This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213582.roa File: AS213582.roa (raw, json) Hash identifier: Ht+adMug/zDo7ViUginaun5RSOqsCNVUMEjvOvVyeQ0= Subject key identifier: D5:87:C6:1B:04:41:E1:DF:A1:F6:EE:98:B1:3A:5B:15:A0:BA:EF:63 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 2E3042B07B34F1B42D4D3B607F23B524F4AF9CA8 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213582.roa Signing time: Sat 20 Dec 2025 23:08:15 +0000 ROA not before: Sat 20 Dec 2025 23:03:15 +0000 ROA not after: Sat 19 Dec 2026 23:08:15 +0000 asID: 213582 IP address blocks: 2a0f:85c1:b3a::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:30:42:b0:7b:34:f1:b4:2d:4d:3b:60:7f:23:b5:24:f4:af:9c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Dec 20 23:03:15 2025 GMT Not After : Dec 19 23:08:15 2026 GMT Subject: CN=D587C61B0441E1DFA1F6EE98B13A5B15A0BAEF63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4f:11:0e:e3:72:05:c0:e1:ad:f4:06:af:86: ac:68:e3:c2:97:94:7d:d6:e4:d7:77:51:0f:e0:36: 56:5a:61:f8:3d:3e:7c:75:60:57:82:b3:79:a7:69: 3c:c7:84:ea:3c:5d:fd:2b:b5:75:55:da:3f:1c:af: e9:b6:1c:4f:05:4b:c0:ce:c1:32:9f:a5:37:ed:7d: c4:2a:c9:9d:6a:2d:b9:e1:6b:7a:ad:e5:7f:13:47: 89:9d:19:7c:90:9d:7c:2d:85:e8:12:b5:b3:13:12: 8e:b8:2e:12:a5:75:e5:02:27:aa:7d:54:e4:06:b0: 56:18:ae:b6:84:2f:21:7d:cb:42:df:03:cb:97:22: fd:45:73:b9:74:1e:c4:24:c9:91:35:75:11:fc:5b: 81:6a:0c:85:1c:4b:94:9d:59:05:61:8f:c2:41:0e: 7e:0d:1c:9d:ed:ff:72:7d:35:fa:22:24:56:bc:6c: 61:98:df:24:33:f8:26:60:ad:56:5c:d5:29:97:ff: 45:02:76:12:3f:39:d6:e1:a6:ce:fa:cc:bc:b3:5a: 96:9b:01:54:72:75:35:15:b4:88:99:a6:0b:61:0c: 55:db:a8:a7:14:1e:cf:71:41:84:71:4a:da:03:3e: f5:69:43:b4:c6:5c:0a:26:40:7b:7b:49:ef:df:ce: 71:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:87:C6:1B:04:41:E1:DF:A1:F6:EE:98:B1:3A:5B:15:A0:BA:EF:63 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213582.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:b3a::/48 Signature Algorithm: sha256WithRSAEncryption dd:ba:f5:f9:1e:5f:63:58:24:34:22:42:52:90:dc:11:e2:94: 0d:18:71:d1:34:f8:b6:a5:f8:39:98:a5:fe:97:93:71:88:7d: 5a:b6:78:2a:71:24:ba:d5:48:5f:04:38:2f:10:3c:e7:4e:24: bc:86:76:db:63:78:73:57:7c:2f:75:07:d7:61:58:91:40:d7: 36:8c:4b:5f:46:56:61:4f:04:b5:f1:8e:7a:26:14:22:08:ee: 03:ab:d8:f2:57:b8:c5:bd:49:e7:4a:f6:d7:35:2d:98:ae:70: 27:90:18:bf:58:e0:c3:d1:da:76:60:5e:10:a0:3d:17:1a:c7: d9:a6:9f:4c:03:20:d1:41:ce:bf:08:f5:79:b6:23:23:59:a9: c1:8a:8a:f4:85:8a:12:0f:43:94:5b:f4:f3:4d:bc:a2:3a:4b: 88:3e:44:a0:30:39:00:19:fc:27:8a:51:3c:60:a5:2f:68:9d: 76:21:8d:c9:73:40:54:4d:4c:2b:ee:c7:1e:00:cf:59:6d:ec: e2:7c:8c:0c:46:ad:e5:e4:0f:86:49:56:ed:0e:32:c5:79:52: b2:e2:e7:7a:7a:0b:26:49:f8:7b:57:5a:c2:e9:e1:8e:bc:10: cb:45:f2:95:c9:f5:08:dc:52:0d:9f:57:2e:f5:3c:3c:82:11: 56:cf:26:d1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIULjBCsHs08bQtTTtgfyO1JPSvnKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTEyMjAyMzAzMTVaFw0yNjEyMTkyMzA4MTVaMDMxMTAvBgNV BAMTKEQ1ODdDNjFCMDQ0MUUxREZBMUY2RUU5OEIxM0E1QjE1QTBCQUVGNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRTxEO43IFwOGt9Aavhqxo48KX lH3W5Nd3UQ/gNlZaYfg9Pnx1YFeCs3mnaTzHhOo8Xf0rtXVV2j8cr+m2HE8FS8DO wTKfpTftfcQqyZ1qLbnha3qt5X8TR4mdGXyQnXwthegStbMTEo64LhKldeUCJ6p9 VOQGsFYYrraELyF9y0LfA8uXIv1Fc7l0HsQkyZE1dRH8W4FqDIUcS5SdWQVhj8JB Dn4NHJ3t/3J9NfoiJFa8bGGY3yQz+CZgrVZc1SmX/0UCdhI/Odbhps76zLyzWpab AVRydTUVtIiZpgthDFXbqKcUHs9xQYRxStoDPvVpQ7TGXAomQHt7Se/fznEnAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU1YfGGwRB4d+h9u6YsTpbFaC672MwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEzNTgyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQs6MA0GCSqGSIb3DQEBCwUAA4IBAQDduvX5Hl9jWCQ0IkJSkNwR4pQNGHHRNPi2 pfg5mKX+l5NxiH1atngqcSS61UhfBDgvEDznTiS8hnbbY3hzV3wvdQfXYViRQNc2 jEtfRlZhTwS18Y56JhQiCO4Dq9jyV7jFvUnnSvbXNS2YrnAnkBi/WODD0dp2YF4Q oD0XGsfZpp9MAyDRQc6/CPV5tiMjWanBior0hYoSD0OUW/TzTbyiOkuIPkSgMDkA GfwnilE8YKUvaJ12IY3Jc0BUTUwr7sceAM9ZbezifIwMRq3l5A+GSVbtDjLFeVKy 4ud6egsmSfh7V1rC6eGOvBDLRfKVyfUI3FINn1cu9Tw8ghFWzybR -----END CERTIFICATE-----Generated at Thu Dec 25 05:11:55 2025 by rpki-client