This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209466.roa File: AS209466.roa (raw, json) Hash identifier: UZ2lMmUzYSilFZJ2cQeoq0MOfmVqgvuRy5UNOB6zfs8= Subject key identifier: 52:EB:D8:6D:2E:CD:07:FB:95:BA:EB:51:2C:F2:96:AB:ED:1F:EC:A0 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 2D27163B7C1F31314F210348C16F256E882A1A8A Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209466.roa Signing time: Wed 17 Dec 2025 06:36:44 +0000 ROA not before: Wed 17 Dec 2025 06:31:44 +0000 ROA not after: Wed 16 Dec 2026 06:36:44 +0000 asID: 209466 IP address blocks: 2a13:9500:119::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:27:16:3b:7c:1f:31:31:4f:21:03:48:c1:6f:25:6e:88:2a:1a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 17 06:31:44 2025 GMT Not After : Dec 16 06:36:44 2026 GMT Subject: CN=52EBD86D2ECD07FB95BAEB512CF296ABED1FECA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b3:59:01:71:8b:ea:ee:8f:11:83:e2:ae:40: d4:2e:34:15:55:e8:19:5d:84:5a:22:1f:09:5d:cb: ba:cd:87:33:45:f7:85:86:88:d2:ce:fb:cc:47:b7: b2:47:00:a6:c9:7b:5f:a0:6a:c9:90:b3:01:1c:d7: e0:90:d8:92:c6:79:d4:45:9d:ca:8a:d8:e0:45:3d: 93:81:bf:8b:bd:ec:08:af:38:00:36:e1:e2:d3:e3: df:24:8c:43:bc:2f:fa:68:d5:2c:d7:f0:01:42:5b: e3:08:01:24:1b:2b:d1:90:69:e7:ce:e9:8d:13:ec: 8b:e9:c1:b9:f5:3f:b6:7c:68:58:b9:c9:ad:f3:14: e0:1b:34:28:bb:73:59:65:ab:c3:c9:af:72:fd:07: 15:0e:9c:f8:97:9b:87:6f:90:81:d1:23:cc:cc:f0: 7f:57:2c:2d:eb:c5:e6:58:f4:6d:73:1a:48:61:06: 5b:77:b3:80:d0:2c:53:31:3a:8d:12:91:e9:48:8f: 0d:75:9b:ac:13:9d:c3:2f:58:10:69:71:bb:c6:32: 2a:41:1e:5a:58:29:10:27:07:41:42:19:c8:c2:1b: 86:70:be:26:1c:55:2e:40:e1:f1:42:0e:90:d7:18: bb:00:1c:47:ad:18:76:20:3b:69:fd:2a:57:1b:fa: d1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EB:D8:6D:2E:CD:07:FB:95:BA:EB:51:2C:F2:96:AB:ED:1F:EC:A0 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS209466.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9500:119::/48 Signature Algorithm: sha256WithRSAEncryption 21:2a:ab:6c:14:1f:d7:27:28:c6:ea:64:2c:f3:84:b9:ea:30: 42:cc:1c:4f:be:ce:35:54:30:d6:fc:91:c8:b7:05:38:59:ea: 97:f6:be:92:dd:8e:cb:aa:ab:96:4c:ef:bc:2e:14:7d:ca:9d: fe:8c:2f:db:ab:af:96:69:7f:e5:9c:e6:6d:81:11:fb:cf:d1: 9e:cb:45:db:78:44:78:52:fb:ac:8d:c6:ef:8e:91:c3:40:50: a5:62:01:64:06:e7:85:82:76:82:85:1e:4c:40:7c:10:d4:53: 05:58:53:d5:09:a6:21:02:63:2f:f9:3d:31:e0:ea:7b:0d:50: 69:e9:16:fc:56:e9:66:f3:09:41:c3:38:25:c3:bf:6b:d8:e6: 02:10:0d:90:27:f9:43:5f:63:a6:36:80:03:93:e0:80:36:96: 54:da:dd:12:31:21:67:15:1c:c7:d4:51:52:a5:b8:29:74:b9: 7e:02:2d:ca:44:fb:5e:21:12:39:d1:c9:01:93:f5:d4:38:ef: 3c:16:a6:14:c2:13:95:e1:c4:3e:79:c9:c6:33:fd:ed:3a:4a: fc:a1:2f:59:fd:f1:92:8e:90:e1:16:16:7a:88:8d:f4:0d:ab: 77:b3:a2:3d:4c:9a:7e:11:ef:3e:5a:56:3c:a9:e0:a2:87:73: 7a:3c:a6:da -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIULScWO3wfMTFPIQNIwW8lbogqGoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMTcwNjMxNDRaFw0yNjEyMTYwNjM2NDRaMDMxMTAvBgNV BAMTKDUyRUJEODZEMkVDRDA3RkI5NUJBRUI1MTJDRjI5NkFCRUQxRkVDQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCms1kBcYvq7o8Rg+KuQNQuNBVV 6BldhFoiHwldy7rNhzNF94WGiNLO+8xHt7JHAKbJe1+gasmQswEc1+CQ2JLGedRF ncqK2OBFPZOBv4u97AivOAA24eLT498kjEO8L/po1SzX8AFCW+MIASQbK9GQaefO 6Y0T7Ivpwbn1P7Z8aFi5ya3zFOAbNCi7c1llq8PJr3L9BxUOnPiXm4dvkIHRI8zM 8H9XLC3rxeZY9G1zGkhhBlt3s4DQLFMxOo0SkelIjw11m6wTncMvWBBpcbvGMipB HlpYKRAnB0FCGcjCG4ZwviYcVS5A4fFCDpDXGLsAHEetGHYgO2n9Klcb+tFVAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUUuvYbS7NB/uVuutRLPKWq+0f7KAwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA5NDY2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV AAEZMA0GCSqGSIb3DQEBCwUAA4IBAQAhKqtsFB/XJyjG6mQs84S56jBCzBxPvs41 VDDW/JHItwU4WeqX9r6S3Y7LqquWTO+8LhR9yp3+jC/bq6+WaX/lnOZtgRH7z9Ge y0XbeER4UvusjcbvjpHDQFClYgFkBueFgnaChR5MQHwQ1FMFWFPVCaYhAmMv+T0x 4Op7DVBp6Rb8Vulm8wlBwzglw79r2OYCEA2QJ/lDX2OmNoADk+CANpZU2t0SMSFn FRzH1FFSpbgpdLl+Ai3KRPteIRI50ckBk/XUOO88FqYUwhOV4cQ+ecnGM/3tOkr8 oS9Z/fGSjpDhFhZ6iI30Dat3s6I9TJp+Ee8+WlY8qeCih3N6PKba -----END CERTIFICATE-----Generated at Thu Dec 18 10:55:09 2025 by rpki-client