This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202986.roa File: AS202986.roa (raw, json) Hash identifier: TFrivvZWFocHqU5m/TJZCbY1cEudgM28yfbHTs36V7g= Subject key identifier: D0:7B:02:31:88:B6:56:A9:11:B5:E4:D1:A1:DD:88:51:43:AB:34:1F Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 0C1167C91ABA5C255A5E11F76AE02AF1090857FD Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202986.roa Signing time: Thu 11 Dec 2025 11:13:09 +0000 ROA not before: Thu 11 Dec 2025 11:08:09 +0000 ROA not after: Thu 10 Dec 2026 11:13:09 +0000 asID: 202986 IP address blocks: 2a14:7580:f100::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:11:67:c9:1a:ba:5c:25:5a:5e:11:f7:6a:e0:2a:f1:09:08:57:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 11 11:08:09 2025 GMT Not After : Dec 10 11:13:09 2026 GMT Subject: CN=D07B023188B656A911B5E4D1A1DD885143AB341F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:84:a1:cf:7f:f5:fc:67:ca:39:c1:ca:dd:32: 6e:d4:7f:65:c1:a3:e4:a9:1e:8b:4a:61:40:bf:60: 3b:57:79:92:d9:33:4e:2b:78:2b:98:7d:90:2e:7c: 55:7c:ef:6e:18:0c:6d:34:4a:b9:c6:b5:84:55:b2: 4f:69:6a:d5:75:a0:af:e9:95:30:a8:1a:5b:74:95: 53:dd:73:ff:46:5f:74:eb:5d:4c:a9:eb:ce:af:8e: 3a:28:f7:b5:4b:95:fd:95:c1:57:54:5c:52:e9:b0: db:b7:67:c8:95:0b:d4:c5:f5:76:15:00:df:3e:dc: 22:33:6b:bc:33:6f:ec:cb:4f:e3:59:4d:66:54:aa: ef:b2:67:76:f0:58:bc:26:45:32:a9:72:b8:c9:f5: a4:0c:ad:69:f6:a8:60:e6:ee:90:26:96:f6:37:92: 93:fe:51:33:32:7e:41:22:37:5d:4b:70:37:64:62: ff:27:e1:90:35:a8:4a:06:29:8e:a1:94:3a:7e:68: d5:2c:53:20:2d:c6:8c:5e:f5:49:a3:38:68:17:21: 94:8d:51:42:a5:74:08:26:85:66:60:5d:5b:68:7a: 62:f7:02:d8:11:75:1e:15:21:22:ea:df:7c:89:8a: e4:7c:05:53:ae:15:23:c3:c7:5c:a6:81:83:71:60: 77:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7B:02:31:88:B6:56:A9:11:B5:E4:D1:A1:DD:88:51:43:AB:34:1F X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202986.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:f100::/40 Signature Algorithm: sha256WithRSAEncryption 72:a7:7e:8d:9c:c5:68:75:98:2b:00:d7:00:0d:83:85:42:b4: e0:f0:c6:16:2d:70:b3:53:25:7e:88:19:a6:1e:7b:6f:b4:78: 54:76:af:90:c2:e6:01:c6:28:53:d2:81:08:74:5b:49:6b:af: ad:68:63:75:8e:23:03:66:d4:8d:13:3b:a1:ae:cb:dc:60:4c: 20:7e:0c:07:fe:7f:cd:25:ad:52:6e:53:f4:b5:e8:62:36:e5: a9:03:4c:9e:10:4c:f0:a5:2c:b1:d2:b3:4c:8d:79:84:13:da: af:07:be:32:45:c2:62:2e:8b:88:63:ca:dc:e1:be:57:47:23: 7b:59:06:cb:dd:3b:5f:4e:bf:12:df:49:b2:fe:2b:79:df:d6: cc:cb:0e:c7:6c:b1:f7:c0:38:54:3f:40:66:d6:51:42:62:ab: 99:80:4b:a2:b7:d3:34:a6:5b:ef:62:77:0d:3d:a2:1b:eb:04: f5:c2:c0:dd:fd:04:8a:df:fc:34:2f:a6:0a:c8:68:35:c2:74: b9:1a:95:4e:c8:04:42:46:f9:c6:c9:c9:98:bb:9b:63:a2:08: 1e:c6:23:75:36:4f:3c:ce:cf:73:2e:ea:7b:c0:23:3c:a5:84: 7b:88:65:d9:d2:30:97:81:e5:f7:5b:29:f1:86:cd:fc:27:72: 00:7e:ce:19 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUDBFnyRq6XCVaXhH3auAq8QkIV/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMTExMTA4MDlaFw0yNjEyMTAxMTEzMDlaMDMxMTAvBgNV BAMTKEQwN0IwMjMxODhCNjU2QTkxMUI1RTREMUExREQ4ODUxNDNBQjM0MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRhKHPf/X8Z8o5wcrdMm7Uf2XB o+SpHotKYUC/YDtXeZLZM04reCuYfZAufFV8724YDG00SrnGtYRVsk9patV1oK/p lTCoGlt0lVPdc/9GX3TrXUyp686vjjoo97VLlf2VwVdUXFLpsNu3Z8iVC9TF9XYV AN8+3CIza7wzb+zLT+NZTWZUqu+yZ3bwWLwmRTKpcrjJ9aQMrWn2qGDm7pAmlvY3 kpP+UTMyfkEiN11LcDdkYv8n4ZA1qEoGKY6hlDp+aNUsUyAtxoxe9UmjOGgXIZSN UUKldAgmhWZgXVtoemL3AtgRdR4VISLq33yJiuR8BVOuFSPDx1ymgYNxYHfTAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQU0HsCMYi2VqkRteTRod2IUUOrNB8wHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjAyOTg2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1 gPEwDQYJKoZIhvcNAQELBQADggEBAHKnfo2cxWh1mCsA1wANg4VCtODwxhYtcLNT JX6IGaYee2+0eFR2r5DC5gHGKFPSgQh0W0lrr61oY3WOIwNm1I0TO6Guy9xgTCB+ DAf+f80lrVJuU/S16GI25akDTJ4QTPClLLHSs0yNeYQT2q8HvjJFwmIui4hjytzh vldHI3tZBsvdO19OvxLfSbL+K3nf1szLDsdssffAOFQ/QGbWUUJiq5mAS6K30zSm W+9idw09ohvrBPXCwN39BIrf/DQvpgrIaDXCdLkalU7IBEJG+cbJyZi7m2OiCB7G I3U2TzzOz3Mu6nvAIzylhHuIZdnSMJeB5fdbKfGGzfwncgB+zhk= -----END CERTIFICATE-----Generated at Tue Dec 16 12:06:42 2025 by rpki-client