This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215567.roa File: AS215567.roa (raw, json) Hash identifier: C5Ld1iIFJUgpQbOOec1dm9pFhQmbBh44yjX0SISilN4= Subject key identifier: 96:15:1A:E0:4D:43:0B:D3:E8:7F:66:6D:26:07:32:48:2B:13:6A:83 Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 38E9CDB8D01B381CF099B29F93B253FB0688ED3A Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215567.roa Signing time: Wed 17 Dec 2025 17:55:32 +0000 ROA not before: Wed 17 Dec 2025 17:50:32 +0000 ROA not after: Wed 16 Dec 2026 17:55:32 +0000 asID: 215567 IP address blocks: 45.152.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e9:cd:b8:d0:1b:38:1c:f0:99:b2:9f:93:b2:53:fb:06:88:ed:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Dec 17 17:50:32 2025 GMT Not After : Dec 16 17:55:32 2026 GMT Subject: CN=96151AE04D430BD3E87F666D260732482B136A83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:89:fa:49:02:5c:5c:cf:67:de:fe:85:89:91: 7a:46:c9:57:10:4f:2f:6f:19:b1:50:04:59:69:e6: d9:c1:92:7b:5b:b1:ef:3e:68:9c:a6:9c:25:cf:17: ec:b5:0f:6f:6e:5f:2a:9e:ca:d9:60:50:9c:72:91: 8a:d2:7e:82:19:3c:a7:1a:ed:ab:29:8b:ce:f5:a5: af:5d:c8:6d:db:50:d3:ad:26:a2:7c:f9:16:5d:d7: b3:55:71:6f:c9:31:50:7c:38:f5:0a:6f:90:80:51: 34:26:64:a9:ab:44:13:90:22:62:95:ac:85:61:e1: 03:e9:ac:e2:c6:25:19:0c:3a:1f:09:7a:41:f6:06: 45:11:23:3d:9b:b4:d7:ac:ad:74:62:dd:fc:96:ea: 73:b4:46:ee:8f:0c:f3:c9:02:5e:26:12:47:3c:33: 08:ff:ce:3c:0a:9c:f9:ae:43:44:74:b2:39:2d:4a: 04:6e:d7:92:c2:f9:8f:12:54:ca:ab:b1:c7:f9:26: 5b:3a:f4:9a:71:e5:0c:ff:03:1d:d2:71:fc:0a:00: 60:02:4f:5f:ed:25:8c:59:5e:e2:be:ae:07:18:f1: 09:70:6d:45:33:e7:b9:46:b3:dc:f4:8b:49:17:e8: 60:a2:28:ff:70:f0:b0:84:c6:d9:1a:86:ec:0c:b1: 0f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:15:1A:E0:4D:43:0B:D3:E8:7F:66:6D:26:07:32:48:2B:13:6A:83 X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215567.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.243.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:dc:b2:51:0f:03:96:3f:cc:29:5b:d1:21:49:f1:0f:68:97: fd:20:bb:05:fc:aa:af:20:7c:f5:64:88:b3:53:32:9f:3f:84: 44:63:e2:bf:15:b6:aa:13:06:57:41:63:b7:b5:58:1b:81:c8: 73:e0:fb:50:27:7e:63:05:c3:6c:89:57:06:dd:46:aa:19:6b: 75:1a:27:67:a9:6e:fa:a0:ad:13:72:6b:82:b2:4c:1f:0b:b5: 9f:41:76:7b:23:b6:cc:1c:5d:95:67:de:7c:23:f4:85:10:3d: 17:bd:e7:4d:f3:b9:34:77:72:0b:3d:36:77:8c:7c:b9:4b:19: 48:08:48:bf:ba:85:d2:a4:39:f9:ed:e1:a4:a3:55:f1:ed:28: 76:17:12:db:35:28:d0:3b:3b:68:6e:83:a0:19:4e:b2:8e:a6: 4f:27:d1:13:59:c8:b5:39:7a:7d:d9:ef:4c:62:31:9b:ca:3c: ac:be:5d:21:09:c4:0f:bd:fc:85:f6:fd:df:24:22:a7:57:a9: 9d:0c:24:cd:42:ba:61:55:27:7c:8f:0d:be:1e:9b:c9:c8:66: b3:53:af:3e:21:98:b8:8a:91:3c:93:15:f9:e4:ae:16:f6:33: 35:54:5b:fd:36:13:6a:99:4c:fb:f5:53:8b:2f:59:6e:1e:ec: 7a:05:fd:8b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUOOnNuNAbOBzwmbKfk7JT+waI7TowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNTEyMTcxNzUwMzJaFw0yNjEyMTYxNzU1MzJaMDMxMTAvBgNV BAMTKDk2MTUxQUUwNEQ0MzBCRDNFODdGNjY2RDI2MDczMjQ4MkIxMzZBODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOifpJAlxcz2fe/oWJkXpGyVcQ Ty9vGbFQBFlp5tnBkntbse8+aJymnCXPF+y1D29uXyqeytlgUJxykYrSfoIZPKca 7aspi871pa9dyG3bUNOtJqJ8+RZd17NVcW/JMVB8OPUKb5CAUTQmZKmrRBOQImKV rIVh4QPprOLGJRkMOh8JekH2BkURIz2btNesrXRi3fyW6nO0Ru6PDPPJAl4mEkc8 Mwj/zjwKnPmuQ0R0sjktSgRu15LC+Y8SVMqrscf5Jls69Jpx5Qz/Ax3ScfwKAGAC T1/tJYxZXuK+rgcY8QlwbUUz57lGs9z0i0kX6GCiKP9w8LCExtkahuwMsQ+NAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUlhUa4E1DC9Pof2ZtJgcySCsTaoMwHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjE1NTY3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZjz MA0GCSqGSIb3DQEBCwUAA4IBAQAr3LJRDwOWP8wpW9EhSfEPaJf9ILsF/KqvIHz1 ZIizUzKfP4REY+K/FbaqEwZXQWO3tVgbgchz4PtQJ35jBcNsiVcG3UaqGWt1Gidn qW76oK0TcmuCskwfC7WfQXZ7I7bMHF2VZ958I/SFED0XvedN87k0d3ILPTZ3jHy5 SxlICEi/uoXSpDn57eGko1Xx7Sh2FxLbNSjQOztoboOgGU6yjqZPJ9ETWci1OXp9 2e9MYjGbyjysvl0hCcQPvfyF9v3fJCKnV6mdDCTNQrphVSd8jw2+HpvJyGazU68+ IZi4ipE8kxX55K4W9jM1VFv9NhNqmUz79VOLL1luHux6Bf2L -----END CERTIFICATE-----Generated at Sun Dec 21 18:39:10 2025 by rpki-client