This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154410.roa File: AS154410.roa (raw, json) Hash identifier: LZ1ZOuz0yFvkVYFs7QhUIAtzZ9cJfkdmQK5qHtNUkbg= Subject key identifier: 79:1C:8E:CC:FE:CB:DE:85:6A:79:34:38:05:BD:AD:28:3C:85:85:12 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 2D052762D9B823BFFE5E58C634A44D66A64BE053 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154410.roa Signing time: Thu 22 Jan 2026 18:04:49 +0000 ROA not before: Thu 22 Jan 2026 17:59:49 +0000 ROA not after: Thu 21 Jan 2027 18:04:49 +0000 asID: 154410 IP address blocks: 2a13:9500:12e::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:05:27:62:d9:b8:23:bf:fe:5e:58:c6:34:a4:4d:66:a6:4b:e0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 22 17:59:49 2026 GMT Not After : Jan 21 18:04:49 2027 GMT Subject: CN=791C8ECCFECBDE856A79343805BDAD283C858512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c4:cc:58:32:c7:e5:83:a9:b5:8b:1a:30:0c: 03:2e:f2:15:0b:32:0a:37:94:29:01:cf:92:4e:36: 23:ec:11:8b:95:2d:e2:76:22:e4:c8:74:56:f7:41: 56:e9:c5:6a:26:4e:87:b1:e2:2a:cc:89:e6:3c:18: 46:2d:6b:fb:49:2e:8f:15:de:1e:76:87:7b:d5:6d: a1:80:00:a0:21:2d:e8:94:32:96:f8:11:76:c2:ec: d0:43:be:3d:7a:41:99:92:56:8d:9a:17:64:27:77: 2f:9a:e2:89:43:c9:6a:a8:de:25:bf:3f:52:45:57: 20:15:cc:16:cc:16:89:d1:0e:9c:c5:9d:d7:60:f3: a6:5f:d8:04:b1:b4:89:38:b1:b0:c4:3b:e5:f3:a7: f5:7a:f1:59:9e:d5:29:a4:84:48:14:c8:c7:d7:3b: d5:96:25:5f:48:80:3a:18:66:0f:7f:39:be:87:ce: 79:fb:65:2d:5d:ec:84:d5:88:6d:5c:fc:2e:5f:23: 72:44:78:db:44:04:5e:62:03:f5:7a:9e:54:0f:99: 2d:16:90:0f:98:67:98:c7:87:6b:1f:dd:0e:04:3b: 13:e5:c1:bd:14:cd:8a:da:6d:9c:b0:4a:d3:9a:94: 88:58:6d:53:89:5b:2a:eb:6b:9a:07:3f:fe:d1:f5: 65:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1C:8E:CC:FE:CB:DE:85:6A:79:34:38:05:BD:AD:28:3C:85:85:12 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS154410.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9500:12e::/48 Signature Algorithm: sha256WithRSAEncryption 72:26:10:97:25:f2:1d:0e:a8:e1:cc:64:11:f0:c8:b5:41:83: a0:f4:6a:55:c8:e8:e3:06:3d:3f:77:7f:1c:ea:eb:f7:1d:00: 67:dd:0d:b5:9e:9c:a7:cd:cf:ba:b5:6e:0c:cb:f2:20:72:41: c6:a7:f3:a6:36:0b:2e:9f:e4:79:85:2a:94:da:0e:9a:41:8a: b7:1e:5f:2e:f2:36:78:d7:93:ad:24:c7:18:18:d4:74:3c:32: ea:f7:91:cd:1d:f2:cf:6d:ca:79:65:92:20:fc:a0:50:13:8f: d2:d0:24:6d:88:78:56:81:44:e6:01:25:dc:cc:4a:3d:9a:3c: 3e:b9:68:6f:73:80:18:14:a7:f7:03:7c:4d:0b:05:d0:25:12: cb:15:53:00:a3:67:c1:4f:5c:17:7e:aa:db:4a:8c:60:73:b1: 1c:c3:dd:0a:0b:f8:44:eb:0f:f8:c8:8f:2e:3c:8b:57:34:d5: 53:c6:e4:28:ed:37:54:ff:8b:ff:ee:1a:bd:fc:51:fa:82:29: 67:14:7b:15:80:40:74:c6:4a:40:a7:8e:c8:63:26:de:13:56: 5b:8d:cb:14:74:65:fe:ff:1f:3f:fd:8b:e9:02:80:27:43:3c: 7c:a6:f2:02:0d:4a:a7:38:3a:51:cf:86:33:ee:c5:96:43:c7: bc:c1:67:34 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIULQUnYtm4I7/+XljGNKRNZqZL4FMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMjIxNzU5NDlaFw0yNzAxMjExODA0NDlaMDMxMTAvBgNV BAMTKDc5MUM4RUNDRkVDQkRFODU2QTc5MzQzODA1QkRBRDI4M0M4NTg1MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNxMxYMsflg6m1ixowDAMu8hUL Mgo3lCkBz5JONiPsEYuVLeJ2IuTIdFb3QVbpxWomToex4irMieY8GEYta/tJLo8V 3h52h3vVbaGAAKAhLeiUMpb4EXbC7NBDvj16QZmSVo2aF2Qndy+a4olDyWqo3iW/ P1JFVyAVzBbMFonRDpzFnddg86Zf2ASxtIk4sbDEO+Xzp/V68Vme1SmkhEgUyMfX O9WWJV9IgDoYZg9/Ob6Hznn7ZS1d7ITViG1c/C5fI3JEeNtEBF5iA/V6nlQPmS0W kA+YZ5jHh2sf3Q4EOxPlwb0UzYrabZywStOalIhYbVOJWyrra5oHP/7R9WVfAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUeRyOzP7L3oVqeTQ4Bb2tKDyFhRIwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTU0NDEwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV AAEuMA0GCSqGSIb3DQEBCwUAA4IBAQByJhCXJfIdDqjhzGQR8Mi1QYOg9GpVyOjj Bj0/d38c6uv3HQBn3Q21npynzc+6tW4My/IgckHGp/OmNgsun+R5hSqU2g6aQYq3 Hl8u8jZ415OtJMcYGNR0PDLq95HNHfLPbcp5ZZIg/KBQE4/S0CRtiHhWgUTmASXc zEo9mjw+uWhvc4AYFKf3A3xNCwXQJRLLFVMAo2fBT1wXfqrbSoxgc7Ecw90KC/hE 6w/4yI8uPItXNNVTxuQo7TdU/4v/7hq9/FH6gilnFHsVgEB0xkpAp47IYybeE1Zb jcsUdGX+/x8//YvpAoAnQzx8pvICDUqnODpRz4Yz7sWWQ8e8wWc0 -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:47 2026 by rpki-client