This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS209466.roa File: AS209466.roa (raw, json) Hash identifier: p8mKHQrW7QE/HfpXFVtqsK9nX/E/FY5g4uLPz8dyNLA= Subject key identifier: BE:1C:02:0E:2D:D4:B7:70:3E:D7:DA:59:04:94:4D:F7:E2:D0:79:3B Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 2C11CB812F8C71A624D70D403C580C07FFE3EFE4 Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS209466.roa Signing time: Tue 16 Dec 2025 17:13:28 +0000 ROA not before: Tue 16 Dec 2025 17:08:28 +0000 ROA not after: Tue 15 Dec 2026 17:13:28 +0000 asID: 209466 IP address blocks: 143.20.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:11:cb:81:2f:8c:71:a6:24:d7:0d:40:3c:58:0c:07:ff:e3:ef:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Dec 16 17:08:28 2025 GMT Not After : Dec 15 17:13:28 2026 GMT Subject: CN=BE1C020E2DD4B7703ED7DA5904944DF7E2D0793B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8a:ed:4e:69:5b:77:4e:b2:f9:8a:ca:97:80: 56:bc:54:c8:a6:1a:d0:3b:e2:b3:18:af:db:ed:2e: 9d:9b:c9:43:d1:80:06:00:4b:e5:fe:6f:ab:16:9f: 8b:53:2e:88:7d:1c:66:45:a9:2a:e8:18:e0:10:03: d1:40:d7:c3:e8:66:0c:2d:59:d9:1e:a7:27:81:1e: 08:43:78:c7:b6:b4:8f:d3:a0:0b:25:de:71:82:8e: 32:9e:ad:fb:f2:00:44:38:d7:7e:d3:48:46:14:5a: 90:83:83:ca:51:09:fb:39:3c:2f:cf:96:ef:c5:f4: b8:66:e2:26:3c:87:c4:38:f8:5c:43:2e:8b:32:40: f9:b9:77:c8:c7:cc:c5:2c:13:e4:f5:71:1d:57:43: 7c:d7:d8:f5:a8:bf:a0:36:22:f8:16:c5:87:36:e2: ca:a2:03:70:fe:ed:a2:46:e9:ed:06:65:fc:cc:f1: b3:00:4f:c8:bd:95:f8:27:4d:2d:2d:5f:8d:9f:12: 63:5b:70:41:52:89:96:42:79:fe:d9:b0:b4:01:75: 8c:a0:1e:52:04:8d:b2:ff:5e:22:21:e8:76:91:64: 27:5e:18:62:73:53:d2:5f:1c:2f:0e:fa:e1:4b:e1: d1:5a:ed:93:8d:09:2b:ae:37:5a:e7:08:2a:f9:35: 07:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1C:02:0E:2D:D4:B7:70:3E:D7:DA:59:04:94:4D:F7:E2:D0:79:3B X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS209466.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.196.0/24 Signature Algorithm: sha256WithRSAEncryption bb:2a:be:b4:b2:b5:8a:36:07:ea:89:ec:2e:9f:2e:42:d2:19: da:a6:7d:fd:0e:23:6a:bb:9a:41:2d:09:d3:ba:97:ff:f6:66: 6f:27:b1:6b:ef:65:a8:c2:0c:79:fe:45:05:b7:68:2c:de:72: 09:f5:45:de:1b:cb:4e:ff:73:46:ba:0f:af:f3:df:d7:66:4f: fe:ac:b2:3b:54:6d:d1:0b:58:96:00:db:93:16:a2:db:23:b2: b0:1d:0e:71:e3:15:dd:d8:2a:5d:70:c9:c4:1b:91:aa:42:c7: f4:52:d4:32:89:a1:81:f1:b9:03:53:14:c3:0d:3a:66:e4:d7: 6c:3a:60:c8:ac:c1:1d:9a:e7:a0:db:00:10:90:c4:2d:2d:b0: 39:49:29:49:df:2d:30:91:c4:04:5b:3a:4c:00:15:f0:5d:c5: ff:88:9e:83:79:c7:b1:d4:f4:a7:c2:d3:e3:c2:33:7f:e8:52: 5f:e3:d8:63:6d:63:f1:e0:d1:4b:83:a3:52:b9:6e:12:ae:44: d7:bd:35:8d:3d:0f:21:44:6f:98:1b:89:23:7a:81:21:4f:19: 94:50:4f:3b:be:c9:76:66:9b:b9:79:8b:69:a8:ae:a7:28:07: 2f:26:f0:30:84:3d:a6:15:19:c5:e2:fd:73:ef:4e:ef:74:64: a7:c6:1d:4c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIULBHLgS+McaYk1w1APFgMB//j7+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTEyMTYxNzA4MjhaFw0yNjEyMTUxNzEzMjhaMDMxMTAvBgNV BAMTKEJFMUMwMjBFMkRENEI3NzAzRUQ3REE1OTA0OTQ0REY3RTJEMDc5M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqiu1OaVt3TrL5isqXgFa8VMim GtA74rMYr9vtLp2byUPRgAYAS+X+b6sWn4tTLoh9HGZFqSroGOAQA9FA18PoZgwt WdkepyeBHghDeMe2tI/ToAsl3nGCjjKerfvyAEQ4137TSEYUWpCDg8pRCfs5PC/P lu/F9Lhm4iY8h8Q4+FxDLosyQPm5d8jHzMUsE+T1cR1XQ3zX2PWov6A2IvgWxYc2 4sqiA3D+7aJG6e0GZfzM8bMAT8i9lfgnTS0tX42fEmNbcEFSiZZCef7ZsLQBdYyg HlIEjbL/XiIh6HaRZCdeGGJzU9JfHC8O+uFL4dFa7ZONCSuuN1rnCCr5NQdnAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUvhwCDi3Ut3A+19pZBJRN9+LQeTswHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjA5NDY2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxTE MA0GCSqGSIb3DQEBCwUAA4IBAQC7Kr60srWKNgfqiewuny5C0hnapn39DiNqu5pB LQnTupf/9mZvJ7Fr72Wowgx5/kUFt2gs3nIJ9UXeG8tO/3NGug+v89/XZk/+rLI7 VG3RC1iWANuTFqLbI7KwHQ5x4xXd2CpdcMnEG5GqQsf0UtQyiaGB8bkDUxTDDTpm 5NdsOmDIrMEdmueg2wAQkMQtLbA5SSlJ3y0wkcQEWzpMABXwXcX/iJ6Decex1PSn wtPjwjN/6FJf49hjbWPx4NFLg6NSuW4SrkTXvTWNPQ8hRG+YG4kjeoEhTxmUUE87 vsl2Zpu5eYtpqK6nKAcvJvAwhD2mFRnF4v1z707vdGSnxh1M -----END CERTIFICATE-----Generated at Thu Dec 18 10:55:09 2025 by rpki-client