This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20853.roa File: AS20853.roa (raw, json) Hash identifier: /EUoiuMidrVEbbLp6+1M8MAIc6FlmpAyF7F7uSNkLI8= Subject key identifier: C0:44:50:05:C9:47:A6:BB:22:A3:7F:4C:BB:FF:4F:E8:F1:AD:37:C9 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 6D769FF9D53BAC1F2BE713BC2652861AD00E948E Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20853.roa Signing time: Mon 22 Dec 2025 16:55:32 +0000 ROA not before: Mon 22 Dec 2025 16:50:32 +0000 ROA not after: Mon 21 Dec 2026 16:55:32 +0000 asID: 20853 IP address blocks: 46.203.196.0/24 maxlen: 24 46.203.202.0/24 maxlen: 24 46.203.207.0/24 maxlen: 24 46.203.210.0/24 maxlen: 24 46.203.212.0/24 maxlen: 24 46.203.216.0/24 maxlen: 24 46.203.220.0/24 maxlen: 24 92.112.146.0/24 maxlen: 24 92.112.149.0/24 maxlen: 24 92.112.151.0/24 maxlen: 24 92.112.152.0/24 maxlen: 24 92.112.153.0/24 maxlen: 24 92.112.156.0/24 maxlen: 24 92.113.93.0/24 maxlen: 24 92.113.115.0/24 maxlen: 24 92.113.119.0/24 maxlen: 24 92.113.126.0/24 maxlen: 24 92.113.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:76:9f:f9:d5:3b:ac:1f:2b:e7:13:bc:26:52:86:1a:d0:0e:94:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 22 16:50:32 2025 GMT Not After : Dec 21 16:55:32 2026 GMT Subject: CN=C0445005C947A6BB22A37F4CBBFF4FE8F1AD37C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a3:89:31:e9:8c:0c:1b:7a:b4:02:5b:26:f2: 9e:82:b8:56:1c:d8:4e:63:01:e0:6f:a4:fc:22:61: a6:d5:6c:1c:bc:35:5d:6c:90:77:bb:00:9d:db:59: e3:6f:03:2a:05:5a:e0:74:6f:d4:0b:17:dd:44:c7: 05:1f:e1:7f:d0:37:0f:84:37:2b:61:03:c3:fa:c6: c5:55:ac:90:68:ad:25:97:19:79:ab:6b:a8:6c:d6: 23:da:79:8c:d6:73:04:2e:73:4e:ad:8a:30:da:9c: 4a:94:52:4c:82:4c:d8:25:cf:c1:e1:60:1a:66:83: 4b:42:77:04:ed:e1:d9:4e:91:20:45:24:d4:58:1e: f4:a8:bc:ee:d6:fa:c5:23:19:1b:f0:59:7c:5f:41: af:98:bb:4c:b8:8b:78:2c:f1:67:ea:b3:9f:1b:b8: 3b:4a:94:9a:fa:1b:84:59:94:96:e9:17:52:93:50: c4:9a:8a:28:f5:dc:1c:7e:7e:5c:1b:fc:b5:95:a7: 96:66:d7:3c:b5:c9:b7:57:74:02:e4:3b:d0:dc:f7: 30:62:96:dd:ab:2e:61:cd:6e:73:1c:b3:c6:49:77: 94:fe:d7:90:26:9b:2b:2e:00:20:18:9e:44:ca:43: ba:c0:40:07:a3:51:f0:4b:5a:aa:5d:68:fe:ea:7b: ea:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:44:50:05:C9:47:A6:BB:22:A3:7F:4C:BB:FF:4F:E8:F1:AD:37:C9 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS20853.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.203.196.0/24 46.203.202.0/24 46.203.207.0/24 46.203.210.0/24 46.203.212.0/24 46.203.216.0/24 46.203.220.0/24 92.112.146.0/24 92.112.149.0/24 92.112.151.0-92.112.153.255 92.112.156.0/24 92.113.93.0/24 92.113.115.0/24 92.113.119.0/24 92.113.126.0/24 92.113.132.0/24 Signature Algorithm: sha256WithRSAEncryption 84:a0:4b:8a:18:88:f4:62:cf:3a:90:19:95:2d:d1:59:99:42: 21:94:16:35:0f:ce:e7:b3:68:a3:54:d8:02:ef:50:20:0f:75: cb:d0:67:90:f3:6b:6b:1e:c2:bd:10:36:f1:ce:e3:f5:26:5d: 6a:8d:2e:eb:19:ce:87:d2:a6:4b:71:b7:46:62:79:f1:b3:d6: 59:3c:e1:01:bc:a5:5d:5f:05:fe:bd:2b:f3:e0:a4:f5:58:d3: 1a:c2:2d:57:64:1c:69:ff:e3:4c:4d:fc:3a:27:06:dd:28:6c: 2e:7f:09:99:e9:88:6d:c6:a3:ed:a6:53:b8:68:9e:03:7f:d8: 72:1a:88:01:43:77:14:0f:d6:fc:e9:37:d9:6c:98:67:fc:a1: 35:0e:b5:7f:c9:bc:db:3c:3d:9a:c3:a4:5d:25:06:8b:90:27: ab:7f:3a:96:94:07:47:7b:8e:05:c2:11:28:a0:3f:76:08:3a: f6:b9:77:f0:33:11:e3:43:49:45:72:2e:31:36:e7:8e:64:ab: dd:60:fb:dd:57:ea:e3:63:e0:a2:79:83:72:17:87:e9:13:d0: 8f:e4:97:6d:e2:8b:6a:fd:eb:6b:1b:6b:5c:fd:49:95:97:80: c2:75:ba:28:a0:4c:88:a0:3c:a8:82:42:d2:ab:c5:c3:05:e0: 32:2a:ad:e2 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgIUbXaf+dU7rB8r5xO8JlKGGtAOlI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMjIxNjUwMzJaFw0yNjEyMjExNjU1MzJaMDMxMTAvBgNV BAMTKEMwNDQ1MDA1Qzk0N0E2QkIyMkEzN0Y0Q0JCRkY0RkU4RjFBRDM3QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClo4kx6YwMG3q0Alsm8p6CuFYc 2E5jAeBvpPwiYabVbBy8NV1skHe7AJ3bWeNvAyoFWuB0b9QLF91ExwUf4X/QNw+E NythA8P6xsVVrJBorSWXGXmra6hs1iPaeYzWcwQuc06tijDanEqUUkyCTNglz8Hh YBpmg0tCdwTt4dlOkSBFJNRYHvSovO7W+sUjGRvwWXxfQa+Yu0y4i3gs8Wfqs58b uDtKlJr6G4RZlJbpF1KTUMSaiij13Bx+flwb/LWVp5Zm1zy1ybdXdALkO9Dc9zBi lt2rLmHNbnMcs8ZJd5T+15AmmysuACAYnkTKQ7rAQAejUfBLWqpdaP7qe+rFAgMB AAGjggJsMIICaDAdBgNVHQ4EFgQUwERQBclHprsio39Mu/9P6PGtN8kwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjA4NTMucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwgYEGCCsGAQUFBwEHAQH/BHIwcDBuBAIAATBoAwQALsvE AwQALsvKAwQALsvPAwQALsvSAwQALsvUAwQALsvYAwQALsvcAwQAXHCSAwQAXHCV MAwDBABccJcDBAFccJgDBABccJwDBABccV0DBABccXMDBABccXcDBABccX4DBABc cYQwDQYJKoZIhvcNAQELBQADggEBAISgS4oYiPRizzqQGZUt0VmZQiGUFjUPzuez aKNU2ALvUCAPdcvQZ5Dza2sewr0QNvHO4/UmXWqNLusZzofSpktxt0ZiefGz1lk8 4QG8pV1fBf69K/PgpPVY0xrCLVdkHGn/40xN/DonBt0obC5/CZnpiG3Go+2mU7ho ngN/2HIaiAFDdxQP1vzpN9lsmGf8oTUOtX/JvNs8PZrDpF0lBouQJ6t/OpaUB0d7 jgXCESigP3YIOva5d/AzEeNDSUVyLjE2545kq91g+91X6uNj4KJ5g3IXh+kT0I/k l23ii2r962sba1z9SZWXgMJ1uiigTIigPKiCQtKrxcMF4DIqreI= -----END CERTIFICATE-----Generated at Sat Dec 27 01:38:47 2025 by rpki-client