This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216138.roa File: AS216138.roa (raw, json) Hash identifier: nHctd2FhGhTdRMOz41JSJWc2Jtmzr2lmzNUbVv/cPXQ= Subject key identifier: F7:46:F8:C0:41:29:06:36:D9:C8:EA:CF:46:2F:FE:C4:90:72:58:91 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 6327D53FCF447357AC98C1B96046E2872A86FDF1 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216138.roa Signing time: Fri 12 Dec 2025 09:10:29 +0000 ROA not before: Fri 12 Dec 2025 09:05:29 +0000 ROA not after: Fri 11 Dec 2026 09:10:29 +0000 asID: 216138 IP address blocks: 96.62.0.0/19 maxlen: 24 96.62.85.0/24 maxlen: 24 143.14.78.0/24 maxlen: 24 148.135.234.0/23 maxlen: 24 148.135.240.0/23 maxlen: 24 150.241.162.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:27:d5:3f:cf:44:73:57:ac:98:c1:b9:60:46:e2:87:2a:86:fd:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 12 09:05:29 2025 GMT Not After : Dec 11 09:10:29 2026 GMT Subject: CN=F746F8C041290636D9C8EACF462FFEC490725891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5b:33:79:6a:39:7d:54:1a:5e:7b:5c:a8:4d: 8c:29:0a:52:8e:47:4c:96:1c:7d:25:e4:81:12:64: 63:23:9b:02:e2:02:9a:ca:c4:e3:7d:44:96:25:f3: ae:9b:79:d4:76:af:00:de:ad:e9:ea:bc:ee:d2:7e: 80:35:ab:c5:3d:72:3c:d5:8e:ce:d3:44:dc:9e:68: d7:4d:a8:d3:a2:e5:f3:7a:b9:44:25:37:16:90:3b: 60:5b:f8:57:8f:1a:c5:28:d2:86:9b:39:d6:ae:aa: 3b:62:27:33:2f:82:8b:71:5c:d3:66:f5:65:3b:10: 4a:7c:6c:8a:6a:c5:ce:6d:bb:bd:6a:15:cd:f2:11: 22:fd:71:f1:8b:97:3e:a4:26:ea:f5:64:95:fc:c6: ab:44:bd:50:3d:9c:af:f5:0b:d2:f6:d6:70:be:74: 12:66:c0:43:6f:43:5f:81:cd:ef:23:2a:a7:78:8b: 87:ff:72:5e:b7:80:e1:d4:70:65:1b:16:12:52:01: 89:82:57:cf:51:bd:6f:5b:13:0b:32:21:aa:c9:49: 48:df:bc:3e:48:cd:c8:04:23:96:5a:d0:b6:2e:1f: f8:c1:11:c2:8b:72:4b:01:0d:ae:d6:87:5d:69:cb: 27:e2:01:ec:aa:7f:f2:64:f3:16:b1:9a:bd:a4:08: 07:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:46:F8:C0:41:29:06:36:D9:C8:EA:CF:46:2F:FE:C4:90:72:58:91 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.62.0.0/19 96.62.85.0/24 143.14.78.0/24 148.135.234.0/23 148.135.240.0/23 150.241.162.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:7a:0d:52:d9:a9:a2:38:32:cd:34:57:08:21:c1:19:81:9e: 78:fd:c4:ba:1f:81:95:44:b6:ba:7c:e6:7a:db:16:d0:83:d5: c1:74:72:2c:dd:bf:a2:57:1e:28:ca:37:4a:3f:05:9a:3e:fc: 55:9d:5d:a2:66:10:47:1c:fc:7e:09:df:e7:00:77:1e:c9:d7: 24:d6:ba:2d:78:15:e2:1a:ac:0e:26:81:dc:c3:8a:9a:0b:de: 45:a7:15:ae:cd:2c:9d:7d:d5:76:c2:09:b1:f5:7e:62:a4:ff: 44:0f:38:b1:18:b7:a6:1b:39:dd:ce:0a:d9:69:22:20:01:8f: 68:a7:b0:b3:41:94:81:3d:a5:32:4c:99:12:64:e7:20:e9:5d: c9:b6:37:9c:14:02:53:b4:a5:35:64:bf:c1:2d:80:1e:df:35: 0a:5a:dd:d5:cd:e7:05:b7:f0:37:e1:36:77:73:24:4b:7a:e2: 06:91:4c:45:a0:65:7e:31:c7:45:84:ff:d0:90:14:bc:9f:e3: 96:eb:6f:c1:f9:4f:ba:ab:f9:67:1d:59:22:f9:4c:57:e9:b3: e2:af:2f:41:62:c2:39:8a:6e:5f:8f:c2:6b:23:73:1b:91:89: e0:69:9f:2f:40:5f:72:14:39:83:39:24:ff:36:c9:a8:c1:1e: 45:de:5d:6e -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUYyfVP89Ec1esmMG5YEbihyqG/fEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMTIwOTA1MjlaFw0yNjEyMTEwOTEwMjlaMDMxMTAvBgNV BAMTKEY3NDZGOEMwNDEyOTA2MzZEOUM4RUFDRjQ2MkZGRUM0OTA3MjU4OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWzN5ajl9VBpee1yoTYwpClKO R0yWHH0l5IESZGMjmwLiAprKxON9RJYl866bedR2rwDerenqvO7SfoA1q8U9cjzV js7TRNyeaNdNqNOi5fN6uUQlNxaQO2Bb+FePGsUo0oabOdauqjtiJzMvgotxXNNm 9WU7EEp8bIpqxc5tu71qFc3yESL9cfGLlz6kJur1ZJX8xqtEvVA9nK/1C9L21nC+ dBJmwENvQ1+Bze8jKqd4i4f/cl63gOHUcGUbFhJSAYmCV89RvW9bEwsyIarJSUjf vD5IzcgEI5Za0LYuH/jBEcKLcksBDa7Wh11pyyfiAeyqf/Jk8xaxmr2kCAeVAgMB AAGjggIoMIICJDAdBgNVHQ4EFgQU90b4wEEpBjbZyOrPRi/+xJByWJEwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE2MTM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQFYD4A AwQAYD5VAwQAjw5OAwQBlIfqAwQBlIfwAwQBlvGiMA0GCSqGSIb3DQEBCwUAA4IB AQALeg1S2amiODLNNFcIIcEZgZ54/cS6H4GVRLa6fOZ62xbQg9XBdHIs3b+iVx4o yjdKPwWaPvxVnV2iZhBHHPx+Cd/nAHceydck1roteBXiGqwOJoHcw4qaC95FpxWu zSydfdV2wgmx9X5ipP9EDzixGLemGzndzgrZaSIgAY9op7CzQZSBPaUyTJkSZOcg 6V3JtjecFAJTtKU1ZL/BLYAe3zUKWt3VzecFt/A34TZ3cyRLeuIGkUxFoGV+McdF hP/QkBS8n+OW62/B+U+6q/lnHVki+UxX6bPiry9BYsI5im5fj8JrI3MbkYngaZ8v QF9yFDmDOST/NsmowR5F3l1u -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:58 2026 by rpki-client