This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210825.roa File: AS210825.roa (raw, json) Hash identifier: +uY4R+xKdZu2tqpGhgcHGvucqaay5Vf1d/dUX5yQKCM= Subject key identifier: 13:86:A0:43:8F:1B:31:CD:F7:F9:FE:7F:95:2D:8E:B9:CF:4A:71:E8 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 029CB5A7254E04D40013630B81A91090CDA4F4E8 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210825.roa Signing time: Sun 14 Dec 2025 17:51:33 +0000 ROA not before: Sun 14 Dec 2025 17:46:33 +0000 ROA not after: Sun 13 Dec 2026 17:51:33 +0000 asID: 210825 IP address blocks: 2a14:7580:ffd0::/44 maxlen: 44 2a14:7581:fd0::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:9c:b5:a7:25:4e:04:d4:00:13:63:0b:81:a9:10:90:cd:a4:f4:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 14 17:46:33 2025 GMT Not After : Dec 13 17:51:33 2026 GMT Subject: CN=1386A0438F1B31CDF7F9FE7F952D8EB9CF4A71E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2f:6b:76:9f:5e:6a:55:5d:9e:90:b0:83:e1: c6:1e:7c:68:1a:4d:6d:4d:c5:85:69:c4:3b:e1:b2: 73:12:51:56:39:27:b4:6f:fd:88:23:52:fe:43:04: a9:6d:bd:ce:aa:e6:90:8a:33:78:3a:10:9b:10:6f: 6a:c1:50:b9:b9:34:8b:db:26:b5:00:e9:69:17:49: 4b:15:ab:21:c8:ad:18:fb:4c:ff:f1:a4:3e:82:f0: 7f:35:29:33:bb:89:f0:cf:f7:11:97:d5:80:c9:82: 9f:54:2c:78:53:32:8f:47:45:c9:26:5c:16:b9:a8: 5f:16:22:c4:d5:3d:13:0e:44:08:5e:2b:36:c6:c9: cc:be:2b:2c:a9:be:33:50:5e:2c:57:86:d5:ca:26: c2:41:51:b0:c0:c6:90:c0:43:b8:56:59:5c:51:25: 01:d3:44:3f:30:03:f0:ff:87:48:11:cd:70:62:75: 68:cb:82:47:99:79:26:9c:49:01:9c:c8:af:34:e1: 5b:c7:3f:df:a2:24:dd:5c:0a:f2:e0:ea:f8:e8:e3: 65:9a:ef:76:73:1c:45:e4:3f:36:43:57:bb:d8:08: 11:51:65:ab:99:d7:0d:4a:d6:e4:e5:97:28:5b:cc: 22:00:5d:a8:13:47:9f:b3:5d:ef:c3:c6:dd:63:43: 46:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:86:A0:43:8F:1B:31:CD:F7:F9:FE:7F:95:2D:8E:B9:CF:4A:71:E8 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS210825.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ffd0::/44 2a14:7581:fd0::/44 Signature Algorithm: sha256WithRSAEncryption 5f:ac:ba:50:bc:77:02:fe:2a:70:c9:e1:fa:03:e5:fe:f4:4f: 63:a2:22:2e:18:3d:f9:fc:8e:3c:77:6d:22:17:25:41:05:48: a8:66:b2:f5:e8:25:ab:1e:37:ea:48:40:71:af:0f:73:0e:07: 92:ed:1b:3a:7b:be:10:6c:d0:b0:a3:aa:ff:14:76:87:fd:38: f4:d0:75:c7:e2:3f:39:02:24:e4:ae:15:a9:08:8c:7a:fe:01: bf:70:31:90:cb:17:25:94:21:7e:b8:fb:68:a4:28:78:1d:e9: 24:b0:8e:ad:8a:ef:3b:78:fe:88:29:52:ba:59:c6:9b:eb:bb: 81:f7:f2:3b:46:c8:5c:ef:01:8e:6c:cb:de:a0:26:04:fd:3f: d2:4f:be:7c:3d:40:1b:01:fb:2b:79:3a:72:19:c6:69:6d:57: 13:0e:8b:15:c5:ba:21:99:32:c6:f5:4a:66:6f:06:96:82:e6: 91:76:fd:e9:28:6d:65:87:b9:c1:f4:a4:92:64:11:c7:79:30: ed:e7:27:b1:df:8e:eb:0e:1c:12:44:09:db:8f:65:cf:73:61: f0:16:d3:be:34:de:20:4d:b8:52:75:f2:47:70:23:95:08:bd: 5e:4c:35:ec:d0:ff:2e:b5:01:43:bb:ac:98:1a:18:9e:1c:49: 2d:12:0c:9f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUApy1pyVOBNQAE2MLgakQkM2k9OgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMTQxNzQ2MzNaFw0yNjEyMTMxNzUxMzNaMDMxMTAvBgNV BAMTKDEzODZBMDQzOEYxQjMxQ0RGN0Y5RkU3Rjk1MkQ4RUI5Q0Y0QTcxRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuL2t2n15qVV2ekLCD4cYefGga TW1NxYVpxDvhsnMSUVY5J7Rv/YgjUv5DBKltvc6q5pCKM3g6EJsQb2rBULm5NIvb JrUA6WkXSUsVqyHIrRj7TP/xpD6C8H81KTO7ifDP9xGX1YDJgp9ULHhTMo9HRckm XBa5qF8WIsTVPRMORAheKzbGycy+KyypvjNQXixXhtXKJsJBUbDAxpDAQ7hWWVxR JQHTRD8wA/D/h0gRzXBidWjLgkeZeSacSQGcyK804VvHP9+iJN1cCvLg6vjo42Wa 73ZzHEXkPzZDV7vYCBFRZauZ1w1K1uTllyhbzCIAXagTR5+zXe/Dxt1jQ0ZlAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUE4agQ48bMc33+f5/lS2Ouc9KcegwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjEwODI1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhR1 gP/QAwcEKhR1gQ/QMA0GCSqGSIb3DQEBCwUAA4IBAQBfrLpQvHcC/ipwyeH6A+X+ 9E9joiIuGD35/I48d20iFyVBBUioZrL16CWrHjfqSEBxrw9zDgeS7Rs6e74QbNCw o6r/FHaH/Tj00HXH4j85AiTkrhWpCIx6/gG/cDGQyxcllCF+uPtopCh4HekksI6t iu87eP6IKVK6Wcab67uB9/I7Rshc7wGObMveoCYE/T/ST758PUAbAfsreTpyGcZp bVcTDosVxbohmTLG9UpmbwaWguaRdv3pKG1lh7nB9KSSZBHHeTDt5yex347rDhwS RAnbj2XPc2HwFtO+NN4gTbhSdfJHcCOVCL1eTDXs0P8utQFDu6yYGhieHEktEgyf -----END CERTIFICATE-----Generated at Tue Dec 16 09:37:52 2025 by rpki-client