This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215051.roa File: AS215051.roa (raw, json) Hash identifier: 5yHfHl0v4+hvdV8ai52YeZ/wBWKLwaGpHL6HWt8oJ6g= Subject key identifier: 5C:12:A1:5D:D3:BB:E9:20:F1:03:E2:5E:BC:8E:FB:0B:99:8E:0B:D3 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 0AEED4CD75C4E4936F467ED6EF5A0DEF941C8C9C Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215051.roa Signing time: Wed 17 Dec 2025 03:08:13 +0000 ROA not before: Wed 17 Dec 2025 03:03:13 +0000 ROA not after: Wed 16 Dec 2026 03:08:13 +0000 asID: 215051 IP address blocks: 2a0f:85c1:b4b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ee:d4:cd:75:c4:e4:93:6f:46:7e:d6:ef:5a:0d:ef:94:1c:8c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Dec 17 03:03:13 2025 GMT Not After : Dec 16 03:08:13 2026 GMT Subject: CN=5C12A15DD3BBE920F103E25EBC8EFB0B998E0BD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:72:d4:84:2e:70:3f:0f:bd:01:90:2a:a5: 0c:56:28:11:56:cb:3a:34:86:b9:82:29:c2:44:17: 48:46:68:eb:17:06:bc:b7:fa:ca:99:18:ef:46:79: 1f:10:54:6d:01:88:83:2a:4b:36:01:50:52:07:cd: b8:c3:6a:7e:b1:1d:20:9d:e6:a2:ea:d4:dd:29:6c: 8c:5d:9d:cc:2c:9d:f1:fc:92:57:38:e2:e0:af:09: 1f:e7:03:f6:ad:3f:5b:c3:f7:87:9b:af:bd:af:c8: 9c:fe:13:16:6c:53:e5:6f:b7:fa:19:c0:cf:b7:68: 78:92:06:15:35:b2:3d:a8:6d:e1:c2:f2:f3:ee:73: 54:e2:8e:55:4e:2b:5e:81:ba:63:d4:e1:2b:42:cf: e4:9f:ad:f3:f6:bc:04:36:79:f1:56:9a:18:28:3f: 4d:35:cd:89:d3:62:3a:79:84:d8:56:02:30:f8:1d: 3a:c7:6d:e5:e1:3e:93:97:3f:82:52:5b:9e:93:81: ef:0c:7e:cb:15:f0:75:9c:27:a7:cf:0d:73:2f:9b: f2:e8:7b:30:e4:cf:1e:42:b9:be:4c:c3:e7:53:92: ac:7e:85:b4:0e:96:ad:4e:54:0e:7e:f9:fd:6f:fb: fc:5f:75:4f:c2:d2:d5:c8:88:c6:28:31:0e:69:f3: ca:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:12:A1:5D:D3:BB:E9:20:F1:03:E2:5E:BC:8E:FB:0B:99:8E:0B:D3 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215051.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:b4b::/48 Signature Algorithm: sha256WithRSAEncryption e5:bb:d0:70:3e:47:ef:d6:63:fd:86:14:5e:06:5f:03:7e:2b: 9d:52:cc:bf:57:4a:84:94:d7:24:75:dd:b2:c5:a1:57:6a:55: 95:fe:54:54:62:7c:0d:a3:20:6a:c8:c3:a8:d7:0e:50:b8:64: d9:62:49:83:e9:2a:1d:ec:44:87:31:b9:c5:94:5f:4c:e8:ba: 57:76:87:ce:88:b8:8b:1b:a6:d4:e1:eb:83:4f:72:d5:9b:36: 8d:a3:26:90:46:df:68:da:da:c7:db:88:36:6d:c5:33:ab:2f: 49:4f:e3:a3:b1:58:9b:b6:b0:47:d5:e2:b5:cf:f1:59:8c:97: c5:74:b7:01:de:e4:5b:e0:6b:38:7c:d7:ba:96:8e:4e:d2:f2: b2:0d:56:d8:b8:19:31:2a:5b:6c:39:26:fe:5b:e9:10:38:02: 95:15:39:57:7e:43:21:58:7e:bb:3d:1a:01:cd:16:0c:3d:01: 56:60:9b:4f:af:a6:03:12:c3:27:1c:86:45:ec:63:59:83:60: a2:9c:23:10:3f:46:7b:d1:02:fd:37:b0:16:2a:a3:68:d2:d4: 27:42:b9:27:b5:b7:a8:17:af:3c:aa:7f:8d:22:ea:ef:07:11: f9:41:0e:42:65:b6:13:7e:2b:65:45:82:a4:95:d7:f0:6f:c3: 5e:8c:f6:23 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUCu7UzXXE5JNvRn7W71oN75QcjJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTEyMTcwMzAzMTNaFw0yNjEyMTYwMzA4MTNaMDMxMTAvBgNV BAMTKDVDMTJBMTVERDNCQkU5MjBGMTAzRTI1RUJDOEVGQjBCOTk4RTBCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNjXLUhC5wPw+9AZAqpQxWKBFW yzo0hrmCKcJEF0hGaOsXBry3+sqZGO9GeR8QVG0BiIMqSzYBUFIHzbjDan6xHSCd 5qLq1N0pbIxdncwsnfH8klc44uCvCR/nA/atP1vD94ebr72vyJz+ExZsU+Vvt/oZ wM+3aHiSBhU1sj2obeHC8vPuc1TijlVOK16BumPU4StCz+SfrfP2vAQ2efFWmhgo P001zYnTYjp5hNhWAjD4HTrHbeXhPpOXP4JSW56Tge8MfssV8HWcJ6fPDXMvm/Lo ezDkzx5Cub5Mw+dTkqx+hbQOlq1OVA5++f1v+/xfdU/C0tXIiMYoMQ5p88pFAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUXBKhXdO76SDxA+JevI77C5mOC9MwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE1MDUxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQtLMA0GCSqGSIb3DQEBCwUAA4IBAQDlu9BwPkfv1mP9hhReBl8DfiudUsy/V0qE lNckdd2yxaFXalWV/lRUYnwNoyBqyMOo1w5QuGTZYkmD6Sod7ESHMbnFlF9M6LpX dofOiLiLG6bU4euDT3LVmzaNoyaQRt9o2trH24g2bcUzqy9JT+OjsVibtrBH1eK1 z/FZjJfFdLcB3uRb4Gs4fNe6lo5O0vKyDVbYuBkxKltsOSb+W+kQOAKVFTlXfkMh WH67PRoBzRYMPQFWYJtPr6YDEsMnHIZF7GNZg2CinCMQP0Z70QL9N7AWKqNo0tQn QrkntbeoF688qn+NIurvBxH5QQ5CZbYTfitlRYKkldfwb8NejPYj -----END CERTIFICATE-----Generated at Sat Dec 20 15:10:27 2025 by rpki-client