This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS58202.roa File: AS58202.roa (raw, json) Hash identifier: CQ2oRQ2rErLfpTsGBu5TUP9oduf4i78RvbmJJMJSxHU= Subject key identifier: 95:EF:D0:10:27:3F:8B:B6:3D:6F:97:AF:B4:EC:F8:BB:83:78:79:18 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 19A31FEED646AB3FD3CE3A2E7A1095397667591A Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS58202.roa Signing time: Sun 23 Nov 2025 05:12:51 +0000 ROA not before: Sun 23 Nov 2025 05:07:51 +0000 ROA not after: Sun 22 Nov 2026 05:12:51 +0000 asID: 58202 IP address blocks: 2a14:7580::/48 maxlen: 48 2a14:7580:1::/48 maxlen: 48 2a14:7580:2::/48 maxlen: 48 2a14:7580:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a3:1f:ee:d6:46:ab:3f:d3:ce:3a:2e:7a:10:95:39:76:67:59:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Nov 23 05:07:51 2025 GMT Not After : Nov 22 05:12:51 2026 GMT Subject: CN=95EFD010273F8BB63D6F97AFB4ECF8BB83787918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6b:3e:37:c6:d3:08:33:56:0c:b1:15:2a:14: 44:5c:7d:d5:24:42:55:16:57:1f:32:cb:0a:a6:66: 86:02:20:3e:bf:07:d7:7c:1d:ee:3b:f1:1b:52:5e: e8:58:55:71:c5:53:51:cc:e2:f4:01:05:1e:37:9a: 04:e1:1f:df:aa:2e:da:c1:89:ed:76:19:0a:ef:03: 69:4b:90:c0:f0:e5:8c:26:f2:ee:be:89:6e:af:03: 15:ac:ae:42:4d:6f:e8:15:4f:1d:06:0c:e7:ff:a7: 1e:2d:99:0b:79:5e:24:f3:4a:59:8e:f4:8d:5a:67: 14:5d:45:e9:e1:f2:1f:e3:b0:46:43:4b:f2:51:ce: 0a:a5:28:1b:b2:45:da:19:6f:40:3a:27:3e:44:b9: 01:02:74:dd:10:4a:41:15:f7:0e:20:8c:2d:25:b6: 0b:ae:ec:3b:bd:67:97:e4:be:9f:8e:be:d1:57:f3: cd:66:80:56:25:2c:31:81:4c:53:4a:5f:e5:3d:13: ea:a1:27:f8:9b:fa:e2:af:c5:71:40:e7:d5:12:05: 13:dd:f7:f2:8b:de:f4:2a:03:81:12:c0:8a:19:39: 77:31:ed:4b:25:78:eb:c4:aa:c2:7c:f0:36:ab:84: 3b:a5:7b:94:12:db:27:df:e7:39:57:8a:85:01:a1: 77:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EF:D0:10:27:3F:8B:B6:3D:6F:97:AF:B4:EC:F8:BB:83:78:79:18 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS58202.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580::/46 Signature Algorithm: sha256WithRSAEncryption 3d:13:41:ed:92:30:cc:fd:64:ae:cb:a8:9e:0f:ce:a7:cd:c6: 98:76:04:38:82:0a:d1:35:92:9d:15:ed:64:77:da:f1:df:77: 21:1f:b8:7c:53:51:b7:7f:e2:53:c0:ee:31:fa:57:8f:96:92: 44:3a:95:a0:85:07:6c:59:b7:7c:a0:ba:86:63:ec:c5:a6:0a: 2c:87:af:59:06:bc:a4:b9:c4:1b:04:38:51:48:ff:04:55:88: 0b:e4:5f:0f:73:2a:4b:33:ac:8c:a6:6e:78:fc:1f:41:45:11: 79:5f:89:96:cb:85:8a:cc:05:40:04:30:a0:61:66:bc:ab:77: e8:95:17:24:ef:ba:a1:17:55:6c:41:4f:8e:7a:84:64:6b:27: 8f:19:05:f7:b0:b4:69:83:dc:9b:0f:1f:15:4b:a1:42:29:c1: f6:89:dc:c8:61:d9:59:f1:52:0d:52:2d:01:9d:f8:b7:d5:08: bb:30:79:cf:6b:35:d9:12:e6:6d:00:2d:19:fc:03:e6:c9:2f: d8:75:29:ce:e4:c1:3f:a0:48:a4:c9:ff:32:05:af:c5:33:4c: 99:d5:b3:1c:b1:05:26:5d:0a:2b:74:ce:20:68:8c:00:75:d9: 58:32:0f:07:9e:bf:b2:3c:bd:2a:6b:c2:34:c6:18:e1:68:a2: 9f:72:11:26 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUGaMf7tZGqz/TzjouehCVOXZnWRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTExMjMwNTA3NTFaFw0yNjExMjIwNTEyNTFaMDMxMTAvBgNV BAMTKDk1RUZEMDEwMjczRjhCQjYzRDZGOTdBRkI0RUNGOEJCODM3ODc5MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcaz43xtMIM1YMsRUqFERcfdUk QlUWVx8yywqmZoYCID6/B9d8He478RtSXuhYVXHFU1HM4vQBBR43mgThH9+qLtrB ie12GQrvA2lLkMDw5Ywm8u6+iW6vAxWsrkJNb+gVTx0GDOf/px4tmQt5XiTzSlmO 9I1aZxRdRenh8h/jsEZDS/JRzgqlKBuyRdoZb0A6Jz5EuQECdN0QSkEV9w4gjC0l tguu7Du9Z5fkvp+OvtFX881mgFYlLDGBTFNKX+U9E+qhJ/ib+uKvxXFA59USBRPd 9/KL3vQqA4ESwIoZOXcx7UsleOvEqsJ88DarhDule5QS2yff5zlXioUBoXdzAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUle/QECc/i7Y9b5evtOz4u4N4eRgwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTNTgyMDIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwIqFHWA AAAwDQYJKoZIhvcNAQELBQADggEBAD0TQe2SMMz9ZK7LqJ4PzqfNxph2BDiCCtE1 kp0V7WR32vHfdyEfuHxTUbd/4lPA7jH6V4+WkkQ6laCFB2xZt3yguoZj7MWmCiyH r1kGvKS5xBsEOFFI/wRViAvkXw9zKkszrIymbnj8H0FFEXlfiZbLhYrMBUAEMKBh Zryrd+iVFyTvuqEXVWxBT456hGRrJ48ZBfewtGmD3JsPHxVLoUIpwfaJ3Mhh2Vnx Ug1SLQGd+LfVCLswec9rNdkS5m0ALRn8A+bJL9h1Kc7kwT+gSKTJ/zIFr8UzTJnV sxyxBSZdCit0ziBojAB12VgyDweev7I8vSprwjTGGOFoop9yESY= -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:09 2025 by rpki-client