This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS23507.roa File: AS23507.roa (raw, json) Hash identifier: BsoawVsemOaHNI4v3y1zcpztqTBJFyTexiZ4ORbbN2I= Subject key identifier: BF:51:82:51:CF:BE:0D:0E:85:CC:E5:0F:B6:39:07:2F:D0:56:FE:63 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 4FF91C6DBBCD6A8BF58AC18711397F796AF6F118 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS23507.roa Signing time: Thu 18 Dec 2025 11:30:42 +0000 ROA not before: Thu 18 Dec 2025 11:25:42 +0000 ROA not after: Thu 17 Dec 2026 11:30:42 +0000 asID: 23507 IP address blocks: 2a14:7580:ff9b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f9:1c:6d:bb:cd:6a:8b:f5:8a:c1:87:11:39:7f:79:6a:f6:f1:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 18 11:25:42 2025 GMT Not After : Dec 17 11:30:42 2026 GMT Subject: CN=BF518251CFBE0D0E85CCE50FB639072FD056FE63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6b:f4:05:d2:77:6c:30:50:55:42:89:b4:9e: 0e:e4:b6:56:2f:07:72:85:51:24:3c:6c:de:24:b3: bc:25:b9:0c:5d:fd:a7:80:ef:92:3b:7c:56:65:f3: 23:24:e5:02:c4:d9:a1:d4:05:85:07:59:e5:78:6e: 16:02:75:6e:b1:c9:da:4d:c7:43:08:cb:78:f9:76: d5:03:03:e0:33:58:05:a3:05:be:7b:d3:37:f1:49: 34:f7:2b:9f:3e:5f:5d:54:32:87:d0:2d:85:f4:b0: 1d:81:3a:b8:62:cc:3a:c1:39:9c:06:c9:c5:21:a1: c1:27:6b:19:fe:e2:5f:2e:c4:5e:28:ae:2c:fb:bc: 3f:e6:32:3e:e6:2d:44:3f:bb:2b:53:9c:f2:70:4b: 45:de:75:22:ae:61:a7:c6:61:c8:b4:c5:24:b6:3d: 9e:bf:fd:d6:6d:4c:69:55:f9:2e:59:e2:49:12:16: 8d:3e:b9:c0:a2:bc:8d:d3:93:1d:ce:24:53:34:82: 3e:82:6d:01:35:03:01:16:6a:1f:ad:ef:64:81:c9: 0b:06:b7:a9:31:6f:16:0c:a0:9e:d8:92:d7:22:a4: fd:55:79:ad:90:6b:43:eb:fa:2c:80:03:4e:37:1f: 6a:b7:b2:48:f5:90:0c:0f:ec:47:c2:66:70:1c:fa: 6b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:51:82:51:CF:BE:0D:0E:85:CC:E5:0F:B6:39:07:2F:D0:56:FE:63 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS23507.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff9b::/48 Signature Algorithm: sha256WithRSAEncryption 64:51:a4:34:dc:e6:b9:b1:d3:3c:6d:37:d2:7b:a4:50:b4:8e: 9a:93:53:ba:fc:4c:74:35:4b:28:68:08:c3:f8:68:d1:8d:59: 0d:08:19:b2:b9:c4:01:87:19:23:2c:55:03:2f:8e:e3:25:42: 6a:59:bd:1d:59:d8:99:9b:3c:b7:54:ad:c2:2a:62:ed:b3:f4: d1:74:82:9f:29:72:6d:94:76:cc:f5:f5:62:c8:1f:0e:a4:c0: ef:94:38:4c:f6:20:97:13:3a:fe:73:43:d3:35:cc:0d:e7:97: e0:1a:3a:fd:1e:19:fb:35:85:df:3d:d9:0c:a1:13:d7:a4:5a: 32:95:85:2c:c4:00:2c:20:ea:a3:79:47:8b:cf:4d:08:36:13: 71:e9:46:25:02:4b:fc:ae:e2:c0:ff:54:69:f0:ce:a6:a7:11: 46:b4:59:9d:f3:f7:df:5c:6a:58:d1:88:88:5c:cf:9f:34:40: 02:f9:35:18:59:ab:3e:d9:cb:58:67:a9:8e:23:ed:ce:ec:94: 26:db:01:b2:60:54:a3:6c:44:ba:f4:21:68:5c:37:17:48:c7: 55:3b:53:5a:ae:04:ce:cf:54:da:10:d1:d9:00:9a:21:96:d0: 02:a8:8c:20:9e:c0:25:a9:5c:2c:94:ab:ee:17:b1:8b:4b:fd: bc:6c:6d:cf -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUT/kcbbvNaov1isGHETl/eWr28RgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMTgxMTI1NDJaFw0yNjEyMTcxMTMwNDJaMDMxMTAvBgNV BAMTKEJGNTE4MjUxQ0ZCRTBEMEU4NUNDRTUwRkI2MzkwNzJGRDA1NkZFNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMa/QF0ndsMFBVQom0ng7ktlYv B3KFUSQ8bN4ks7wluQxd/aeA75I7fFZl8yMk5QLE2aHUBYUHWeV4bhYCdW6xydpN x0MIy3j5dtUDA+AzWAWjBb570zfxSTT3K58+X11UMofQLYX0sB2BOrhizDrBOZwG ycUhocEnaxn+4l8uxF4oriz7vD/mMj7mLUQ/uytTnPJwS0XedSKuYafGYci0xSS2 PZ6//dZtTGlV+S5Z4kkSFo0+ucCivI3Tkx3OJFM0gj6CbQE1AwEWah+t72SByQsG t6kxbxYMoJ7YktcipP1Vea2Qa0Pr+iyAA043H2q3skj1kAwP7EfCZnAc+mvVAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUv1GCUc++DQ6FzOUPtjkHL9BW/mMwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjM1MDcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqFHWA /5swDQYJKoZIhvcNAQELBQADggEBAGRRpDTc5rmx0zxtN9J7pFC0jpqTU7r8THQ1 SyhoCMP4aNGNWQ0IGbK5xAGHGSMsVQMvjuMlQmpZvR1Z2JmbPLdUrcIqYu2z9NF0 gp8pcm2Udsz19WLIHw6kwO+UOEz2IJcTOv5zQ9M1zA3nl+AaOv0eGfs1hd892Qyh E9ekWjKVhSzEACwg6qN5R4vPTQg2E3HpRiUCS/yu4sD/VGnwzqanEUa0WZ3z999c aljRiIhcz580QAL5NRhZqz7Zy1hnqY4j7c7slCbbAbJgVKNsRLr0IWhcNxdIx1U7 U1quBM7PVNoQ0dkAmiGW0AKojCCewCWpXCyUq+4XsYtL/bxsbc8= -----END CERTIFICATE-----Generated at Sun Dec 21 10:14:20 2025 by rpki-client