This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS200237.roa File: AS200237.roa (raw, json) Hash identifier: w8huXlplzrddMZRPeVW23eJAGyVDk3W0XRMOsOw461U= Subject key identifier: 74:2B:96:7E:40:B9:3D:FC:EC:4F:C0:52:E5:CE:9D:6D:B7:D6:7C:50 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 6D0FAC10A2FB9432E774EB70BFBE1238135632C1 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS200237.roa Signing time: Tue 13 Jan 2026 04:08:16 +0000 ROA not before: Tue 13 Jan 2026 04:03:16 +0000 ROA not after: Tue 12 Jan 2027 04:08:16 +0000 asID: 200237 IP address blocks: 2a0f:85c1:b90::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:0f:ac:10:a2:fb:94:32:e7:74:eb:70:bf:be:12:38:13:56:32:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Jan 13 04:03:16 2026 GMT Not After : Jan 12 04:08:16 2027 GMT Subject: CN=742B967E40B93DFCEC4FC052E5CE9D6DB7D67C50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:98:4d:64:3a:03:55:63:d8:f0:e8:2a:d1:36: 93:67:48:be:c7:bc:e5:e5:f1:35:c6:da:27:20:75: 1b:a1:55:92:de:3b:49:a1:dc:e1:04:8d:2b:00:67: e3:35:0e:54:a3:24:ab:3e:bb:88:b1:f9:c6:28:95: f3:37:91:d8:66:63:fe:0e:74:1a:7f:d0:a6:de:62: 06:7a:ed:5c:d2:82:4c:3e:1c:b0:69:75:62:07:52: 28:7e:58:be:a3:c9:59:bc:69:a7:29:97:d9:cf:58: 0a:90:5c:f7:1d:6a:71:3c:65:dc:b0:ac:98:c6:2c: 00:65:92:82:5a:d5:f8:19:2f:27:b9:36:31:48:f1: 31:bc:ad:1b:3e:90:3c:29:d8:39:8a:48:1c:9f:6a: 7b:80:7e:84:60:08:e0:9d:2b:5a:51:66:d6:de:5c: e8:23:b6:e5:6e:6c:c9:b1:42:45:81:d9:02:fd:3a: 01:87:de:cf:e8:22:e5:5b:f1:67:46:cd:2c:02:e3: 83:da:25:22:f5:e1:11:08:a8:d1:8b:da:b3:88:c6: c8:00:7c:d3:a8:fe:55:6f:9c:f3:59:bf:b9:cb:45: 3a:a7:91:e5:b0:1d:f7:c5:42:9b:7c:fc:e4:59:4d: 13:67:f0:c5:5f:71:de:c7:06:ff:e4:60:d6:25:d2: 02:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2B:96:7E:40:B9:3D:FC:EC:4F:C0:52:E5:CE:9D:6D:B7:D6:7C:50 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS200237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:b90::/44 Signature Algorithm: sha256WithRSAEncryption a0:e9:c0:a1:6a:1b:c9:eb:39:ba:aa:0a:b2:3d:cb:33:bd:bf: f4:14:34:42:84:d6:4a:c7:74:cf:15:a4:4b:66:42:e3:b4:dd: 98:89:50:d5:fe:35:c5:9b:5c:7d:94:55:6b:a0:fa:8d:a6:61: 59:99:4e:81:fc:dd:a1:b3:8e:32:df:fc:15:42:82:43:b4:10: 97:0f:0c:58:44:59:39:00:c3:5f:14:73:63:65:24:1d:9d:0f: 26:7a:41:51:69:b1:fe:73:52:1c:0b:17:34:4e:ee:fe:74:68: 97:a8:aa:49:6b:16:19:c3:14:05:b9:4b:17:25:10:51:75:04: da:ce:2b:8f:c8:60:6b:ca:63:c6:5f:05:95:1e:80:1b:c1:57: cb:2b:34:0d:be:30:0d:76:08:15:e0:95:c8:60:1a:1b:57:1e: d5:b5:0a:c1:b8:b5:6e:e9:26:77:d1:89:18:28:25:77:20:3b: 73:97:a7:94:6d:ec:51:e2:b6:f4:3b:44:ed:ca:38:5b:f6:c2: 93:41:4b:55:b0:24:82:6c:ec:8a:c3:3c:9f:49:4a:89:0f:2f: a4:6a:72:49:d2:18:51:96:1c:2a:05:37:26:a1:4d:3a:1d:99: ec:07:c4:1a:dd:53:12:ca:4d:f2:a0:f1:b5:f1:78:3d:90:b8: 57:f6:6f:45 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUbQ+sEKL7lDLndOtwv74SOBNWMsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNjAxMTMwNDAzMTZaFw0yNzAxMTIwNDA4MTZaMDMxMTAvBgNV BAMTKDc0MkI5NjdFNDBCOTNERkNFQzRGQzA1MkU1Q0U5RDZEQjdENjdDNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzmE1kOgNVY9jw6CrRNpNnSL7H vOXl8TXG2icgdRuhVZLeO0mh3OEEjSsAZ+M1DlSjJKs+u4ix+cYolfM3kdhmY/4O dBp/0KbeYgZ67VzSgkw+HLBpdWIHUih+WL6jyVm8aacpl9nPWAqQXPcdanE8Zdyw rJjGLABlkoJa1fgZLye5NjFI8TG8rRs+kDwp2DmKSByfanuAfoRgCOCdK1pRZtbe XOgjtuVubMmxQkWB2QL9OgGH3s/oIuVb8WdGzSwC44PaJSL14REIqNGL2rOIxsgA fNOo/lVvnPNZv7nLRTqnkeWwHffFQpt8/ORZTRNn8MVfcd7HBv/kYNYl0gJfAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUdCuWfkC5PfzsT8BS5c6dbbfWfFAwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjAwMjM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg+F wQuQMA0GCSqGSIb3DQEBCwUAA4IBAQCg6cChahvJ6zm6qgqyPcszvb/0FDRChNZK x3TPFaRLZkLjtN2YiVDV/jXFm1x9lFVroPqNpmFZmU6B/N2hs44y3/wVQoJDtBCX DwxYRFk5AMNfFHNjZSQdnQ8mekFRabH+c1IcCxc0Tu7+dGiXqKpJaxYZwxQFuUsX JRBRdQTaziuPyGBrymPGXwWVHoAbwVfLKzQNvjANdggV4JXIYBobVx7VtQrBuLVu 6SZ30YkYKCV3IDtzl6eUbexR4rb0O0Ttyjhb9sKTQUtVsCSCbOyKwzyfSUqJDy+k anJJ0hhRlhwqBTcmoU06HZnsB8Qa3VMSyk3yoPG18Xg9kLhX9m9F -----END CERTIFICATE-----Generated at Sun Jan 25 11:07:00 2026 by rpki-client