This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210464.roa File: AS210464.roa (raw, json) Hash identifier: GrrUZFtqPNmCaHQvB/6ID4z78veNWnncfuF4rc2tJWU= Subject key identifier: 48:67:FA:B4:95:2E:26:A5:86:CB:F0:05:FC:13:0A:4C:57:21:CD:1A Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 0BCB47DC441EC46A50F8F7C0EF7EB78393200483 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210464.roa Signing time: Thu 18 Dec 2025 11:30:11 +0000 ROA not before: Thu 18 Dec 2025 11:25:11 +0000 ROA not after: Thu 17 Dec 2026 11:30:11 +0000 asID: 210464 IP address blocks: 2a14:7580:ff99::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:cb:47:dc:44:1e:c4:6a:50:f8:f7:c0:ef:7e:b7:83:93:20:04:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 18 11:25:11 2025 GMT Not After : Dec 17 11:30:11 2026 GMT Subject: CN=4867FAB4952E26A586CBF005FC130A4C5721CD1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:61:2b:01:15:e2:41:29:bd:b3:88:a1:f3:41: 9b:f6:60:a5:c3:67:32:ed:6d:09:d9:8b:b5:b7:e8: 01:66:97:51:51:f9:e1:b1:0f:42:01:63:77:58:ba: f1:69:d9:ba:67:64:c3:4f:b9:aa:53:30:2c:d4:34: 50:d8:df:9c:39:da:69:9a:e1:d2:6a:07:40:48:6b: 81:c0:f3:66:11:b2:0f:dc:10:05:bc:ba:66:11:b9: 76:ff:86:33:73:97:3a:7c:24:9a:9b:15:04:8c:da: da:b5:d4:63:dc:a5:b7:68:41:78:2e:30:58:c1:b9: fb:55:d5:39:fe:9a:33:71:47:e2:9c:58:6e:7d:09: a4:35:d1:9d:9d:81:d3:ed:7d:b2:ec:0f:47:5f:ae: a5:4d:e3:c8:2e:d0:69:1e:34:07:86:b4:0b:d7:80: f6:a0:cf:51:e4:c9:a5:77:8a:7a:4c:2e:b5:8c:3a: b9:89:e3:2e:b2:7c:f1:0e:ed:68:cd:2d:29:76:f3: ea:c9:ea:d7:68:ea:c1:e8:5c:98:aa:55:0b:2c:0d: ca:50:a7:7e:56:53:50:c9:32:d0:aa:5a:bb:f4:b7: 90:bd:6a:e2:8d:76:85:78:77:f3:33:d6:07:b8:49: 99:33:7d:22:43:d1:60:5b:59:ba:55:84:3b:19:f1: 25:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:67:FA:B4:95:2E:26:A5:86:CB:F0:05:FC:13:0A:4C:57:21:CD:1A X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210464.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff99::/48 Signature Algorithm: sha256WithRSAEncryption 3c:7c:17:d7:90:36:bf:70:e0:90:42:ec:90:65:e6:69:b7:b2: ec:36:3c:59:d8:ef:cd:1a:c5:9d:25:7b:06:cd:0f:04:a7:f1: 88:34:27:e9:e4:7b:e1:39:e6:a6:17:7b:83:ba:ef:4f:31:3b: d7:0b:49:45:45:72:f9:2d:59:e9:ed:ba:a9:75:53:0f:fe:c1: b5:6a:e4:18:96:16:64:e0:ac:f4:06:6b:d7:55:8e:52:63:59: a0:43:eb:13:2d:c6:96:ce:5d:d5:06:b9:3f:21:e7:0e:eb:c8: cb:80:ad:2f:0c:a5:48:82:3a:ce:ed:07:05:2a:75:90:4f:1e: 83:e7:71:d4:8a:5d:15:70:cf:16:82:21:4b:1f:50:e1:14:4c: ec:83:62:c4:00:12:2d:04:99:98:e8:77:4d:2b:0b:27:ac:2c: 69:5a:51:b7:33:53:c2:ff:e8:10:73:78:b2:c6:fb:92:27:3e: 3b:0f:90:84:de:5c:e8:65:b1:f1:a2:42:21:cf:22:2b:4a:99: bf:8f:3b:48:c4:7e:91:e6:87:20:0b:b3:e7:da:fe:7c:4a:4a: ee:2d:a3:03:ee:64:79:27:0d:f2:d0:cd:0e:28:b6:a6:f6:f4: db:45:bc:49:19:19:64:0a:24:99:e2:08:66:f9:90:51:b2:39: 9b:79:ee:d9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUC8tH3EQexGpQ+PfA7363g5MgBIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMTgxMTI1MTFaFw0yNjEyMTcxMTMwMTFaMDMxMTAvBgNV BAMTKDQ4NjdGQUI0OTUyRTI2QTU4NkNCRjAwNUZDMTMwQTRDNTcyMUNEMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIYSsBFeJBKb2ziKHzQZv2YKXD ZzLtbQnZi7W36AFml1FR+eGxD0IBY3dYuvFp2bpnZMNPuapTMCzUNFDY35w52mma 4dJqB0BIa4HA82YRsg/cEAW8umYRuXb/hjNzlzp8JJqbFQSM2tq11GPcpbdoQXgu MFjBuftV1Tn+mjNxR+KcWG59CaQ10Z2dgdPtfbLsD0dfrqVN48gu0GkeNAeGtAvX gPagz1HkyaV3inpMLrWMOrmJ4y6yfPEO7WjNLSl28+rJ6tdo6sHoXJiqVQssDcpQ p35WU1DJMtCqWrv0t5C9auKNdoV4d/Mz1ge4SZkzfSJD0WBbWbpVhDsZ8SVlAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUSGf6tJUuJqWGy/AF/BMKTFchzRowHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjEwNDY0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1 gP+ZMA0GCSqGSIb3DQEBCwUAA4IBAQA8fBfXkDa/cOCQQuyQZeZpt7LsNjxZ2O/N GsWdJXsGzQ8Ep/GINCfp5HvhOeamF3uDuu9PMTvXC0lFRXL5LVnp7bqpdVMP/sG1 auQYlhZk4Kz0BmvXVY5SY1mgQ+sTLcaWzl3VBrk/IecO68jLgK0vDKVIgjrO7QcF KnWQTx6D53HUil0VcM8WgiFLH1DhFEzsg2LEABItBJmY6HdNKwsnrCxpWlG3M1PC /+gQc3iyxvuSJz47D5CE3lzoZbHxokIhzyIrSpm/jztIxH6R5ocgC7Pn2v58Skru LaMD7mR5Jw3y0M0OKLam9vTbRbxJGRlkCiSZ4ghm+ZBRsjmbee7Z -----END CERTIFICATE-----Generated at Sat Dec 20 14:06:32 2025 by rpki-client