This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400175.roa
File: AS400175.roa (raw, json)
Hash identifier: f98CtV9LkdIilyvQzrN1lKxrltOUcaT6qcHygvizLnk=
Subject key identifier: F0:1F:68:8E:C4:7B:AA:CE:E2:18:F0:0E:1B:2B:2A:03:84:38:D4:FD
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 0123AC7D8B38F56BE19FF9FD9B6B919A48680636
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400175.roa
Signing time: Thu 22 Jan 2026 09:08:22 +0000
ROA not before: Thu 22 Jan 2026 09:03:22 +0000
ROA not after: Thu 21 Jan 2027 09:08:22 +0000
asID: 400175
IP address blocks: 2a13:9500:12b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:23:ac:7d:8b:38:f5:6b:e1:9f:f9:fd:9b:6b:91:9a:48:68:06:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 22 09:03:22 2026 GMT
Not After : Jan 21 09:08:22 2027 GMT
Subject: CN=F01F688EC47BAACEE218F00E1B2B2A038438D4FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:a2:d6:71:54:82:80:9d:68:06:7b:25:75:
99:15:f7:76:ef:b1:27:16:eb:48:79:2b:0e:74:1b:
8b:1e:5a:c5:5e:f3:12:6d:bd:50:df:4e:32:85:44:
1d:37:72:0f:0e:94:a6:e0:91:24:1d:41:c7:4c:b7:
d0:1a:88:90:09:c5:c1:c5:27:5e:7a:34:43:ea:23:
7f:28:73:3b:57:3f:71:12:7e:9a:63:b5:a3:18:5c:
9e:ce:c0:02:fb:02:46:d6:9a:19:95:58:d6:a5:c6:
16:ec:98:10:5e:42:a5:e9:f4:54:21:76:0b:a9:ef:
c9:54:25:10:e3:6b:c7:42:e1:74:d2:51:0c:d6:5c:
02:2a:9a:be:be:44:24:e3:cf:1f:7b:56:9c:68:f0:
49:1e:7d:d6:b8:76:1c:c7:73:fa:f4:47:17:7d:57:
47:0a:b0:6c:6f:34:54:87:8d:4c:5c:12:ea:ac:ef:
34:14:15:af:f5:5d:58:af:98:4b:25:ef:79:5d:6e:
e7:7b:0a:56:f9:aa:59:6d:cb:bc:24:e6:36:95:f6:
45:c7:e2:ff:52:fb:19:8a:e4:26:be:f0:5a:ff:f5:
ec:d1:55:5c:6d:f1:8a:5c:01:c9:7c:bb:8d:bb:83:
34:f1:3a:e9:4a:11:fd:74:e2:4a:d2:f9:fa:19:80:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1F:68:8E:C4:7B:AA:CE:E2:18:F0:0E:1B:2B:2A:03:84:38:D4:FD
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS400175.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:12b::/48
Signature Algorithm: sha256WithRSAEncryption
3b:6a:9a:50:d3:c3:1e:e6:88:1c:ec:92:0c:a6:90:67:e6:b2:
34:a7:be:29:bf:ef:e8:71:e9:fa:7b:1c:a5:87:71:3e:cc:de:
56:7d:9d:26:59:ae:16:b5:70:a3:58:a9:36:3b:df:2b:98:66:
a0:1c:67:c5:c6:93:f5:d5:db:fd:06:25:4c:55:08:d1:2b:c6:
80:30:73:f3:6d:8c:fa:d8:64:71:73:32:7d:9b:7d:d6:95:bb:
39:ce:8a:21:e6:65:be:77:72:6e:1a:c4:f6:66:50:79:b2:60:
5a:52:c1:b0:d9:22:4c:70:9b:31:32:5e:79:cc:d4:7c:fc:2a:
03:eb:bb:1b:5c:64:8a:0a:45:a7:5e:c8:63:e0:fb:6a:ed:97:
56:dc:df:6e:d8:56:2f:41:a5:85:ee:67:73:ce:32:13:33:f2:
fe:da:e9:6f:1b:ca:95:7b:2c:e7:02:a9:52:f0:1b:42:a9:ef:
7e:87:3c:d6:4f:65:eb:87:15:96:f3:b3:19:00:6d:3a:a6:e9:
48:56:8a:c1:1b:b6:86:92:16:4d:16:23:c8:6c:ab:52:a1:1e:
65:56:1d:94:a0:38:59:7a:e0:78:51:98:35:e5:ba:35:1a:50:
22:6c:03:ff:bd:34:b1:41:88:d7:68:d6:be:ea:2e:cf:97:4b:
10:7f:85:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:49:48 2026 by rpki-client