This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203837.roa File: AS203837.roa (raw, json) Hash identifier: YwY2VEMdW6bLHKwhU9e1wxMgQO/zWJPg/pTYHx4wwm4= Subject key identifier: 1F:34:5C:42:EC:7F:3C:B4:56:C0:84:06:33:51:54:94:B8:00:AC:9E Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 6098A4D7C8A7EC0915529602EA11BC2D19E11E14 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203837.roa Signing time: Thu 13 Nov 2025 15:02:44 +0000 ROA not before: Thu 13 Nov 2025 14:57:44 +0000 ROA not after: Thu 12 Nov 2026 15:02:44 +0000 asID: 203837 IP address blocks: 2a14:7580:ffe1::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:98:a4:d7:c8:a7:ec:09:15:52:96:02:ea:11:bc:2d:19:e1:1e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Nov 13 14:57:44 2025 GMT Not After : Nov 12 15:02:44 2026 GMT Subject: CN=1F345C42EC7F3CB456C0840633515494B800AC9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:60:d9:26:28:42:5e:0b:91:9f:84:b8:be:af: 7e:cd:c1:bd:b9:57:92:f8:b7:7e:26:b5:6e:9f:f5: 32:ea:d1:12:1c:97:75:8c:ac:01:24:7b:df:aa:b1: 75:d7:8c:cb:9b:fd:a4:36:e6:cc:1d:55:1f:f7:7b: 76:c6:1c:b7:d6:d0:2f:d7:16:ea:56:7e:ac:53:ff: fc:c2:53:e3:5f:ec:2d:e6:3f:59:5c:86:d6:a7:7b: 57:aa:ae:ad:10:ed:22:d5:f8:a5:10:33:7c:70:65: aa:e2:c1:b8:ef:be:be:ec:ba:c4:7d:a2:85:6f:c6: c7:df:33:a7:92:d8:7a:a5:11:22:37:1a:a8:fd:b9: 0d:3c:90:92:19:fe:5f:91:77:95:fa:55:ff:b6:7c: d6:33:9e:d1:27:94:e6:a6:8e:1e:a5:c6:52:6c:a0: 60:6f:9c:f3:f2:ef:ee:59:54:fd:0e:1d:3e:4e:c6: 46:3f:4c:3a:77:61:45:cc:08:12:a9:6d:e0:60:18: 5b:ee:11:cc:f8:3b:ab:1c:6a:3e:05:33:ba:34:ee: da:68:78:ae:4a:d1:03:ed:94:3f:3c:b5:75:b1:ef: 35:e2:d1:4b:83:4a:65:21:a3:dc:f5:1f:06:fa:78: 48:c1:46:3a:0e:f1:ec:80:92:59:a6:2a:a6:a5:d9: e8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:34:5C:42:EC:7F:3C:B4:56:C0:84:06:33:51:54:94:B8:00:AC:9E X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS203837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ffe1::/48 Signature Algorithm: sha256WithRSAEncryption 88:55:e9:82:b3:04:23:00:4d:57:ad:f4:4c:b5:86:2a:ad:ed: bb:d8:9a:c5:47:f6:2e:a9:3e:b9:e0:ce:a5:e7:09:b1:8a:b8: 23:b8:b1:14:69:a0:9d:f8:7c:cc:e9:8b:d5:d4:4b:7f:6b:b0: 50:cc:d8:15:fe:39:f3:dd:fd:08:6e:4b:15:4d:fe:60:6c:43: bf:2f:05:02:9a:6b:43:c3:33:74:2d:ff:4d:51:42:df:01:45: 21:50:47:b8:3f:d2:b5:90:9b:52:ea:40:aa:1c:96:b4:47:70: f1:30:be:59:09:0a:1d:e7:72:70:f1:03:be:41:13:4a:15:ec: 75:33:cf:26:62:03:af:2d:9b:3b:5e:ed:80:fc:53:6a:b5:a3: 2a:e1:cc:4b:83:e0:7d:e5:14:86:57:2e:2a:0a:96:15:1a:48: 7f:a3:58:e2:3f:78:03:4e:86:3b:26:2d:b0:3a:0a:56:a3:84: 60:64:af:f2:ff:fd:a7:79:36:e3:e0:02:25:19:23:c4:fa:c4: 85:de:df:e0:3d:16:e7:a1:34:d3:a3:eb:4c:d6:d8:22:67:5a: 02:43:29:d8:90:8b:48:c5:79:44:eb:a5:0f:48:55:2a:69:03: 2d:ed:23:f8:0e:dd:90:27:89:6a:f8:b8:a3:75:1a:cb:2c:30: 45:98:b7:26 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUYJik18in7AkVUpYC6hG8LRnhHhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTExMTMxNDU3NDRaFw0yNjExMTIxNTAyNDRaMDMxMTAvBgNV BAMTKDFGMzQ1QzQyRUM3RjNDQjQ1NkMwODQwNjMzNTE1NDk0QjgwMEFDOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYYNkmKEJeC5GfhLi+r37Nwb25 V5L4t34mtW6f9TLq0RIcl3WMrAEke9+qsXXXjMub/aQ25swdVR/3e3bGHLfW0C/X FupWfqxT//zCU+Nf7C3mP1lchtane1eqrq0Q7SLV+KUQM3xwZariwbjvvr7susR9 ooVvxsffM6eS2HqlESI3Gqj9uQ08kJIZ/l+Rd5X6Vf+2fNYzntEnlOamjh6lxlJs oGBvnPPy7+5ZVP0OHT5OxkY/TDp3YUXMCBKpbeBgGFvuEcz4O6scaj4FM7o07tpo eK5K0QPtlD88tXWx7zXi0UuDSmUho9z1Hwb6eEjBRjoO8eyAklmmKqal2ehzAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUHzRcQux/PLRWwIQGM1FUlLgArJ4wHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjAzODM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1 gP/hMA0GCSqGSIb3DQEBCwUAA4IBAQCIVemCswQjAE1XrfRMtYYqre272JrFR/Yu qT654M6l5wmxirgjuLEUaaCd+HzM6YvV1Et/a7BQzNgV/jnz3f0IbksVTf5gbEO/ LwUCmmtDwzN0Lf9NUULfAUUhUEe4P9K1kJtS6kCqHJa0R3DxML5ZCQod53Jw8QO+ QRNKFex1M88mYgOvLZs7Xu2A/FNqtaMq4cxLg+B95RSGVy4qCpYVGkh/o1jiP3gD ToY7Ji2wOgpWo4RgZK/y//2neTbj4AIlGSPE+sSF3t/gPRbnoTTTo+tM1tgiZ1oC QynYkItIxXlE66UPSFUqaQMt7SP4Dt2QJ4lq+LijdRrLLDBFmLcm -----END CERTIFICATE-----Generated at Sat Dec 6 11:45:27 2025 by rpki-client