This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa File: AS215294.roa (raw, json) Hash identifier: Snk2voP77XqX/rXvxoT6C0KpdybK2yPZ9bdcSGChD+c= Subject key identifier: BF:7C:36:96:C6:C3:60:8D:BA:74:9E:31:01:CB:0B:F4:D1:6D:AB:B2 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 0400FC35F2B59E2E07B81D1BDD52990B6D34DC79 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa Signing time: Wed 10 Dec 2025 08:01:44 +0000 ROA not before: Wed 10 Dec 2025 07:56:44 +0000 ROA not after: Wed 09 Dec 2026 08:01:44 +0000 asID: 215294 IP address blocks: 46.203.77.0/24 maxlen: 24 46.203.120.0/24 maxlen: 24 46.203.150.0/24 maxlen: 24 46.203.214.0/24 maxlen: 24 46.203.234.0/24 maxlen: 24 92.113.176.0/24 maxlen: 24 92.113.177.0/24 maxlen: 24 92.113.178.0/24 maxlen: 24 92.113.179.0/24 maxlen: 24 92.113.180.0/24 maxlen: 24 92.113.181.0/24 maxlen: 24 92.113.182.0/24 maxlen: 24 92.113.183.0/24 maxlen: 24 92.113.192.0/24 maxlen: 24 92.113.195.0/24 maxlen: 24 92.113.204.0/24 maxlen: 24 92.113.205.0/24 maxlen: 24 92.113.206.0/24 maxlen: 24 92.113.207.0/24 maxlen: 24 92.113.216.0/24 maxlen: 24 92.113.217.0/24 maxlen: 24 92.113.218.0/24 maxlen: 24 92.113.219.0/24 maxlen: 24 178.92.61.0/24 maxlen: 24 178.92.64.0/24 maxlen: 24 178.92.65.0/24 maxlen: 24 178.92.67.0/24 maxlen: 24 178.92.68.0/24 maxlen: 24 178.92.70.0/24 maxlen: 24 178.92.71.0/24 maxlen: 24 178.92.124.0/24 maxlen: 24 178.93.7.0/24 maxlen: 24 178.93.10.0/24 maxlen: 24 178.93.12.0/24 maxlen: 24 178.93.13.0/24 maxlen: 24 178.93.21.0/24 maxlen: 24 178.93.24.0/24 maxlen: 24 178.93.25.0/24 maxlen: 24 178.93.26.0/24 maxlen: 24 178.93.29.0/24 maxlen: 24 178.93.32.0/24 maxlen: 24 178.93.43.0/24 maxlen: 24 178.93.44.0/24 maxlen: 24 178.93.57.0/24 maxlen: 24 178.93.74.0/24 maxlen: 24 178.94.148.0/24 maxlen: 24 178.94.222.0/24 maxlen: 24 178.94.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:00:fc:35:f2:b5:9e:2e:07:b8:1d:1b:dd:52:99:0b:6d:34:dc:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 10 07:56:44 2025 GMT Not After : Dec 9 08:01:44 2026 GMT Subject: CN=BF7C3696C6C3608DBA749E3101CB0BF4D16DABB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9f:ba:a5:4a:aa:e6:a4:e4:e2:47:0e:b8:8a: ca:98:95:88:07:bd:bc:ff:bc:50:85:47:1f:23:34: 07:66:dc:05:17:02:e8:41:33:12:52:ce:7b:eb:7a: 1a:64:12:65:d9:68:93:df:52:dc:fa:af:67:f7:f8: f4:8d:c7:9c:7c:93:8f:4c:1b:f2:d1:cc:f9:d5:8a: 45:6a:65:ec:69:1f:a7:b1:a9:14:06:de:95:ab:32: a8:bf:60:5e:0f:b8:42:54:b4:df:df:78:2f:4a:e7: ab:ef:0e:d8:7d:10:80:ae:2c:cd:32:68:1c:e5:82: c9:35:12:da:5f:7f:f4:d2:04:ec:ba:3f:d2:de:93: 35:d4:93:76:67:27:d4:57:f4:dd:66:2b:63:13:40: 46:ed:c0:03:b8:0e:5f:99:02:fa:63:08:3a:04:aa: 6e:d5:34:65:1e:43:31:8f:d0:73:2c:53:9e:ae:37: e3:2a:f5:59:38:13:d3:1d:b7:e8:4f:67:0c:e4:09: 42:a6:9c:fc:64:48:16:5c:d3:f7:49:cc:d7:7c:24: 4a:0d:bb:6b:d8:77:32:08:5e:93:ef:48:91:4b:70: d2:66:21:f9:a1:8f:b2:c5:74:bf:05:3f:a9:6e:ad: bc:9b:90:50:c6:57:85:53:f1:42:c7:21:b1:55:a6: 10:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7C:36:96:C6:C3:60:8D:BA:74:9E:31:01:CB:0B:F4:D1:6D:AB:B2 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215294.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.203.77.0/24 46.203.120.0/24 46.203.150.0/24 46.203.214.0/24 46.203.234.0/24 92.113.176.0/21 92.113.192.0/24 92.113.195.0/24 92.113.204.0/22 92.113.216.0/22 178.92.61.0/24 178.92.64.0/23 178.92.67.0-178.92.68.255 178.92.70.0/23 178.92.124.0/24 178.93.7.0/24 178.93.10.0/24 178.93.12.0/23 178.93.21.0/24 178.93.24.0-178.93.26.255 178.93.29.0/24 178.93.32.0/24 178.93.43.0-178.93.44.255 178.93.57.0/24 178.93.74.0/24 178.94.148.0/24 178.94.222.0/24 178.94.233.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:09:72:eb:09:ab:a5:76:77:c6:1b:76:50:88:71:e9:f2:40: 16:6f:8a:b0:66:1b:f6:d1:0c:67:42:bb:c7:03:ff:cd:bf:73: 92:ce:16:1e:d1:13:4d:7b:01:26:e4:d3:11:7f:ec:cd:9e:f7: 89:5a:f1:f3:b8:cc:20:cb:1f:72:1b:bb:fc:3f:fa:69:eb:37: d5:ab:27:96:d7:09:24:6d:a2:74:cf:b8:09:66:f4:e3:57:32: d5:1d:4e:8b:24:32:5a:bf:5a:52:b6:79:5a:d6:66:fd:70:8f: 2c:b8:cc:2d:6e:d8:b3:8a:93:60:7c:71:1a:ca:60:44:d0:18: 45:9c:d7:90:c6:34:20:48:e2:60:29:21:bf:11:52:1a:91:4d: 29:dd:f4:96:cf:61:b6:20:b6:d0:c4:4e:da:f3:63:91:96:a0: 24:3a:64:4b:91:69:62:5f:1f:9a:91:d0:8e:0a:98:c9:cc:cd: 93:fe:cc:d9:a3:72:aa:e5:34:ec:f6:a9:e8:c5:7d:6c:66:8f: d5:1f:9f:0a:ef:be:ee:9d:aa:5e:72:42:ab:a7:b8:3c:c9:b7: bf:b7:6e:3f:5f:09:cd:8f:7e:8f:81:e0:40:13:58:15:e7:d4: a6:22:22:3e:6f:81:fe:d5:8c:ef:a9:5d:c7:f6:01:c1:84:30: 18:6d:ae:35 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgIUBAD8NfK1ni4HuB0b3VKZC2003HkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMTAwNzU2NDRaFw0yNjEyMDkwODAxNDRaMDMxMTAvBgNV BAMTKEJGN0MzNjk2QzZDMzYwOERCQTc0OUUzMTAxQ0IwQkY0RDE2REFCQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkn7qlSqrmpOTiRw64isqYlYgH vbz/vFCFRx8jNAdm3AUXAuhBMxJSznvrehpkEmXZaJPfUtz6r2f3+PSNx5x8k49M G/LRzPnVikVqZexpH6exqRQG3pWrMqi/YF4PuEJUtN/feC9K56vvDth9EICuLM0y aBzlgsk1Etpff/TSBOy6P9LekzXUk3ZnJ9RX9N1mK2MTQEbtwAO4Dl+ZAvpjCDoE qm7VNGUeQzGP0HMsU56uN+Mq9Vk4E9Mdt+hPZwzkCUKmnPxkSBZc0/dJzNd8JEoN u2vYdzIIXpPvSJFLcNJmIfmhj7LFdL8FP6lurbybkFDGV4VT8ULHIbFVphCbAgMB AAGjggLJMIICxTAdBgNVHQ4EFgQUv3w2lsbDYI26dJ4xAcsL9NFtq7IwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE1Mjk0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMIHdBggrBgEFBQcBBwEB/wSBzTCByjCBxwQCAAEwgcAD BAAuy00DBAAuy3gDBAAuy5YDBAAuy9YDBAAuy+oDBANccbADBABcccADBABcccMD BAJcccwDBAJccdgDBACyXD0DBAGyXEAwDAMEALJcQwMEALJcRAMEAbJcRgMEALJc fAMEALJdBwMEALJdCgMEAbJdDAMEALJdFTAMAwQDsl0YAwQAsl0aAwQAsl0dAwQA sl0gMAwDBACyXSsDBACyXSwDBACyXTkDBACyXUoDBACyXpQDBACyXt4DBACyXukw DQYJKoZIhvcNAQELBQADggEBAF8JcusJq6V2d8YbdlCIcenyQBZvirBmG/bRDGdC u8cD/82/c5LOFh7RE017ASbk0xF/7M2e94la8fO4zCDLH3Ibu/w/+mnrN9WrJ5bX CSRtonTPuAlm9ONXMtUdToskMlq/WlK2eVrWZv1wjyy4zC1u2LOKk2B8cRrKYETQ GEWc15DGNCBI4mApIb8RUhqRTSnd9JbPYbYgttDETtrzY5GWoCQ6ZEuRaWJfH5qR 0I4KmMnMzZP+zNmjcqrlNOz2qejFfWxmj9Ufnwrvvu6dql5yQqunuDzJt7+3bj9f Cc2Pfo+B4EATWBXn1KYiIj5vgf7VjO+pXcf2AcGEMBhtrjU= -----END CERTIFICATE-----Generated at Sun Dec 21 12:04:44 2025 by rpki-client