This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203271.roa File: AS203271.roa (raw, json) Hash identifier: Rzxna+UFost8hy15TeWCtx3iIqBsgQ2u6/paBJJcTOk= Subject key identifier: DE:C1:D2:15:DE:CC:16:B0:39:EE:7A:5D:2F:01:76:DC:CA:03:0E:A2 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 28643CF69C48442DFA23FA3AEBDD5467EFF91727 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203271.roa Signing time: Wed 10 Dec 2025 02:14:57 +0000 ROA not before: Wed 10 Dec 2025 02:09:57 +0000 ROA not after: Wed 09 Dec 2026 02:14:57 +0000 asID: 203271 IP address blocks: 2a0f:85c1:ddb::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:64:3c:f6:9c:48:44:2d:fa:23:fa:3a:eb:dd:54:67:ef:f9:17:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Dec 10 02:09:57 2025 GMT Not After : Dec 9 02:14:57 2026 GMT Subject: CN=DEC1D215DECC16B039EE7A5D2F0176DCCA030EA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:60:39:a9:ee:26:b9:c9:98:85:77:62:02: 8e:d3:25:f2:a1:18:01:db:79:26:f3:3c:aa:22:41: db:b6:10:19:10:69:37:98:e8:40:57:b4:a7:61:09: 00:20:a7:34:9f:d0:67:3b:a0:ee:af:c6:2f:17:6e: 5f:be:b1:2f:aa:be:da:6d:68:c1:51:75:31:91:8f: 0a:0f:33:9c:ef:44:11:5c:67:d6:2c:ba:ef:38:ea: 63:43:e5:41:cc:8b:f6:02:bc:c1:6a:8c:ff:82:e4: dc:32:6a:75:0c:d3:26:a0:5f:6a:eb:89:be:f2:b5: 9f:dc:14:40:87:8f:44:ae:81:b4:27:ef:8d:57:bf: ce:23:7b:6f:34:b6:77:b1:91:6c:0a:08:b8:c2:13: 47:cb:d8:a6:76:ee:45:0e:7e:dc:c9:d1:50:d0:db: 12:ad:39:a5:1b:e1:d2:09:b4:c3:57:56:de:e7:55: ea:3c:e2:0e:fa:56:30:70:ca:46:9f:81:1b:c5:a6: c4:02:06:b4:bf:99:14:f8:e3:12:b7:3a:4f:5f:81: 51:8f:47:dd:e0:ce:3e:15:58:70:43:c2:38:f6:69: 67:db:ba:3c:26:05:27:9d:7b:59:91:ea:01:94:5b: 1b:9e:32:82:89:25:39:8a:51:04:a7:57:e6:48:4d: 85:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C1:D2:15:DE:CC:16:B0:39:EE:7A:5D:2F:01:76:DC:CA:03:0E:A2 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203271.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:ddb::/48 Signature Algorithm: sha256WithRSAEncryption 2d:4f:c9:01:d5:29:cf:92:57:8a:98:1b:a9:5e:3a:9b:3c:05: 01:68:1c:01:39:f0:3f:1c:52:ee:8c:2b:95:f7:05:95:a0:30: a6:a1:7e:d2:6d:9f:2f:38:4b:5b:d2:30:bb:a1:9a:cb:0f:98: b6:f2:60:8f:4f:9d:1f:87:e9:4f:e3:d0:ec:39:0e:74:4c:1f: be:79:35:82:a2:4a:d9:da:5a:fb:f5:73:a9:e2:11:24:92:cb: 31:5e:58:26:99:41:0d:13:b8:09:9a:ca:d1:d9:25:ad:54:f1: c3:dc:73:ec:0b:51:b6:02:03:84:46:4a:7d:57:f3:90:9e:a5: dd:69:59:a1:da:29:48:92:cf:2b:18:2b:22:6a:8a:bb:d6:aa: 5b:3f:9d:9b:8c:f7:a2:58:17:65:4d:e8:00:cb:17:dc:17:fb: 29:52:be:7b:65:2b:2e:af:94:fb:48:3c:31:05:b3:b4:c2:b9: 30:a4:b7:1c:51:67:1b:ec:eb:5e:90:99:0f:e4:8f:f7:53:9f: 63:9a:5c:98:e2:d8:6f:b8:7c:43:bf:12:a0:0f:6d:b5:e5:af: 70:f1:7d:bc:d5:f8:0b:0e:8a:d6:ba:f6:bf:0b:e7:58:e6:65: 50:30:94:bc:a5:d6:c9:ad:60:b4:20:11:93:da:ce:40:b2:bd: a4:20:36:0e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUKGQ89pxIRC36I/o6691UZ+/5FycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTEyMTAwMjA5NTdaFw0yNjEyMDkwMjE0NTdaMDMxMTAvBgNV BAMTKERFQzFEMjE1REVDQzE2QjAzOUVFN0E1RDJGMDE3NkRDQ0EwMzBFQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rWA5qe4mucmYhXdiAo7TJfKh GAHbeSbzPKoiQdu2EBkQaTeY6EBXtKdhCQAgpzSf0Gc7oO6vxi8Xbl++sS+qvtpt aMFRdTGRjwoPM5zvRBFcZ9Ysuu846mND5UHMi/YCvMFqjP+C5NwyanUM0yagX2rr ib7ytZ/cFECHj0SugbQn741Xv84je280tnexkWwKCLjCE0fL2KZ27kUOftzJ0VDQ 2xKtOaUb4dIJtMNXVt7nVeo84g76VjBwykafgRvFpsQCBrS/mRT44xK3Ok9fgVGP R93gzj4VWHBDwjj2aWfbujwmBSede1mR6gGUWxueMoKJJTmKUQSnV+ZITYXLAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU3sHSFd7MFrA57npdLwF23MoDDqIwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjAzMjcxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQ3bMA0GCSqGSIb3DQEBCwUAA4IBAQAtT8kB1SnPkleKmBupXjqbPAUBaBwBOfA/ HFLujCuV9wWVoDCmoX7SbZ8vOEtb0jC7oZrLD5i28mCPT50fh+lP49DsOQ50TB++ eTWCokrZ2lr79XOp4hEkkssxXlgmmUENE7gJmsrR2SWtVPHD3HPsC1G2AgOERkp9 V/OQnqXdaVmh2ilIks8rGCsiaoq71qpbP52bjPeiWBdlTegAyxfcF/spUr57ZSsu r5T7SDwxBbO0wrkwpLccUWcb7OtekJkP5I/3U59jmlyY4thvuHxDvxKgD2215a9w 8X281fgLDorWuva/C+dY5mVQMJS8pdbJrWC0IBGT2s5Asr2kIDYO -----END CERTIFICATE-----Generated at Sat Dec 20 22:18:13 2025 by rpki-client