This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS209722.roa File: AS209722.roa (raw, json) Hash identifier: o7fZ+u1HFY6/g8cQ9ErwX70o+H9MDhN6NZK1hsNqRs0= Subject key identifier: 83:AC:9A:CC:01:6B:B6:4F:0E:37:5E:67:4A:58:FB:C0:05:00:E2:E6 Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 30059B90F4CC84F050088A08C2F98C127778BAF6 Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS209722.roa Signing time: Tue 16 Dec 2025 11:08:25 +0000 ROA not before: Tue 16 Dec 2025 11:03:25 +0000 ROA not after: Tue 15 Dec 2026 11:08:25 +0000 asID: 209722 IP address blocks: 143.20.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:05:9b:90:f4:cc:84:f0:50:08:8a:08:c2:f9:8c:12:77:78:ba:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Dec 16 11:03:25 2025 GMT Not After : Dec 15 11:08:25 2026 GMT Subject: CN=83AC9ACC016BB64F0E375E674A58FBC00500E2E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:7c:76:e0:9b:ed:3b:a5:25:64:78:5a:9e: 47:bd:f1:d6:2e:24:37:0f:89:21:e4:b8:04:34:5e: 63:dc:13:2f:4c:fb:bb:14:09:72:36:7f:38:08:23: 89:91:09:99:b0:f2:e1:11:85:c3:a7:16:07:50:16: 22:94:b4:69:66:d7:33:c9:26:83:c2:d3:0a:64:99: 89:65:76:c1:2c:8d:cb:90:9d:71:22:e2:b9:fb:26: 35:bc:ad:50:7f:97:85:91:c6:43:87:88:3d:36:13: e3:0b:5b:7d:14:da:67:41:2e:a3:ba:9f:81:e1:60: c1:3a:b4:f6:f9:09:94:30:a7:7a:e2:3e:72:e2:7e: e6:08:ad:5e:a6:ea:85:b7:f7:e3:7f:49:45:0e:e1: 2f:f4:5b:46:e5:e6:cb:2f:dc:67:f9:78:4f:91:84: 9e:a9:92:70:cc:47:4d:42:f6:6d:ea:b4:9f:ca:6f: 1d:83:fc:92:ad:65:27:c1:ce:6a:08:37:38:a7:28: ab:f6:dd:c9:9f:e7:de:d2:95:10:47:45:5b:58:c2: 76:33:42:66:d3:03:28:75:8e:d3:5e:b1:99:06:e8: c4:19:d3:a9:31:5c:a7:1b:67:4f:12:61:b8:6a:cf: 45:77:b9:1d:87:47:1a:cf:d0:b9:62:87:94:3f:63: f6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:AC:9A:CC:01:6B:B6:4F:0E:37:5E:67:4A:58:FB:C0:05:00:E2:E6 X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS209722.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.71.0/24 Signature Algorithm: sha256WithRSAEncryption 06:a1:5e:fb:ad:29:a7:04:0e:77:57:62:8e:2b:aa:5b:89:d2: 04:5b:df:3d:62:82:2e:76:15:27:04:c7:1c:db:c2:a4:65:2a: 8b:80:55:88:7a:c8:61:e8:cf:af:06:5c:e0:e3:ef:35:22:f1: 95:58:33:69:ac:9e:49:1a:f5:fc:a3:cb:c3:c3:59:d9:d2:9b: d6:3b:23:d4:19:7e:ff:d8:d8:41:01:a4:0c:f5:75:74:27:ff: 19:99:2a:66:33:53:4f:a7:c6:36:65:55:b2:88:4f:5a:33:c3: 31:74:d4:2c:ab:b8:1f:42:26:65:33:8d:ac:25:66:2b:65:cd: c7:61:d7:52:d5:01:f5:84:e8:3d:7f:17:ab:7d:b0:01:22:e5: 60:98:9c:4f:65:1d:14:6d:6d:b9:56:d6:b0:61:ff:e6:7e:b1: 3b:95:3b:c5:c0:62:08:41:5d:81:9a:97:8c:3b:3a:1d:b7:92: 50:e5:30:24:f2:15:c3:24:0f:47:0e:5e:c1:34:f7:16:24:37: ce:ef:cf:76:4b:47:43:3b:a3:b8:f2:38:c5:2a:0d:44:47:e4: db:e0:b9:7d:ca:8e:f1:f7:50:7b:61:3a:28:94:1d:e4:9c:f3: 5b:a6:35:d5:eb:66:7d:1b:f8:82:54:1d:f9:3b:73:92:c5:ef: 3c:b6:50:34 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUMAWbkPTMhPBQCIoIwvmMEnd4uvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTEyMTYxMTAzMjVaFw0yNjEyMTUxMTA4MjVaMDMxMTAvBgNV BAMTKDgzQUM5QUNDMDE2QkI2NEYwRTM3NUU2NzRBNThGQkMwMDUwMEUyRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpDXx24JvtO6UlZHhanke98dYu JDcPiSHkuAQ0XmPcEy9M+7sUCXI2fzgII4mRCZmw8uERhcOnFgdQFiKUtGlm1zPJ JoPC0wpkmYlldsEsjcuQnXEi4rn7JjW8rVB/l4WRxkOHiD02E+MLW30U2mdBLqO6 n4HhYME6tPb5CZQwp3riPnLifuYIrV6m6oW39+N/SUUO4S/0W0bl5ssv3Gf5eE+R hJ6pknDMR01C9m3qtJ/Kbx2D/JKtZSfBzmoINzinKKv23cmf597SlRBHRVtYwnYz QmbTAyh1jtNesZkG6MQZ06kxXKcbZ08SYbhqz0V3uR2HRxrP0Llih5Q/Y/ZrAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUg6yazAFrtk8ON15nSlj7wAUA4uYwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjA5NzIyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjxRH MA0GCSqGSIb3DQEBCwUAA4IBAQAGoV77rSmnBA53V2KOK6pbidIEW989YoIudhUn BMcc28KkZSqLgFWIeshh6M+vBlzg4+81IvGVWDNprJ5JGvX8o8vDw1nZ0pvWOyPU GX7/2NhBAaQM9XV0J/8ZmSpmM1NPp8Y2ZVWyiE9aM8MxdNQsq7gfQiZlM42sJWYr Zc3HYddS1QH1hOg9fxerfbABIuVgmJxPZR0UbW25VtawYf/mfrE7lTvFwGIIQV2B mpeMOzodt5JQ5TAk8hXDJA9HDl7BNPcWJDfO7892S0dDO6O48jjFKg1ER+Tb4Ll9 yo7x91B7YToolB3knPNbpjXV62Z9G/iCVB35O3OSxe88tlA0 -----END CERTIFICATE-----Generated at Sat Dec 20 06:08:21 2025 by rpki-client