This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216138.roa File: AS216138.roa (raw, json) Hash identifier: IoZDhyOuymN1IjM7dAAh6UDcDpvvYXehNGqcm948GH4= Subject key identifier: B5:A5:A8:0A:DB:4F:6A:EF:D8:88:19:B4:2E:8B:8A:B7:13:C1:7E:75 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 5EB399923F5ADC5BEFFCD169534AD3CDE694C56B Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216138.roa Signing time: Fri 12 Dec 2025 09:10:28 +0000 ROA not before: Fri 12 Dec 2025 09:05:28 +0000 ROA not after: Fri 11 Dec 2026 09:10:28 +0000 asID: 216138 IP address blocks: 92.112.23.0/24 maxlen: 24 95.135.188.0/24 maxlen: 24 178.94.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b3:99:92:3f:5a:dc:5b:ef:fc:d1:69:53:4a:d3:cd:e6:94:c5:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 12 09:05:28 2025 GMT Not After : Dec 11 09:10:28 2026 GMT Subject: CN=B5A5A80ADB4F6AEFD88819B42E8B8AB713C17E75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:56:a5:a4:b1:98:71:3f:54:85:dc:61:dc:31: 4c:f0:7e:41:bc:f3:f8:fd:a9:53:72:7c:bf:f7:19: 9a:04:9a:58:53:91:f2:15:43:87:7b:9a:19:15:b5: da:00:77:9f:82:f5:a4:7c:1d:ca:12:9b:b8:fc:ec: 9a:81:e9:45:e0:f7:cb:fa:54:90:ce:ed:7e:20:fb: 59:22:69:9b:af:16:74:7c:4e:65:79:33:6f:33:dd: cb:18:f9:64:e2:76:76:3c:76:df:cb:9b:10:8f:76: d7:84:43:3c:9a:f0:6c:b9:01:a1:f4:e3:36:97:49: af:9a:3a:76:cd:47:e0:6b:0c:68:a0:dd:93:42:b6: 36:e5:36:d7:de:ca:f5:6c:56:7f:5d:21:e2:30:76: c0:e2:da:02:09:c6:91:21:4c:3a:ff:29:ad:5f:26: e0:09:f2:21:ba:9b:b6:92:ad:c3:f7:92:60:55:ba: eb:88:ec:dc:de:78:7b:9c:42:a0:fe:27:d8:95:5d: e8:24:93:31:cc:5c:ea:1f:27:2d:1c:88:45:cc:be: a1:0e:17:4a:0e:39:42:1f:38:1b:26:ff:b6:50:ff: 04:35:58:c1:60:24:43:43:85:3a:ab:7b:b6:81:a6: f1:75:ae:5a:a0:78:69:8e:dd:ba:2e:9d:ba:17:1c: 01:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A5:A8:0A:DB:4F:6A:EF:D8:88:19:B4:2E:8B:8A:B7:13:C1:7E:75 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.112.23.0/24 95.135.188.0/24 178.94.142.0/24 Signature Algorithm: sha256WithRSAEncryption ac:80:57:0a:72:ca:e0:dc:1a:d6:78:95:37:13:16:81:51:e8: 15:20:01:96:10:98:ca:3b:49:08:f1:bb:d1:c2:ed:95:f2:c3: fe:4e:3c:d8:27:53:5d:e1:71:9a:26:8f:27:cb:d9:cc:f3:05: 4c:38:bc:ab:3b:c2:24:b8:43:6b:43:58:15:60:e8:c0:f0:bd: 6f:ac:6d:e0:b1:ec:d8:46:6e:7d:b0:b0:61:67:88:77:1e:db: b7:4c:f1:b5:2b:68:0b:d6:46:b6:02:f5:e6:c0:75:fa:53:b3: be:5e:e5:f4:dc:15:0d:44:64:3e:97:71:4c:fb:0c:19:96:1b: c5:31:a3:d6:f5:cb:d5:49:32:51:f9:6c:2f:b1:f6:f6:d8:30: 10:7a:cf:62:cf:3f:44:6e:32:e3:81:e4:fb:b5:3a:17:97:4b: c9:7d:85:92:83:3b:13:af:8f:64:ad:94:07:f6:ea:4a:a5:74: 27:a3:c9:dc:b5:70:49:f9:a9:e3:19:be:15:25:5e:41:6d:18: 85:fd:ba:92:7e:ce:e1:64:9d:c4:29:69:52:5c:6e:d7:86:b4: f2:b6:36:e9:c7:bd:f2:c2:09:91:bc:1f:de:61:52:81:36:db: 43:a1:52:cc:75:f6:05:d9:f4:32:5c:8c:8d:9b:3d:55:37:fe: fa:e3:af:de -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUXrOZkj9a3Fvv/NFpU0rTzeaUxWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMTIwOTA1MjhaFw0yNjEyMTEwOTEwMjhaMDMxMTAvBgNV BAMTKEI1QTVBODBBREI0RjZBRUZEODg4MTlCNDJFOEI4QUI3MTNDMTdFNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpVqWksZhxP1SF3GHcMUzwfkG8 8/j9qVNyfL/3GZoEmlhTkfIVQ4d7mhkVtdoAd5+C9aR8HcoSm7j87JqB6UXg98v6 VJDO7X4g+1kiaZuvFnR8TmV5M28z3csY+WTidnY8dt/LmxCPdteEQzya8Gy5AaH0 4zaXSa+aOnbNR+BrDGig3ZNCtjblNtfeyvVsVn9dIeIwdsDi2gIJxpEhTDr/Ka1f JuAJ8iG6m7aSrcP3kmBVuuuI7NzeeHucQqD+J9iVXegkkzHMXOofJy0ciEXMvqEO F0oOOUIfOBsm/7ZQ/wQ1WMFgJENDhTqre7aBpvF1rlqgeGmO3bounboXHAHjAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUtaWoCttPau/YiBm0LouKtxPBfnUwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE2MTM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXHAX AwQAX4e8AwQAsl6OMA0GCSqGSIb3DQEBCwUAA4IBAQCsgFcKcsrg3BrWeJU3ExaB UegVIAGWEJjKO0kI8bvRwu2V8sP+TjzYJ1Nd4XGaJo8ny9nM8wVMOLyrO8IkuENr Q1gVYOjA8L1vrG3gsezYRm59sLBhZ4h3Htu3TPG1K2gL1ka2AvXmwHX6U7O+XuX0 3BUNRGQ+l3FM+wwZlhvFMaPW9cvVSTJR+Wwvsfb22DAQes9izz9EbjLjgeT7tToX l0vJfYWSgzsTr49krZQH9upKpXQno8nctXBJ+anjGb4VJV5BbRiF/bqSfs7hZJ3E KWlSXG7XhrTytjbpx73ywgmRvB/eYVKBNttDoVLMdfYF2fQyXIyNmz1VN/7646/e -----END CERTIFICATE-----Generated at Fri Dec 19 23:22:46 2025 by rpki-client