This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213626.roa File: AS213626.roa (raw, json) Hash identifier: 5wlE4+t9nrIBSuHfE/Y8JfnHioJDNp1GckZmIgZ65bo= Subject key identifier: 39:A3:80:57:61:BC:F1:70:62:52:BC:95:AB:AD:B6:16:B6:44:A2:D9 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 1B98B506D2594B372437179A9F1280FAFECC66FF Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213626.roa Signing time: Tue 09 Dec 2025 22:08:11 +0000 ROA not before: Tue 09 Dec 2025 22:03:11 +0000 ROA not after: Tue 08 Dec 2026 22:08:11 +0000 asID: 213626 IP address blocks: 2a0f:85c1:b39::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:98:b5:06:d2:59:4b:37:24:37:17:9a:9f:12:80:fa:fe:cc:66:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Dec 9 22:03:11 2025 GMT Not After : Dec 8 22:08:11 2026 GMT Subject: CN=39A3805761BCF1706252BC95ABADB616B644A2D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3b:6b:d8:fc:79:e8:b9:39:cd:98:47:0f:41: 37:f6:d0:1d:a2:59:df:3d:f8:ad:05:40:3a:6d:ce: 65:58:45:52:8d:d1:33:08:d8:83:cc:2a:34:71:54: 9c:0c:c0:00:f4:77:9e:7a:4d:3c:b7:1e:be:7b:51: b2:00:c6:46:15:53:fa:55:17:10:f4:0f:ac:a1:11: f9:b2:4b:e6:ca:e8:b8:5f:12:5f:6c:36:00:75:dd: 12:6e:de:e2:fa:32:25:81:6e:c8:64:aa:38:34:49: f2:6e:c0:7f:5e:a2:eb:46:cb:d0:bc:88:80:f3:65: 98:ab:fc:e7:f6:3a:4c:b3:07:dd:40:22:62:2b:4b: f5:e0:e5:14:65:47:aa:2f:9f:aa:52:96:21:35:66: 6d:99:7b:a2:47:77:86:97:ff:83:68:78:ef:94:02: 95:19:52:97:55:fc:96:46:06:2e:ee:f0:43:bf:cf: 6e:bf:22:be:c1:b5:79:f0:33:db:4d:91:85:b2:47: dd:91:c6:7b:59:7d:9a:d2:df:8c:92:5c:50:3b:89: 68:b3:ee:af:cc:56:b4:51:8d:08:e1:a9:4d:de:20: a8:eb:68:0b:9e:fc:73:5c:a9:a0:91:b3:e1:61:44: c2:c9:40:23:00:e1:de:7f:52:f8:b6:c6:17:02:d1: 58:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A3:80:57:61:BC:F1:70:62:52:BC:95:AB:AD:B6:16:B6:44:A2:D9 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213626.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:b39::/48 Signature Algorithm: sha256WithRSAEncryption 1a:36:b6:66:55:9a:2a:ba:96:91:c1:1f:8c:71:9e:5a:a8:6f: d4:3f:39:0a:ad:cb:3f:ac:6a:42:1f:98:1a:7e:9d:74:a0:a9: 03:78:a7:43:69:80:54:63:5d:61:4d:f6:cd:dd:bc:0e:28:a2: 0c:84:83:5a:ae:9d:2a:a5:0e:34:1e:a8:83:60:8a:bd:c0:5f: 8e:88:a2:c9:82:96:15:a7:a7:0a:ee:c6:de:14:b2:ce:61:d7: c8:28:c8:5c:ca:db:45:76:bf:92:57:7b:dc:eb:1c:b2:f0:52: 5f:65:7b:5f:d6:d4:92:e6:4d:07:a9:c6:99:e5:63:39:91:cf: 7a:df:40:79:43:56:7f:f0:48:35:85:8a:af:af:2f:73:e5:10: 62:04:7e:6f:22:f6:02:e5:7d:62:cc:2c:91:e6:8f:98:8d:03: f9:5f:53:48:92:75:85:2b:8c:cd:bb:ff:bc:ca:84:19:cf:00: 58:c2:13:8f:8a:c8:75:e4:86:62:b5:93:ea:06:9b:f9:69:44: 18:33:2c:93:be:6c:74:19:ae:53:2a:14:31:fc:87:a0:ec:97: f8:a1:0c:a3:0f:fc:13:cc:7a:d1:dc:41:27:90:80:35:b1:3f: 92:f7:e0:07:76:4c:da:c8:24:45:b6:b6:4a:2a:5e:db:01:e8: 03:7c:c8:19 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUG5i1BtJZSzckNxeanxKA+v7MZv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTEyMDkyMjAzMTFaFw0yNjEyMDgyMjA4MTFaMDMxMTAvBgNV BAMTKDM5QTM4MDU3NjFCQ0YxNzA2MjUyQkM5NUFCQURCNjE2QjY0NEEyRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDO2vY/HnouTnNmEcPQTf20B2i Wd89+K0FQDptzmVYRVKN0TMI2IPMKjRxVJwMwAD0d556TTy3Hr57UbIAxkYVU/pV FxD0D6yhEfmyS+bK6LhfEl9sNgB13RJu3uL6MiWBbshkqjg0SfJuwH9eoutGy9C8 iIDzZZir/Of2OkyzB91AImIrS/Xg5RRlR6ovn6pSliE1Zm2Ze6JHd4aX/4NoeO+U ApUZUpdV/JZGBi7u8EO/z26/Ir7BtXnwM9tNkYWyR92RxntZfZrS34ySXFA7iWiz 7q/MVrRRjQjhqU3eIKjraAue/HNcqaCRs+FhRMLJQCMA4d5/Uvi2xhcC0VhRAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUOaOAV2G88XBiUryVq622FrZEotkwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEzNjI2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQs5MA0GCSqGSIb3DQEBCwUAA4IBAQAaNrZmVZoqupaRwR+McZ5aqG/UPzkKrcs/ rGpCH5gafp10oKkDeKdDaYBUY11hTfbN3bwOKKIMhINarp0qpQ40HqiDYIq9wF+O iKLJgpYVp6cK7sbeFLLOYdfIKMhcyttFdr+SV3vc6xyy8FJfZXtf1tSS5k0HqcaZ 5WM5kc9630B5Q1Z/8Eg1hYqvry9z5RBiBH5vIvYC5X1izCyR5o+YjQP5X1NIknWF K4zNu/+8yoQZzwBYwhOPish15IZitZPqBpv5aUQYMyyTvmx0Ga5TKhQx/Ieg7Jf4 oQyjD/wTzHrR3EEnkIA1sT+S9+AHdkzayCRFtrZKKl7bAegDfMgZ -----END CERTIFICATE-----Generated at Thu Dec 25 04:32:26 2025 by rpki-client