This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214556.roa File: AS214556.roa (raw, json) Hash identifier: nipN2wcStg6OHCO52ApN3IDxuTEDQLrGGlXAaqQBIvs= Subject key identifier: 67:C1:2C:81:96:34:99:82:23:E9:EE:02:97:3B:99:A8:F4:5A:BD:EF Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 5BF9AE772707751A8514FF16BB59F094CA686F49 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214556.roa Signing time: Thu 11 Dec 2025 16:43:15 +0000 ROA not before: Thu 11 Dec 2025 16:38:15 +0000 ROA not after: Thu 10 Dec 2026 16:43:15 +0000 asID: 214556 IP address blocks: 2a13:9500:117::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f9:ae:77:27:07:75:1a:85:14:ff:16:bb:59:f0:94:ca:68:6f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 11 16:38:15 2025 GMT Not After : Dec 10 16:43:15 2026 GMT Subject: CN=67C12C819634998223E9EE02973B99A8F45ABDEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c9:72:5d:92:ce:ab:5d:0c:6b:fd:e1:99:a9: 65:cb:b8:df:92:78:6c:fd:bd:94:8f:4b:09:a9:83: 9b:50:2e:22:20:74:92:03:c3:5d:36:c6:d7:9b:d9: 12:f1:e4:cf:bb:d8:08:1b:bf:44:92:72:b2:1c:64: 21:cf:b1:63:f9:b6:3d:5f:03:61:31:b8:bd:93:c0: 25:05:47:c5:ab:db:4e:16:e8:e4:15:ce:29:11:67: 60:c6:47:2e:74:79:16:b4:07:d7:de:72:7b:19:1c: 9c:32:bf:28:59:25:38:56:27:20:f9:54:ea:32:f3: d3:48:e1:63:23:5f:0a:df:c5:32:c4:26:12:d7:7b: f3:f4:d6:2d:a3:76:23:4c:1c:3f:c9:a3:b5:55:9f: 7a:27:22:75:d8:4b:10:0e:96:8b:05:69:bf:b8:88: 8b:5f:e9:d9:b1:c7:9b:69:55:44:c1:88:ab:a9:a3: 27:51:4d:81:15:56:21:c8:63:19:58:36:e3:ef:82: 56:88:d9:90:c5:1e:3c:8c:a7:66:cc:8d:2b:56:b6: 47:50:f1:bf:8d:32:4a:78:25:f0:ec:92:35:39:16: 68:ae:80:51:82:81:47:28:63:dc:79:76:e7:d8:ff: 43:8b:bf:b6:27:72:ec:65:c9:04:eb:27:c0:32:2d: ab:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C1:2C:81:96:34:99:82:23:E9:EE:02:97:3B:99:A8:F4:5A:BD:EF X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214556.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9500:117::/48 Signature Algorithm: sha256WithRSAEncryption 54:a7:9c:4e:a4:1f:86:d1:7f:77:2f:32:2c:32:05:38:6f:b9: c5:cb:ac:17:d2:2b:18:83:11:a9:9f:6c:ff:45:64:37:cb:9a: a7:0e:02:ac:a8:c0:35:e5:c5:c6:d6:e9:7d:46:85:79:15:07: 1c:6d:80:9d:27:fd:71:22:54:c9:f7:1b:80:10:07:c4:e9:1e: d0:24:b4:b1:03:fe:c6:a5:7c:27:fb:24:9a:55:05:8a:ab:be: 88:44:58:db:a6:4d:3f:19:1d:50:cb:a1:83:94:24:e3:6a:3d: 54:4e:72:8b:56:9e:75:1e:39:cd:86:d0:d7:44:de:cb:82:88: af:58:6a:d2:76:82:7d:39:f1:ea:a6:22:37:13:c9:45:a2:ef: 3f:28:45:3a:3b:b8:a6:b3:22:f7:58:e9:b4:b6:2c:bb:55:dc: d0:99:ab:27:66:0e:4c:70:08:e2:95:8f:7e:8c:26:54:bf:06: 61:7b:c6:33:82:07:6d:d0:ac:e5:2d:06:be:7f:14:db:e5:c9: 87:9d:aa:f7:7b:84:cd:d3:b2:f9:c9:ff:4c:81:cc:50:b6:29: 7b:c2:44:ff:42:5a:74:b7:df:69:64:06:19:ad:78:a6:6b:b9: fb:61:58:1f:28:02:5e:20:e1:16:1b:30:e4:13:35:75:f3:0d: a1:ed:e4:eb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUW/mudycHdRqFFP8Wu1nwlMpob0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMTExNjM4MTVaFw0yNjEyMTAxNjQzMTVaMDMxMTAvBgNV BAMTKDY3QzEyQzgxOTYzNDk5ODIyM0U5RUUwMjk3M0I5OUE4RjQ1QUJERUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZyXJdks6rXQxr/eGZqWXLuN+S eGz9vZSPSwmpg5tQLiIgdJIDw102xteb2RLx5M+72Agbv0SScrIcZCHPsWP5tj1f A2ExuL2TwCUFR8Wr204W6OQVzikRZ2DGRy50eRa0B9fecnsZHJwyvyhZJThWJyD5 VOoy89NI4WMjXwrfxTLEJhLXe/P01i2jdiNMHD/Jo7VVn3onInXYSxAOlosFab+4 iItf6dmxx5tpVUTBiKupoydRTYEVViHIYxlYNuPvglaI2ZDFHjyMp2bMjStWtkdQ 8b+NMkp4JfDskjU5FmiugFGCgUcoY9x5dufY/0OLv7YncuxlyQTrJ8AyLatJAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUZ8EsgZY0mYIj6e4ClzuZqPRave8wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE0NTU2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV AAEXMA0GCSqGSIb3DQEBCwUAA4IBAQBUp5xOpB+G0X93LzIsMgU4b7nFy6wX0isY gxGpn2z/RWQ3y5qnDgKsqMA15cXG1ul9RoV5FQccbYCdJ/1xIlTJ9xuAEAfE6R7Q JLSxA/7GpXwn+ySaVQWKq76IRFjbpk0/GR1Qy6GDlCTjaj1UTnKLVp51HjnNhtDX RN7LgoivWGrSdoJ9OfHqpiI3E8lFou8/KEU6O7imsyL3WOm0tiy7VdzQmasnZg5M cAjilY9+jCZUvwZhe8Yzggdt0KzlLQa+fxTb5cmHnar3e4TN07L5yf9MgcxQtil7 wkT/Qlp0t99pZAYZrXima7n7YVgfKAJeIOEWGzDkEzV18w2h7eTr -----END CERTIFICATE-----Generated at Fri Dec 19 15:41:56 2025 by rpki-client