This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13213.roa File: AS13213.roa (raw, json) Hash identifier: hPqaSylXBDoDqaGKR76m4ZuVThcoH259Od5ORLH17VA= Subject key identifier: D1:C7:34:F2:C0:02:1A:53:3E:9E:5E:93:C3:56:B5:53:74:AE:42:FD Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 4782D349C916B394773C0D3F99858B3E48F0354A Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13213.roa Signing time: Tue 02 Dec 2025 20:19:21 +0000 ROA not before: Tue 02 Dec 2025 20:14:21 +0000 ROA not after: Tue 01 Dec 2026 20:19:21 +0000 asID: 13213 IP address blocks: 2.58.29.0/24 maxlen: 24 5.181.133.0/24 maxlen: 24 45.81.2.0/24 maxlen: 24 45.89.251.0/24 maxlen: 24 45.137.31.0/24 maxlen: 24 45.139.181.0/24 maxlen: 24 109.106.2.0/24 maxlen: 24 130.185.125.0/24 maxlen: 24 179.61.167.0/24 maxlen: 24 179.61.175.0/24 maxlen: 24 179.61.178.0/24 maxlen: 24 179.61.179.0/24 maxlen: 24 179.61.218.0/24 maxlen: 24 179.61.227.0/24 maxlen: 24 179.61.229.0/24 maxlen: 24 179.61.233.0/24 maxlen: 24 179.61.241.0/24 maxlen: 24 179.61.243.0/24 maxlen: 24 179.61.253.0/24 maxlen: 24 181.41.204.0/24 maxlen: 24 181.41.208.0/24 maxlen: 24 181.214.60.0/24 maxlen: 24 181.214.61.0/24 maxlen: 24 181.214.64.0/24 maxlen: 24 181.214.65.0/24 maxlen: 24 181.214.66.0/24 maxlen: 24 181.214.67.0/24 maxlen: 24 181.214.68.0/24 maxlen: 24 181.214.69.0/24 maxlen: 24 181.214.86.0/24 maxlen: 24 181.214.103.0/24 maxlen: 24 181.214.109.0/24 maxlen: 24 181.214.114.0/24 maxlen: 24 181.214.116.0/24 maxlen: 24 181.214.126.0/24 maxlen: 24 181.214.200.0/24 maxlen: 24 181.214.202.0/24 maxlen: 24 181.214.203.0/24 maxlen: 24 181.214.225.0/24 maxlen: 24 181.215.3.0/24 maxlen: 24 181.215.12.0/24 maxlen: 24 181.215.19.0/24 maxlen: 24 181.215.22.0/24 maxlen: 24 181.215.23.0/24 maxlen: 24 181.215.31.0/24 maxlen: 24 181.215.41.0/24 maxlen: 24 181.215.55.0/24 maxlen: 24 181.215.58.0/24 maxlen: 24 181.215.62.0/24 maxlen: 24 181.215.64.0/24 maxlen: 24 181.215.80.0/24 maxlen: 24 181.215.81.0/24 maxlen: 24 181.215.82.0/24 maxlen: 24 181.215.83.0/24 maxlen: 24 181.215.84.0/24 maxlen: 24 181.215.85.0/24 maxlen: 24 181.215.86.0/24 maxlen: 24 181.215.88.0/24 maxlen: 24 181.215.95.0/24 maxlen: 24 181.215.96.0/24 maxlen: 24 181.215.98.0/24 maxlen: 24 181.215.100.0/24 maxlen: 24 181.215.103.0/24 maxlen: 24 181.215.105.0/24 maxlen: 24 181.215.106.0/24 maxlen: 24 181.215.108.0/24 maxlen: 24 181.215.109.0/24 maxlen: 24 181.215.110.0/24 maxlen: 24 181.215.111.0/24 maxlen: 24 181.215.113.0/24 maxlen: 24 181.215.114.0/24 maxlen: 24 181.215.115.0/24 maxlen: 24 181.215.117.0/24 maxlen: 24 181.215.118.0/24 maxlen: 24 181.215.126.0/24 maxlen: 24 181.215.129.0/24 maxlen: 24 181.215.131.0/24 maxlen: 24 181.215.150.0/24 maxlen: 24 181.215.155.0/24 maxlen: 24 181.215.158.0/24 maxlen: 24 181.215.217.0/24 maxlen: 24 185.34.43.0/24 maxlen: 24 185.142.24.0/24 maxlen: 24 185.143.229.0/24 maxlen: 24 185.151.59.0/24 maxlen: 24 185.158.100.0/24 maxlen: 24 185.158.101.0/24 maxlen: 24 185.158.102.0/24 maxlen: 24 185.158.103.0/24 maxlen: 24 185.158.134.0/24 maxlen: 24 191.96.6.0/24 maxlen: 24 191.96.35.0/24 maxlen: 24 191.96.46.0/24 maxlen: 24 191.96.105.0/24 maxlen: 24 191.96.116.0/24 maxlen: 24 191.96.120.0/24 maxlen: 24 191.96.126.0/24 maxlen: 24 191.96.136.0/24 maxlen: 24 191.96.140.0/24 maxlen: 24 191.96.141.0/24 maxlen: 24 191.96.143.0/24 maxlen: 24 191.96.149.0/24 maxlen: 24 191.96.157.0/24 maxlen: 24 191.96.160.0/24 maxlen: 24 191.96.161.0/24 maxlen: 24 191.96.162.0/24 maxlen: 24 191.96.163.0/24 maxlen: 24 191.96.164.0/24 maxlen: 24 191.96.180.0/24 maxlen: 24 191.96.182.0/24 maxlen: 24 191.96.222.0/24 maxlen: 24 191.96.239.0/24 maxlen: 24 191.101.4.0/24 maxlen: 24 191.101.5.0/24 maxlen: 24 191.101.10.0/24 maxlen: 24 191.101.43.0/24 maxlen: 24 191.101.99.0/24 maxlen: 24 191.101.119.0/24 maxlen: 24 191.101.159.0/24 maxlen: 24 191.101.167.0/24 maxlen: 24 191.101.225.0/24 maxlen: 24 191.101.255.0/24 maxlen: 24 213.109.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:82:d3:49:c9:16:b3:94:77:3c:0d:3f:99:85:8b:3e:48:f0:35:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 2 20:14:21 2025 GMT Not After : Dec 1 20:19:21 2026 GMT Subject: CN=D1C734F2C0021A533E9E5E93C356B55374AE42FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:76:31:4f:c0:8f:ee:99:74:28:72:c3:a8:d8: d0:5c:8b:15:ec:3f:74:16:20:44:40:c7:29:a8:96: d4:a7:7a:66:ec:38:ec:07:6b:b0:14:b3:ce:3a:dc: 03:03:81:e5:eb:be:25:30:26:25:ff:f4:aa:39:06: ec:de:90:24:8a:59:76:22:e9:8b:1f:51:56:65:74: c6:e4:03:98:da:7a:20:3c:bc:78:62:7a:90:80:8b: ba:91:de:ee:65:a7:90:55:a9:c2:71:54:4a:8a:3c: f5:df:af:ea:79:bf:fa:fb:d3:74:8c:4f:bf:99:6e: 1b:15:2a:87:ad:9c:cd:27:ca:09:81:c0:99:8f:fb: ee:ac:e2:6e:68:37:fc:b9:a8:1a:1e:a9:3c:dc:25: 94:90:08:d0:9d:54:d8:4a:91:46:8a:ec:1f:7e:d9: 2f:78:77:83:bd:2b:90:76:5e:8b:d6:1e:11:29:4f: 4a:01:b1:a3:01:82:b0:45:7b:c0:3f:ad:fe:d0:f8: d0:61:6e:53:c7:3f:3a:48:c3:8d:ff:ad:64:0d:e4: 01:cd:b4:25:7b:e9:7f:c3:71:95:0c:82:df:6f:a0: ba:be:cd:30:71:c1:f6:79:5b:81:4c:48:33:88:5f: 3e:57:a4:9f:38:7c:28:67:e1:03:3f:9a:ab:a9:10: f6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C7:34:F2:C0:02:1A:53:3E:9E:5E:93:C3:56:B5:53:74:AE:42:FD X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS13213.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.29.0/24 5.181.133.0/24 45.81.2.0/24 45.89.251.0/24 45.137.31.0/24 45.139.181.0/24 109.106.2.0/24 130.185.125.0/24 179.61.167.0/24 179.61.175.0/24 179.61.178.0/23 179.61.218.0/24 179.61.227.0/24 179.61.229.0/24 179.61.233.0/24 179.61.241.0/24 179.61.243.0/24 179.61.253.0/24 181.41.204.0/24 181.41.208.0/24 181.214.60.0/23 181.214.64.0-181.214.69.255 181.214.86.0/24 181.214.103.0/24 181.214.109.0/24 181.214.114.0/24 181.214.116.0/24 181.214.126.0/24 181.214.200.0/24 181.214.202.0/23 181.214.225.0/24 181.215.3.0/24 181.215.12.0/24 181.215.19.0/24 181.215.22.0/23 181.215.31.0/24 181.215.41.0/24 181.215.55.0/24 181.215.58.0/24 181.215.62.0/24 181.215.64.0/24 181.215.80.0-181.215.86.255 181.215.88.0/24 181.215.95.0-181.215.96.255 181.215.98.0/24 181.215.100.0/24 181.215.103.0/24 181.215.105.0-181.215.106.255 181.215.108.0/22 181.215.113.0-181.215.115.255 181.215.117.0-181.215.118.255 181.215.126.0/24 181.215.129.0/24 181.215.131.0/24 181.215.150.0/24 181.215.155.0/24 181.215.158.0/24 181.215.217.0/24 185.34.43.0/24 185.142.24.0/24 185.143.229.0/24 185.151.59.0/24 185.158.100.0/22 185.158.134.0/24 191.96.6.0/24 191.96.35.0/24 191.96.46.0/24 191.96.105.0/24 191.96.116.0/24 191.96.120.0/24 191.96.126.0/24 191.96.136.0/24 191.96.140.0/23 191.96.143.0/24 191.96.149.0/24 191.96.157.0/24 191.96.160.0-191.96.164.255 191.96.180.0/24 191.96.182.0/24 191.96.222.0/24 191.96.239.0/24 191.101.4.0/23 191.101.10.0/24 191.101.43.0/24 191.101.99.0/24 191.101.119.0/24 191.101.159.0/24 191.101.167.0/24 191.101.225.0/24 191.101.255.0/24 213.109.171.0/24 Signature Algorithm: sha256WithRSAEncryption 69:29:ba:26:8d:ff:25:26:88:b2:83:90:ad:76:03:64:c6:71: 88:b9:5b:f7:bd:d2:21:d6:fe:58:80:b8:91:8a:20:83:c9:36: e1:a7:80:a2:51:23:77:2d:2d:22:fb:20:60:e8:1d:e7:63:7f: 81:3e:4f:d8:13:73:4d:6b:c8:b7:2c:0b:ec:4b:61:7a:6e:04: 7f:a5:c0:b2:4e:87:d1:a1:65:60:af:da:1c:fc:77:7d:29:94: 06:a7:bc:fe:cc:a3:93:11:8b:94:90:fb:fc:49:85:64:f9:85: 01:1f:9f:66:0e:f6:15:07:2f:1a:ba:d9:38:c1:be:30:84:9c: df:42:84:ed:b2:c7:e4:57:b7:9f:51:2e:0c:75:22:63:2e:36: 14:1d:d8:78:31:02:b5:bc:c0:fe:91:83:fb:13:54:d5:1e:30: 30:72:e6:6d:18:e5:c3:d9:3c:85:98:04:33:ed:28:26:e0:c6: 48:15:ed:60:56:7c:28:71:b9:1a:19:e8:8b:9c:3c:b0:aa:5f: aa:d5:fb:c8:cc:6c:6e:6e:b9:a7:99:d0:a6:fb:7c:06:07:4f: dc:a8:49:3c:92:4a:99:8c:ac:ec:a5:ce:49:54:d7:49:c1:94: 18:5c:ac:8a:08:65:c8:81:63:ac:e8:7d:dc:c1:d6:de:d4:2a: f8:85:ad:04 -----BEGIN CERTIFICATE----- MIIHXTCCBkWgAwIBAgIUR4LTSckWs5R3PA0/mYWLPkjwNUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDIyMDE0MjFaFw0yNjEyMDEyMDE5MjFaMDMxMTAvBgNV BAMTKEQxQzczNEYyQzAwMjFBNTMzRTlFNUU5M0MzNTZCNTUzNzRBRTQyRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDndjFPwI/umXQocsOo2NBcixXs P3QWIERAxymoltSnembsOOwHa7AUs8463AMDgeXrviUwJiX/9Ko5BuzekCSKWXYi 6YsfUVZldMbkA5jaeiA8vHhiepCAi7qR3u5lp5BVqcJxVEqKPPXfr+p5v/r703SM T7+ZbhsVKoetnM0nygmBwJmP++6s4m5oN/y5qBoeqTzcJZSQCNCdVNhKkUaK7B9+ 2S94d4O9K5B2XovWHhEpT0oBsaMBgrBFe8A/rf7Q+NBhblPHPzpIw43/rWQN5AHN tCV76X/DcZUMgt9voLq+zTBxwfZ5W4FMSDOIXz5XpJ84fChn4QM/mqupEPbBAgMB AAGjggRnMIIEYzAdBgNVHQ4EFgQU0cc08sACGlM+nl6Tw1a1U3SuQv0wHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTMyMTMucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwggJ7BggrBgEFBQcBBwEB/wSCAmowggJmMIICYgQCAAEw ggJaAwQAAjodAwQABbWFAwQALVECAwQALVn7AwQALYkfAwQALYu1AwQAbWoCAwQA grl9AwQAsz2nAwQAsz2vAwQBsz2yAwQAsz3aAwQAsz3jAwQAsz3lAwQAsz3pAwQA sz3xAwQAsz3zAwQAsz39AwQAtSnMAwQAtSnQAwQBtdY8MAwDBAa11kADBAG11kQD BAC11lYDBAC11mcDBAC11m0DBAC11nIDBAC11nQDBAC11n4DBAC11sgDBAG11soD BAC11uEDBAC11wMDBAC11wwDBAC11xMDBAG11xYDBAC11x8DBAC11ykDBAC11zcD BAC11zoDBAC11z4DBAC110AwDAMEBLXXUAMEALXXVgMEALXXWDAMAwQAtddfAwQA tddgAwQAtddiAwQAtddkAwQAtddnMAwDBAC112kDBAC112oDBAK112wwDAMEALXX cQMEArXXcDAMAwQAtdd1AwQAtdd2AwQAtdd+AwQAtdeBAwQAtdeDAwQAtdeWAwQA tdebAwQAtdeeAwQAtdfZAwQAuSIrAwQAuY4YAwQAuY/lAwQAuZc7AwQCuZ5kAwQA uZ6GAwQAv2AGAwQAv2AjAwQAv2AuAwQAv2BpAwQAv2B0AwQAv2B4AwQAv2B+AwQA v2CIAwQBv2CMAwQAv2CPAwQAv2CVAwQAv2CdMAwDBAW/YKADBAC/YKQDBAC/YLQD BAC/YLYDBAC/YN4DBAC/YO8DBAG/ZQQDBAC/ZQoDBAC/ZSsDBAC/ZWMDBAC/ZXcD BAC/ZZ8DBAC/ZacDBAC/ZeEDBAC/Zf8DBADVbaswDQYJKoZIhvcNAQELBQADggEB AGkpuiaN/yUmiLKDkK12A2TGcYi5W/e90iHW/liAuJGKIIPJNuGngKJRI3ctLSL7 IGDoHedjf4E+T9gTc01ryLcsC+xLYXpuBH+lwLJOh9GhZWCv2hz8d30plAanvP7M o5MRi5SQ+/xJhWT5hQEfn2YO9hUHLxq62TjBvjCEnN9ChO2yx+RXt59RLgx1ImMu NhQd2HgxArW8wP6Rg/sTVNUeMDBy5m0Y5cPZPIWYBDPtKCbgxkgV7WBWfChxuRoZ 6IucPLCqX6rV+8jMbG5uuaeZ0Kb7fAYHT9yoSTySSpmMrOylzklU10nBlBhcrIoI ZciBY6zofdzB1t7UKviFrQQ= -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:49 2025 by rpki-client