This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215370.roa File: AS215370.roa (raw, json) Hash identifier: ugxIcz8/IB4oBKBhdXkTN1f5NeTwVdWmJqJPYcQs5l0= Subject key identifier: 7C:3B:5F:0F:40:56:8A:0D:32:12:E8:7E:B1:78:CD:85:9B:F7:E0:1B Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 595225C67F7E77EEFC6361CD6D910799271EB052 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215370.roa Signing time: Wed 21 Jan 2026 13:07:30 +0000 ROA not before: Wed 21 Jan 2026 13:02:30 +0000 ROA not after: Wed 20 Jan 2027 13:07:30 +0000 asID: 215370 IP address blocks: 155.117.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:52:25:c6:7f:7e:77:ee:fc:63:61:cd:6d:91:07:99:27:1e:b0:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 21 13:02:30 2026 GMT Not After : Jan 20 13:07:30 2027 GMT Subject: CN=7C3B5F0F40568A0D3212E87EB178CD859BF7E01B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dd:d7:6c:3f:3c:65:50:2a:97:1a:e5:a8:63: 47:11:4e:02:03:f4:2b:2b:52:9c:4b:7a:25:8c:5f: 95:a2:b5:34:ea:be:8e:1c:ef:c8:ee:cf:e1:2d:c4: 89:61:56:5f:ab:ec:95:b3:55:c7:1f:59:1c:9c:a3: 65:55:48:d9:72:41:ab:07:e6:20:c1:45:e9:51:fb: f1:ce:43:23:20:2d:9d:0a:8c:0b:dd:8b:e8:0c:42: 3e:12:f3:2f:6f:a8:b2:9c:96:73:c2:ec:63:b7:b6: 79:4f:4d:4d:ae:e3:bb:38:8d:96:80:b1:18:38:e5: 5e:0e:36:16:21:6a:d0:b7:40:c5:1f:87:09:88:97: 76:2a:0f:e9:16:de:27:11:a9:8c:d4:0f:eb:42:d4: 5b:ee:53:3f:73:9a:3a:d3:53:08:0e:26:55:86:32: 5c:5d:79:86:ba:b1:10:7c:38:55:54:00:17:14:18: 86:88:0e:a2:30:57:de:b0:a7:1e:fc:46:4b:30:b5: a8:b2:81:f2:b0:53:87:ad:8c:42:53:c8:8d:a7:1f: 57:22:b0:1d:fd:02:27:52:bd:37:b1:1b:78:44:02: 0c:96:1a:fe:d3:61:4c:71:12:e5:06:e6:35:ee:07: dc:fd:ee:be:ec:5a:40:0d:fa:75:5c:fc:9a:46:75: ad:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3B:5F:0F:40:56:8A:0D:32:12:E8:7E:B1:78:CD:85:9B:F7:E0:1B X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215370.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.117.255.0/24 Signature Algorithm: sha256WithRSAEncryption 12:ca:04:3f:f4:db:ae:e4:10:7b:bc:03:d1:fb:c3:61:3b:84: c4:bb:04:fe:68:60:94:c3:1e:76:4a:55:b0:d3:5b:c9:24:9a: 0f:0d:c6:8f:82:6b:a9:0d:8b:5b:ee:2e:59:ca:d7:27:16:4e: 5c:09:6b:4a:98:2f:73:9c:61:60:b6:39:57:42:1f:6f:b3:11: 62:2d:eb:c6:1b:7a:e2:3e:6a:3d:ef:e2:58:9c:7e:97:4c:c7: 30:ed:a3:bf:be:61:82:29:03:9f:d4:7b:5e:ed:08:e6:c5:9f: c8:a3:1d:70:9e:57:e2:f9:2b:fb:da:d1:b7:22:8e:5d:4c:62: 53:20:1a:6b:9b:9a:97:20:44:fe:d8:fd:bf:a1:cb:b0:ed:2c: 22:5d:9e:1d:4e:28:49:db:b1:70:1d:fc:4c:9e:71:a6:c9:d1: 9c:31:2a:90:65:07:c4:64:12:d3:c8:92:1d:dc:ce:9b:a3:bb: c8:75:f7:78:e8:c0:6f:6e:de:8d:94:9d:53:29:b6:1f:15:69: 1f:49:ba:35:c7:41:21:78:d8:07:29:53:3f:56:c0:03:8b:5a: 8f:77:7f:71:50:08:27:ff:a2:1b:4e:46:42:e8:f6:cf:89:e3: bf:40:b6:3c:08:5e:62:b9:ab:8f:9e:dc:59:03:29:3c:6b:df: d8:6c:6e:df -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUWVIlxn9+d+78Y2HNbZEHmScesFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMjExMzAyMzBaFw0yNzAxMjAxMzA3MzBaMDMxMTAvBgNV BAMTKDdDM0I1RjBGNDA1NjhBMEQzMjEyRTg3RUIxNzhDRDg1OUJGN0UwMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC43ddsPzxlUCqXGuWoY0cRTgID 9CsrUpxLeiWMX5WitTTqvo4c78juz+EtxIlhVl+r7JWzVccfWRyco2VVSNlyQasH 5iDBRelR+/HOQyMgLZ0KjAvdi+gMQj4S8y9vqLKclnPC7GO3tnlPTU2u47s4jZaA sRg45V4ONhYhatC3QMUfhwmIl3YqD+kW3icRqYzUD+tC1FvuUz9zmjrTUwgOJlWG MlxdeYa6sRB8OFVUABcUGIaIDqIwV96wpx78RkswtaiygfKwU4etjEJTyI2nH1ci sB39AidSvTexG3hEAgyWGv7TYUxxEuUG5jXuB9z97r7sWkAN+nVc/JpGda1TAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUfDtfD0BWig0yEuh+sXjNhZv34BswHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE1MzcwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAm3X/ MA0GCSqGSIb3DQEBCwUAA4IBAQASygQ/9Nuu5BB7vAPR+8NhO4TEuwT+aGCUwx52 SlWw01vJJJoPDcaPgmupDYtb7i5ZytcnFk5cCWtKmC9znGFgtjlXQh9vsxFiLevG G3riPmo97+JYnH6XTMcw7aO/vmGCKQOf1Hte7QjmxZ/Iox1wnlfi+Sv72tG3Io5d TGJTIBprm5qXIET+2P2/ocuw7SwiXZ4dTihJ27FwHfxMnnGmydGcMSqQZQfEZBLT yJId3M6bo7vIdfd46MBvbt6NlJ1TKbYfFWkfSbo1x0EheNgHKVM/VsADi1qPd39x UAgn/6IbTkZC6PbPieO/QLY8CF5iuauPntxZAyk8a9/YbG7f -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:18 2026 by rpki-client