This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS206921.roa File: AS206921.roa (raw, json) Hash identifier: rQBqQfmPMpDovxWsKqdS5T3DULG441p1NSUWD2He1TQ= Subject key identifier: F7:59:9B:4F:0D:71:3E:37:08:F4:44:A2:DD:49:B2:99:E6:6A:A5:FD Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 44B0DEF3E945FF8362DAD97F2B451DA4E400B16C Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS206921.roa Signing time: Sun 14 Dec 2025 20:07:27 +0000 ROA not before: Sun 14 Dec 2025 20:02:27 +0000 ROA not after: Sun 13 Dec 2026 20:07:27 +0000 asID: 206921 IP address blocks: 143.20.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b0:de:f3:e9:45:ff:83:62:da:d9:7f:2b:45:1d:a4:e4:00:b1:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Dec 14 20:02:27 2025 GMT Not After : Dec 13 20:07:27 2026 GMT Subject: CN=F7599B4F0D713E3708F444A2DD49B299E66AA5FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c3:78:13:62:8e:a0:86:69:62:14:78:80:be: 3b:ec:71:9d:93:c9:1f:c6:4f:3b:3c:b1:d9:ca:d1: 18:85:d3:27:51:f4:dc:d0:4e:d3:d8:db:5c:50:ab: 3b:25:d8:1d:95:55:85:f9:db:45:5a:c5:b2:a6:1f: dd:4a:d8:d3:c6:17:e7:ed:ca:fb:d6:7a:80:aa:4c: f3:12:0d:7d:4e:28:41:4d:3e:82:58:08:73:7f:dc: 3e:93:89:31:80:f6:35:b8:d7:21:3d:f0:bb:d2:0b: ef:05:79:77:30:03:a8:f1:78:c4:9d:fc:02:10:d7: 81:4b:50:bf:92:78:29:01:6d:fa:a9:c8:fe:58:69: 00:50:d2:13:f8:fb:21:95:9f:1b:f6:69:36:b3:4e: 7b:71:a8:87:0a:53:3e:6c:4f:a6:82:5c:44:be:94: 02:ca:23:c5:d7:d7:2f:6c:ef:5a:09:a4:b5:f0:f9: ec:3b:7a:2b:62:1f:32:48:59:d6:21:52:0b:c8:38: 01:4a:c8:00:ad:3b:2e:7e:29:d8:64:48:ca:72:a5: d2:58:78:d5:aa:0a:b0:63:fd:06:eb:05:d7:7a:88: 13:5c:68:2d:78:21:53:76:43:fe:ee:33:e5:14:11: 7f:f2:d9:72:36:13:0e:1a:d3:25:6d:4e:bb:90:17: fd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:59:9B:4F:0D:71:3E:37:08:F4:44:A2:DD:49:B2:99:E6:6A:A5:FD X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS206921.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.39.0/24 Signature Algorithm: sha256WithRSAEncryption bc:ff:2d:c9:99:b7:bf:73:c7:71:cf:5c:ff:9a:d1:ec:63:22: 0f:9d:cc:24:88:82:2a:aa:d5:18:3d:1b:b1:7b:ee:49:98:b9: ec:8c:25:71:1e:fb:34:40:e6:06:d8:c1:6a:c9:d5:08:a2:0e: e9:2f:a7:d4:b0:c3:4c:5f:b5:cb:77:9b:a7:35:68:ef:28:cb: 0c:79:05:7c:bd:af:43:99:03:b8:77:b6:77:ee:e3:e0:84:c8: 9d:b3:eb:ad:08:c8:66:d3:64:b3:b2:fa:87:5a:02:c4:5c:da: bf:58:c2:a3:ac:61:fc:be:32:ed:86:4f:cf:28:07:c5:d5:40: 10:e0:fb:c9:bb:2b:cc:8b:17:bb:bb:9d:9c:a8:c5:32:f4:bf: 41:0f:15:5d:5f:6c:5d:5b:fd:cf:8b:ec:35:f7:b3:a2:c1:18: 04:60:00:9f:d1:32:dc:58:14:a1:e9:00:56:7d:87:35:82:b6: 03:10:4c:eb:90:50:fe:77:63:f6:9d:85:9d:73:ed:af:cc:fb: 98:67:c6:48:49:e2:3c:37:1e:46:4a:9e:bc:54:b1:ce:3c:67: 80:36:cc:bb:5c:4a:f5:68:43:62:4e:53:76:f5:1a:f5:14:d5: 7e:33:45:3b:c2:e4:c2:35:4a:b7:dc:3b:e0:b9:84:43:17:18: 11:a0:02:c0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIURLDe8+lF/4Ni2tl/K0UdpOQAsWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTEyMTQyMDAyMjdaFw0yNjEyMTMyMDA3MjdaMDMxMTAvBgNV BAMTKEY3NTk5QjRGMEQ3MTNFMzcwOEY0NDRBMkRENDlCMjk5RTY2QUE1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChw3gTYo6ghmliFHiAvjvscZ2T yR/GTzs8sdnK0RiF0ydR9NzQTtPY21xQqzsl2B2VVYX520VaxbKmH91K2NPGF+ft yvvWeoCqTPMSDX1OKEFNPoJYCHN/3D6TiTGA9jW41yE98LvSC+8FeXcwA6jxeMSd /AIQ14FLUL+SeCkBbfqpyP5YaQBQ0hP4+yGVnxv2aTazTntxqIcKUz5sT6aCXES+ lALKI8XX1y9s71oJpLXw+ew7eitiHzJIWdYhUgvIOAFKyACtOy5+KdhkSMpypdJY eNWqCrBj/QbrBdd6iBNcaC14IVN2Q/7uM+UUEX/y2XI2Ew4a0yVtTruQF/1ZAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU91mbTw1xPjcI9ESi3UmymeZqpf0wHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjA2OTIxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxQn MA0GCSqGSIb3DQEBCwUAA4IBAQC8/y3Jmbe/c8dxz1z/mtHsYyIPncwkiIIqqtUY PRuxe+5JmLnsjCVxHvs0QOYG2MFqydUIog7pL6fUsMNMX7XLd5unNWjvKMsMeQV8 va9DmQO4d7Z37uPghMids+utCMhm02SzsvqHWgLEXNq/WMKjrGH8vjLthk/PKAfF 1UAQ4PvJuyvMixe7u52cqMUy9L9BDxVdX2xdW/3Pi+w197OiwRgEYACf0TLcWBSh 6QBWfYc1grYDEEzrkFD+d2P2nYWdc+2vzPuYZ8ZISeI8Nx5GSp68VLHOPGeANsy7 XEr1aENiTlN29Rr1FNV+M0U7wuTCNUq33DvguYRDFxgRoALA -----END CERTIFICATE-----Generated at Sat Dec 20 06:08:21 2025 by rpki-client