This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213707.roa File: AS213707.roa (raw, json) Hash identifier: xlcr5uFrM/mdxuep82Kgde2/hf1IGoS8PBva+vFxmvA= Subject key identifier: 9F:5D:87:5A:E1:12:03:47:CF:04:90:4D:E1:3E:D8:BA:E8:22:8C:AE Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 649BE06AD952BB08DB19A95716E5AE0C4A5FE950 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213707.roa Signing time: Wed 17 Dec 2025 03:08:14 +0000 ROA not before: Wed 17 Dec 2025 03:03:14 +0000 ROA not after: Wed 16 Dec 2026 03:08:14 +0000 asID: 213707 IP address blocks: 2a0f:85c1:b45::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:9b:e0:6a:d9:52:bb:08:db:19:a9:57:16:e5:ae:0c:4a:5f:e9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Dec 17 03:03:14 2025 GMT Not After : Dec 16 03:08:14 2026 GMT Subject: CN=9F5D875AE1120347CF04904DE13ED8BAE8228CAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:95:d9:81:69:8d:6f:19:1c:6a:5d:24:45:09: f7:f3:4a:de:50:8a:88:33:b6:7c:87:04:5e:9d:86: b5:73:a8:ec:37:04:58:97:c2:24:ac:ee:e1:49:6d: 0c:c5:34:1d:f9:0a:cf:b1:19:a3:74:9c:98:04:eb: d7:41:58:35:33:77:8f:7c:59:f5:d0:ed:e7:31:f5: ba:4e:c9:28:98:1a:d1:91:9c:d0:3c:3b:fd:c6:cb: da:02:0d:00:6f:67:58:dc:51:19:21:f3:e1:df:9b: 81:38:6e:d9:0e:d8:bd:c8:a2:52:c8:26:81:c4:1f: 88:10:47:bc:e0:c5:bd:60:d6:54:ec:24:69:f3:bc: 80:6c:9f:f7:0a:9f:86:90:7f:90:05:55:ce:2d:5f: e5:03:93:b0:d3:7a:cb:42:29:fd:e8:96:56:5b:03: c9:dd:66:2b:e3:4f:f8:fe:e6:2b:4f:98:94:f4:bd: d4:b3:06:28:a4:eb:b3:71:75:d2:74:07:dd:fd:b7: 52:bc:a2:29:0d:11:64:8f:f8:3b:ef:74:84:f1:bd: db:dc:01:cc:77:2e:69:58:be:17:f9:16:92:5f:30: 93:f7:15:39:f8:bd:f0:a2:c3:cc:b9:b6:24:e7:77: cd:bd:c0:0e:7f:23:1d:ab:a7:16:99:99:93:bd:e8: bf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5D:87:5A:E1:12:03:47:CF:04:90:4D:E1:3E:D8:BA:E8:22:8C:AE X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213707.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:b45::/48 Signature Algorithm: sha256WithRSAEncryption ab:cc:ea:cd:a2:3c:56:5c:43:02:a3:f8:7a:5e:4c:88:78:17: 5d:03:be:9c:97:86:bb:d8:34:5b:9b:99:63:3c:d2:3f:01:84: 17:36:fc:5d:36:5d:8f:e0:e3:04:5a:b6:ef:09:41:63:3c:b0: f3:d8:d6:3a:e9:a7:87:45:d3:44:7a:a0:28:a5:61:6e:5c:3f: 7d:50:4b:cd:dd:fb:e7:08:05:d2:be:80:92:1a:94:f6:c5:6a: 43:26:77:83:99:55:c8:b7:e8:1a:88:8e:74:d1:93:6f:fe:0f: be:31:fb:f6:1f:a5:66:76:a6:74:b4:a1:d2:2d:2e:be:1c:14: 2d:2f:ce:c3:0e:4c:6d:85:46:eb:9f:c5:a7:c7:e3:70:04:2a: 37:f7:54:71:a0:ba:03:95:9c:37:46:c6:8b:e5:6b:1a:b4:80: d1:c4:30:cb:83:43:ef:ee:3d:b6:8a:95:66:06:7b:62:57:aa: 33:e5:b4:33:84:86:e5:f9:3d:46:89:b3:13:23:1e:26:d0:18: 40:c2:78:2e:cf:b4:2d:3e:4b:7c:ab:2f:84:cf:74:ac:d7:4a: 39:a2:06:9c:be:4b:bd:99:df:41:9c:30:de:06:9c:5f:8a:e5: 3a:cd:50:1c:7a:c9:d0:ee:f5:bd:5e:3a:6d:d4:05:42:7f:2e: af:bc:46:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUZJvgatlSuwjbGalXFuWuDEpf6VAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTEyMTcwMzAzMTRaFw0yNjEyMTYwMzA4MTRaMDMxMTAvBgNV BAMTKDlGNUQ4NzVBRTExMjAzNDdDRjA0OTA0REUxM0VEOEJBRTgyMjhDQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ldmBaY1vGRxqXSRFCffzSt5Q iogztnyHBF6dhrVzqOw3BFiXwiSs7uFJbQzFNB35Cs+xGaN0nJgE69dBWDUzd498 WfXQ7ecx9bpOySiYGtGRnNA8O/3Gy9oCDQBvZ1jcURkh8+Hfm4E4btkO2L3IolLI JoHEH4gQR7zgxb1g1lTsJGnzvIBsn/cKn4aQf5AFVc4tX+UDk7DTestCKf3ollZb A8ndZivjT/j+5itPmJT0vdSzBiik67NxddJ0B939t1K8oikNEWSP+DvvdITxvdvc Acx3LmlYvhf5FpJfMJP3FTn4vfCiw8y5tiTnd829wA5/Ix2rpxaZmZO96L/3AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUn12HWuESA0fPBJBN4T7YuugijK4wHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEzNzA3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQtFMA0GCSqGSIb3DQEBCwUAA4IBAQCrzOrNojxWXEMCo/h6XkyIeBddA76cl4a7 2DRbm5ljPNI/AYQXNvxdNl2P4OMEWrbvCUFjPLDz2NY66aeHRdNEeqAopWFuXD99 UEvN3fvnCAXSvoCSGpT2xWpDJneDmVXIt+gaiI500ZNv/g++Mfv2H6VmdqZ0tKHS LS6+HBQtL87DDkxthUbrn8Wnx+NwBCo391RxoLoDlZw3RsaL5WsatIDRxDDLg0Pv 7j22ipVmBntiV6oz5bQzhIbl+T1GibMTIx4m0BhAwnguz7QtPkt8qy+Ez3Ss10o5 ogacvku9md9BnDDeBpxfiuU6zVAcesnQ7vW9Xjpt1AVCfy6vvEb2 -----END CERTIFICATE-----Generated at Sat Dec 20 15:10:28 2025 by rpki-client