Kwgvf D5/zY/Nlr8vlgGSrEC7gIlOPutc0fbmYzWPqdMt26JHCZ8ZGtC2aHasVumkgrNxm BfAaVy82WZDJYg0o+xbXSTZm4JIEOmu5/Byzg5g7HZlRVcFURBzRqGatCxR+y9/a SqhIn3RLC4L5IGWpErjy9arVRw+63KwO8zDkXkroMEdhwuLfYsc+NxFkZLJJZ2HH tGnX3fcBypKEktla -----END CERTIFICATE-----Generated at Tue Dec 16 11:45:20 2025 by rpki-client