This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS209474.roa File: AS209474.roa (raw, json) Hash identifier: PVrHxrYjICh7Wd9N5+nBhXDZU8zeQeVVCyslhlVZTBY= Subject key identifier: 4E:38:F0:01:17:F3:86:DD:69:0D:9B:6D:7F:B1:1C:D0:5E:CA:E8:7A Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 05E16935E857BEF0822E5CA70505D90DAB9397D3 Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS209474.roa Signing time: Mon 15 Dec 2025 20:55:32 +0000 ROA not before: Mon 15 Dec 2025 20:50:32 +0000 ROA not after: Mon 14 Dec 2026 20:55:32 +0000 asID: 209474 IP address blocks: 194.113.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e1:69:35:e8:57:be:f0:82:2e:5c:a7:05:05:d9:0d:ab:93:97:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Dec 15 20:50:32 2025 GMT Not After : Dec 14 20:55:32 2026 GMT Subject: CN=4E38F00117F386DD690D9B6D7FB11CD05ECAE87A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:21:6b:23:95:3b:a1:2b:e3:72:2a:18:17:67: 40:a2:30:d5:15:2a:f3:aa:b7:e7:5b:1c:3f:07:2e: e2:67:2f:27:19:e1:d0:82:c6:8c:35:64:69:cb:0d: 5e:a4:80:7d:92:16:df:4d:8b:92:3d:4c:26:aa:52: ec:b1:2c:c8:a8:4c:30:d5:9e:a1:35:f2:14:94:24: 72:a6:19:f2:ba:cb:ff:a5:7e:82:47:2f:9f:e4:b9: e7:03:20:65:09:8d:bf:65:4f:87:39:c1:dd:a4:7d: 7f:73:6c:62:20:78:24:92:4d:1f:0d:6c:f0:ac:e1: 65:fe:6d:0c:02:a7:a5:90:2e:0c:35:4b:ce:09:2e: 96:b0:77:05:91:f7:b9:b9:64:6a:0d:1c:d3:bc:47: 93:38:44:98:05:e6:2d:3c:fc:3e:d0:15:9a:7f:96: 77:68:97:4c:02:9a:06:40:58:41:3c:42:d4:d9:4d: c3:b9:02:ec:ad:4e:87:a7:07:1a:88:ab:58:0a:68: df:26:89:0d:46:5e:92:b9:4c:39:ed:43:77:f5:d8: f9:92:b2:8f:35:9a:15:e0:a4:a5:13:13:61:72:70: 13:2b:b5:6e:6a:17:77:fa:18:e7:1d:8b:f6:a0:52: 29:51:91:8b:6f:20:e3:32:40:a1:92:2d:f6:5f:b1: f2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:38:F0:01:17:F3:86:DD:69:0D:9B:6D:7F:B1:1C:D0:5E:CA:E8:7A X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS209474.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.226.0/24 Signature Algorithm: sha256WithRSAEncryption d5:e9:d0:09:d7:3d:88:d4:dd:56:c6:c4:67:7f:b3:17:26:dd: 7d:64:dd:3f:7f:e2:d4:40:36:84:5d:e6:31:05:c2:f4:3d:b4: c6:14:ab:d9:65:03:a0:23:f7:d2:16:f0:4d:75:ee:89:35:98: c9:9c:c3:d3:ee:84:2d:c5:6d:74:0e:c8:19:75:ec:fb:93:48: 97:89:88:bd:c3:0f:08:54:ac:58:9e:cb:69:d9:88:b5:d2:f7: 24:b6:bb:a9:74:83:25:93:19:97:30:88:c2:40:29:9e:c7:ba: ef:07:1d:30:a9:3e:61:cc:0a:5b:b4:13:8d:5e:78:9f:d0:32: 44:5a:b4:52:74:98:c0:40:05:5e:6a:18:95:72:49:69:29:c5: a9:34:f7:cf:94:65:cf:fd:3f:5f:52:89:86:4f:ce:cd:aa:c9: 06:40:12:ae:e1:a8:35:6e:45:20:5e:57:c1:4d:45:fb:ce:bb: 8b:3b:23:23:0d:40:20:5c:56:82:93:9c:5b:5c:d1:7f:07:ea: 5e:37:d2:94:45:f4:a5:bc:a6:bb:f1:8e:14:14:f2:14:59:11: f7:71:f7:20:b3:16:3d:d6:63:d6:31:fe:95:56:84:79:b9:23: e9:0a:2d:bc:5f:f1:8e:ea:8d:8b:9b:74:fe:44:3c:32:6f:6e: 5b:6e:38:21 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUBeFpNehXvvCCLlynBQXZDauTl9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNTEyMTUyMDUwMzJaFw0yNjEyMTQyMDU1MzJaMDMxMTAvBgNV BAMTKDRFMzhGMDAxMTdGMzg2REQ2OTBEOUI2RDdGQjExQ0QwNUVDQUU4N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4IWsjlTuhK+NyKhgXZ0CiMNUV KvOqt+dbHD8HLuJnLycZ4dCCxow1ZGnLDV6kgH2SFt9Ni5I9TCaqUuyxLMioTDDV nqE18hSUJHKmGfK6y/+lfoJHL5/kuecDIGUJjb9lT4c5wd2kfX9zbGIgeCSSTR8N bPCs4WX+bQwCp6WQLgw1S84JLpawdwWR97m5ZGoNHNO8R5M4RJgF5i08/D7QFZp/ lndol0wCmgZAWEE8QtTZTcO5AuytToenBxqIq1gKaN8miQ1GXpK5TDntQ3f12PmS so81mhXgpKUTE2FycBMrtW5qF3f6GOcdi/agUilRkYtvIOMyQKGSLfZfsfJxAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUTjjwARfzht1pDZttf7Ec0F7K6HowHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjA5NDc0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnHi MA0GCSqGSIb3DQEBCwUAA4IBAQDV6dAJ1z2I1N1WxsRnf7MXJt19ZN0/f+LUQDaE XeYxBcL0PbTGFKvZZQOgI/fSFvBNde6JNZjJnMPT7oQtxW10DsgZdez7k0iXiYi9 ww8IVKxYnstp2Yi10vcktrupdIMlkxmXMIjCQCmex7rvBx0wqT5hzApbtBONXnif 0DJEWrRSdJjAQAVeahiVcklpKcWpNPfPlGXP/T9fUomGT87NqskGQBKu4ag1bkUg XlfBTUX7zruLOyMjDUAgXFaCk5xbXNF/B+peN9KURfSlvKa78Y4UFPIUWRH3cfcg sxY91mPWMf6VVoR5uSPpCi28X/GO6o2Lm3T+RDwyb25bbjgh -----END CERTIFICATE-----Generated at Tue Dec 16 04:41:24 2025 by rpki-client