This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203643.roa File: AS203643.roa (raw, json) Hash identifier: tCcRoQ/aMnzxs9LqOw4hRizF1B8U5013N+whJplru4g= Subject key identifier: 7E:C8:A9:8C:3F:FC:88:58:37:7F:60:9B:52:6A:CD:3A:9F:C4:F0:89 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 17E68E92A7E6EB865D40B3A607EE5B6EC456D280 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203643.roa Signing time: Tue 18 Nov 2025 10:16:33 +0000 ROA not before: Tue 18 Nov 2025 10:11:33 +0000 ROA not after: Tue 17 Nov 2026 10:16:33 +0000 asID: 203643 IP address blocks: 2a14:7580:ffe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e6:8e:92:a7:e6:eb:86:5d:40:b3:a6:07:ee:5b:6e:c4:56:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Nov 18 10:11:33 2025 GMT Not After : Nov 17 10:16:33 2026 GMT Subject: CN=7EC8A98C3FFC8858377F609B526ACD3A9FC4F089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e5:f2:32:eb:3d:e9:8d:0b:9e:7d:18:50:a5: b2:2f:fd:c9:d7:46:4b:a4:6f:ab:a4:ae:f8:8c:36: 66:17:86:5d:ca:70:f9:9a:07:cb:b2:ca:5b:cd:22: 1e:7b:e9:78:52:b9:22:1e:55:d4:03:3d:6f:e3:fe: af:5a:3b:11:e7:4a:83:b0:3d:f8:1a:1a:c2:96:93: f5:9f:73:35:f8:ee:6a:63:59:2f:53:91:25:40:2a: 30:24:2d:a7:da:f0:b4:75:26:f8:05:33:33:66:7d: ea:bc:ff:00:4e:28:45:36:d6:2e:97:3c:ed:13:68: 56:20:29:7b:84:5e:79:c4:22:a2:ae:45:60:73:ee: 7d:a0:64:b4:fa:e4:fb:47:56:af:71:06:de:8e:d5: 77:1b:1b:46:23:0f:a1:4a:54:20:72:67:96:c9:f3: cb:62:8e:d3:98:14:a0:37:42:e8:b6:2d:6b:d1:dd: e7:ec:55:8b:e5:ef:df:63:0b:69:ad:03:69:03:8e: 7d:31:90:8e:21:57:67:07:f1:a6:c4:3a:86:b4:15: 01:9d:88:42:ba:db:c9:dd:6c:94:2f:50:0a:28:47: 93:04:8b:c2:78:4a:5a:af:b5:7b:91:2d:77:bb:20: ff:72:02:27:9c:80:8b:07:e9:9b:7d:ad:8d:37:80: 6e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C8:A9:8C:3F:FC:88:58:37:7F:60:9B:52:6A:CD:3A:9F:C4:F0:89 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203643.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ffe4::/48 Signature Algorithm: sha256WithRSAEncryption 8c:88:d7:b4:78:79:f5:80:67:c8:52:29:69:42:3e:d9:e6:db: 4b:97:ed:1b:60:43:6e:01:59:d0:61:0d:ae:34:6e:9e:e7:eb: 9c:c6:8f:08:d5:ca:20:a4:48:a7:62:14:12:91:7a:5d:88:e9: 68:7f:7b:0d:f9:75:9f:94:e0:80:e8:e1:86:df:fb:09:6d:ee: 67:00:5b:28:3c:c9:84:61:a5:30:69:f8:0d:39:4e:7d:77:5a: f2:2b:bc:82:22:a4:82:7b:93:16:3d:a6:87:ad:94:8a:13:b3: 5d:e0:d1:c4:13:cb:7e:c0:84:f6:f2:6b:3b:9c:bb:98:8d:fb: fb:eb:1e:27:e2:71:e1:67:2d:62:b5:d6:10:31:2a:ad:2d:47: c3:2a:e1:7e:a6:83:bb:e1:fc:9e:57:e7:d4:3b:28:ac:1e:72: 59:91:bb:57:8c:e3:93:5f:69:24:90:44:f1:3d:2e:c3:a1:14: 99:0b:86:26:2c:3c:f4:b7:8d:13:24:71:c8:ca:27:a9:a1:24: 80:10:8e:9d:7e:06:cf:80:57:26:3f:d9:ad:d5:b1:66:af:46: 48:cf:5a:fe:2c:a4:ca:68:63:ab:d9:c4:7c:0c:9c:d7:58:0e: ae:7d:4a:19:9d:b4:fd:9c:d8:8d:6e:5a:f7:16:c0:f7:4f:d2: 1d:84:30:94 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUF+aOkqfm64ZdQLOmB+5bbsRW0oAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTExMTgxMDExMzNaFw0yNjExMTcxMDE2MzNaMDMxMTAvBgNV BAMTKDdFQzhBOThDM0ZGQzg4NTgzNzdGNjA5QjUyNkFDRDNBOUZDNEYwODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ5fIy6z3pjQuefRhQpbIv/cnX Rkukb6ukrviMNmYXhl3KcPmaB8uyylvNIh576XhSuSIeVdQDPW/j/q9aOxHnSoOw PfgaGsKWk/WfczX47mpjWS9TkSVAKjAkLafa8LR1JvgFMzNmfeq8/wBOKEU21i6X PO0TaFYgKXuEXnnEIqKuRWBz7n2gZLT65PtHVq9xBt6O1XcbG0YjD6FKVCByZ5bJ 88tijtOYFKA3Qui2LWvR3efsVYvl799jC2mtA2kDjn0xkI4hV2cH8abEOoa0FQGd iEK628ndbJQvUAooR5MEi8J4SlqvtXuRLXe7IP9yAiecgIsH6Zt9rY03gG5rAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUfsipjD/8iFg3f2CbUmrNOp/E8IkwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjAzNjQzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1 gP/kMA0GCSqGSIb3DQEBCwUAA4IBAQCMiNe0eHn1gGfIUilpQj7Z5ttLl+0bYENu AVnQYQ2uNG6e5+ucxo8I1cogpEinYhQSkXpdiOlof3sN+XWflOCA6OGG3/sJbe5n AFsoPMmEYaUwafgNOU59d1ryK7yCIqSCe5MWPaaHrZSKE7Nd4NHEE8t+wIT28ms7 nLuYjfv76x4n4nHhZy1itdYQMSqtLUfDKuF+poO74fyeV+fUOyisHnJZkbtXjOOT X2kkkETxPS7DoRSZC4YmLDz0t40TJHHIyiepoSSAEI6dfgbPgFcmP9mt1bFmr0ZI z1r+LKTKaGOr2cR8DJzXWA6ufUoZnbT9nNiNblr3FsD3T9IdhDCU -----END CERTIFICATE-----Generated at Sun Dec 7 01:07:04 2025 by rpki-client