This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216072.roa File: AS216072.roa (raw, json) Hash identifier: 9qQsG0Pdpsy1LXn0essVX9kiRnW/JJK4o5QKqY4AkYc= Subject key identifier: C6:C6:14:E6:30:D5:6A:43:B2:F2:E5:D8:D4:23:03:BD:E5:FA:D9:3A Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 58464877890C11B95F6B25494067D763CAEC01FF Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216072.roa Signing time: Wed 17 Dec 2025 03:08:13 +0000 ROA not before: Wed 17 Dec 2025 03:03:13 +0000 ROA not after: Wed 16 Dec 2026 03:08:13 +0000 asID: 216072 IP address blocks: 2a0f:85c1:b46::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:46:48:77:89:0c:11:b9:5f:6b:25:49:40:67:d7:63:ca:ec:01:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Dec 17 03:03:13 2025 GMT Not After : Dec 16 03:08:13 2026 GMT Subject: CN=C6C614E630D56A43B2F2E5D8D42303BDE5FAD93A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ef:20:ba:3c:77:82:6d:79:fc:8f:0d:71:d6: 5b:86:3d:c9:12:21:f4:a6:2a:11:6a:64:78:65:3a: ef:17:b1:db:8b:1b:c7:32:b6:75:73:b4:a6:12:c4: 69:4b:ee:af:1f:95:e6:e3:bd:a7:29:7e:e2:b6:09: 68:d8:34:6f:12:b8:ff:f5:84:18:32:cf:19:8c:36: 1a:fb:49:d9:07:82:6a:71:92:ff:53:6d:f2:de:60: e9:54:de:b1:5d:8b:78:b9:7b:31:09:54:2f:f4:fb: c4:a2:d1:af:3e:5d:9a:4b:c7:30:7c:5c:06:ed:23: da:82:32:86:a4:af:c9:9e:80:59:d3:bb:f0:35:a3: e7:18:ee:a6:9e:11:de:24:c9:5e:d5:d4:f0:8d:36: d4:89:d7:53:96:7c:4d:d6:70:27:fb:0e:e6:29:bd: 3d:c2:76:42:12:aa:8c:f5:a4:b0:c1:91:48:76:f4: d3:0c:f0:5f:fe:a0:08:d1:86:5d:8f:e1:98:2f:a8: b2:15:ac:bd:70:35:9f:db:39:99:21:2d:41:98:3d: d3:fc:29:ad:99:96:83:2c:b9:1b:d7:85:f3:58:bf: a1:0b:cf:c7:e5:4d:0f:87:1e:b0:77:25:98:0e:88: bd:5d:4c:24:f2:88:5f:0b:f2:e4:a6:2c:9d:e5:d7: ff:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C6:14:E6:30:D5:6A:43:B2:F2:E5:D8:D4:23:03:BD:E5:FA:D9:3A X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216072.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:b46::/48 Signature Algorithm: sha256WithRSAEncryption 06:6d:7a:57:15:a5:80:2b:1f:6a:90:13:e6:2c:16:e9:95:71: ab:ce:8d:ba:2e:c5:50:ff:ef:c7:e0:a9:4c:58:5e:8d:4a:09: cd:62:8f:7a:1f:94:46:0d:31:85:ef:77:c8:57:b5:a0:a5:db: 47:d0:6b:f1:23:8c:f7:51:9e:7d:1f:24:a2:89:65:38:ef:d0: 44:0d:a9:d7:ef:2c:a9:29:82:07:15:83:32:da:f7:5a:5d:ee: f8:ab:96:41:9c:bf:3a:69:7d:de:d6:e7:83:54:b4:1d:3d:27: 97:57:3e:0a:d8:54:ca:ad:f4:dd:2d:89:97:39:93:ba:0d:d4: d5:64:ad:21:e7:36:ff:49:50:eb:26:2c:32:e8:c9:bc:3f:6d: 70:d2:ac:38:5e:e7:3b:ac:de:af:f7:08:48:cb:0f:17:4c:24: da:54:89:57:df:5c:f0:3f:b4:25:e3:e0:90:96:a7:6e:65:89: 30:ec:1c:4d:0a:96:d6:45:92:ee:78:df:36:98:95:c4:a6:40: 8a:95:e0:55:9e:6b:10:82:a6:67:d9:70:7f:1c:e0:64:e8:43: 04:d3:3e:64:4c:5b:0b:2d:58:8e:42:de:20:87:0c:bd:f3:0a: 66:fa:2e:d3:b3:56:5b:90:d2:e6:1e:10:22:e8:0a:ce:db:a4: 0d:71:b3:ac -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUWEZId4kMEblfayVJQGfXY8rsAf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTEyMTcwMzAzMTNaFw0yNjEyMTYwMzA4MTNaMDMxMTAvBgNV BAMTKEM2QzYxNEU2MzBENTZBNDNCMkYyRTVEOEQ0MjMwM0JERTVGQUQ5M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM7yC6PHeCbXn8jw1x1luGPckS IfSmKhFqZHhlOu8XsduLG8cytnVztKYSxGlL7q8flebjvacpfuK2CWjYNG8SuP/1 hBgyzxmMNhr7SdkHgmpxkv9TbfLeYOlU3rFdi3i5ezEJVC/0+8Si0a8+XZpLxzB8 XAbtI9qCMoakr8megFnTu/A1o+cY7qaeEd4kyV7V1PCNNtSJ11OWfE3WcCf7DuYp vT3CdkISqoz1pLDBkUh29NMM8F/+oAjRhl2P4ZgvqLIVrL1wNZ/bOZkhLUGYPdP8 Ka2ZloMsuRvXhfNYv6ELz8flTQ+HHrB3JZgOiL1dTCTyiF8L8uSmLJ3l1/8TAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUxsYU5jDVakOy8uXY1CMDveX62TowHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE2MDcyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQtGMA0GCSqGSIb3DQEBCwUAA4IBAQAGbXpXFaWAKx9qkBPmLBbplXGrzo26LsVQ /+/H4KlMWF6NSgnNYo96H5RGDTGF73fIV7WgpdtH0GvxI4z3UZ59HySiiWU479BE DanX7yypKYIHFYMy2vdaXe74q5ZBnL86aX3e1ueDVLQdPSeXVz4K2FTKrfTdLYmX OZO6DdTVZK0h5zb/SVDrJiwy6Mm8P21w0qw4Xuc7rN6v9whIyw8XTCTaVIlX31zw P7Ql4+CQlqduZYkw7BxNCpbWRZLueN82mJXEpkCKleBVnmsQgqZn2XB/HOBk6EME 0z5kTFsLLViOQt4ghwy98wpm+i7Ts1ZbkNLmHhAi6ArO26QNcbOs -----END CERTIFICATE-----Generated at Sat Dec 20 17:02:51 2025 by rpki-client