This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS206668.roa File: AS206668.roa (raw, json) Hash identifier: ynCW5gyg/Zwcnb9nc5kC5ft86zPiR9ig4Rd3StM/fmE= Subject key identifier: 43:09:C6:95:40:34:4B:1E:E7:58:6C:E5:86:45:87:D2:58:7A:C3:5E Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 6C92C731777DEC4BFE6042A63D71879DF456BEF4 Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS206668.roa Signing time: Sat 10 Jan 2026 08:45:55 +0000 ROA not before: Sat 10 Jan 2026 08:40:55 +0000 ROA not after: Sat 09 Jan 2027 08:45:55 +0000 asID: 206668 IP address blocks: 185.231.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:92:c7:31:77:7d:ec:4b:fe:60:42:a6:3d:71:87:9d:f4:56:be:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Jan 10 08:40:55 2026 GMT Not After : Jan 9 08:45:55 2027 GMT Subject: CN=4309C69540344B1EE7586CE5864587D2587AC35E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c4:b0:5c:28:6e:a0:1f:81:b0:28:1c:23:94: e0:75:df:af:40:b0:ba:af:78:a3:4a:45:86:63:f0: 03:ef:c0:3d:cc:18:6e:af:99:d3:b0:75:56:01:7d: d3:4e:ab:9f:ea:bc:24:5d:c0:78:5d:b3:61:29:1e: e1:13:0b:eb:24:92:15:6d:4a:fb:49:b6:a3:cd:d9: 9f:2e:9a:99:f0:7b:c4:3d:de:75:11:07:0a:17:be: f0:e6:80:2b:3b:cf:06:ca:ac:9f:57:08:9e:d8:53: 40:49:cc:b5:e1:30:2e:3a:cc:e2:e9:8a:0f:35:8c: 9d:e3:2c:19:d3:42:91:36:38:53:38:13:7e:3d:1e: 14:37:40:47:1b:a6:0b:a3:e2:a0:b9:5d:87:e6:b3: ae:80:36:d1:92:67:b0:ad:64:89:53:e6:df:e1:0d: 2e:0a:63:38:d9:1b:67:53:f9:46:5e:b1:e9:8b:a4: 50:6b:6f:38:5f:f8:78:d0:e8:6b:ce:8f:a2:d6:27: 62:fb:c1:2c:a9:3f:be:a6:91:10:dc:4d:6a:39:b3: 29:7a:57:46:2e:d5:5e:de:b8:15:d9:f8:49:1a:65: a7:88:c2:bd:70:a5:9f:6a:4c:8c:6e:62:c3:ce:28: 90:b9:ef:ec:b9:07:97:ee:23:d7:07:00:99:24:2e: 82:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:09:C6:95:40:34:4B:1E:E7:58:6C:E5:86:45:87:D2:58:7A:C3:5E X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS206668.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.225.0/24 Signature Algorithm: sha256WithRSAEncryption b6:e0:2e:97:ef:85:e4:94:f1:20:8c:f6:52:52:3d:8d:55:e4: 74:7f:84:21:35:d9:9a:0b:93:3f:19:88:ca:67:13:7e:17:2f: e0:7f:dd:78:19:0a:dd:7e:d1:dd:f0:c3:50:22:4c:0f:44:81: 31:2c:86:2a:23:54:20:9b:12:b5:86:8b:03:ed:64:6f:34:2e: 59:f8:25:63:18:18:a2:18:3b:a6:a0:28:cf:51:8e:b1:8f:47: 2f:2e:e8:b3:53:a3:9f:7f:1d:26:53:b4:6e:cc:19:8f:58:04: 00:1f:66:c8:c3:b0:29:6b:77:76:93:52:6f:57:ea:c7:4e:92: c6:c7:a7:02:51:03:8c:98:c0:27:7d:49:22:87:1c:34:fc:43: 67:f6:59:92:5e:74:c8:5d:72:4a:6e:c0:da:28:d0:ef:0e:a1: c9:80:d2:77:9c:f3:46:ca:b2:df:4b:c0:76:a8:94:2f:7c:24: 74:a2:1a:5d:f9:86:d2:55:cc:8b:91:16:c1:5b:48:e5:9f:e4: 75:a2:fb:fd:47:17:a8:0e:f2:17:af:27:ad:8b:ff:ae:6a:58: f0:de:f1:4c:e4:22:39:b4:4d:33:3d:43:f8:7c:39:73:b6:5b: eb:ad:b4:55:25:39:d8:70:27:fc:57:30:7e:bd:ad:d1:43:6d: 8f:6a:30:c6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUbJLHMXd97Ev+YEKmPXGHnfRWvvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNjAxMTAwODQwNTVaFw0yNzAxMDkwODQ1NTVaMDMxMTAvBgNV BAMTKDQzMDlDNjk1NDAzNDRCMUVFNzU4NkNFNTg2NDU4N0QyNTg3QUMzNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/xLBcKG6gH4GwKBwjlOB1369A sLqveKNKRYZj8APvwD3MGG6vmdOwdVYBfdNOq5/qvCRdwHhds2EpHuETC+skkhVt SvtJtqPN2Z8umpnwe8Q93nURBwoXvvDmgCs7zwbKrJ9XCJ7YU0BJzLXhMC46zOLp ig81jJ3jLBnTQpE2OFM4E349HhQ3QEcbpguj4qC5XYfms66ANtGSZ7CtZIlT5t/h DS4KYzjZG2dT+UZesemLpFBrbzhf+HjQ6GvOj6LWJ2L7wSypP76mkRDcTWo5syl6 V0Yu1V7euBXZ+EkaZaeIwr1wpZ9qTIxuYsPOKJC57+y5B5fuI9cHAJkkLoJ7AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUQwnGlUA0Sx7nWGzlhkWH0lh6w14wHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjA2NjY4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuefh MA0GCSqGSIb3DQEBCwUAA4IBAQC24C6X74XklPEgjPZSUj2NVeR0f4QhNdmaC5M/ GYjKZxN+Fy/gf914GQrdftHd8MNQIkwPRIExLIYqI1QgmxK1hosD7WRvNC5Z+CVj GBiiGDumoCjPUY6xj0cvLuizU6Offx0mU7RuzBmPWAQAH2bIw7Apa3d2k1JvV+rH TpLGx6cCUQOMmMAnfUkihxw0/ENn9lmSXnTIXXJKbsDaKNDvDqHJgNJ3nPNGyrLf S8B2qJQvfCR0ohpd+YbSVcyLkRbBW0jln+R1ovv9RxeoDvIXryeti/+ualjw3vFM 5CI5tE0zPUP4fDlztlvrrbRVJTnYcCf8VzB+va3RQ22PajDG -----END CERTIFICATE-----Generated at Sun Jan 25 18:51:32 2026 by rpki-client