This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209990.roa File: AS209990.roa (raw, json) Hash identifier: uPv1tcECrm+xe5CgeRqgr1067b2utws9Z/dmFTQCEh0= Subject key identifier: A8:5F:5C:50:84:CF:E7:BA:E2:AB:CD:82:F6:FD:57:B0:31:E1:49:B8 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 07360DA47C66EFEA02B93E8520F73CEB7AC977AE Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209990.roa Signing time: Thu 18 Dec 2025 18:06:56 +0000 ROA not before: Thu 18 Dec 2025 18:01:56 +0000 ROA not after: Thu 17 Dec 2026 18:06:56 +0000 asID: 209990 IP address blocks: 2a14:7580:f500::/40 maxlen: 40 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:36:0d:a4:7c:66:ef:ea:02:b9:3e:85:20:f7:3c:eb:7a:c9:77:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 18 18:01:56 2025 GMT Not After : Dec 17 18:06:56 2026 GMT Subject: CN=A85F5C5084CFE7BAE2ABCD82F6FD57B031E149B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ed:b6:ff:41:ef:97:9b:4e:9e:06:bc:88:2f: 39:80:68:f6:4e:e8:de:4d:3c:79:87:20:16:fe:85: 02:26:58:f2:e1:ba:fd:62:d2:83:62:4c:5f:4d:11: c1:21:2e:ed:ef:78:3f:6d:1b:4e:c3:43:15:07:9a: 51:65:34:b5:68:b0:66:5e:e0:f7:5b:3a:94:91:c7: cb:b9:8f:fb:54:71:aa:f3:20:11:4b:38:59:ae:e6: 29:86:bc:26:76:64:a5:f3:59:45:66:52:c9:d5:9b: 3c:c7:5b:1b:bf:e0:82:a7:f6:5b:18:28:83:36:ff: c3:84:35:35:0f:8d:ef:91:a3:b2:48:6a:39:90:33: b3:22:0d:5e:62:8e:56:d2:3f:b3:66:29:99:75:0e: 9d:08:64:69:73:f2:03:13:fe:ea:38:46:7f:ac:17: 7a:f0:5f:26:9e:b3:b3:4d:53:6b:c9:d5:6a:cd:8f: 18:3d:f4:27:27:44:5e:7a:5e:65:44:37:a6:1e:80: ff:34:1a:b8:72:16:d3:cc:82:cd:e2:ce:ca:82:f8: 3c:9b:87:6a:7f:01:96:a1:7a:23:23:7d:8c:86:66: c3:4a:68:22:65:fa:f8:86:80:b9:bf:ba:7d:46:39: 1e:2b:2a:ac:e6:59:7c:a6:87:ad:41:3b:f6:a7:de: 81:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5F:5C:50:84:CF:E7:BA:E2:AB:CD:82:F6:FD:57:B0:31:E1:49:B8 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS209990.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:f500::/40 Signature Algorithm: sha256WithRSAEncryption 69:45:70:c9:a9:20:5a:98:03:eb:d1:89:35:2a:0e:02:b8:c7: ab:e9:cf:a2:5e:48:43:f7:ca:0d:23:5d:68:72:2b:a2:24:db: c8:99:ae:2f:b1:b6:e6:8b:11:0f:d7:e8:35:df:b4:6c:10:dc: 52:fb:9e:f5:1c:53:6a:78:97:e8:11:20:c8:e1:7e:9b:48:ee: 09:6e:03:41:e4:33:bd:28:e3:64:9f:27:97:76:db:15:ab:30: 2e:64:47:6c:b8:d4:ca:86:47:d1:98:f6:9d:ea:31:c6:16:60: ea:98:2a:eb:71:44:eb:16:aa:7e:11:05:e1:cb:a4:16:98:8c: e7:d2:aa:48:20:7c:b7:73:7f:3a:eb:bb:bf:2f:b6:0d:1e:e9: 16:e5:e0:33:6c:c7:8b:5a:ac:f4:76:be:b7:39:90:72:a5:1b: 83:26:f3:12:5f:0e:3a:0b:73:00:9f:92:00:8e:07:41:d0:3d: ac:52:fa:eb:81:ff:c1:fb:7f:fe:0a:3c:6d:8b:53:8c:40:b1: 0f:9a:6d:0e:1f:a3:f1:5e:0d:99:da:b6:89:76:36:1b:3e:e1: a9:30:78:f6:aa:50:f6:f2:03:3e:38:5e:12:91:9b:c7:68:6f: 25:ea:d2:b5:9b:fa:0b:be:85:c4:93:29:c2:12:d8:76:4a:73: 9f:5b:bd:e2 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUBzYNpHxm7+oCuT6FIPc863rJd64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMTgxODAxNTZaFw0yNjEyMTcxODA2NTZaMDMxMTAvBgNV BAMTKEE4NUY1QzUwODRDRkU3QkFFMkFCQ0Q4MkY2RkQ1N0IwMzFFMTQ5QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO7bb/Qe+Xm06eBryILzmAaPZO 6N5NPHmHIBb+hQImWPLhuv1i0oNiTF9NEcEhLu3veD9tG07DQxUHmlFlNLVosGZe 4PdbOpSRx8u5j/tUcarzIBFLOFmu5imGvCZ2ZKXzWUVmUsnVmzzHWxu/4IKn9lsY KIM2/8OENTUPje+Ro7JIajmQM7MiDV5ijlbSP7NmKZl1Dp0IZGlz8gMT/uo4Rn+s F3rwXyaes7NNU2vJ1WrNjxg99CcnRF56XmVEN6YegP80GrhyFtPMgs3izsqC+Dyb h2p/AZaheiMjfYyGZsNKaCJl+viGgLm/un1GOR4rKqzmWXymh61BO/an3oEVAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUqF9cUITP57riq82C9v1XsDHhSbgwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjA5OTkwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1 gPUwDQYJKoZIhvcNAQELBQADggEBAGlFcMmpIFqYA+vRiTUqDgK4x6vpz6JeSEP3 yg0jXWhyK6Ik28iZri+xtuaLEQ/X6DXftGwQ3FL7nvUcU2p4l+gRIMjhfptI7glu A0HkM70o42SfJ5d22xWrMC5kR2y41MqGR9GY9p3qMcYWYOqYKutxROsWqn4RBeHL pBaYjOfSqkggfLdzfzrru78vtg0e6Rbl4DNsx4tarPR2vrc5kHKlG4Mm8xJfDjoL cwCfkgCOB0HQPaxS+uuB/8H7f/4KPG2LU4xAsQ+abQ4fo/FeDZnatol2Nhs+4akw ePaqUPbyAz44XhKRm8dobyXq0rWb+gu+hcSTKcIS2HZKc59bveI= -----END CERTIFICATE-----Generated at Fri Dec 19 09:55:36 2025 by rpki-client