This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203253.roa File: AS203253.roa (raw, json) Hash identifier: vCRSStgsMcF7372LWkYYZdu/VdN9/6tTLoctvnFd9DE= Subject key identifier: 89:5E:80:D5:DC:E0:7A:78:59:6E:E7:43:62:EC:D1:D9:6A:3B:CD:B0 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 130B0A29D713FB98E641C4D723F1F76DEB4375C7 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203253.roa Signing time: Wed 10 Dec 2025 02:14:51 +0000 ROA not before: Wed 10 Dec 2025 02:09:51 +0000 ROA not after: Wed 09 Dec 2026 02:14:51 +0000 asID: 203253 IP address blocks: 2a0f:85c1:dd7::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:0b:0a:29:d7:13:fb:98:e6:41:c4:d7:23:f1:f7:6d:eb:43:75:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Dec 10 02:09:51 2025 GMT Not After : Dec 9 02:14:51 2026 GMT Subject: CN=895E80D5DCE07A78596EE74362ECD1D96A3BCDB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6b:82:31:12:ca:35:42:93:be:14:5c:02:54: 84:8c:90:53:c1:40:88:ca:ff:83:72:a6:c9:e8:e8: 66:2c:11:03:e8:dc:ea:07:73:55:76:88:05:30:44: 16:8f:79:b6:93:f1:af:4e:34:78:6b:ae:65:29:44: 54:93:37:5f:5d:8b:a0:7e:41:b5:d6:59:e1:e1:4e: ae:53:81:4f:85:99:ac:27:86:2b:67:a9:49:83:9d: d0:56:87:0a:0a:4b:0c:f7:76:95:e6:d9:f0:6f:db: 6a:86:07:b1:8c:75:95:1f:f8:e3:2a:cf:88:34:a4: 7b:8a:19:8b:0e:72:bd:0c:1e:bf:b3:18:16:35:db: 7e:df:20:07:da:47:53:71:61:36:67:bc:ed:cf:31: c0:30:eb:2a:17:b6:92:e7:91:2e:66:36:bf:20:11: e7:7b:a1:2a:7c:b8:e6:a4:88:f8:65:7c:ec:48:95: 19:67:af:9f:56:74:52:1a:88:04:0a:80:1f:90:73: 89:5c:9d:cf:69:24:79:c2:5b:f1:62:67:34:c9:90: cc:e6:cc:96:3e:4b:68:ad:c1:59:38:60:8a:9e:a8: 0a:f0:eb:03:59:d7:bc:a8:54:83:10:67:07:16:91: ff:55:02:db:4c:62:f3:0d:aa:cf:79:0e:71:77:18: 5e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5E:80:D5:DC:E0:7A:78:59:6E:E7:43:62:EC:D1:D9:6A:3B:CD:B0 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203253.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:dd7::/48 Signature Algorithm: sha256WithRSAEncryption c6:31:2e:77:85:a8:15:c1:5f:cd:3c:41:c7:cb:1a:d4:d9:be: fa:63:12:e9:87:c6:62:5f:08:1f:3c:28:44:e3:e1:e0:67:66: 77:ec:5f:0e:e9:be:41:16:09:71:af:69:eb:66:a4:c4:e8:fc: f8:fc:27:2d:af:2c:60:37:3a:84:ab:ff:46:d3:09:3e:59:53: 03:23:b0:c9:42:f1:d0:1f:07:47:5c:8e:13:3b:55:34:0a:35: f8:1f:94:d7:15:ac:87:54:a9:c5:e4:4f:18:a0:44:e3:4e:7f: b3:18:ec:b7:ef:c4:c6:54:22:e7:0f:a8:2c:72:65:c9:c1:e0: 57:a1:c5:e1:32:65:98:e4:3e:e6:92:15:15:df:c2:f4:01:7c: 4c:b2:ef:44:29:4a:33:e6:b2:7c:a0:07:24:20:0d:9c:fd:ea: 38:60:39:2a:88:5d:0e:b4:b6:8e:08:ec:f5:e6:0b:38:08:4c: 3d:66:ba:92:e1:98:78:08:92:2e:30:f3:c4:cf:b3:76:27:ab: cb:db:7d:56:57:9e:f5:83:54:2a:02:ed:0b:ff:ab:72:ce:f2: 02:ec:ec:67:94:b7:50:eb:8e:99:21:65:4d:22:90:b7:0e:52: 39:c9:f2:52:a3:26:60:cc:f7:bb:2f:fd:5f:6d:35:f0:42:ad: 75:03:35:34 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUEwsKKdcT+5jmQcTXI/H3betDdccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTEyMTAwMjA5NTFaFw0yNjEyMDkwMjE0NTFaMDMxMTAvBgNV BAMTKDg5NUU4MEQ1RENFMDdBNzg1OTZFRTc0MzYyRUNEMUQ5NkEzQkNEQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwa4IxEso1QpO+FFwCVISMkFPB QIjK/4Nypsno6GYsEQPo3OoHc1V2iAUwRBaPebaT8a9ONHhrrmUpRFSTN19di6B+ QbXWWeHhTq5TgU+FmawnhitnqUmDndBWhwoKSwz3dpXm2fBv22qGB7GMdZUf+OMq z4g0pHuKGYsOcr0MHr+zGBY1237fIAfaR1NxYTZnvO3PMcAw6yoXtpLnkS5mNr8g Eed7oSp8uOakiPhlfOxIlRlnr59WdFIaiAQKgB+Qc4lcnc9pJHnCW/FiZzTJkMzm zJY+S2itwVk4YIqeqArw6wNZ17yoVIMQZwcWkf9VAttMYvMNqs95DnF3GF5vAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUiV6A1dzgenhZbudDYuzR2Wo7zbAwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjAzMjUzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQ3XMA0GCSqGSIb3DQEBCwUAA4IBAQDGMS53hagVwV/NPEHHyxrU2b76YxLph8Zi XwgfPChE4+HgZ2Z37F8O6b5BFglxr2nrZqTE6Pz4/CctryxgNzqEq/9G0wk+WVMD I7DJQvHQHwdHXI4TO1U0CjX4H5TXFayHVKnF5E8YoETjTn+zGOy378TGVCLnD6gs cmXJweBXocXhMmWY5D7mkhUV38L0AXxMsu9EKUoz5rJ8oAckIA2c/eo4YDkqiF0O tLaOCOz15gs4CEw9ZrqS4Zh4CJIuMPPEz7N2J6vL231WV571g1QqAu0L/6tyzvIC 7OxnlLdQ646ZIWVNIpC3DlI5yfJSoyZgzPe7L/1fbTXwQq11AzU0 -----END CERTIFICATE-----Generated at Fri Dec 19 18:28:22 2025 by rpki-client