This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS206491.roa File: AS206491.roa (raw, json) Hash identifier: xGDxA2ihy9J/R9Ef0LIV6FFwjeCBCtllh3uDTutmQyI= Subject key identifier: 2F:CB:08:BB:0C:1E:3E:0C:20:DA:B0:EF:F7:57:D1:F0:70:FF:D8:D8 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 46B85166C5E06C2874AC51B6DDE51D3B5B92EBB6 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS206491.roa Signing time: Thu 18 Dec 2025 11:31:08 +0000 ROA not before: Thu 18 Dec 2025 11:26:08 +0000 ROA not after: Thu 17 Dec 2026 11:31:08 +0000 asID: 206491 IP address blocks: 2a14:7580:ff98::/48 maxlen: 48 2a14:7583:fb02::/48 maxlen: 48 2a14:7584:d002::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b8:51:66:c5:e0:6c:28:74:ac:51:b6:dd:e5:1d:3b:5b:92:eb:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 18 11:26:08 2025 GMT Not After : Dec 17 11:31:08 2026 GMT Subject: CN=2FCB08BB0C1E3E0C20DAB0EFF757D1F070FFD8D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:16:37:28:1b:01:39:8b:01:7d:4c:9d:ab:18: 91:e0:2e:34:07:20:73:78:cc:b5:4f:42:16:15:25: 83:ae:db:21:ea:26:1e:9a:bc:84:e8:e7:4c:09:48: 41:95:08:e4:6d:f3:0a:94:b8:27:cc:65:82:66:bd: 7c:5f:99:18:ff:f7:dd:35:5c:81:f1:0b:0c:01:2a: e6:c0:22:e9:e5:32:5a:96:89:a6:42:ba:70:13:dc: 41:4e:8f:67:b5:d2:cd:f8:d5:ec:a1:5a:33:9b:f6: b4:54:e1:81:7d:fd:03:63:cc:96:57:e0:1d:42:4e: 82:bb:02:c8:e4:a6:eb:69:77:b8:64:97:2e:4a:d9: 3a:a1:36:1f:6e:5f:98:95:02:aa:a8:d5:9d:ee:93: df:63:40:b9:a9:af:dc:49:69:fa:24:ec:be:aa:a8: 26:e4:b5:78:c1:4d:b3:a2:f0:ba:a6:2f:1d:e2:18: e7:ab:d3:0f:3c:5e:81:18:ff:f6:4d:21:a1:25:b3: 95:83:8d:12:06:9d:c4:27:3a:22:09:eb:38:f5:a3: 0c:22:ba:e8:66:6f:17:b3:2b:83:a4:86:f5:31:3d: 61:aa:82:f7:3c:26:b1:b8:02:eb:ca:be:a5:48:49: 37:ea:48:77:e9:bd:9e:1f:7d:72:ea:09:e5:d9:b1: 3d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CB:08:BB:0C:1E:3E:0C:20:DA:B0:EF:F7:57:D1:F0:70:FF:D8:D8 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS206491.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff98::/48 2a14:7583:fb02::/48 2a14:7584:d002::/48 Signature Algorithm: sha256WithRSAEncryption 6e:43:ca:82:c5:d1:6d:8b:c3:29:ea:20:a4:81:9b:d7:83:f1: f4:11:cb:44:cc:3c:16:04:0f:25:78:ec:7f:e3:77:7d:a9:0c: f6:5a:ee:b7:3a:57:b2:f2:72:c0:3e:b9:d0:19:e7:8b:f5:19: 72:f3:9c:9c:72:33:04:23:35:18:4e:16:c0:e3:82:35:d6:5d: 9a:1a:25:08:e2:31:c0:80:b3:2c:c0:1d:fd:9c:a2:2a:9f:46: 03:12:a5:e3:1c:1c:29:21:f8:dc:b9:88:c6:93:ce:fb:d9:bc: 17:67:44:9e:56:cb:15:6c:45:35:b9:cf:31:9e:42:83:9e:87: 4c:67:fa:60:56:70:b7:19:c8:de:8b:97:e0:3c:69:38:45:38: a1:30:4f:e9:b0:89:f6:8a:7f:34:01:e2:ad:3f:f0:d1:d4:a0: 70:f6:db:0d:ec:2a:d3:c6:c3:4e:6a:6e:a5:55:8c:51:e6:f6: 02:e6:90:b5:57:30:e4:47:49:e7:bf:29:a5:78:6f:f5:ae:73: d0:e5:62:58:98:87:59:10:df:9c:f0:a1:c0:07:20:ba:d7:5c: 8b:d9:20:4f:20:fd:77:0e:d0:6e:73:eb:87:69:3b:96:85:34: 64:96:08:ea:9a:c1:a4:d8:e4:c2:19:e3:97:8e:e6:64:e5:f4: 26:d7:39:6d -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIURrhRZsXgbCh0rFG23eUdO1uS67YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMTgxMTI2MDhaFw0yNjEyMTcxMTMxMDhaMDMxMTAvBgNV BAMTKDJGQ0IwOEJCMEMxRTNFMEMyMERBQjBFRkY3NTdEMUYwNzBGRkQ4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FjcoGwE5iwF9TJ2rGJHgLjQH IHN4zLVPQhYVJYOu2yHqJh6avITo50wJSEGVCORt8wqUuCfMZYJmvXxfmRj/9901 XIHxCwwBKubAIunlMlqWiaZCunAT3EFOj2e10s341eyhWjOb9rRU4YF9/QNjzJZX 4B1CToK7Asjkputpd7hkly5K2TqhNh9uX5iVAqqo1Z3uk99jQLmpr9xJafok7L6q qCbktXjBTbOi8LqmLx3iGOer0w88XoEY//ZNIaEls5WDjRIGncQnOiIJ6zj1owwi uuhmbxezK4OkhvUxPWGqgvc8JrG4AuvKvqVISTfqSHfpvZ4ffXLqCeXZsT2lAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUL8sIuwwePgwg2rDv91fR8HD/2NgwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjA2NDkxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAKhR1 gP+YAwcAKhR1g/sCAwcAKhR1hNACMA0GCSqGSIb3DQEBCwUAA4IBAQBuQ8qCxdFt i8Mp6iCkgZvXg/H0EctEzDwWBA8leOx/43d9qQz2Wu63Oley8nLAPrnQGeeL9Rly 85yccjMEIzUYThbA44I11l2aGiUI4jHAgLMswB39nKIqn0YDEqXjHBwpIfjcuYjG k8772bwXZ0SeVssVbEU1uc8xnkKDnodMZ/pgVnC3Gcjei5fgPGk4RTihME/psIn2 in80AeKtP/DR1KBw9tsN7CrTxsNOam6lVYxR5vYC5pC1VzDkR0nnvymleG/1rnPQ 5WJYmIdZEN+c8KHAByC611yL2SBPIP13DtBuc+uHaTuWhTRklgjqmsGk2OTCGeOX juZk5fQm1zlt -----END CERTIFICATE-----Generated at Sat Dec 20 22:28:51 2025 by rpki-client