This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203276.roa File: AS203276.roa (raw, json) Hash identifier: rOnk/5Rmbot45HDlQMjjtZtga3w7w0cVotuS4SBZlaQ= Subject key identifier: 93:EB:A7:88:0A:97:0F:EE:C1:E1:E4:FF:4E:CB:4D:2F:B9:32:C0:CF Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 7AB46F0B54974B400CF1EB958123CEDB57B22D57 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203276.roa Signing time: Wed 10 Dec 2025 02:14:44 +0000 ROA not before: Wed 10 Dec 2025 02:09:44 +0000 ROA not after: Wed 09 Dec 2026 02:14:44 +0000 asID: 203276 IP address blocks: 2a0f:85c1:dd8::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b4:6f:0b:54:97:4b:40:0c:f1:eb:95:81:23:ce:db:57:b2:2d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Dec 10 02:09:44 2025 GMT Not After : Dec 9 02:14:44 2026 GMT Subject: CN=93EBA7880A970FEEC1E1E4FF4ECB4D2FB932C0CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4a:6f:44:53:c5:f7:28:94:72:1d:a4:e3:8f: 49:84:af:99:a0:d9:99:8f:1e:7b:a8:b0:d8:43:8a: fe:b4:ce:43:b1:52:25:ed:c7:7d:5b:1f:df:ae:97: 28:0d:9c:f7:7b:0e:16:78:77:67:58:1a:17:8e:36: fe:88:bf:e0:33:19:ba:aa:1c:4b:40:3b:66:71:42: 31:9a:59:5c:e0:52:56:c3:fd:d8:23:ce:62:50:da: f8:e3:ab:f7:a8:68:4c:ad:0e:8b:0f:41:66:e9:3c: 31:90:09:c4:fd:3e:ff:37:cf:1b:be:6c:2c:11:49: 77:15:88:0d:01:35:a8:4d:39:98:f3:af:f8:20:2a: 60:17:d2:93:5d:4e:fa:ae:a7:2b:38:69:46:61:bc: 1c:0d:e0:04:7c:29:9e:1c:f0:62:f7:22:6d:08:68: 87:fa:7f:ef:55:9b:0d:f2:8b:78:8b:cc:e6:c7:e7: 97:32:b1:a1:50:b1:4f:d1:38:10:97:4c:af:79:f5: b1:15:0d:a1:59:2e:c3:ac:62:18:fc:10:83:f5:4d: 7f:4e:ff:1c:c4:92:63:af:83:81:dd:9f:6b:08:54: 30:5f:f1:ce:d4:82:f8:f3:b0:c2:be:27:cc:49:83: 3a:12:fa:ae:6b:50:04:12:f0:81:02:ab:4c:84:0c: 5a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EB:A7:88:0A:97:0F:EE:C1:E1:E4:FF:4E:CB:4D:2F:B9:32:C0:CF X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS203276.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:dd8::/48 Signature Algorithm: sha256WithRSAEncryption c9:b3:50:10:18:9a:92:b4:ec:3d:c5:26:38:b2:14:9b:d3:00: 70:c2:52:f3:ce:b5:b1:fd:74:28:8a:92:ab:5b:e2:34:54:af: 04:ad:f9:0b:3a:6f:d8:87:12:e8:a4:90:bf:b4:a1:da:b9:1b: da:69:55:74:e1:c9:58:77:a8:42:24:54:92:82:07:8b:f2:d4: 18:5b:e6:82:94:ac:d1:e4:14:ce:a6:a6:60:7f:d4:e8:63:33: 3f:92:68:e5:25:b4:4f:db:d1:ef:8d:85:c5:5e:30:fe:08:14: e6:7f:15:22:5a:29:1c:6c:93:80:ac:66:cc:a3:57:9c:b9:87: 10:e0:e6:d9:8c:14:a3:24:7b:5d:26:7f:70:c1:2c:75:82:03: 8a:02:ce:f4:9b:fc:20:50:4a:88:8a:9c:70:f3:0f:47:17:87: e4:76:c8:04:56:0e:c6:66:d6:5a:c6:f1:b7:3e:5d:09:54:52: 3e:2d:6e:38:92:71:27:a1:a3:fb:d5:93:00:46:7e:e2:38:c5: 9d:e5:47:b6:09:b0:1d:38:f4:3a:4b:57:60:78:06:04:65:76: f9:88:99:55:93:3e:bc:02:36:68:d2:cb:35:26:d2:cd:01:7c: 95:bf:89:19:d2:7c:15:62:6f:35:d1:01:22:58:d1:ad:54:8d: 2d:e9:58:5e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUerRvC1SXS0AM8euVgSPO21eyLVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTEyMTAwMjA5NDRaFw0yNjEyMDkwMjE0NDRaMDMxMTAvBgNV BAMTKDkzRUJBNzg4MEE5NzBGRUVDMUUxRTRGRjRFQ0I0RDJGQjkzMkMwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzSm9EU8X3KJRyHaTjj0mEr5mg 2ZmPHnuosNhDiv60zkOxUiXtx31bH9+ulygNnPd7DhZ4d2dYGheONv6Iv+AzGbqq HEtAO2ZxQjGaWVzgUlbD/dgjzmJQ2vjjq/eoaEytDosPQWbpPDGQCcT9Pv83zxu+ bCwRSXcViA0BNahNOZjzr/ggKmAX0pNdTvqupys4aUZhvBwN4AR8KZ4c8GL3Im0I aIf6f+9Vmw3yi3iLzObH55cysaFQsU/ROBCXTK959bEVDaFZLsOsYhj8EIP1TX9O /xzEkmOvg4Hdn2sIVDBf8c7UgvjzsMK+J8xJgzoS+q5rUAQS8IECq0yEDFpLAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUk+uniAqXD+7B4eT/TstNL7kywM8wHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjAzMjc2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQ3YMA0GCSqGSIb3DQEBCwUAA4IBAQDJs1AQGJqStOw9xSY4shSb0wBwwlLzzrWx /XQoipKrW+I0VK8ErfkLOm/YhxLopJC/tKHauRvaaVV04clYd6hCJFSSggeL8tQY W+aClKzR5BTOpqZgf9ToYzM/kmjlJbRP29HvjYXFXjD+CBTmfxUiWikcbJOArGbM o1ecuYcQ4ObZjBSjJHtdJn9wwSx1ggOKAs70m/wgUEqIipxw8w9HF4fkdsgEVg7G ZtZaxvG3Pl0JVFI+LW44knEnoaP71ZMARn7iOMWd5Ue2CbAdOPQ6S1dgeAYEZXb5 iJlVkz68AjZo0ss1JtLNAXyVv4kZ0nwVYm810QEiWNGtVI0t6Vhe -----END CERTIFICATE-----Generated at Sun Dec 21 00:09:03 2025 by rpki-client