This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS207019.roa File: AS207019.roa (raw, json) Hash identifier: Zjk+RFpDfwKBTVqbLXQ2Njj0RlmtAh76ybmDbHE+YYg= Subject key identifier: DC:25:E7:3C:BC:84:79:1B:FF:96:D1:36:48:20:3B:DD:F9:B8:38:44 Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 60730ABE242563FCCB4B79DEA1740D7EABBB9FCE Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS207019.roa Signing time: Thu 27 Nov 2025 05:01:26 +0000 ROA not before: Thu 27 Nov 2025 04:56:26 +0000 ROA not after: Thu 26 Nov 2026 05:01:26 +0000 asID: 207019 IP address blocks: 143.20.139.0/24 maxlen: 24 143.20.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:73:0a:be:24:25:63:fc:cb:4b:79:de:a1:74:0d:7e:ab:bb:9f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Nov 27 04:56:26 2025 GMT Not After : Nov 26 05:01:26 2026 GMT Subject: CN=DC25E73CBC84791BFF96D13648203BDDF9B83844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:08:2b:18:66:a9:50:23:68:85:22:fb:fa:a5: 0b:c2:4f:23:1f:82:cc:30:0f:9e:88:97:d3:90:63: 76:d6:79:b2:4c:fe:28:61:57:aa:02:e7:55:d2:46: 28:46:83:d9:92:76:18:34:0b:2f:a2:48:cc:df:71: 80:55:c3:aa:29:58:bb:94:6f:48:fc:4d:4f:ec:31: e3:ea:87:8b:ed:2d:68:e4:4e:89:19:c7:2a:3a:2c: 0c:5f:04:95:f5:8d:50:e5:e7:4a:37:d1:da:21:a4: d8:0e:23:23:d5:20:f2:41:49:5f:4f:7f:ec:9e:88: 02:fa:6e:79:5a:13:f5:d1:6f:4f:0f:50:3d:63:58: da:b4:d6:95:98:25:0c:7a:01:7f:96:a8:a2:2c:14: 53:e6:0e:50:c5:f0:e3:7d:16:36:1a:55:b7:53:80: 03:ba:c2:c6:35:83:33:7b:ba:c0:92:62:76:5e:d9: 0d:c8:91:37:e4:da:b7:44:69:58:b8:03:09:5b:de: 71:44:cb:b4:8b:cf:93:ce:50:05:ac:0a:dd:bc:e9: bd:2d:39:0d:4a:e3:d0:ed:7a:06:69:e6:bf:ec:ff: df:87:b7:b5:d2:d3:34:6f:44:df:b6:64:c1:1a:0b: f9:9a:de:b0:20:f8:dc:37:41:a1:f8:3a:f4:f4:27: b4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:25:E7:3C:BC:84:79:1B:FF:96:D1:36:48:20:3B:DD:F9:B8:38:44 X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS207019.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.139.0/24 143.20.207.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:ea:69:df:9e:2c:e0:d5:2b:e8:57:f1:74:cf:4b:c8:f1:57: 38:7c:6c:dd:52:13:4b:47:4c:f5:f1:2c:aa:9e:cf:19:c5:9b: 5f:37:c4:fa:a7:15:8f:61:c6:e4:00:74:31:47:20:22:0b:13: 1b:3d:96:0c:7a:56:d0:6b:13:0f:58:36:85:55:db:ce:bd:cb: d5:8f:82:88:48:14:a9:f7:c1:50:3b:99:57:7c:b8:0f:0b:69: b0:cb:2d:76:03:27:8b:a1:90:23:73:41:10:b6:26:33:29:19: 75:f4:f5:ba:9f:d1:b9:e8:e2:15:70:26:df:42:75:e7:25:4a: ef:d6:2c:35:ff:b9:47:a1:e5:e1:33:89:d3:e5:0e:c4:2d:92: 3b:0a:bc:b4:5e:ac:9e:88:6b:05:2d:e1:5a:1e:41:91:9b:a6: 38:bb:b6:7c:41:33:b9:31:d1:24:d2:f2:9d:2b:96:92:49:c6: 8e:15:d5:a4:b3:61:96:24:cc:bf:8a:a3:72:12:fd:7a:a1:56: b6:e8:4f:c3:b6:ae:7c:c5:57:1f:c3:a7:31:ca:cd:64:f4:5e: 87:f3:08:4d:e6:65:4b:b3:08:74:f4:8b:af:b0:85:40:67:e2: fb:79:5d:b2:87:4e:bf:68:39:39:fa:ec:75:47:1f:cd:37:f6: f6:04:f0:68 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUYHMKviQlY/zLS3neoXQNfqu7n84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTExMjcwNDU2MjZaFw0yNjExMjYwNTAxMjZaMDMxMTAvBgNV BAMTKERDMjVFNzNDQkM4NDc5MUJGRjk2RDEzNjQ4MjAzQkRERjlCODM4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjCCsYZqlQI2iFIvv6pQvCTyMf gswwD56Il9OQY3bWebJM/ihhV6oC51XSRihGg9mSdhg0Cy+iSMzfcYBVw6opWLuU b0j8TU/sMePqh4vtLWjkTokZxyo6LAxfBJX1jVDl50o30dohpNgOIyPVIPJBSV9P f+yeiAL6bnlaE/XRb08PUD1jWNq01pWYJQx6AX+WqKIsFFPmDlDF8ON9FjYaVbdT gAO6wsY1gzN7usCSYnZe2Q3IkTfk2rdEaVi4Awlb3nFEy7SLz5POUAWsCt286b0t OQ1K49DtegZp5r/s/9+Ht7XS0zRvRN+2ZMEaC/ma3rAg+Nw3QaH4OvT0J7RDAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQU3CXnPLyEeRv/ltE2SCA73fm4OEQwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjA3MDE5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjxSL AwQAjxTPMA0GCSqGSIb3DQEBCwUAA4IBAQCL6mnfnizg1SvoV/F0z0vI8Vc4fGzd UhNLR0z18Syqns8ZxZtfN8T6pxWPYcbkAHQxRyAiCxMbPZYMelbQaxMPWDaFVdvO vcvVj4KISBSp98FQO5lXfLgPC2mwyy12AyeLoZAjc0EQtiYzKRl19PW6n9G56OIV cCbfQnXnJUrv1iw1/7lHoeXhM4nT5Q7ELZI7Cry0XqyeiGsFLeFaHkGRm6Y4u7Z8 QTO5MdEk0vKdK5aSScaOFdWks2GWJMy/iqNyEv16oVa26E/Dtq58xVcfw6cxys1k 9F6H8whN5mVLswh09IuvsIVAZ+L7eV2yh06/aDk5+ux1Rx/NN/b2BPBo -----END CERTIFICATE-----Generated at Sat Dec 6 20:21:15 2025 by rpki-client