This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211011.roa File: AS211011.roa (raw, json) Hash identifier: 4sd/fOvHTnSfpNgpaA/7nhI8aInvQOcDR0CEF2ot1RQ= Subject key identifier: A9:26:F4:6C:44:1A:B7:AE:AB:2F:9D:91:F3:4A:8F:80:24:C6:3C:0D Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 0464816D07BF5A8BF711F9F7A829F69E24045B17 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211011.roa Signing time: Wed 21 Jan 2026 20:44:25 +0000 ROA not before: Wed 21 Jan 2026 20:39:25 +0000 ROA not after: Wed 20 Jan 2027 20:44:25 +0000 asID: 211011 IP address blocks: 2a0f:85c1:e27::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:64:81:6d:07:bf:5a:8b:f7:11:f9:f7:a8:29:f6:9e:24:04:5b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Jan 21 20:39:25 2026 GMT Not After : Jan 20 20:44:25 2027 GMT Subject: CN=A926F46C441AB7AEAB2F9D91F34A8F8024C63C0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f9:e5:b1:33:9a:cb:af:fb:8f:92:2d:91:78: 1d:ae:13:cd:f9:9e:97:7f:7d:b2:78:41:99:f2:87: 7e:33:94:0c:3c:8b:e1:e7:e8:1e:5d:4a:67:7d:f4: 76:70:ad:e0:85:6b:8c:0a:ca:53:70:99:82:1b:78: 83:df:3d:5d:bb:ed:41:2a:08:1d:d4:48:2d:13:80: 8c:0a:5c:90:86:c0:e1:b0:41:7b:de:ef:7a:13:95: a6:f5:6a:80:fd:09:ae:32:54:eb:d3:2d:73:ff:8a: 10:00:52:10:97:4c:a5:dc:81:eb:3a:91:c8:93:06: 23:71:f8:03:9c:37:2b:92:ae:03:6b:68:9e:d2:a9: ff:17:40:f7:e8:57:9a:41:f0:8f:30:93:e1:c3:49: bb:ac:ef:71:1c:07:2c:61:29:cf:29:b8:c0:9e:74: 89:31:26:26:ec:39:7b:bf:d9:06:22:ea:67:45:83: 6c:8a:8d:b3:8f:d3:0e:d5:f9:e2:29:0c:66:36:b5: f7:9f:40:9b:eb:c1:67:c1:30:07:93:c5:c2:2d:1f: dd:45:40:70:59:f0:e7:43:6c:a4:2a:46:6e:ce:75: cb:a2:0b:99:bf:f4:83:7a:84:a7:7a:8a:06:23:c2: 61:15:fb:1f:fb:08:d1:f5:13:ed:1d:f9:44:eb:47: e7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:26:F4:6C:44:1A:B7:AE:AB:2F:9D:91:F3:4A:8F:80:24:C6:3C:0D X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211011.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:e27::/48 Signature Algorithm: sha256WithRSAEncryption 9f:53:76:ab:bf:6a:35:ec:0d:a5:8e:f0:93:24:86:8c:c4:00: 4e:f6:4c:4b:40:a7:e4:b3:77:16:4f:aa:c6:c4:52:a0:29:c2: 8d:8f:9d:43:74:9a:69:97:94:e6:15:cf:bf:12:a5:b1:25:82: ae:d3:51:a0:9a:9a:e5:2f:3f:cf:4a:18:8a:57:e5:ca:f0:c6: ec:da:73:2b:91:6b:fe:c4:4c:87:42:a6:07:b5:b0:be:6b:cb: 96:01:e8:f7:cc:bc:8d:c2:20:4e:70:fd:8a:b7:76:a6:33:27: 2e:3f:4a:95:83:36:0f:01:d7:f8:32:06:bf:d3:59:46:e2:43: 84:0d:63:ba:d0:db:4f:db:02:b4:eb:7a:b2:ae:05:a4:89:51: 6e:02:5c:a2:8a:63:21:88:c0:93:06:32:26:9b:d5:bf:47:5c: 16:57:a5:90:b0:f1:92:a5:b1:94:00:e5:e2:4c:a5:55:3c:d4: e7:cd:85:ad:66:d6:7c:e8:01:e1:2f:9e:3e:8e:51:bf:2b:df: 48:d6:f6:8a:2b:23:e7:bb:01:e5:2f:b3:6c:d5:46:3d:df:c5: a9:72:e3:9d:7d:bd:1b:3b:94:bc:7d:a7:d0:dd:6d:50:63:6a: 1e:fe:45:ba:a2:6a:6b:ba:da:31:02:63:67:b7:cc:a0:97:c6: e2:0c:c7:30 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUBGSBbQe/Wov3Efn3qCn2niQEWxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNjAxMjEyMDM5MjVaFw0yNzAxMjAyMDQ0MjVaMDMxMTAvBgNV BAMTKEE5MjZGNDZDNDQxQUI3QUVBQjJGOUQ5MUYzNEE4RjgwMjRDNjNDMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+eWxM5rLr/uPki2ReB2uE835 npd/fbJ4QZnyh34zlAw8i+Hn6B5dSmd99HZwreCFa4wKylNwmYIbeIPfPV277UEq CB3USC0TgIwKXJCGwOGwQXve73oTlab1aoD9Ca4yVOvTLXP/ihAAUhCXTKXcges6 kciTBiNx+AOcNyuSrgNraJ7Sqf8XQPfoV5pB8I8wk+HDSbus73EcByxhKc8puMCe dIkxJibsOXu/2QYi6mdFg2yKjbOP0w7V+eIpDGY2tfefQJvrwWfBMAeTxcItH91F QHBZ8OdDbKQqRm7OdcuiC5m/9IN6hKd6igYjwmEV+x/7CNH1E+0d+UTrR+eVAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUqSb0bEQat66rL52R80qPgCTGPA0wHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjExMDExLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQ4nMA0GCSqGSIb3DQEBCwUAA4IBAQCfU3arv2o17A2ljvCTJIaMxABO9kxLQKfk s3cWT6rGxFKgKcKNj51DdJppl5TmFc+/EqWxJYKu01GgmprlLz/PShiKV+XK8Mbs 2nMrkWv+xEyHQqYHtbC+a8uWAej3zLyNwiBOcP2Kt3amMycuP0qVgzYPAdf4Mga/ 01lG4kOEDWO60NtP2wK063qyrgWkiVFuAlyiimMhiMCTBjImm9W/R1wWV6WQsPGS pbGUAOXiTKVVPNTnzYWtZtZ86AHhL54+jlG/K99I1vaKKyPnuwHlL7Ns1UY938Wp cuOdfb0bO5S8fafQ3W1QY2oe/kW6omprutoxAmNnt8ygl8biDMcw -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:48 2026 by rpki-client