This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS205886.roa File: AS205886.roa (raw, json) Hash identifier: z82GvyVhdFLWGTO6jzdGRG66mcZz7T4WK2Q/o1FCHk0= Subject key identifier: CD:EE:45:37:9E:A2:C3:68:0B:1F:10:D1:57:C0:CD:2D:F2:1F:1B:1D Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 5CB74EF018B8EC52A86AA3778B8A21509F150F06 Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS205886.roa Signing time: Sun 14 Dec 2025 10:01:53 +0000 ROA not before: Sun 14 Dec 2025 09:56:53 +0000 ROA not after: Sun 13 Dec 2026 10:01:53 +0000 asID: 205886 IP address blocks: 45.157.18.0/24 maxlen: 24 193.5.10.0/24 maxlen: 24 193.5.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b7:4e:f0:18:b8:ec:52:a8:6a:a3:77:8b:8a:21:50:9f:15:0f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Dec 14 09:56:53 2025 GMT Not After : Dec 13 10:01:53 2026 GMT Subject: CN=CDEE45379EA2C3680B1F10D157C0CD2DF21F1B1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d2:06:26:eb:e9:b2:82:93:07:11:60:c7:17: 96:83:c1:d9:82:89:3f:b0:00:a0:38:ea:62:0f:9e: af:ae:e6:03:89:59:3c:ce:ea:fe:ef:60:75:64:dc: 3b:f7:0f:8c:31:6b:60:85:a5:4f:00:f2:41:36:9c: 77:22:d2:f3:44:95:60:90:eb:7f:72:10:36:7c:28: d0:22:07:e2:07:22:58:de:58:5b:48:17:17:8b:be: 82:a6:cc:98:01:95:07:92:f8:f9:b8:2b:f2:bc:9f: 34:a0:85:8c:cb:60:62:06:00:92:89:3b:68:87:a6: 20:13:e2:ba:46:f2:a4:ba:b2:fe:93:eb:c4:7d:dd: 83:05:7c:87:3d:c9:bf:dc:ae:69:43:3c:d3:1d:9e: cc:d3:4d:63:57:c1:55:b6:f1:d6:3c:7e:71:ef:bb: f8:1b:fe:a2:da:33:ac:28:11:2c:a2:9d:69:9c:88: 72:61:5f:06:80:03:8e:ee:5a:d9:eb:cd:04:84:2f: 90:3e:2c:0c:a0:10:d5:43:97:37:9e:4e:49:85:12: bc:b0:d2:48:1b:d3:bc:f0:36:66:f6:8a:7f:1d:ea: f6:61:bf:e3:63:d8:bb:7d:e1:58:29:df:e2:a9:e6: f3:8b:81:13:c4:a1:69:ac:ef:85:ae:a5:85:1c:b0: 5c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EE:45:37:9E:A2:C3:68:0B:1F:10:D1:57:C0:CD:2D:F2:1F:1B:1D X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS205886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.18.0/24 193.5.10.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:d1:70:94:a9:a5:42:e5:7e:a1:4f:05:0a:71:8d:21:c5:20: 58:50:97:d4:91:13:ab:20:8c:ad:82:ac:1e:f4:95:82:e2:77: db:a7:16:a7:c6:1b:b8:ef:44:36:a0:4d:b5:5b:96:f7:e4:4b: 94:03:d1:ac:ca:43:c9:24:7e:a5:a9:52:8a:dd:36:da:02:ec: 54:1a:d4:c4:26:f9:6a:28:3d:c8:e8:de:3c:fb:c9:17:3c:eb: c7:52:b0:40:67:1f:f0:88:d3:93:36:c6:b2:17:c7:be:32:cc: 26:d6:50:54:6f:f0:46:4d:9c:b9:fc:f1:86:ab:66:5f:5b:a5: 26:58:25:e1:0f:b9:c0:67:48:a0:14:85:94:cf:61:50:e5:dc: c2:81:45:42:3d:e3:a8:8e:c6:c2:95:c4:9d:87:aa:6b:a1:fd: d2:fc:67:01:09:e0:22:47:13:66:a0:c3:6a:d0:92:76:18:60: 6c:09:66:60:35:64:b8:78:8e:3f:e7:87:fc:61:ba:fd:54:20: b3:05:87:8d:13:a0:7a:08:bd:0d:a8:df:4e:2c:60:26:70:a8: 96:85:c6:6a:f9:01:fa:17:df:09:5f:fa:a1:95:8c:48:d6:c3: ff:22:03:08:b5:aa:25:c9:e2:7a:c2:a5:7e:67:b3:64:bd:07: c9:f6:98:5c -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUXLdO8Bi47FKoaqN3i4ohUJ8VDwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNTEyMTQwOTU2NTNaFw0yNjEyMTMxMDAxNTNaMDMxMTAvBgNV BAMTKENERUU0NTM3OUVBMkMzNjgwQjFGMTBEMTU3QzBDRDJERjIxRjFCMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf0gYm6+mygpMHEWDHF5aDwdmC iT+wAKA46mIPnq+u5gOJWTzO6v7vYHVk3Dv3D4wxa2CFpU8A8kE2nHci0vNElWCQ 639yEDZ8KNAiB+IHIljeWFtIFxeLvoKmzJgBlQeS+Pm4K/K8nzSghYzLYGIGAJKJ O2iHpiAT4rpG8qS6sv6T68R93YMFfIc9yb/crmlDPNMdnszTTWNXwVW28dY8fnHv u/gb/qLaM6woESyinWmciHJhXwaAA47uWtnrzQSEL5A+LAygENVDlzeeTkmFEryw 0kgb07zwNmb2in8d6vZhv+Nj2Lt94Vgp3+Kp5vOLgRPEoWms74WupYUcsFzJAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUze5FN56iw2gLHxDRV8DNLfIfGx0wHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjA1ODg2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZ0S AwQBwQUKMA0GCSqGSIb3DQEBCwUAA4IBAQBt0XCUqaVC5X6hTwUKcY0hxSBYUJfU kROrIIytgqwe9JWC4nfbpxanxhu470Q2oE21W5b35EuUA9GsykPJJH6lqVKK3Tba AuxUGtTEJvlqKD3I6N48+8kXPOvHUrBAZx/wiNOTNsayF8e+Mswm1lBUb/BGTZy5 /PGGq2ZfW6UmWCXhD7nAZ0igFIWUz2FQ5dzCgUVCPeOojsbClcSdh6prof3S/GcB CeAiRxNmoMNq0JJ2GGBsCWZgNWS4eI4/54f8Ybr9VCCzBYeNE6B6CL0NqN9OLGAm cKiWhcZq+QH6F98JX/qhlYxI1sP/IgMItaolyeJ6wqV+Z7NkvQfJ9phc -----END CERTIFICATE-----Generated at Tue Dec 16 11:44:14 2025 by rpki-client