This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213608.roa File: AS213608.roa (raw, json) Hash identifier: GWraXJoL3UbCqiO1mc/V2Wav59a3cYO+cFBV1olrXms= Subject key identifier: 85:F7:5A:51:96:31:E1:D1:43:D0:18:36:FB:05:E1:A4:4C:AF:23:3F Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 5E44077265E2EB3446480CD347272A98176DAD6C Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213608.roa Signing time: Fri 12 Dec 2025 13:08:12 +0000 ROA not before: Fri 12 Dec 2025 13:03:12 +0000 ROA not after: Fri 11 Dec 2026 13:08:12 +0000 asID: 213608 IP address blocks: 2a0f:85c1:b3d::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:44:07:72:65:e2:eb:34:46:48:0c:d3:47:27:2a:98:17:6d:ad:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Dec 12 13:03:12 2025 GMT Not After : Dec 11 13:08:12 2026 GMT Subject: CN=85F75A519631E1D143D01836FB05E1A44CAF233F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:89:b4:8e:8b:69:eb:64:d8:9b:da:2f:5b:88: 25:25:99:2e:10:19:68:bd:31:47:8d:3a:55:fa:db: 7d:bc:09:26:c8:f7:6f:1c:dc:fc:aa:0d:ba:39:29: b9:06:e7:39:d8:4a:18:3a:ea:64:26:dc:4a:aa:04: d4:92:b0:a6:04:bd:ea:32:b9:b5:e8:9d:9e:fe:9e: 47:b1:37:0b:8c:8a:74:cb:c7:52:90:2a:09:1d:c3: d1:ea:a1:b4:6f:a3:d3:31:f0:8a:69:0f:97:02:a2: 3e:1b:1b:08:92:50:1c:6a:f5:76:35:5a:44:f8:f4: 40:c9:75:d0:5d:05:22:66:2f:5c:47:43:85:e4:c7: 2e:43:62:89:ba:c9:89:31:a6:d6:9f:64:fd:5e:39: db:84:05:94:6e:92:1e:bc:fa:b5:81:b4:ec:2b:0b: a7:68:a2:06:e7:3c:d1:87:79:08:74:ba:1a:2d:ec: f8:14:c4:c2:76:9c:61:5a:db:79:f4:2a:ca:7d:7a: a9:c6:ef:f7:15:0a:c8:ab:4e:18:5f:15:59:80:b1: a8:e4:d2:ef:57:8c:e9:cd:bf:06:c5:a8:67:8e:93: 8f:5d:57:e5:3c:23:1f:de:e6:81:53:2f:99:de:1e: bb:cf:f0:c8:f4:77:91:b1:72:89:e6:a2:41:dc:aa: d1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F7:5A:51:96:31:E1:D1:43:D0:18:36:FB:05:E1:A4:4C:AF:23:3F X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213608.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:b3d::/48 Signature Algorithm: sha256WithRSAEncryption 47:c2:ce:d2:eb:7b:60:69:5c:dd:ac:f5:0b:4e:74:4f:6f:0e: ce:49:f0:cd:20:e3:4d:f2:71:9b:db:f8:b9:a9:43:01:64:b5: 07:e7:ba:ec:5a:10:aa:c7:4c:cb:68:9b:7b:73:fb:ba:0e:0e: 86:8e:24:ef:99:49:af:2d:52:95:a8:2f:4a:c9:bf:15:36:4f: db:de:d7:9b:8c:c0:19:00:c6:af:5e:2e:88:aa:e1:c2:3b:e6: 81:74:86:61:3f:fc:32:9f:d3:d0:21:5b:21:e1:43:98:ab:8d: 89:3a:2c:aa:a2:f9:12:72:90:13:6e:41:11:8a:3f:f1:03:1f: e0:53:27:79:fa:5e:7b:28:e2:dc:11:57:e3:b1:cb:b2:98:e3: e6:60:b6:f0:c8:3f:8e:0f:d4:80:8b:8c:bb:c9:93:ad:47:81: e5:d9:b3:1f:e9:b1:db:91:bb:8c:ab:9f:35:bb:fd:a2:78:39: 5a:9d:f9:89:b2:51:44:bd:c3:8d:7d:b4:63:a6:7b:0f:f9:26: d4:09:1b:b5:ce:1f:c4:15:4a:88:f3:d6:7c:b0:b8:b9:19:bf: 38:83:74:6d:f5:01:8b:88:c9:90:05:be:32:07:48:d2:3c:b3: 93:3e:68:03:98:fe:65:03:5d:ab:f7:c2:7e:a4:ea:0b:f0:83: 2d:13:10:06 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUXkQHcmXi6zRGSAzTRycqmBdtrWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTEyMTIxMzAzMTJaFw0yNjEyMTExMzA4MTJaMDMxMTAvBgNV BAMTKDg1Rjc1QTUxOTYzMUUxRDE0M0QwMTgzNkZCMDVFMUE0NENBRjIzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiibSOi2nrZNib2i9biCUlmS4Q GWi9MUeNOlX62328CSbI928c3PyqDbo5KbkG5znYShg66mQm3EqqBNSSsKYEveoy ubXonZ7+nkexNwuMinTLx1KQKgkdw9HqobRvo9Mx8IppD5cCoj4bGwiSUBxq9XY1 WkT49EDJddBdBSJmL1xHQ4Xkxy5DYom6yYkxptafZP1eOduEBZRukh68+rWBtOwr C6doogbnPNGHeQh0uhot7PgUxMJ2nGFa23n0Ksp9eqnG7/cVCsirThhfFVmAsajk 0u9XjOnNvwbFqGeOk49dV+U8Ix/e5oFTL5neHrvP8Mj0d5GxconmokHcqtGhAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUhfdaUZYx4dFD0Bg2+wXhpEyvIz8wHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEzNjA4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQs9MA0GCSqGSIb3DQEBCwUAA4IBAQBHws7S63tgaVzdrPULTnRPbw7OSfDNIONN 8nGb2/i5qUMBZLUH57rsWhCqx0zLaJt7c/u6Dg6GjiTvmUmvLVKVqC9Kyb8VNk/b 3tebjMAZAMavXi6IquHCO+aBdIZhP/wyn9PQIVsh4UOYq42JOiyqovkScpATbkER ij/xAx/gUyd5+l57KOLcEVfjscuymOPmYLbwyD+OD9SAi4y7yZOtR4Hl2bMf6bHb kbuMq581u/2ieDlanfmJslFEvcONfbRjpnsP+SbUCRu1zh/EFUqI89Z8sLi5Gb84 g3Rt9QGLiMmQBb4yB0jSPLOTPmgDmP5lA12r98J+pOoL8IMtExAG -----END CERTIFICATE-----Generated at Sat Dec 20 17:00:53 2025 by rpki-client