This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205548.roa File: AS205548.roa (raw, json) Hash identifier: Dr63ZfjyO0x1xOywLdPGIZDf1f+ZuGg+MYGkR3D7lvg= Subject key identifier: C7:4C:C5:F0:D3:8C:9E:27:DA:51:67:73:94:69:AA:A6:82:3A:B3:11 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 1BD2EFD635BFDB2C1B7D4BE4581213C6920439CB Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205548.roa Signing time: Sat 08 Nov 2025 09:15:48 +0000 ROA not before: Sat 08 Nov 2025 09:10:48 +0000 ROA not after: Sat 07 Nov 2026 09:15:48 +0000 asID: 205548 IP address blocks: 140.150.236.0/24 maxlen: 24 143.14.189.0/24 maxlen: 24 155.117.82.0/24 maxlen: 24 155.117.224.0/24 maxlen: 24 162.141.117.0/24 maxlen: 24 167.148.203.0/24 maxlen: 24 168.222.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d2:ef:d6:35:bf:db:2c:1b:7d:4b:e4:58:12:13:c6:92:04:39:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 8 09:10:48 2025 GMT Not After : Nov 7 09:15:48 2026 GMT Subject: CN=C74CC5F0D38C9E27DA5167739469AAA6823AB311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:38:8a:53:d3:10:b6:19:90:28:25:13:5a:03: 5e:81:26:7f:1d:9a:cf:6f:ec:6c:84:84:d5:61:36: 1d:ed:40:87:84:8e:3c:25:d0:87:05:c4:78:bb:62: 03:83:64:21:e0:6e:94:5b:94:54:16:48:66:ec:78: 83:99:91:b4:66:01:92:d6:23:d9:a1:1e:6a:cd:4b: 2a:2d:2b:75:4e:45:b6:e5:2b:09:0b:bd:5d:b6:fb: b1:0a:43:fd:69:cb:f2:a0:5d:b0:76:63:17:eb:cd: 61:0b:63:92:d1:21:29:76:79:34:3c:9c:27:1b:d0: 94:fa:3e:7b:f8:44:8c:03:b6:23:97:9d:73:57:4e: 5a:4c:b2:bf:49:a0:68:5c:27:92:36:27:2b:a0:c4: 40:db:54:95:71:0f:96:4e:c5:26:2f:f6:a6:a4:16: cc:64:b2:29:bc:3d:14:80:a7:9d:42:fe:66:46:cf: 86:fb:7f:bb:58:30:9f:1d:4c:1e:47:f2:fc:3c:b5: eb:2f:a1:47:e3:9a:f0:93:52:9e:8a:4f:2f:ed:2b: 98:47:eb:b4:52:06:82:73:17:3c:6a:96:56:fd:e4: f0:79:b6:5f:c2:58:3d:eb:44:49:5d:f8:cc:0c:25: c3:2d:2c:70:28:a5:43:8a:f1:dc:fe:82:27:24:f3: c0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4C:C5:F0:D3:8C:9E:27:DA:51:67:73:94:69:AA:A6:82:3A:B3:11 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS205548.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.150.236.0/24 143.14.189.0/24 155.117.82.0/24 155.117.224.0/24 162.141.117.0/24 167.148.203.0/24 168.222.0.0/24 Signature Algorithm: sha256WithRSAEncryption a5:bb:ea:f3:81:84:2e:cb:cb:8c:2e:6f:04:d9:94:74:f2:25: 75:e2:42:06:63:e7:02:03:55:58:b3:a5:ef:23:f1:69:f3:15: 03:d0:92:c5:c6:d5:65:93:cb:51:ca:4e:23:2e:af:e6:08:bd: ff:ef:ba:01:ad:6e:74:23:37:de:23:f0:fe:e7:60:0f:7e:fb: 22:08:ab:ff:87:b7:a1:a5:6a:9a:93:d8:b8:0e:a5:67:ae:4d: 1b:86:56:1a:32:f9:40:ba:a9:08:4e:4f:0b:c1:93:a1:dc:7d: 6b:65:7c:ce:5e:33:1a:a3:39:05:c1:75:78:b5:70:be:8b:d9: 13:69:84:13:49:36:bb:34:63:b6:f7:e5:ee:3d:fd:bc:78:08: 0b:2a:e1:db:6a:d7:6b:f2:68:0f:b0:98:14:59:91:96:0f:7a: 4a:4a:e9:37:81:ae:d6:e1:c5:ac:5a:aa:5e:c7:93:89:78:6c: f0:a0:af:58:a0:77:11:5d:b6:d9:fe:44:43:5a:c9:6d:4f:15: d7:4d:97:71:8f:38:93:a3:92:4f:6c:5f:0c:0f:b5:f5:c9:e5: 89:4e:49:d2:a1:ae:54:97:0b:e4:e3:8b:2c:7f:64:9c:47:40: 7f:be:a1:be:bf:f2:b2:5a:8b:14:36:5b:fd:76:59:ab:46:72: 91:7c:da:70 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUG9Lv1jW/2ywbfUvkWBITxpIEOcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMDgwOTEwNDhaFw0yNjExMDcwOTE1NDhaMDMxMTAvBgNV BAMTKEM3NENDNUYwRDM4QzlFMjdEQTUxNjc3Mzk0NjlBQUE2ODIzQUIzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2OIpT0xC2GZAoJRNaA16BJn8d ms9v7GyEhNVhNh3tQIeEjjwl0IcFxHi7YgODZCHgbpRblFQWSGbseIOZkbRmAZLW I9mhHmrNSyotK3VORbblKwkLvV22+7EKQ/1py/KgXbB2YxfrzWELY5LRISl2eTQ8 nCcb0JT6Pnv4RIwDtiOXnXNXTlpMsr9JoGhcJ5I2JyugxEDbVJVxD5ZOxSYv9qak Fsxksim8PRSAp51C/mZGz4b7f7tYMJ8dTB5H8vw8tesvoUfjmvCTUp6KTy/tK5hH 67RSBoJzFzxqllb95PB5tl/CWD3rREld+MwMJcMtLHAopUOK8dz+gick88AVAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUx0zF8NOMnifaUWdzlGmqpoI6sxEwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA1NTQ4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAjJbs AwQAjw69AwQAm3VSAwQAm3XgAwQAoo11AwQAp5TLAwQAqN4AMA0GCSqGSIb3DQEB CwUAA4IBAQClu+rzgYQuy8uMLm8E2ZR08iV14kIGY+cCA1VYs6XvI/Fp8xUD0JLF xtVlk8tRyk4jLq/mCL3/77oBrW50IzfeI/D+52APfvsiCKv/h7ehpWqak9i4DqVn rk0bhlYaMvlAuqkITk8LwZOh3H1rZXzOXjMaozkFwXV4tXC+i9kTaYQTSTa7NGO2 9+XuPf28eAgLKuHbatdr8mgPsJgUWZGWD3pKSuk3ga7W4cWsWqpex5OJeGzwoK9Y oHcRXbbZ/kRDWsltTxXXTZdxjziTo5JPbF8MD7X1yeWJTknSoa5Ulwvk44ssf2Sc R0B/vqG+v/KyWosUNlv9dlmrRnKRfNpw -----END CERTIFICATE-----Generated at Sat Dec 6 12:52:34 2025 by rpki-client