This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215355.roa File: AS215355.roa (raw, json) Hash identifier: gZhcem7x9QMtrsydDpnjev4yt+fR1irOZhR2FvoNaSY= Subject key identifier: E8:37:72:37:DA:CF:69:59:F0:2D:67:E2:47:DD:85:3B:83:73:76:76 Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 5B1C2AF870193F19CD8619C698CA1D211640447D Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215355.roa Signing time: Fri 19 Dec 2025 16:44:47 +0000 ROA not before: Fri 19 Dec 2025 16:39:47 +0000 ROA not after: Fri 18 Dec 2026 16:44:47 +0000 asID: 215355 IP address blocks: 143.20.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:1c:2a:f8:70:19:3f:19:cd:86:19:c6:98:ca:1d:21:16:40:44:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Dec 19 16:39:47 2025 GMT Not After : Dec 18 16:44:47 2026 GMT Subject: CN=E8377237DACF6959F02D67E247DD853B83737676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e5:d7:bb:86:7c:5c:14:ca:80:22:29:19:6e: 81:73:cb:aa:8d:21:20:10:78:19:76:01:76:3e:1f: 70:c3:48:ff:38:1c:64:a3:60:12:1e:f0:e8:6b:9d: 11:36:73:e5:7c:9b:a4:e3:e8:b0:4e:86:fd:74:45: 64:73:e5:54:bc:5e:e8:cb:27:83:5a:0b:c7:ca:82: 3c:34:66:a8:4f:8c:72:36:7b:e7:17:b2:ed:66:47: 43:5d:c4:d5:fc:00:9b:aa:56:57:fb:84:9d:7c:4e: 10:6c:87:49:4a:b1:36:09:27:42:25:57:57:1c:b0: a5:1d:52:79:41:79:0c:83:c2:dc:00:46:c4:a9:1b: 86:6f:85:d8:a3:02:cd:20:d0:8a:a5:03:70:03:07: d2:5c:86:01:68:ee:21:79:b3:53:e1:a6:64:7a:9b: f8:ef:0a:de:3b:30:77:ac:8e:09:ab:6d:e9:ce:f4: 18:bb:24:d3:bf:d8:09:0d:ce:0f:a6:ac:9a:ec:58: 1c:f0:ae:ed:c7:44:22:b3:a3:6e:b9:2c:ed:89:7a: 5a:5b:4a:3c:15:ce:d0:ab:6d:bf:3d:1c:5a:52:d6: 1d:77:0b:0c:02:e0:00:34:ce:4c:7b:78:10:a2:b8: bb:a8:1d:97:25:8f:c6:5c:a8:7f:f3:d7:1c:9e:7c: f2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:37:72:37:DA:CF:69:59:F0:2D:67:E2:47:DD:85:3B:83:73:76:76 X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215355.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.204.0/23 Signature Algorithm: sha256WithRSAEncryption b2:e0:43:aa:ed:f9:4b:38:e2:23:cd:dd:9e:26:d2:9f:bf:45: 3a:69:50:63:92:72:d0:68:13:00:35:a7:3b:5c:ed:ca:25:36: c3:d5:cb:65:16:ff:84:ca:24:d6:7c:d9:b5:f3:d8:3b:b9:c7: 3e:58:34:36:ed:1d:35:30:2b:d1:42:3a:04:9a:20:4e:cd:f4: bd:80:ba:25:23:cb:05:f2:65:0f:f0:26:f5:d7:e6:73:47:75: 39:86:a6:8d:aa:2d:22:bb:eb:93:60:48:ca:71:bb:f1:9f:dc: e5:73:b1:b0:3e:56:3e:cf:24:1a:cf:b8:ed:2b:9c:ff:44:a5: 9c:50:94:67:3a:bc:e5:79:c5:ab:1e:03:a0:39:32:34:e3:c3: 6e:43:2b:7e:cb:45:40:4a:fc:6d:26:a8:e8:3f:6f:96:6a:b8: 37:2c:26:18:39:72:15:ae:fe:44:df:fd:80:56:17:fe:51:2f: d3:46:42:f8:72:f6:bd:1f:0f:3a:5e:57:db:db:20:1c:91:12: 2a:55:dc:df:3d:de:58:68:36:30:61:53:5a:cb:67:f1:53:da: 17:dc:5d:04:76:5b:88:79:7d:e9:dd:4e:1f:e8:e8:f0:ad:d4: 94:69:56:4a:36:30:1f:df:8d:9f:ff:a3:5a:29:f6:d0:eb:ce: 4e:ab:74:f8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUWxwq+HAZPxnNhhnGmModIRZARH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTEyMTkxNjM5NDdaFw0yNjEyMTgxNjQ0NDdaMDMxMTAvBgNV BAMTKEU4Mzc3MjM3REFDRjY5NTlGMDJENjdFMjQ3REQ4NTNCODM3Mzc2NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH5de7hnxcFMqAIikZboFzy6qN ISAQeBl2AXY+H3DDSP84HGSjYBIe8OhrnRE2c+V8m6Tj6LBOhv10RWRz5VS8XujL J4NaC8fKgjw0ZqhPjHI2e+cXsu1mR0NdxNX8AJuqVlf7hJ18ThBsh0lKsTYJJ0Il V1ccsKUdUnlBeQyDwtwARsSpG4ZvhdijAs0g0IqlA3ADB9JchgFo7iF5s1PhpmR6 m/jvCt47MHesjgmrbenO9Bi7JNO/2AkNzg+mrJrsWBzwru3HRCKzo265LO2Jelpb SjwVztCrbb89HFpS1h13CwwC4AA0zkx7eBCiuLuoHZclj8ZcqH/z1xyefPJRAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU6DdyN9rPaVnwLWfiR92FO4NzdnYwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjE1MzU1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjxTM MA0GCSqGSIb3DQEBCwUAA4IBAQCy4EOq7flLOOIjzd2eJtKfv0U6aVBjknLQaBMA Nac7XO3KJTbD1ctlFv+EyiTWfNm189g7ucc+WDQ27R01MCvRQjoEmiBOzfS9gLol I8sF8mUP8Cb11+ZzR3U5hqaNqi0iu+uTYEjKcbvxn9zlc7GwPlY+zyQaz7jtK5z/ RKWcUJRnOrzlecWrHgOgOTI048NuQyt+y0VASvxtJqjoP2+Warg3LCYYOXIVrv5E 3/2AVhf+US/TRkL4cva9Hw86Xlfb2yAckRIqVdzfPd5YaDYwYVNay2fxU9oX3F0E dluIeX3p3U4f6OjwrdSUaVZKNjAf342f/6NaKfbQ685Oq3T4 -----END CERTIFICATE-----Generated at Fri Dec 19 23:19:47 2025 by rpki-client