This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213768.roa File: AS213768.roa (raw, json) Hash identifier: J87tTfkbXjeeHx5ol2sy/O0JAEvxmiNhzOE77nkmEgA= Subject key identifier: 93:9B:A0:83:77:F0:BB:1E:09:69:D2:F8:4E:5C:72:45:F1:2A:A7:02 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 7A5DFBDFA13E853C17AE3C5E2445796294E1B085 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213768.roa Signing time: Wed 17 Dec 2025 03:08:13 +0000 ROA not before: Wed 17 Dec 2025 03:03:13 +0000 ROA not after: Wed 16 Dec 2026 03:08:13 +0000 asID: 213768 IP address blocks: 2a0f:85c1:8b6::/48 maxlen: 48 2a0f:85c1:b48::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:5d:fb:df:a1:3e:85:3c:17:ae:3c:5e:24:45:79:62:94:e1:b0:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Dec 17 03:03:13 2025 GMT Not After : Dec 16 03:08:13 2026 GMT Subject: CN=939BA08377F0BB1E0969D2F84E5C7245F12AA702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:14:9b:0e:a4:eb:cb:b0:48:9d:58:5c:8a:e6: 09:5c:12:2d:29:95:51:85:31:d6:55:f8:99:80:7c: d0:0c:ec:4c:5c:32:ff:45:50:15:9c:3e:2a:14:94: 16:9d:87:b1:78:3d:1d:46:b7:67:d5:44:6f:3f:93: 74:1f:94:a5:0e:d9:1a:ce:53:9a:b4:ca:fb:7d:c7: e7:d3:04:e8:78:7e:4a:3f:b7:7b:21:87:93:00:8b: f5:76:d3:73:75:62:f7:27:7c:92:09:96:31:6e:b9: 8a:ee:6c:56:11:24:8a:0c:70:02:47:37:bf:4d:12: b9:7b:b3:33:02:8b:27:b8:ee:f7:20:f3:31:2d:82: ea:9c:2b:f6:1b:6d:cf:c0:7f:e9:f3:36:a9:49:53: b5:96:54:64:52:be:aa:b5:48:d1:1a:86:4e:17:7a: 96:67:22:9f:21:e2:00:36:bd:47:5e:8a:72:10:e4: 25:d4:df:4f:fb:0b:2f:79:25:40:44:60:fe:e7:fb: 37:36:fc:71:f3:7e:b8:41:da:6a:47:2e:d6:a2:a1: 9d:c0:44:f5:ed:1d:f7:8d:80:a4:b9:28:53:80:e4: a6:d1:51:3a:b0:d7:0e:3f:8e:74:c6:64:b5:62:40: 8e:39:ff:ce:18:8a:43:d3:d4:78:1a:08:5b:44:55: 8e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9B:A0:83:77:F0:BB:1E:09:69:D2:F8:4E:5C:72:45:F1:2A:A7:02 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213768.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:8b6::/48 2a0f:85c1:b48::/48 Signature Algorithm: sha256WithRSAEncryption e4:7a:30:50:04:1e:69:fc:1e:c5:9a:62:d7:f8:17:61:a3:bb: d7:e4:30:93:26:2e:7b:a4:16:56:9d:92:cb:99:33:c2:cc:5f: be:e5:12:2d:75:30:35:ac:f8:4e:27:37:87:8b:c3:45:0e:47: cb:37:e2:c0:3f:0d:e0:2d:47:56:95:ff:f1:63:0f:a1:6a:25: ed:03:51:13:22:b1:40:7a:d2:19:9a:79:94:7e:5e:bf:87:4d: b3:66:c8:68:2f:19:23:15:92:d5:ea:3e:f3:17:ed:51:91:4a: 76:b5:e2:94:5f:58:93:37:ee:a7:fe:33:37:d0:5c:92:f5:7d: f0:f0:6b:63:6d:a2:cb:44:9f:e6:90:d2:a3:65:14:92:ce:3c: 65:2c:30:18:86:6c:bb:d6:68:66:4a:69:d1:ae:09:54:00:dc: db:a6:61:a7:1d:7a:5e:8a:f3:f1:30:8a:69:9a:a7:04:7a:2a: 3f:22:92:31:fb:2f:20:aa:cf:3a:0a:68:4a:e7:bb:16:5c:0d: e6:55:a6:ae:3c:83:a1:7c:d5:09:ea:8f:93:e8:82:26:14:01: 50:ef:99:c8:5f:20:bf:35:9c:c9:bb:90:51:62:47:84:30:7e: 84:62:f8:c2:73:57:76:07:96:7f:38:fb:0c:80:a9:8e:44:a7: 72:47:7f:f5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUel3736E+hTwXrjxeJEV5YpThsIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTEyMTcwMzAzMTNaFw0yNjEyMTYwMzA4MTNaMDMxMTAvBgNV BAMTKDkzOUJBMDgzNzdGMEJCMUUwOTY5RDJGODRFNUM3MjQ1RjEyQUE3MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwFJsOpOvLsEidWFyK5glcEi0p lVGFMdZV+JmAfNAM7ExcMv9FUBWcPioUlBadh7F4PR1Gt2fVRG8/k3QflKUO2RrO U5q0yvt9x+fTBOh4fko/t3shh5MAi/V203N1YvcnfJIJljFuuYrubFYRJIoMcAJH N79NErl7szMCiye47vcg8zEtguqcK/Ybbc/Af+nzNqlJU7WWVGRSvqq1SNEahk4X epZnIp8h4gA2vUdeinIQ5CXU30/7Cy95JUBEYP7n+zc2/HHzfrhB2mpHLtaioZ3A RPXtHfeNgKS5KFOA5KbRUTqw1w4/jnTGZLViQI45/84YikPT1HgaCFtEVY5lAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUk5ugg3fwux4JadL4TlxyRfEqpwIwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEzNzY4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg+F wQi2AwcAKg+FwQtIMA0GCSqGSIb3DQEBCwUAA4IBAQDkejBQBB5p/B7FmmLX+Bdh o7vX5DCTJi57pBZWnZLLmTPCzF++5RItdTA1rPhOJzeHi8NFDkfLN+LAPw3gLUdW lf/xYw+haiXtA1ETIrFAetIZmnmUfl6/h02zZshoLxkjFZLV6j7zF+1RkUp2teKU X1iTN+6n/jM30FyS9X3w8GtjbaLLRJ/mkNKjZRSSzjxlLDAYhmy71mhmSmnRrglU ANzbpmGnHXpeivPxMIppmqcEeio/IpIx+y8gqs86CmhK57sWXA3mVaauPIOhfNUJ 6o+T6IImFAFQ75nIXyC/NZzJu5BRYkeEMH6EYvjCc1d2B5Z/OPsMgKmORKdyR3/1 -----END CERTIFICATE-----Generated at Sat Dec 20 18:55:11 2025 by rpki-client