This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209809.roa File: AS209809.roa (raw, json) Hash identifier: 9x71M078iYiHfvbhJ4ZbWH1xEj3aaJqpdl+fHmRK3i4= Subject key identifier: FD:E1:7E:9E:D9:8C:F6:E7:45:23:B0:A6:D2:0C:80:D0:2A:1E:CA:62 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 563B90DE340526F9F7AE1FB78CE00E1C5E31E181 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209809.roa Signing time: Tue 09 Dec 2025 11:18:13 +0000 ROA not before: Tue 09 Dec 2025 11:13:13 +0000 ROA not after: Tue 08 Dec 2026 11:18:13 +0000 asID: 209809 IP address blocks: 2a14:7580:ffe9::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:3b:90:de:34:05:26:f9:f7:ae:1f:b7:8c:e0:0e:1c:5e:31:e1:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 9 11:13:13 2025 GMT Not After : Dec 8 11:18:13 2026 GMT Subject: CN=FDE17E9ED98CF6E74523B0A6D20C80D02A1ECA62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ef:3f:d9:9d:85:54:f6:59:4f:95:9c:1e:92: 4f:fa:0f:24:fe:8c:a0:f8:4b:0b:4f:b2:fc:0a:54: 6f:3e:3e:f0:ea:54:9c:f9:ff:59:8b:a7:c7:59:51: 9a:02:ca:af:17:f5:d7:30:fc:93:56:cd:f1:bd:e5: 58:f2:53:0b:71:30:28:81:9c:27:2d:07:df:5d:25: 26:b8:d0:ab:2c:77:ee:b7:77:eb:b7:c7:f1:fc:0c: b0:a8:93:5d:fe:19:08:55:20:ad:76:4a:75:bb:f8: 1d:b2:e1:6d:ae:ab:94:a3:52:32:84:e9:66:a2:ec: b9:9a:84:27:3e:b4:09:13:be:55:0a:1b:3d:d0:4d: f0:dd:e9:36:31:10:2e:ac:5a:dc:eb:cf:84:de:3f: 8e:7d:13:96:fa:c6:c1:93:40:53:a5:a2:ce:7a:a1: 1e:4c:4e:b9:3c:c2:32:1d:bc:67:88:fc:e3:5d:6b: 68:fc:82:4f:d9:ef:4a:57:cd:09:6d:8c:65:b7:21: f1:65:66:55:14:68:85:58:58:84:53:3d:58:6c:7e: f3:dc:a9:e5:39:67:e2:98:6d:24:74:46:7a:3f:ca: df:1e:96:d9:38:a3:5e:2f:8f:bd:b7:f1:57:8a:51: 8e:92:d5:b8:1e:c6:af:3e:1e:46:94:6f:3f:95:de: aa:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E1:7E:9E:D9:8C:F6:E7:45:23:B0:A6:D2:0C:80:D0:2A:1E:CA:62 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209809.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ffe9::/48 Signature Algorithm: sha256WithRSAEncryption 3e:af:cf:c4:36:21:75:1a:8d:9b:bc:4d:37:43:3b:47:95:33: b8:3c:c7:e6:ad:e0:bc:62:75:f2:fe:bb:f3:1f:79:90:2d:c4: 37:c3:4e:5f:0d:ed:23:e6:92:43:0c:5f:e3:fc:73:e5:28:f4: 0e:19:35:ba:ac:2e:b9:c8:c3:31:61:43:14:73:22:51:1e:7d: a8:41:4d:f3:46:18:89:d6:eb:92:49:ea:74:51:f8:36:fc:27: 00:99:34:40:ac:92:c0:2d:34:a9:1e:e2:7d:99:75:4c:97:f8: e6:bf:62:ad:e3:fc:6d:f6:7c:e2:12:d1:50:b7:6c:3c:f3:d0: 37:3a:f0:06:50:6f:6e:2f:bc:97:dc:3e:37:d2:9c:f9:33:75: 6e:10:66:5b:f7:ff:0e:04:db:df:d4:fe:70:9d:5a:46:5a:68: 67:1b:a4:33:1a:94:04:af:6c:a5:10:b0:6f:2a:78:d4:14:96: b4:92:75:64:34:3e:ca:7b:bc:bb:4f:c9:bc:a1:18:72:82:9b: 2c:1c:24:9b:74:a8:f6:c5:1a:c4:6b:99:f7:a2:79:73:57:1f: e9:48:69:d7:44:d1:b5:e5:46:35:c2:a3:ec:08:95:f5:ee:e1: 23:23:db:6a:90:2f:ce:89:c7:89:0e:68:85:42:f7:af:66:b2: fb:e2:9f:ac -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUVjuQ3jQFJvn3rh+3jOAOHF4x4YEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMDkxMTEzMTNaFw0yNjEyMDgxMTE4MTNaMDMxMTAvBgNV BAMTKEZERTE3RTlFRDk4Q0Y2RTc0NTIzQjBBNkQyMEM4MEQwMkExRUNBNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN7z/ZnYVU9llPlZwekk/6DyT+ jKD4SwtPsvwKVG8+PvDqVJz5/1mLp8dZUZoCyq8X9dcw/JNWzfG95VjyUwtxMCiB nCctB99dJSa40Kssd+63d+u3x/H8DLCok13+GQhVIK12SnW7+B2y4W2uq5SjUjKE 6Wai7LmahCc+tAkTvlUKGz3QTfDd6TYxEC6sWtzrz4TeP459E5b6xsGTQFOlos56 oR5MTrk8wjIdvGeI/ONda2j8gk/Z70pXzQltjGW3IfFlZlUUaIVYWIRTPVhsfvPc qeU5Z+KYbSR0Rno/yt8eltk4o14vj7238VeKUY6S1bgexq8+HkaUbz+V3qr5AgMB AAGjggINMIICCTAdBgNVHQ4EFgQU/eF+ntmM9udFI7Cm0gyA0CoeymIwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjA5ODA5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1 gP/pMA0GCSqGSIb3DQEBCwUAA4IBAQA+r8/ENiF1Go2bvE03QztHlTO4PMfmreC8 YnXy/rvzH3mQLcQ3w05fDe0j5pJDDF/j/HPlKPQOGTW6rC65yMMxYUMUcyJRHn2o QU3zRhiJ1uuSSep0Ufg2/CcAmTRArJLALTSpHuJ9mXVMl/jmv2Kt4/xt9nziEtFQ t2w889A3OvAGUG9uL7yX3D430pz5M3VuEGZb9/8OBNvf1P5wnVpGWmhnG6QzGpQE r2ylELBvKnjUFJa0knVkND7Ke7y7T8m8oRhygpssHCSbdKj2xRrEa5n3onlzVx/p SGnXRNG15UY1wqPsCJX17uEjI9tqkC/OiceJDmiFQvevZrL74p+s -----END CERTIFICATE-----Generated at Thu Dec 18 10:55:09 2025 by rpki-client