This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213581.roa File: AS213581.roa (raw, json) Hash identifier: 6fEZhDHy6l0oum84tjQGVOOSwP0QM4FGZmRsOvEx8hU= Subject key identifier: 0E:3C:0F:03:76:F3:43:29:A8:D5:77:09:82:BE:4A:92:D1:B3:C9:F0 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 04EA77C804F2644854BA61366988F18BEB3B079A Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213581.roa Signing time: Sat 20 Dec 2025 23:08:15 +0000 ROA not before: Sat 20 Dec 2025 23:03:15 +0000 ROA not after: Sat 19 Dec 2026 23:08:15 +0000 asID: 213581 IP address blocks: 2a0f:85c1:b38::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ea:77:c8:04:f2:64:48:54:ba:61:36:69:88:f1:8b:eb:3b:07:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Dec 20 23:03:15 2025 GMT Not After : Dec 19 23:08:15 2026 GMT Subject: CN=0E3C0F0376F34329A8D5770982BE4A92D1B3C9F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4f:0c:37:55:d6:f1:a4:1e:a9:2d:a9:40:9f: e5:c7:09:24:ea:2a:76:9a:77:b0:15:d7:26:87:e5: c5:82:7b:70:9b:5f:d8:d1:79:6e:4c:19:80:60:92: 2d:1d:64:32:2c:c8:06:59:dd:9c:80:2e:91:24:41: 63:c3:5c:f4:1c:22:4c:f7:1d:bc:20:bb:a7:f3:c9: 2d:51:1b:52:1a:71:af:55:27:47:35:91:cb:c7:02: 0f:20:fd:fa:7b:95:77:82:93:66:2d:3e:b5:2d:96: 1a:60:1e:9b:08:0e:03:e6:0b:78:9c:56:f4:d1:92: ad:fe:a7:b9:a5:8b:d5:0a:c8:24:c1:c2:b4:15:16: 19:96:4e:c2:8a:a6:f4:19:b6:e7:60:dc:e4:38:c8: bc:9f:50:04:e8:4d:5a:66:a1:46:25:1d:e4:7d:e6: 12:6d:47:d3:b7:ff:ff:0e:3e:0e:ab:4f:11:d0:b6: 84:2a:1a:42:4b:49:39:99:54:b0:8a:55:a0:98:fa: 18:ac:33:97:2c:9b:4e:87:d5:04:30:f9:cb:a9:0a: f8:fe:f1:4e:94:a1:f9:4f:8b:14:f8:5c:bf:c4:8e: 44:36:ed:0f:46:b6:98:0c:95:fe:1c:58:c2:15:50: 82:df:48:65:92:5c:b3:4f:9c:3a:7a:b2:d1:e5:04: b5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3C:0F:03:76:F3:43:29:A8:D5:77:09:82:BE:4A:92:D1:B3:C9:F0 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213581.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:b38::/48 Signature Algorithm: sha256WithRSAEncryption 67:7d:ac:0a:ab:64:09:23:05:25:b4:c8:60:e2:b2:10:6c:0c: ef:05:2e:f2:37:fe:a5:33:7c:19:6b:b6:7c:28:22:59:e9:05: 31:ca:84:bd:c4:d5:37:b9:82:e4:be:b5:3e:d3:05:19:3c:ae: 9d:a1:b6:ef:bb:e0:d3:d9:22:e5:95:7d:cf:21:9b:04:61:97: 09:14:16:71:d4:cd:17:d8:26:f7:66:4f:73:bf:65:00:13:1f: 5b:62:80:1a:5f:d2:0c:8f:2b:31:91:75:b4:f8:74:26:f9:64: d5:6a:c3:d8:4f:de:52:eb:ef:12:ea:d0:99:5d:b1:36:80:72: 06:ad:bf:95:44:59:7e:70:36:3a:51:62:4f:1f:a8:30:df:fa: 39:f1:52:bb:1d:a2:0a:9d:c6:d0:e7:ee:42:e2:67:73:b5:39: 8c:07:48:28:5e:2c:38:d0:0b:f4:4e:d9:8f:89:09:d7:1a:47: 10:e1:4b:5f:84:7d:01:b6:a9:83:7c:48:6a:2b:8c:f4:63:43: 1e:ed:e3:ca:db:36:63:fc:fe:7e:8f:46:f6:c7:b6:46:5f:f7: 74:f0:ec:46:03:24:64:8f:2e:fd:86:c3:e3:3d:26:d8:b1:25: 13:77:50:b7:ec:72:8d:d8:c4:11:76:4c:ee:9c:57:4a:4d:1d: bf:0a:8c:05 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUBOp3yATyZEhUumE2aYjxi+s7B5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTEyMjAyMzAzMTVaFw0yNjEyMTkyMzA4MTVaMDMxMTAvBgNV BAMTKDBFM0MwRjAzNzZGMzQzMjlBOEQ1NzcwOTgyQkU0QTkyRDFCM0M5RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVTww3VdbxpB6pLalAn+XHCSTq Knaad7AV1yaH5cWCe3CbX9jReW5MGYBgki0dZDIsyAZZ3ZyALpEkQWPDXPQcIkz3 Hbwgu6fzyS1RG1Iaca9VJ0c1kcvHAg8g/fp7lXeCk2YtPrUtlhpgHpsIDgPmC3ic VvTRkq3+p7mli9UKyCTBwrQVFhmWTsKKpvQZtudg3OQ4yLyfUAToTVpmoUYlHeR9 5hJtR9O3//8OPg6rTxHQtoQqGkJLSTmZVLCKVaCY+hisM5csm06H1QQw+cupCvj+ 8U6UoflPixT4XL/EjkQ27Q9GtpgMlf4cWMIVUILfSGWSXLNPnDp6stHlBLX5AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUDjwPA3bzQymo1XcJgr5KktGzyfAwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEzNTgxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQs4MA0GCSqGSIb3DQEBCwUAA4IBAQBnfawKq2QJIwUltMhg4rIQbAzvBS7yN/6l M3wZa7Z8KCJZ6QUxyoS9xNU3uYLkvrU+0wUZPK6dobbvu+DT2SLllX3PIZsEYZcJ FBZx1M0X2Cb3Zk9zv2UAEx9bYoAaX9IMjysxkXW0+HQm+WTVasPYT95S6+8S6tCZ XbE2gHIGrb+VRFl+cDY6UWJPH6gw3/o58VK7HaIKncbQ5+5C4mdztTmMB0goXiw4 0Av0TtmPiQnXGkcQ4UtfhH0BtqmDfEhqK4z0Y0Me7ePK2zZj/P5+j0b2x7ZGX/d0 8OxGAyRkjy79hsPjPSbYsSUTd1C37HKN2MQRdkzunFdKTR2/CowF -----END CERTIFICATE-----Generated at Thu Dec 25 05:11:55 2025 by rpki-client