This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208949.roa File: AS208949.roa (raw, json) Hash identifier: EV0KGJZK/JeZTXfjJ77maGe38WzjQR5+TgQjy+gTAPY= Subject key identifier: 8C:7E:EF:F2:9E:8A:18:E5:3D:B4:91:5E:17:B1:F5:EA:BA:6F:89:DE Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 746BA71651475A9739FC8458EECBF8359CB8400B Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208949.roa Signing time: Wed 26 Nov 2025 02:55:12 +0000 ROA not before: Wed 26 Nov 2025 02:50:12 +0000 ROA not after: Wed 25 Nov 2026 02:55:12 +0000 asID: 208949 IP address blocks: 185.155.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:6b:a7:16:51:47:5a:97:39:fc:84:58:ee:cb:f8:35:9c:b8:40:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Nov 26 02:50:12 2025 GMT Not After : Nov 25 02:55:12 2026 GMT Subject: CN=8C7EEFF29E8A18E53DB4915E17B1F5EABA6F89DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c0:f8:05:df:56:3d:d2:f7:36:ff:7b:3b:b0: c7:2e:c3:f6:50:44:03:28:c3:73:6f:a5:3b:81:95: 48:4f:c7:5a:97:9a:2f:df:23:79:62:01:cb:4f:82: 23:cf:74:b4:3e:58:0d:29:9f:10:ae:b4:58:6d:40: bf:29:0c:ee:c5:dd:cd:cc:c2:b6:ed:a8:d6:d5:93: 13:3c:3e:13:0f:34:6d:48:b7:f4:73:19:fd:2c:7d: 20:57:f1:70:21:30:66:bd:9a:4b:22:5e:20:53:e1: e8:c8:23:31:f7:83:b4:a5:a5:d8:d9:d3:f1:4d:fe: 80:fc:90:48:86:b6:bb:52:d9:ff:11:f3:00:52:cb: e7:b9:1c:3c:b7:71:4f:c4:63:28:7c:63:ab:6c:0e: b3:d6:5a:30:28:a7:84:40:52:07:3b:6b:90:9b:2d: 69:a2:d2:f7:85:ff:d6:e9:ea:b7:dc:53:ba:a3:3b: 2c:cb:4e:70:2c:c1:d0:ff:77:1f:14:58:12:bd:76: 94:8c:a0:40:8d:47:8d:a6:f5:13:d3:9f:49:7f:14: ca:53:2a:0e:d7:0c:f0:0d:bc:34:34:e2:d1:e0:b9: 90:6b:11:39:e7:68:e3:5a:65:f5:e1:27:d0:7a:08: 3f:18:52:2a:b3:00:2f:b5:88:24:45:81:41:eb:d4: d4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7E:EF:F2:9E:8A:18:E5:3D:B4:91:5E:17:B1:F5:EA:BA:6F:89:DE X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208949.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.222.0/24 Signature Algorithm: sha256WithRSAEncryption 41:5b:38:04:b6:98:81:ba:fc:7b:c0:de:4d:f0:ca:c9:c9:f6: 90:ab:4e:52:00:fb:68:7d:86:49:c4:36:5d:14:85:49:7c:5d: df:e1:cc:e8:f1:60:c1:9b:c5:db:fe:9a:5d:48:9a:25:48:a3: 9b:e6:c5:ff:7a:dc:81:66:94:06:b1:b8:75:51:9c:63:8b:4a: 02:ac:b6:4f:0f:d1:a8:89:f8:e6:67:6c:9b:06:13:b2:d4:d0: f5:ea:b4:c8:84:ee:30:16:13:55:77:57:49:2c:47:a3:d6:22: 81:5b:96:8d:8c:cf:3f:5a:40:8d:5d:55:8c:69:c3:31:4f:d3: c7:c4:89:28:43:97:cb:fb:b3:20:d7:89:ca:25:cf:7e:1b:89: 1b:90:10:ad:6c:87:64:77:59:35:43:4c:fa:01:98:86:0f:87: bb:56:78:f9:3e:4c:7f:03:61:00:e4:8f:c1:3b:fc:27:3f:20: 1c:5f:32:87:5b:7c:40:6c:0b:e7:c9:b7:f6:ed:b3:c2:11:b3: 91:06:46:da:e2:4d:46:9b:3a:25:fc:8b:fb:21:e7:a5:bb:9f: d9:09:b2:1b:87:ac:b0:33:48:5a:3b:d3:d9:97:62:69:bf:de: 49:b4:da:0f:a8:6e:c6:15:bb:36:4d:6b:4d:d5:f1:1c:37:61: 15:a1:78:6d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUdGunFlFHWpc5/IRY7sv4NZy4QAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNTExMjYwMjUwMTJaFw0yNjExMjUwMjU1MTJaMDMxMTAvBgNV BAMTKDhDN0VFRkYyOUU4QTE4RTUzREI0OTE1RTE3QjFGNUVBQkE2Rjg5REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYwPgF31Y90vc2/3s7sMcuw/ZQ RAMow3NvpTuBlUhPx1qXmi/fI3liActPgiPPdLQ+WA0pnxCutFhtQL8pDO7F3c3M wrbtqNbVkxM8PhMPNG1It/RzGf0sfSBX8XAhMGa9mksiXiBT4ejIIzH3g7SlpdjZ 0/FN/oD8kEiGtrtS2f8R8wBSy+e5HDy3cU/EYyh8Y6tsDrPWWjAop4RAUgc7a5Cb LWmi0veF/9bp6rfcU7qjOyzLTnAswdD/dx8UWBK9dpSMoECNR42m9RPTn0l/FMpT Kg7XDPANvDQ04tHguZBrETnnaONaZfXhJ9B6CD8YUiqzAC+1iCRFgUHr1NRhAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUjH7v8p6KGOU9tJFeF7H16rpvid4wHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjA4OTQ5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZve MA0GCSqGSIb3DQEBCwUAA4IBAQBBWzgEtpiBuvx7wN5N8MrJyfaQq05SAPtofYZJ xDZdFIVJfF3f4czo8WDBm8Xb/ppdSJolSKOb5sX/etyBZpQGsbh1UZxji0oCrLZP D9GoifjmZ2ybBhOy1ND16rTIhO4wFhNVd1dJLEej1iKBW5aNjM8/WkCNXVWMacMx T9PHxIkoQ5fL+7Mg14nKJc9+G4kbkBCtbIdkd1k1Q0z6AZiGD4e7Vnj5Pkx/A2EA 5I/BO/wnPyAcXzKHW3xAbAvnybf27bPCEbORBkba4k1Gmzol/Iv7Ieelu5/ZCbIb h6ywM0haO9PZl2Jpv95JtNoPqG7GFbs2TWtN1fEcN2EVoXht -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:30 2025 by rpki-client