This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS204843.roa File: AS204843.roa (raw, json) Hash identifier: KgFwtbTK5FfAe+FwIvGYwQ+6moWK1jLT+xdI3TVYnUQ= Subject key identifier: 4C:BD:BF:B6:07:E8:8C:69:61:11:77:4B:94:85:8E:C5:ED:5E:13:9A Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 3AEF346A806B1058F4531C8DB821DC243AAAC694 Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS204843.roa Signing time: Mon 22 Dec 2025 14:55:32 +0000 ROA not before: Mon 22 Dec 2025 14:50:32 +0000 ROA not after: Mon 21 Dec 2026 14:55:32 +0000 asID: 204843 IP address blocks: 185.254.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ef:34:6a:80:6b:10:58:f4:53:1c:8d:b8:21:dc:24:3a:aa:c6:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Dec 22 14:50:32 2025 GMT Not After : Dec 21 14:55:32 2026 GMT Subject: CN=4CBDBFB607E88C696111774B94858EC5ED5E139A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:aa:14:4c:19:6f:d4:58:3c:38:f4:b9:1e:ce: 83:ec:69:44:dd:65:86:d8:3a:a0:7a:5a:12:b8:cd: 95:38:de:23:91:2b:1e:03:d1:be:5d:7f:25:1b:db: 43:71:37:6f:a9:9b:ea:51:44:40:16:5b:7f:fe:8e: 3a:78:92:05:6f:1d:78:e6:75:a4:6c:71:93:20:48: c4:d3:ab:94:28:79:24:be:8c:f2:46:68:de:76:df: b6:d2:e9:16:9e:4f:29:21:ca:17:cc:ad:93:b8:5a: f1:9f:61:a3:60:e5:8d:6e:4d:38:8d:eb:ea:38:4d: e4:6c:a8:ca:a5:23:89:ff:c4:a6:8a:6a:b8:2e:39: 4d:e2:5c:3f:85:e8:85:01:c2:48:d6:aa:ad:25:db: dd:ea:aa:dd:ee:fa:99:5a:3d:72:74:5e:b4:e6:8a: 58:a2:e0:12:48:3a:18:e9:fa:a0:c1:e2:31:dd:d6: 44:84:46:d0:84:b0:09:c8:fe:fc:8e:d7:1a:cc:ba: 9c:97:6d:bc:2d:24:94:fe:07:26:4b:d8:e3:e0:3a: 4c:ba:8f:15:82:de:d0:08:2f:55:02:9c:3a:da:65: 7a:6a:08:c8:3b:8d:4d:ab:d4:d1:18:26:c8:62:5c: d7:6f:e8:3e:bb:3a:c6:9f:1c:04:46:2e:ea:2e:63: 71:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BD:BF:B6:07:E8:8C:69:61:11:77:4B:94:85:8E:C5:ED:5E:13:9A X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS204843.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.54.0/24 Signature Algorithm: sha256WithRSAEncryption 43:4b:36:f0:82:22:d9:89:8f:88:eb:f5:11:f8:17:d6:1c:52: 35:0c:54:92:d5:99:9d:7e:5c:c3:8f:c9:0c:5b:e3:a4:2a:2c: 6f:4b:03:62:28:c4:a1:da:74:06:36:42:a8:5a:ae:dc:f5:5e: 19:4b:8f:bd:67:17:bf:d5:b7:98:d6:c4:64:bb:00:a4:90:f9: c6:fe:a1:68:65:fb:ac:22:b8:9f:83:fe:23:e5:81:b8:0f:4b: f3:5e:b2:99:fe:2e:93:13:37:54:61:34:d1:10:27:af:cb:60: c4:8a:fe:ab:94:ad:56:75:77:55:69:4b:3a:25:06:79:1c:4f: 84:4c:29:56:8c:fa:08:5c:01:e1:85:c4:d9:f8:a9:b2:be:95: 07:e2:1a:d3:0b:71:a8:c1:10:75:77:e3:04:47:58:8e:ab:f0: e2:02:d4:47:c1:d1:1c:b9:18:7a:ec:66:03:47:c8:00:ef:30: 14:f6:b6:dd:e2:68:ec:ab:2d:6a:9f:3a:70:b2:d7:a9:ab:5d: 3c:e2:33:a6:10:fd:bf:49:6e:89:87:5a:61:85:55:a0:e5:39: 7a:82:91:49:78:be:76:cc:81:23:4b:c3:df:01:6f:b6:17:ce: b7:d0:86:c6:f9:ed:4b:2a:32:d3:c9:38:b9:34:73:25:37:b8: 98:9f:bc:15 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUOu80aoBrEFj0UxyNuCHcJDqqxpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNTEyMjIxNDUwMzJaFw0yNjEyMjExNDU1MzJaMDMxMTAvBgNV BAMTKDRDQkRCRkI2MDdFODhDNjk2MTExNzc0Qjk0ODU4RUM1RUQ1RTEzOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5qhRMGW/UWDw49LkezoPsaUTd ZYbYOqB6WhK4zZU43iORKx4D0b5dfyUb20NxN2+pm+pRREAWW3/+jjp4kgVvHXjm daRscZMgSMTTq5QoeSS+jPJGaN5237bS6RaeTykhyhfMrZO4WvGfYaNg5Y1uTTiN 6+o4TeRsqMqlI4n/xKaKarguOU3iXD+F6IUBwkjWqq0l293qqt3u+plaPXJ0XrTm ilii4BJIOhjp+qDB4jHd1kSERtCEsAnI/vyO1xrMupyXbbwtJJT+ByZL2OPgOky6 jxWC3tAIL1UCnDraZXpqCMg7jU2r1NEYJshiXNdv6D67OsafHARGLuouY3EBAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUTL2/tgfojGlhEXdLlIWOxe1eE5owHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjA0ODQzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf42 MA0GCSqGSIb3DQEBCwUAA4IBAQBDSzbwgiLZiY+I6/UR+BfWHFI1DFSS1ZmdflzD j8kMW+OkKixvSwNiKMSh2nQGNkKoWq7c9V4ZS4+9Zxe/1beY1sRkuwCkkPnG/qFo ZfusIrifg/4j5YG4D0vzXrKZ/i6TEzdUYTTRECevy2DEiv6rlK1WdXdVaUs6JQZ5 HE+ETClWjPoIXAHhhcTZ+KmyvpUH4hrTC3GowRB1d+MER1iOq/DiAtRHwdEcuRh6 7GYDR8gA7zAU9rbd4mjsqy1qnzpwstepq1084jOmEP2/SW6Jh1phhVWg5Tl6gpFJ eL52zIEjS8PfAW+2F8630IbG+e1LKjLTyTi5NHMlN7iYn7wV -----END CERTIFICATE-----Generated at Sun Jan 25 18:51:51 2026 by rpki-client