This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204729.roa File: AS204729.roa (raw, json) Hash identifier: aLiK7rkg84yXbrpmUxjJKlxG3wW2wemaZebDQTc8be4= Subject key identifier: 4D:C1:FF:E4:42:5A:62:31:FC:42:A2:37:4E:2D:C3:44:9B:61:78:BD Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 273BFE9287266C47D2C9E71772E4D9D511466F91 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204729.roa Signing time: Sat 20 Dec 2025 10:23:30 +0000 ROA not before: Sat 20 Dec 2025 10:18:30 +0000 ROA not after: Sat 19 Dec 2026 10:23:30 +0000 asID: 204729 IP address blocks: 2a14:7581:fb0::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:3b:fe:92:87:26:6c:47:d2:c9:e7:17:72:e4:d9:d5:11:46:6f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 20 10:18:30 2025 GMT Not After : Dec 19 10:23:30 2026 GMT Subject: CN=4DC1FFE4425A6231FC42A2374E2DC3449B6178BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d8:1d:dd:39:79:da:6a:9c:f1:49:dd:38:cf: f0:47:be:fb:91:f4:93:8c:17:40:ef:4b:36:3c:f6: 14:6c:2f:f6:ea:25:84:09:a3:ea:c6:a7:58:37:20: f0:99:42:84:fe:a7:33:a7:63:74:bd:0a:b8:cd:9c: 66:1c:eb:25:d7:d4:28:1b:de:9f:56:fb:87:3f:8b: 26:ef:c7:ce:67:c5:70:df:85:21:b3:a8:6a:8f:89: f6:f4:c6:52:88:83:43:be:06:58:f0:11:3f:40:4d: a2:c3:5a:4e:a5:e3:36:1c:3c:2f:cc:7c:2c:9a:f3: 6c:ec:f8:ca:65:ff:e9:dc:59:6f:a1:58:15:0f:df: 93:ed:30:e6:a0:c8:5d:0f:3c:e2:55:7d:be:26:c8: 66:20:0f:02:e2:c6:5d:5c:4d:49:b4:4f:c0:21:b1: 3c:08:bb:88:5d:9c:f4:da:6e:ec:92:e7:e2:26:58: 8c:20:3f:d5:9b:23:4e:b6:19:d3:a4:bf:f2:55:81: 4f:9d:8b:b4:6c:fb:34:af:7d:af:36:f9:9e:a7:8e: 01:83:66:58:80:40:d0:f5:48:5e:1a:df:f1:12:68: 40:28:aa:43:57:2b:04:ee:4f:a4:6c:96:79:9b:40: bc:5a:46:6f:90:cc:e5:53:fa:38:22:43:b9:e1:0d: c8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C1:FF:E4:42:5A:62:31:FC:42:A2:37:4E:2D:C3:44:9B:61:78:BD X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS204729.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:fb0::/44 Signature Algorithm: sha256WithRSAEncryption 4a:a5:ea:6f:c0:72:cf:7b:f1:81:0e:38:08:f6:81:d7:51:07: e4:62:4b:38:86:cc:43:c6:f5:e0:e4:ab:c5:f2:bb:5b:26:36: 13:89:15:dc:87:57:f6:57:5b:9c:80:51:f2:8b:9e:58:05:c3: 89:dc:13:5e:da:be:35:64:50:10:76:b4:88:8a:d2:9b:88:98: 87:28:1d:b2:f7:b4:6a:ba:72:8d:fb:c9:98:07:85:d6:5b:e4: cb:cb:c7:50:9e:65:cb:4f:ba:cb:37:1b:0f:9e:39:7e:05:d8: 20:18:70:4a:7a:40:dc:7d:09:d2:65:84:8b:f7:6a:f1:ef:7a: d1:53:8d:39:25:b1:a4:b0:bd:ee:aa:26:09:59:bf:e6:95:3a: 7e:7e:4f:5d:05:72:7f:a5:05:cb:2b:98:77:e0:05:7c:89:ad: 66:d6:61:eb:df:f1:50:1e:6a:94:2d:62:7d:4d:7c:04:6f:7d: 74:ed:83:68:9d:98:12:ed:df:18:94:f5:e7:48:a1:b7:e9:af: 00:48:6c:c8:84:4d:44:7b:7e:8f:0e:1b:2a:12:77:50:cf:60: fc:f3:b7:dc:34:e4:0f:03:ef:fe:4c:8b:d1:cf:ae:bb:a5:3a: c1:5e:d6:58:6c:23:42:e1:4e:ad:80:3f:38:11:34:7f:b9:30: 94:11:e5:9f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUJzv+kocmbEfSyecXcuTZ1RFGb5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMjAxMDE4MzBaFw0yNjEyMTkxMDIzMzBaMDMxMTAvBgNV BAMTKDREQzFGRkU0NDI1QTYyMzFGQzQyQTIzNzRFMkRDMzQ0OUI2MTc4QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv2B3dOXnaapzxSd04z/BHvvuR 9JOMF0DvSzY89hRsL/bqJYQJo+rGp1g3IPCZQoT+pzOnY3S9CrjNnGYc6yXX1Cgb 3p9W+4c/iybvx85nxXDfhSGzqGqPifb0xlKIg0O+BljwET9ATaLDWk6l4zYcPC/M fCya82zs+Mpl/+ncWW+hWBUP35PtMOagyF0PPOJVfb4myGYgDwLixl1cTUm0T8Ah sTwIu4hdnPTabuyS5+ImWIwgP9WbI062GdOkv/JVgU+di7Rs+zSvfa82+Z6njgGD ZliAQND1SF4a3/ESaEAoqkNXKwTuT6RslnmbQLxaRm+QzOVT+jgiQ7nhDcgVAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUTcH/5EJaYjH8QqI3Ti3DRJtheL0wHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjA0NzI5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1 gQ+wMA0GCSqGSIb3DQEBCwUAA4IBAQBKpepvwHLPe/GBDjgI9oHXUQfkYks4hsxD xvXg5KvF8rtbJjYTiRXch1f2V1ucgFHyi55YBcOJ3BNe2r41ZFAQdrSIitKbiJiH KB2y97RqunKN+8mYB4XWW+TLy8dQnmXLT7rLNxsPnjl+BdggGHBKekDcfQnSZYSL 92rx73rRU405JbGksL3uqiYJWb/mlTp+fk9dBXJ/pQXLK5h34AV8ia1m1mHr3/FQ HmqULWJ9TXwEb3107YNonZgS7d8YlPXnSKG36a8ASGzIhE1Ee36PDhsqEndQz2D8 87fcNOQPA+/+TIvRz667pTrBXtZYbCNC4U6tgD84ETR/uTCUEeWf -----END CERTIFICATE-----Generated at Sat Dec 20 22:10:30 2025 by rpki-client