This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205886.roa File: AS205886.roa (raw, json) Hash identifier: LxJh7yDOMW90ZaDlK4ySnZbeukyxI6VqlPqxi92Vpbk= Subject key identifier: 44:25:0A:F4:34:FA:5B:70:81:65:D9:F5:65:2D:A9:70:34:09:AE:6E Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 520673AA83CD8E00E85A255B6A51DCF03A40FDC4 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205886.roa Signing time: Sun 30 Nov 2025 09:24:54 +0000 ROA not before: Sun 30 Nov 2025 09:19:54 +0000 ROA not after: Sun 29 Nov 2026 09:24:54 +0000 asID: 205886 IP address blocks: 46.202.0.0/24 maxlen: 24 46.202.1.0/24 maxlen: 24 46.202.62.0/24 maxlen: 24 46.203.57.0/24 maxlen: 24 91.124.67.0/24 maxlen: 24 91.124.237.0/24 maxlen: 24 92.113.45.0/24 maxlen: 24 92.113.228.0/24 maxlen: 24 95.134.7.0/24 maxlen: 24 95.134.135.0/24 maxlen: 24 95.135.7.0/24 maxlen: 24 95.135.50.0/24 maxlen: 24 95.135.221.0/24 maxlen: 24 178.92.123.0/24 maxlen: 24 178.92.234.0/24 maxlen: 24 178.93.139.0/24 maxlen: 24 178.93.146.0/24 maxlen: 24 178.93.150.0/24 maxlen: 24 178.93.250.0/24 maxlen: 24 178.94.235.0/24 maxlen: 24 178.95.52.0/24 maxlen: 24 178.95.160.0/24 maxlen: 24 178.95.184.0/24 maxlen: 24 178.95.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 02 Dec 2025 00:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:06:73:aa:83:cd:8e:00:e8:5a:25:5b:6a:51:dc:f0:3a:40:fd:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Nov 30 09:19:54 2025 GMT Not After : Nov 29 09:24:54 2026 GMT Subject: CN=44250AF434FA5B708165D9F5652DA9703409AE6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:82:77:e5:29:65:0a:23:47:b2:73:f0:7a: 21:b7:c9:e9:26:83:35:4a:90:4c:15:1a:72:08:e0: c0:a0:55:71:a5:8a:17:4f:3f:f0:0e:d8:1d:d1:2d: ac:2e:c8:87:2a:7f:2f:ae:63:f0:73:cf:dd:d2:a2: 4b:69:e6:19:fc:e3:5d:b6:04:fe:90:81:cd:bd:88: e6:73:1b:92:62:6c:0d:e5:8e:58:e6:f5:0b:00:e5: 59:ca:f0:9b:69:2a:7a:05:59:79:dd:6b:59:63:94: 2c:a1:af:38:62:c3:a5:37:3b:4d:8d:7f:29:ff:84: 8e:61:6e:cf:50:db:23:9b:ed:59:d2:94:76:a9:a8: a1:88:e6:3e:e4:20:ce:43:e9:d1:34:c7:0d:fd:ab: 6d:62:76:bc:c8:01:4c:c1:df:ab:40:7e:da:db:33: 63:11:14:06:7c:7b:a8:9e:bb:8d:24:9f:4b:56:3b: 7c:35:90:b4:a6:4b:8e:7f:ac:b6:e2:d9:48:16:00: 04:5e:bd:90:f4:92:3d:85:58:6e:65:e0:c4:54:8f: 28:3b:c4:45:c1:47:f6:00:37:40:7c:8e:7a:29:34: 68:85:a0:e6:18:1c:c1:37:98:b7:33:e1:d9:d1:f5: 63:a5:4f:42:3b:ff:5e:b9:e2:7d:6e:31:1b:fa:d0: 30:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:25:0A:F4:34:FA:5B:70:81:65:D9:F5:65:2D:A9:70:34:09:AE:6E X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS205886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.202.0.0/23 46.202.62.0/24 46.203.57.0/24 91.124.67.0/24 91.124.237.0/24 92.113.45.0/24 92.113.228.0/24 95.134.7.0/24 95.134.135.0/24 95.135.7.0/24 95.135.50.0/24 95.135.221.0/24 178.92.123.0/24 178.92.234.0/24 178.93.139.0/24 178.93.146.0/24 178.93.150.0/24 178.93.250.0/24 178.94.235.0/24 178.95.52.0/24 178.95.160.0/24 178.95.184.0/24 178.95.224.0/24 Signature Algorithm: sha256WithRSAEncryption 70:ef:2b:fd:13:a1:f5:6b:30:92:96:3b:64:29:c9:a4:1b:65: 1a:d9:c6:00:34:02:82:c9:29:11:b4:f6:b7:22:c6:65:87:bf: 6e:71:39:8f:41:bb:60:b4:32:ab:c5:db:f7:b4:6d:0f:92:bb: 9d:92:b5:8b:30:01:ed:0c:19:77:53:c3:b8:41:f4:6d:be:bc: c0:fa:0b:d7:f1:4f:a7:fd:51:2e:ce:4e:2e:ec:a3:c9:49:28: 76:e9:b2:b6:21:47:77:1d:75:55:05:6b:79:79:23:e8:fc:04: 73:49:4c:14:c4:b2:37:bf:7c:a9:93:aa:53:9e:ec:6d:c5:bc: fe:84:aa:a2:e8:d3:42:4a:ba:08:c4:7e:ef:ea:ce:c7:df:90: 6d:5a:a2:ae:fa:61:e6:5d:70:7f:84:ac:44:c1:ed:1b:6b:17: 5e:54:5e:e9:82:78:1f:84:eb:da:36:c0:c7:81:0a:5e:4f:8c: 03:f5:77:c6:f4:47:ea:a5:88:d6:e4:ec:86:b7:00:ee:29:33: 52:93:2d:3b:aa:8d:5a:23:6f:88:d6:de:6b:10:b1:68:03:4a: 26:90:0a:ba:64:18:de:df:8b:4b:c5:a8:a3:bd:d5:9f:3b:52: ab:0a:67:31:e0:db:9e:eb:19:ed:f0:a7:a7:8b:7f:78:bb:b2: 62:aa:92:52 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIUUgZzqoPNjgDoWiVbalHc8DpA/cQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTExMzAwOTE5NTRaFw0yNjExMjkwOTI0NTRaMDMxMTAvBgNV BAMTKDQ0MjUwQUY0MzRGQTVCNzA4MTY1RDlGNTY1MkRBOTcwMzQwOUFFNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz8oJ35SllCiNHsnPweiG3yekm gzVKkEwVGnII4MCgVXGlihdPP/AO2B3RLawuyIcqfy+uY/Bzz93Soktp5hn84122 BP6Qgc29iOZzG5JibA3ljljm9QsA5VnK8JtpKnoFWXnda1ljlCyhrzhiw6U3O02N fyn/hI5hbs9Q2yOb7VnSlHapqKGI5j7kIM5D6dE0xw39q21idrzIAUzB36tAftrb M2MRFAZ8e6ieu40kn0tWO3w1kLSmS45/rLbi2UgWAARevZD0kj2FWG5l4MRUjyg7 xEXBR/YAN0B8jnopNGiFoOYYHME3mLcz4dnR9WOlT0I7/1654n1uMRv60DCnAgMB AAGjggKTMIICjzAdBgNVHQ4EFgQURCUK9DT6W3CBZdn1ZS2pcDQJrm4wHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjA1ODg2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYoD BAEuygADBAAuyj4DBAAuyzkDBABbfEMDBABbfO0DBABccS0DBABcceQDBABfhgcD BABfhocDBABfhwcDBABfhzIDBABfh90DBACyXHsDBACyXOoDBACyXYsDBACyXZID BACyXZYDBACyXfoDBACyXusDBACyXzQDBACyX6ADBACyX7gDBACyX+AwDQYJKoZI hvcNAQELBQADggEBAHDvK/0TofVrMJKWO2QpyaQbZRrZxgA0AoLJKRG09rcixmWH v25xOY9Bu2C0MqvF2/e0bQ+Su52StYswAe0MGXdTw7hB9G2+vMD6C9fxT6f9US7O Ti7so8lJKHbpsrYhR3cddVUFa3l5I+j8BHNJTBTEsje/fKmTqlOe7G3FvP6EqqLo 00JKugjEfu/qzsffkG1aoq76YeZdcH+ErETB7RtrF15UXumCeB+E69o2wMeBCl5P jAP1d8b0R+qliNbk7Ia3AO4pM1KTLTuqjVojb4jW3msQsWgDSiaQCrpkGN7fi0vF qKO91Z87UqsKZzHg257rGe3wp6eLf3i7smKqklI= -----END CERTIFICATE-----Generated at Mon Dec 1 07:56:46 2025 by rpki-client