This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206491.roa File: AS206491.roa (raw, json) Hash identifier: mOGOXFEyR1qThkNbPxa6P4RPKkhLkvXioCEn8FmSMKY= Subject key identifier: 9D:21:6F:DD:91:02:22:E9:D6:5F:D8:7D:CA:DF:11:0F:C0:38:F8:6F Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 07C1F241C76A36999911C07823B2BA17EA7F133F Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206491.roa Signing time: Fri 28 Nov 2025 10:24:43 +0000 ROA not before: Fri 28 Nov 2025 10:19:43 +0000 ROA not after: Fri 27 Nov 2026 10:24:43 +0000 asID: 206491 IP address blocks: 95.134.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 11:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:c1:f2:41:c7:6a:36:99:99:11:c0:78:23:b2:ba:17:ea:7f:13:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Nov 28 10:19:43 2025 GMT Not After : Nov 27 10:24:43 2026 GMT Subject: CN=9D216FDD910222E9D65FD87DCADF110FC038F86F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e5:68:83:5d:05:7d:89:22:60:bc:ad:ab:db: 58:7f:09:2d:d1:8c:40:25:c6:d5:a5:e1:9c:bc:0f: ce:cd:da:ab:b9:ea:28:f0:00:22:94:f7:3e:8a:e5: 40:52:42:11:42:59:ac:e7:6d:a7:dc:04:5e:18:66: 34:7e:5a:95:e5:64:0d:15:13:bc:e7:c4:50:68:b3: 7e:5c:62:09:2a:fe:b8:69:04:8c:4c:3a:cd:8e:61: c4:7e:dc:d8:b8:9f:db:4c:0e:34:81:3d:a5:9c:fe: f7:5c:54:9d:59:9a:29:af:9c:30:33:ba:c6:c6:65: a4:99:f7:c7:46:85:e5:28:8a:91:34:9d:78:f0:38: 4e:d5:6a:ab:f5:b1:e7:8a:0a:ca:f7:11:5e:7e:cd: 91:15:d6:5e:4c:3c:10:6c:0d:86:e6:dc:0d:b5:c9: a2:ed:43:7b:77:b3:e2:c1:20:12:72:94:26:a3:fc: cc:cb:5f:75:07:d5:bf:f3:ff:86:2e:ae:14:da:d0: 0b:47:71:1f:34:ef:a0:55:32:76:41:aa:97:f7:ed: 4f:f6:50:de:c5:69:f5:63:3b:47:58:55:3c:29:ec: e6:c7:70:0b:71:14:5f:98:dc:5c:c6:ab:4b:b0:34: ac:d7:be:7a:09:9a:44:6e:7b:41:58:71:69:0c:cd: eb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:21:6F:DD:91:02:22:E9:D6:5F:D8:7D:CA:DF:11:0F:C0:38:F8:6F X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS206491.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.134.203.0/24 Signature Algorithm: sha256WithRSAEncryption 97:e0:14:d3:a9:bd:34:0d:73:a9:59:71:a5:81:10:8e:75:bd: d3:47:a9:5d:6f:a0:04:b9:f5:bd:d0:72:57:f1:ac:e9:21:23: 9b:5f:13:f9:56:96:fc:84:3e:07:65:72:71:34:d7:06:59:58: 68:71:bc:7e:1b:74:e3:9f:fe:3a:4c:55:d9:a9:30:d2:a4:d6: 51:45:c6:c6:97:45:87:1b:32:39:e5:05:88:64:c2:f0:5f:98: aa:bd:1d:43:47:0a:e5:27:a1:cc:ec:3d:5f:8f:94:76:ee:85: 57:38:da:f8:fd:6a:79:75:63:8c:bf:79:82:4c:c1:62:71:fc: 0a:2e:1c:d7:3c:f4:de:85:f4:a7:d9:74:1f:34:e3:6e:74:db: 89:9f:67:31:85:29:98:56:ed:3f:75:1a:5f:e3:de:30:da:a4: 71:2c:d0:a1:23:b8:df:09:70:73:f5:e7:a3:5a:3d:5e:d5:12: 95:62:79:17:98:a0:5f:c9:83:9d:37:b0:7f:51:02:56:db:1d: 08:34:be:aa:06:b0:2b:32:da:11:fb:19:6a:d9:0e:2a:4f:40: f5:cb:5e:3f:c8:d6:c0:8c:d0:6b:f1:1c:6f:5e:1a:b9:c6:68: 94:7c:3d:6a:e0:73:89:6f:ad:8e:19:42:6c:48:61:36:73:79: 69:2b:43:72 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUB8HyQcdqNpmZEcB4I7K6F+p/Ez8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTExMjgxMDE5NDNaFw0yNjExMjcxMDI0NDNaMDMxMTAvBgNV BAMTKDlEMjE2RkREOTEwMjIyRTlENjVGRDg3RENBREYxMTBGQzAzOEY4NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH5WiDXQV9iSJgvK2r21h/CS3R jEAlxtWl4Zy8D87N2qu56ijwACKU9z6K5UBSQhFCWaznbafcBF4YZjR+WpXlZA0V E7znxFBos35cYgkq/rhpBIxMOs2OYcR+3Ni4n9tMDjSBPaWc/vdcVJ1ZmimvnDAz usbGZaSZ98dGheUoipE0nXjwOE7Vaqv1seeKCsr3EV5+zZEV1l5MPBBsDYbm3A21 yaLtQ3t3s+LBIBJylCaj/MzLX3UH1b/z/4YurhTa0AtHcR8076BVMnZBqpf37U/2 UN7FafVjO0dYVTwp7ObHcAtxFF+Y3FzGq0uwNKzXvnoJmkRue0FYcWkMzeshAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUnSFv3ZECIunWX9h9yt8RD8A4+G8wHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjA2NDkxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4bL MA0GCSqGSIb3DQEBCwUAA4IBAQCX4BTTqb00DXOpWXGlgRCOdb3TR6ldb6AEufW9 0HJX8azpISObXxP5Vpb8hD4HZXJxNNcGWVhocbx+G3Tjn/46TFXZqTDSpNZRRcbG l0WHGzI55QWIZMLwX5iqvR1DRwrlJ6HM7D1fj5R27oVXONr4/Wp5dWOMv3mCTMFi cfwKLhzXPPTehfSn2XQfNONudNuJn2cxhSmYVu0/dRpf494w2qRxLNChI7jfCXBz 9eejWj1e1RKVYnkXmKBfyYOdN7B/UQJW2x0INL6qBrArMtoR+xlq2Q4qT0D1y14/ yNbAjNBr8RxvXhq5xmiUfD1q4HOJb62OGUJsSGE2c3lpK0Ny -----END CERTIFICATE-----Generated at Fri Nov 28 16:10:52 2025 by rpki-client