This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202959.roa File: AS202959.roa (raw, json) Hash identifier: HG0maB3H7E664LjxtO71fH8U6U3BSa5oua/fDZoM3zA= Subject key identifier: D4:11:5D:6E:97:A2:9A:8C:10:16:23:DD:33:0D:BD:51:6D:E8:34:DE Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 406F7BBCBD5411110FC6952898FDC2072DDBDF5C Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202959.roa Signing time: Thu 11 Dec 2025 13:57:24 +0000 ROA not before: Thu 11 Dec 2025 13:52:24 +0000 ROA not after: Thu 10 Dec 2026 13:57:24 +0000 asID: 202959 IP address blocks: 193.150.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:6f:7b:bc:bd:54:11:11:0f:c6:95:28:98:fd:c2:07:2d:db:df:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 11 13:52:24 2025 GMT Not After : Dec 10 13:57:24 2026 GMT Subject: CN=D4115D6E97A29A8C101623DD330DBD516DE834DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:74:50:f6:85:b2:5b:2e:a2:fa:98:34:99:49: 1f:b7:73:14:58:14:56:22:ef:9e:0d:08:d3:e5:4c: 6b:05:a5:fb:6e:70:7a:15:ba:3d:09:7b:45:af:86: 9b:f6:e0:e7:c4:d6:9c:f3:2d:a1:f2:d0:a7:0b:72: ce:ca:3a:79:d5:78:3c:2c:c0:55:31:93:08:7f:3f: ee:c8:f5:2e:c3:09:ee:d0:30:14:ff:8d:10:24:cd: db:89:0b:68:77:82:70:66:d6:53:2b:91:68:08:e5: 33:b2:65:ed:8f:8e:47:1f:e3:ee:a2:42:f1:e3:a7: 44:6b:20:6d:58:ae:f6:05:09:fc:bd:a9:05:1d:5d: 02:33:b3:b9:0a:00:5e:eb:1f:73:bf:7a:40:f1:c2: 56:5a:09:6d:fb:0b:bc:4d:b4:80:49:b1:3c:fb:5a: 2a:eb:be:7e:d2:70:5a:f7:ad:55:ee:fb:5f:a9:b6: ae:a6:60:b9:d5:51:81:bb:6e:42:b4:bb:f8:e7:69: a5:74:25:4c:6d:d6:4c:7f:80:01:a3:ca:62:16:d1: 07:82:40:d4:b8:e8:5e:56:8f:34:a4:4b:f9:61:e2: e0:46:06:00:01:b5:58:2f:bc:b3:6d:c2:45:cb:2f: de:4b:cc:31:98:74:fc:5f:4a:2c:8e:6d:16:f8:03: ea:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:11:5D:6E:97:A2:9A:8C:10:16:23:DD:33:0D:BD:51:6D:E8:34:DE X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202959.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.150.40.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:be:d5:0c:98:ba:b0:49:1e:c5:85:4f:88:06:d0:71:ea:16: bc:34:18:ac:33:21:98:a3:2a:8f:81:6e:ac:dc:e7:39:67:21: e6:a6:fd:7a:d6:0d:ff:ca:51:5e:e1:3a:83:cd:1f:55:97:83: 39:93:e1:1e:40:49:18:3d:57:56:fd:53:37:9f:cd:5d:ae:c5: aa:dc:97:ec:ff:1e:f2:84:dc:16:76:73:e4:c3:db:8f:91:0c: f2:36:77:2c:3c:01:43:c4:84:38:c2:a0:ff:1c:04:fc:5a:78: 6b:97:3a:c5:4f:02:9f:7f:b6:d8:9c:db:c0:1f:e0:10:a9:93: e9:40:7b:93:78:54:c5:91:a3:91:0d:b3:dc:d0:3c:8a:de:ba: df:88:e4:52:d0:6d:1c:41:d7:12:46:f3:a3:7b:0a:a4:87:89: 50:d8:0f:b3:c5:32:44:d3:ba:55:1c:fe:c3:12:c1:80:4a:1d: 42:ec:6d:d9:05:15:5e:ac:00:f3:78:98:8c:d5:fe:e8:e0:53: 30:ee:ec:9a:4b:f1:7e:cd:d5:68:da:9a:ae:7b:f6:80:9f:e4: b5:9d:04:c2:bb:18:92:60:2e:14:52:4a:64:a5:ca:fd:c9:a5: 0d:6a:a4:f8:53:18:ae:3a:a6:1c:a2:57:9f:c5:74:01:0d:38: 83:5d:ce:f0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUQG97vL1UEREPxpUomP3CBy3b31wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMTExMzUyMjRaFw0yNjEyMTAxMzU3MjRaMDMxMTAvBgNV BAMTKEQ0MTE1RDZFOTdBMjlBOEMxMDE2MjNERDMzMERCRDUxNkRFODM0REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgdFD2hbJbLqL6mDSZSR+3cxRY FFYi754NCNPlTGsFpftucHoVuj0Je0Wvhpv24OfE1pzzLaHy0KcLcs7KOnnVeDws wFUxkwh/P+7I9S7DCe7QMBT/jRAkzduJC2h3gnBm1lMrkWgI5TOyZe2Pjkcf4+6i QvHjp0RrIG1YrvYFCfy9qQUdXQIzs7kKAF7rH3O/ekDxwlZaCW37C7xNtIBJsTz7 Wirrvn7ScFr3rVXu+1+ptq6mYLnVUYG7bkK0u/jnaaV0JUxt1kx/gAGjymIW0QeC QNS46F5WjzSkS/lh4uBGBgABtVgvvLNtwkXLL95LzDGYdPxfSiyObRb4A+q5AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU1BFdbpeimowQFiPdMw29UW3oNN4wHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjAyOTU5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZYo MA0GCSqGSIb3DQEBCwUAA4IBAQBbvtUMmLqwSR7FhU+IBtBx6ha8NBisMyGYoyqP gW6s3Oc5ZyHmpv161g3/ylFe4TqDzR9Vl4M5k+EeQEkYPVdW/VM3n81drsWq3Jfs /x7yhNwWdnPkw9uPkQzyNncsPAFDxIQ4wqD/HAT8WnhrlzrFTwKff7bYnNvAH+AQ qZPpQHuTeFTFkaORDbPc0DyK3rrfiORS0G0cQdcSRvOjewqkh4lQ2A+zxTJE07pV HP7DEsGASh1C7G3ZBRVerADzeJiM1f7o4FMw7uyaS/F+zdVo2pque/aAn+S1nQTC uxiSYC4UUkpkpcr9yaUNaqT4UxiuOqYcolefxXQBDTiDXc7w -----END CERTIFICATE-----Generated at Thu Dec 18 10:55:08 2025 by rpki-client