This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202934.roa File: AS202934.roa (raw, json) Hash identifier: OfksgKNkide+J72zoLcjJTbfUTG1smoGYIXBsF9WFs0= Subject key identifier: F6:3F:D6:6A:D8:15:BD:82:E6:66:A3:35:16:7A:3D:4E:AA:15:66:4B Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 2D1F390517A7FBA0FC0AC8EE161D2D2ADB953F42 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202934.roa Signing time: Thu 18 Dec 2025 11:29:45 +0000 ROA not before: Thu 18 Dec 2025 11:24:45 +0000 ROA not after: Thu 17 Dec 2026 11:29:45 +0000 asID: 202934 IP address blocks: 2a14:7580:ff97::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:1f:39:05:17:a7:fb:a0:fc:0a:c8:ee:16:1d:2d:2a:db:95:3f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 18 11:24:45 2025 GMT Not After : Dec 17 11:29:45 2026 GMT Subject: CN=F63FD66AD815BD82E666A335167A3D4EAA15664B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2f:87:8a:f5:8e:7b:97:c3:7b:ed:5e:a7:bb: e2:61:c5:39:1d:4d:fa:ae:42:8e:5c:46:b7:49:f4: ef:c4:5c:20:37:f7:c6:db:b8:74:4b:c5:40:df:6c: 23:40:70:78:38:cd:60:89:63:c5:0e:b9:77:fc:89: 72:3d:bb:eb:8a:c5:18:23:6b:bf:79:2b:ae:11:74: 0f:d8:6c:1d:d6:39:44:5e:a2:49:dd:ea:2a:5b:db: 8a:77:f8:d2:d3:5c:37:d6:f4:ec:b1:b2:a0:8b:43: 12:6d:1a:00:52:0c:c0:84:09:37:7d:ad:8a:0c:96: 5e:6d:d7:1b:9c:16:15:5c:4c:3f:d9:e0:be:aa:af: 59:17:56:16:a1:77:81:3e:c3:9b:f9:2f:b0:6d:c7: f4:c6:2f:b6:15:bd:1f:dc:b9:44:1a:f5:c9:65:59: a8:b9:1a:b6:97:c3:ff:42:3b:1d:ef:00:6e:c1:df: b5:b4:33:5c:b5:a8:d7:17:ac:5b:e1:82:13:5d:eb: 95:6f:ae:52:e9:12:a5:9e:ec:67:4b:fc:36:8f:c6: 58:f8:b8:cc:dd:cd:40:9b:ef:43:cf:17:ee:2c:71: cf:b8:fb:7c:c1:d4:50:77:85:d9:29:2d:e4:2d:c4: a2:a7:08:4d:7a:b3:99:0f:60:d7:de:9b:68:1b:bf: c5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3F:D6:6A:D8:15:BD:82:E6:66:A3:35:16:7A:3D:4E:AA:15:66:4B X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS202934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ff97::/48 Signature Algorithm: sha256WithRSAEncryption 57:fd:c1:79:0c:59:9b:dc:52:a9:e7:82:57:86:17:31:ab:f6: 83:48:49:2f:8d:61:b3:3e:20:7e:2a:33:bb:4e:10:3c:d7:b4: 3d:c3:41:4b:30:b7:8a:3f:cc:44:7a:fe:40:c0:4d:de:05:06: 79:19:91:ab:34:da:5c:22:be:46:a1:ea:52:e7:33:5f:f5:0e: 50:ad:49:f8:7f:62:e6:2e:48:90:1e:1b:c7:27:57:fd:fb:ce: da:7b:05:70:e3:3a:05:56:00:c4:40:d7:cb:5b:25:04:42:38: 38:0b:f5:cc:51:ed:11:ed:d1:e3:d1:18:7c:f9:9e:f1:50:b5: ce:46:4f:7f:e4:9f:a0:75:26:8c:c2:aa:8c:f0:40:6d:c5:dc: f0:65:cb:d2:ab:48:18:ce:32:0f:ba:b4:ab:da:12:f1:ad:b6: 43:30:f0:e1:14:f4:9c:aa:06:55:cc:34:e7:3c:db:79:bf:38: bf:b8:3e:2c:a7:f7:c9:39:5a:19:35:7b:53:60:1b:b7:e1:90: e7:c7:06:0a:5b:59:58:1b:92:eb:c8:fd:2e:cd:48:48:b4:9b: 9b:96:a5:50:35:0f:55:5e:f9:14:a9:56:25:f1:95:a7:38:19: 10:69:e3:30:a7:dc:d6:35:db:06:48:60:68:33:48:15:76:72: e5:f8:02:e2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIULR85BRen+6D8CsjuFh0tKtuVP0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMTgxMTI0NDVaFw0yNjEyMTcxMTI5NDVaMDMxMTAvBgNV BAMTKEY2M0ZENjZBRDgxNUJEODJFNjY2QTMzNTE2N0EzRDRFQUExNTY2NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAL4eK9Y57l8N77V6nu+JhxTkd TfquQo5cRrdJ9O/EXCA398bbuHRLxUDfbCNAcHg4zWCJY8UOuXf8iXI9u+uKxRgj a795K64RdA/YbB3WOUReoknd6ipb24p3+NLTXDfW9OyxsqCLQxJtGgBSDMCECTd9 rYoMll5t1xucFhVcTD/Z4L6qr1kXVhahd4E+w5v5L7Btx/TGL7YVvR/cuUQa9cll Wai5GraXw/9COx3vAG7B37W0M1y1qNcXrFvhghNd65VvrlLpEqWe7GdL/DaPxlj4 uMzdzUCb70PPF+4scc+4+3zB1FB3hdkpLeQtxKKnCE16s5kPYNfem2gbv8X3AgMB AAGjggINMIICCTAdBgNVHQ4EFgQU9j/WatgVvYLmZqM1Fno9TqoVZkswHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjAyOTM0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1 gP+XMA0GCSqGSIb3DQEBCwUAA4IBAQBX/cF5DFmb3FKp54JXhhcxq/aDSEkvjWGz PiB+KjO7ThA817Q9w0FLMLeKP8xEev5AwE3eBQZ5GZGrNNpcIr5GoepS5zNf9Q5Q rUn4f2LmLkiQHhvHJ1f9+87aewVw4zoFVgDEQNfLWyUEQjg4C/XMUe0R7dHj0Rh8 +Z7xULXORk9/5J+gdSaMwqqM8EBtxdzwZcvSq0gYzjIPurSr2hLxrbZDMPDhFPSc qgZVzDTnPNt5vzi/uD4sp/fJOVoZNXtTYBu34ZDnxwYKW1lYG5LryP0uzUhItJub lqVQNQ9VXvkUqVYl8ZWnOBkQaeMwp9zWNdsGSGBoM0gVdnLl+ALi -----END CERTIFICATE-----Generated at Fri Dec 19 07:42:51 2025 by rpki-client