This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216096.roa File: AS216096.roa (raw, json) Hash identifier: mI+qwNioDoHqcP1KLIYm/cSp8902X1dszgtl2hLChTo= Subject key identifier: 4B:BF:8F:94:B0:28:23:9D:D5:A7:89:D1:A1:00:5B:CA:B6:EF:0F:D7 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 76E37D02A5C00CFC97E078B040B36879EE685D25 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216096.roa Signing time: Tue 20 Jan 2026 14:22:01 +0000 ROA not before: Tue 20 Jan 2026 14:17:01 +0000 ROA not after: Tue 19 Jan 2027 14:22:01 +0000 asID: 216096 IP address blocks: 2a13:9500:129::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e3:7d:02:a5:c0:0c:fc:97:e0:78:b0:40:b3:68:79:ee:68:5d:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 20 14:17:01 2026 GMT Not After : Jan 19 14:22:01 2027 GMT Subject: CN=4BBF8F94B028239DD5A789D1A1005BCAB6EF0FD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bf:ef:fc:87:de:cb:d5:9e:17:aa:1a:55:0c: e8:0a:9a:b7:3e:db:6b:db:b5:69:29:19:16:d8:f8: 24:68:fe:7e:ad:57:1a:7c:7c:4b:c5:c2:47:82:72: 4a:c3:1e:b9:3b:c0:8e:64:c1:52:0c:07:f8:55:73: 61:3a:4f:0c:d0:37:1a:80:1b:5c:7f:5a:06:3b:ad: 7c:5c:35:6c:18:cf:f2:0c:d7:7d:a9:41:db:3a:e4: b5:cf:b9:03:cc:ee:01:59:71:43:4f:13:91:79:0a: ad:aa:ed:08:8d:02:d5:09:e2:88:bf:92:87:55:73: 13:46:a6:47:ab:7b:07:ee:5d:89:2f:93:b2:8e:0e: 92:8a:03:7f:33:d0:6b:8f:1d:55:70:6e:10:a7:4d: 90:e2:82:16:12:09:03:46:2b:19:29:ce:76:56:a9: 8c:ee:e4:0e:12:eb:a9:48:d9:2c:8b:c4:7f:c0:be: a1:f0:06:ff:ba:f8:3f:2f:32:85:ca:85:08:c5:e1: 63:7e:c1:d9:fb:69:bd:71:7f:8a:a0:20:a1:c6:aa: 77:59:0e:48:10:4a:ab:49:91:38:85:81:bd:d3:cb: ce:7b:a5:78:da:1b:06:dc:d5:a2:b1:fa:07:84:bf: bd:4f:36:37:d0:39:dd:88:82:e1:77:fe:71:d2:43: 9f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BF:8F:94:B0:28:23:9D:D5:A7:89:D1:A1:00:5B:CA:B6:EF:0F:D7 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216096.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9500:129::/48 Signature Algorithm: sha256WithRSAEncryption 06:5f:67:47:b7:1f:06:e4:c7:2c:ca:19:2a:83:ad:8d:f2:46: 61:24:33:a1:6b:ec:50:d5:af:37:c1:e3:11:6a:6e:7a:9d:1f: 33:da:8a:9c:2e:aa:7b:98:7a:98:58:f7:94:94:a0:68:8d:df: 87:60:72:d0:1f:3c:43:10:9f:33:e5:7a:2b:5d:74:11:c8:8d: d1:8e:e0:8f:f2:6a:92:91:0c:9e:eb:f2:85:75:a7:12:c4:7f: c7:3c:8d:b2:34:3d:88:d8:b3:b7:7b:34:da:dd:db:64:ab:f1: 26:dd:3d:8b:e3:5f:7f:d9:9d:2d:9a:32:d9:24:86:1e:ab:e9: e7:e9:47:41:b5:12:78:05:8a:50:d1:31:e5:f0:ed:d4:5f:a4: ac:65:f5:37:99:4e:ec:d7:79:dc:57:57:e3:c6:2c:52:09:b7: 17:81:d1:5b:2b:84:c9:66:6a:69:4e:de:fb:99:73:a3:70:a8: 02:84:31:b8:1e:f3:53:9b:3d:f3:ac:2c:c2:86:01:26:63:b5: c2:cd:d6:a9:df:b4:74:26:07:9d:b0:cd:cc:21:98:84:dc:b5: 3d:ec:e2:6d:3d:75:46:3c:7a:4e:3a:5b:9a:1e:14:e9:cf:15: 6a:c5:32:b0:f8:f5:e9:4c:a1:f4:47:dc:ac:a8:02:8c:30:31: 26:33:25:17 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUduN9AqXADPyX4HiwQLNoee5oXSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMjAxNDE3MDFaFw0yNzAxMTkxNDIyMDFaMDMxMTAvBgNV BAMTKDRCQkY4Rjk0QjAyODIzOURENUE3ODlEMUExMDA1QkNBQjZFRjBGRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrv+/8h97L1Z4XqhpVDOgKmrc+ 22vbtWkpGRbY+CRo/n6tVxp8fEvFwkeCckrDHrk7wI5kwVIMB/hVc2E6TwzQNxqA G1x/WgY7rXxcNWwYz/IM132pQds65LXPuQPM7gFZcUNPE5F5Cq2q7QiNAtUJ4oi/ kodVcxNGpkerewfuXYkvk7KODpKKA38z0GuPHVVwbhCnTZDighYSCQNGKxkpznZW qYzu5A4S66lI2SyLxH/AvqHwBv+6+D8vMoXKhQjF4WN+wdn7ab1xf4qgIKHGqndZ DkgQSqtJkTiFgb3Ty857pXjaGwbc1aKx+geEv71PNjfQOd2IguF3/nHSQ599AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUS7+PlLAoI53Vp4nRoQBbyrbvD9cwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE2MDk2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV AAEpMA0GCSqGSIb3DQEBCwUAA4IBAQAGX2dHtx8G5Mcsyhkqg62N8kZhJDOha+xQ 1a83weMRam56nR8z2oqcLqp7mHqYWPeUlKBojd+HYHLQHzxDEJ8z5XorXXQRyI3R juCP8mqSkQye6/KFdacSxH/HPI2yND2I2LO3ezTa3dtkq/Em3T2L419/2Z0tmjLZ JIYeq+nn6UdBtRJ4BYpQ0THl8O3UX6SsZfU3mU7s13ncV1fjxixSCbcXgdFbK4TJ ZmppTt77mXOjcKgChDG4HvNTmz3zrCzChgEmY7XCzdap37R0JgedsM3MIZiE3LU9 7OJtPXVGPHpOOluaHhTpzxVqxTKw+PXpTKH0R9ysqAKMMDEmMyUX -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:04 2026 by rpki-client