This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS26042.roa File: AS26042.roa (raw, json) Hash identifier: bf6kTFIMNmkwh5Hckhazobo8XCEbGbBqnCzkroBb7vI= Subject key identifier: 83:E5:6C:E7:8C:00:87:0C:6F:B2:00:28:D3:CF:8B:33:DD:FE:DB:81 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 16E1D0F77123160EACC1D0071D850FA0E54C0AEC Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS26042.roa Signing time: Mon 15 Dec 2025 10:46:59 +0000 ROA not before: Mon 15 Dec 2025 10:41:59 +0000 ROA not after: Mon 14 Dec 2026 10:46:59 +0000 asID: 26042 IP address blocks: 2a14:7584:5000::/36 maxlen: 48 2a14:7586:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:e1:d0:f7:71:23:16:0e:ac:c1:d0:07:1d:85:0f:a0:e5:4c:0a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 15 10:41:59 2025 GMT Not After : Dec 14 10:46:59 2026 GMT Subject: CN=83E56CE78C00870C6FB20028D3CF8B33DDFEDB81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cb:5b:c8:ae:d0:2e:ea:53:db:30:3c:5f:62: 47:b2:16:70:7c:24:f4:2f:c5:46:3e:6f:68:84:55: 0f:71:4c:96:0d:86:52:ad:9e:b6:9b:53:76:6f:39: a5:46:2f:aa:9d:6e:2b:ee:1f:39:9a:74:bd:45:dd: cc:13:0f:46:a0:ea:77:33:0a:30:ad:89:38:00:5a: 09:b4:bc:e5:67:b8:06:8f:46:89:1a:17:73:f6:26: a9:d1:da:f2:dc:83:02:99:30:c3:72:e8:2b:0b:b0: 83:c1:62:34:9d:58:cb:48:6c:26:e7:a0:bc:f0:01: 79:bf:79:96:3d:8d:48:7f:5d:75:00:54:84:a5:43: ad:63:06:7d:92:e0:37:7b:06:36:c3:a5:27:6b:4a: 10:6a:15:e9:06:c1:86:ca:9b:45:6f:19:dc:b8:e7: 0b:08:ad:7a:ff:f1:39:b6:70:12:8a:a2:c0:06:5b: e0:05:d9:b2:97:b8:83:67:1b:7c:6c:00:c2:13:79: 5f:b7:2f:9a:e8:65:ec:25:23:51:e0:f1:4b:d8:bd: 59:78:33:76:72:15:62:af:90:78:a7:b8:f6:f4:2f: cb:93:eb:2f:ac:34:7c:ec:38:9a:5a:f9:c7:7c:e8: 63:3e:3f:25:e8:b4:15:cb:7e:c2:b0:79:20:53:9b: 3f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E5:6C:E7:8C:00:87:0C:6F:B2:00:28:D3:CF:8B:33:DD:FE:DB:81 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS26042.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:5000::/36 2a14:7586:1000::/36 Signature Algorithm: sha256WithRSAEncryption 8a:f4:d0:a0:11:c6:1e:dc:51:92:13:12:24:36:eb:54:f1:d7: a8:a4:0e:ec:b0:ee:e3:7a:9e:59:cc:c1:7f:2a:31:49:3d:f3: f8:fc:b3:e8:c5:21:f3:56:fa:67:51:41:55:bc:34:f0:c4:27: cd:76:17:57:58:72:e7:83:87:cc:0e:53:60:6c:a4:09:ed:7c: cd:41:80:fd:4f:2f:16:87:0c:a1:3e:88:22:7f:98:57:a9:46: b7:71:ad:5c:52:20:e8:b6:ff:4c:3e:a0:60:b9:99:b3:18:99: 27:69:96:ad:ce:25:c1:ab:56:d0:75:93:be:04:b8:7e:9d:b9: 6c:dd:83:2d:fd:35:b8:15:0d:84:c0:d5:21:2b:96:20:8f:07: 77:ea:b1:0f:12:41:60:1a:69:38:b2:42:84:e4:0a:89:ab:57: ff:ec:c5:1c:66:da:3a:e7:d2:29:d7:a5:77:56:52:83:bb:c9: 64:02:d7:cd:42:e0:a0:ad:e4:6d:7f:ef:d1:f5:c0:7e:10:d5: 07:b6:66:ad:5c:8e:7c:ad:44:8a:1d:86:be:c9:56:ad:a1:ff: fc:68:f7:17:46:b6:b6:1a:30:5e:f9:46:6f:f2:dd:8d:cf:e7: 07:62:b0:4c:e9:ba:f7:8d:ad:fb:a5:ee:53:7e:5e:72:0c:17: c7:40:b2:d9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgIUFuHQ93EjFg6swdAHHYUPoOVMCuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMTUxMDQxNTlaFw0yNjEyMTQxMDQ2NTlaMDMxMTAvBgNV BAMTKDgzRTU2Q0U3OEMwMDg3MEM2RkIyMDAyOEQzQ0Y4QjMzRERGRURCODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcy1vIrtAu6lPbMDxfYkeyFnB8 JPQvxUY+b2iEVQ9xTJYNhlKtnrabU3ZvOaVGL6qdbivuHzmadL1F3cwTD0ag6ncz CjCtiTgAWgm0vOVnuAaPRokaF3P2JqnR2vLcgwKZMMNy6CsLsIPBYjSdWMtIbCbn oLzwAXm/eZY9jUh/XXUAVISlQ61jBn2S4Dd7BjbDpSdrShBqFekGwYbKm0VvGdy4 5wsIrXr/8Tm2cBKKosAGW+AF2bKXuINnG3xsAMITeV+3L5roZewlI1Hg8UvYvVl4 M3ZyFWKvkHinuPb0L8uT6y+sNHzsOJpa+cd86GM+PyXotBXLfsKweSBTmz/DAgMB AAGjggITMIICDzAdBgNVHQ4EFgQUg+Vs54wAhwxvsgAo08+LM93+24EwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjYwNDIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKQYIKwYBBQUHAQcBAf8EGjAYMBYEAgACMBADBgQqFHWE UAMGBCoUdYYQMA0GCSqGSIb3DQEBCwUAA4IBAQCK9NCgEcYe3FGSExIkNutU8deo pA7ssO7jep5ZzMF/KjFJPfP4/LPoxSHzVvpnUUFVvDTwxCfNdhdXWHLng4fMDlNg bKQJ7XzNQYD9Ty8WhwyhPogif5hXqUa3ca1cUiDotv9MPqBguZmzGJknaZatziXB q1bQdZO+BLh+nbls3YMt/TW4FQ2EwNUhK5Ygjwd36rEPEkFgGmk4skKE5AqJq1f/ 7MUcZto659Ip16V3VlKDu8lkAtfNQuCgreRtf+/R9cB+ENUHtmatXI58rUSKHYa+ yVatof/8aPcXRra2GjBe+UZv8t2Nz+cHYrBM6br3ja37pe5Tfl5yDBfHQLLZ -----END CERTIFICATE-----Generated at Wed Dec 17 13:26:29 2025 by rpki-client