This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203607.roa File: AS203607.roa (raw, json) Hash identifier: maWROw9l4BRbOc/ejyRJWZffmkrAWht5mKV+hS4lngQ= Subject key identifier: AB:E4:7C:D5:7E:10:FF:D8:91:F0:B1:98:5C:68:07:71:A0:F7:0A:CD Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 04C9C467775F2C5F890C96830683BEB39D441BB7 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203607.roa Signing time: Thu 04 Dec 2025 17:09:09 +0000 ROA not before: Thu 04 Dec 2025 17:04:09 +0000 ROA not after: Thu 03 Dec 2026 17:09:09 +0000 asID: 203607 IP address blocks: 2a14:7580:ffe5::/48 maxlen: 48 2a14:7586:2000::/36 maxlen: 36 2a14:7586:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c9:c4:67:77:5f:2c:5f:89:0c:96:83:06:83:be:b3:9d:44:1b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 4 17:04:09 2025 GMT Not After : Dec 3 17:09:09 2026 GMT Subject: CN=ABE47CD57E10FFD891F0B1985C680771A0F70ACD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bf:bf:ab:de:15:ef:ca:02:3b:de:eb:cd:73: 4d:e2:75:76:52:a8:da:35:14:32:00:ed:82:81:f7: b1:57:65:9b:de:95:85:a2:70:70:14:59:b1:94:8f: d4:5a:3e:2b:5c:c7:4a:e5:ea:84:d8:50:f5:43:95: 17:ee:72:07:63:6d:97:74:3e:2e:59:f5:7c:72:18: 5c:7a:05:36:7b:51:9d:b3:a5:5c:c6:fe:83:6f:f0: ea:00:8d:da:8b:82:b3:6c:73:3c:9c:e1:02:8e:a4: 0d:48:93:20:c1:b2:92:a7:53:6b:19:aa:05:32:1c: e1:1e:79:3b:d0:ad:68:93:4a:13:2e:96:fb:b1:c3: bf:7b:b9:47:90:7d:30:b7:50:e2:1b:e9:04:b8:2a: ff:d0:41:b8:2c:b3:ac:0d:28:4d:66:93:f6:e5:3a: cc:69:a4:22:f8:93:45:3a:a5:5d:df:28:65:4e:5d: 43:f4:40:10:6e:ef:31:a2:04:28:7e:c7:44:78:2f: b9:11:5c:c0:bd:cc:7b:b1:b2:ad:6e:5d:19:ae:fd: fc:81:5e:eb:69:12:83:72:3d:fb:ea:8f:34:15:3b: 36:1b:14:59:16:f3:14:bd:c8:c2:d9:f8:41:cc:28: 6c:40:a9:e4:29:b9:a8:65:80:82:15:6e:b8:25:ad: 2e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E4:7C:D5:7E:10:FF:D8:91:F0:B1:98:5C:68:07:71:A0:F7:0A:CD X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203607.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ffe5::/48 2a14:7586:2000::/35 Signature Algorithm: sha256WithRSAEncryption 5f:34:e9:62:88:e4:ce:cd:90:e3:74:88:f7:71:aa:85:ab:8a: ac:d4:f5:4c:21:a7:74:cd:0f:3a:e2:f0:eb:82:04:c3:b7:cb: 02:10:52:76:f8:e5:88:3d:15:d3:34:12:4b:23:4c:c7:41:4d: 54:85:01:c9:7d:d8:15:7e:bd:42:0b:81:3e:5a:96:ec:50:4a: f5:10:a1:95:dc:30:4c:61:7d:46:e9:ac:9a:5c:d7:88:c9:35: 61:e0:3e:ed:25:41:98:f8:0e:ff:57:7d:80:36:8e:0b:d3:5c: cc:74:cb:7b:56:3e:d7:81:a6:2d:9d:ea:ca:ee:5c:3b:47:b2: d9:e5:ee:40:52:32:bd:7e:bc:fe:7e:0e:81:32:99:41:f6:2c: 7c:b0:8f:78:40:2d:a2:b3:23:f7:db:36:1e:58:89:5e:12:38: 88:d4:00:c8:39:b0:8b:a0:01:0a:c5:8b:d6:b0:54:28:b6:66: c7:53:8d:cf:6e:14:dc:fe:27:4d:86:3f:80:d7:51:13:a8:54: 69:0f:46:dd:b9:d6:07:94:74:2d:40:9f:5a:89:33:a5:12:59: b4:c7:b4:4d:fb:76:45:88:f5:ba:e7:d2:9a:dd:21:6c:ff:cf: 67:94:9e:02:50:86:7c:2f:06:56:83:9b:cb:7e:14:63:02:17: 2a:b7:ac:8b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUBMnEZ3dfLF+JDJaDBoO+s51EG7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMDQxNzA0MDlaFw0yNjEyMDMxNzA5MDlaMDMxMTAvBgNV BAMTKEFCRTQ3Q0Q1N0UxMEZGRDg5MUYwQjE5ODVDNjgwNzcxQTBGNzBBQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbv7+r3hXvygI73uvNc03idXZS qNo1FDIA7YKB97FXZZvelYWicHAUWbGUj9RaPitcx0rl6oTYUPVDlRfucgdjbZd0 Pi5Z9XxyGFx6BTZ7UZ2zpVzG/oNv8OoAjdqLgrNsczyc4QKOpA1IkyDBspKnU2sZ qgUyHOEeeTvQrWiTShMulvuxw797uUeQfTC3UOIb6QS4Kv/QQbgss6wNKE1mk/bl OsxppCL4k0U6pV3fKGVOXUP0QBBu7zGiBCh+x0R4L7kRXMC9zHuxsq1uXRmu/fyB XutpEoNyPfvqjzQVOzYbFFkW8xS9yMLZ+EHMKGxAqeQpuahlgIIVbrglrS5zAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUq+R81X4Q/9iR8LGYXGgHcaD3Cs0wHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjAzNjA3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKhR1 gP/lAwYFKhR1hiAwDQYJKoZIhvcNAQELBQADggEBAF806WKI5M7NkON0iPdxqoWr iqzU9Uwhp3TNDzri8OuCBMO3ywIQUnb45Yg9FdM0EksjTMdBTVSFAcl92BV+vUIL gT5aluxQSvUQoZXcMExhfUbprJpc14jJNWHgPu0lQZj4Dv9XfYA2jgvTXMx0y3tW PteBpi2d6sruXDtHstnl7kBSMr1+vP5+DoEymUH2LHywj3hALaKzI/fbNh5YiV4S OIjUAMg5sIugAQrFi9awVCi2ZsdTjc9uFNz+J02GP4DXUROoVGkPRt251geUdC1A n1qJM6USWbTHtE37dkWI9brn0prdIWz/z2eUngJQhnwvBlaDm8t+FGMCFyq3rIs= -----END CERTIFICATE-----Generated at Sat Dec 6 11:45:40 2025 by rpki-client