This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213413.roa File: AS213413.roa (raw, json) Hash identifier: XFdZ21h29kUT5DgA4GnRsX0yc3jGq51LgGlF5CF2ZIw= Subject key identifier: 4F:82:EE:79:45:1C:E9:3D:3E:CD:46:9B:C5:C4:C1:4C:68:ED:91:27 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 0FCCE478D2A5ACA63477406E9C215AFC45A4D021 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213413.roa Signing time: Mon 19 Jan 2026 21:08:20 +0000 ROA not before: Mon 19 Jan 2026 21:03:20 +0000 ROA not after: Mon 18 Jan 2027 21:08:20 +0000 asID: 213413 IP address blocks: 2a0f:85c1:803::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:cc:e4:78:d2:a5:ac:a6:34:77:40:6e:9c:21:5a:fc:45:a4:d0:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Jan 19 21:03:20 2026 GMT Not After : Jan 18 21:08:20 2027 GMT Subject: CN=4F82EE79451CE93D3ECD469BC5C4C14C68ED9127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:31:00:db:ff:8e:a2:79:c7:fb:28:6a:f3:c4: c6:d8:7c:93:73:2d:20:d9:16:3a:f1:96:e4:a1:54: 52:d0:57:22:ee:6b:c3:8c:9c:66:b3:cc:4e:2e:cc: c3:28:f5:5e:5c:fb:13:35:08:c9:95:34:bb:d1:8e: 74:14:cf:32:b6:77:b5:3a:62:57:fa:4c:a3:55:58: 8f:77:ec:fe:92:d2:b4:92:6c:e0:0d:6f:fa:38:97: f5:5b:1f:fb:27:88:b9:73:b7:1b:6d:46:a2:db:aa: 7f:7c:61:4f:3e:78:de:ed:88:17:70:f4:9b:de:57: e7:7a:79:75:cf:23:5a:a0:f9:07:64:67:f0:a7:05: 4c:92:a6:93:c3:c0:4b:89:ad:0e:95:f1:35:88:d9: 50:c0:cc:0b:b7:47:e8:78:47:f0:50:21:9a:9d:6b: 44:c8:c1:b9:00:c6:60:1e:af:22:c4:e8:3c:f0:ec: e2:60:2e:92:8a:79:9d:e0:db:68:04:dd:03:e3:54: 03:36:d3:51:d6:f8:63:63:04:c7:cf:58:24:e5:b7: 85:d9:ff:80:67:d2:54:87:dd:43:b8:7d:ed:b8:c1: 11:0b:74:a9:57:3f:66:7b:c4:9b:36:1b:98:5e:07: a7:67:2a:b5:12:e6:08:58:f1:3a:37:6e:8f:e4:ca: 57:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:82:EE:79:45:1C:E9:3D:3E:CD:46:9B:C5:C4:C1:4C:68:ED:91:27 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213413.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:803::/48 Signature Algorithm: sha256WithRSAEncryption 99:8c:69:7f:bc:02:f7:5a:4f:48:09:97:06:21:f8:50:9f:1a: ef:76:da:c1:8f:1c:51:69:ca:62:ee:89:0f:b4:c3:87:c4:70: 81:97:96:a1:ec:b4:59:63:c6:a3:c2:ea:d5:8d:7b:50:c5:66: 5e:04:19:45:4b:4e:6b:55:3b:47:96:ca:0b:26:2b:88:6e:76: b7:54:f6:75:2c:8d:d0:c0:4f:5a:83:e9:4f:82:55:ca:88:17: 67:f6:42:cf:08:5a:56:d7:83:bb:b0:23:82:22:34:47:c7:e9: f9:74:93:61:b8:1b:8b:44:1c:67:cd:9e:e2:63:bb:24:95:ed: 26:5d:71:49:70:bc:0a:a7:d4:ba:df:6a:10:8b:33:de:e0:18: 14:1c:35:c0:cf:6c:0f:df:5a:77:c3:8e:80:9f:d1:ff:4f:a9: 7b:cd:b5:6e:fd:46:78:9f:44:5f:74:22:9a:89:43:da:94:51: 15:77:c0:69:b3:03:6e:4d:83:3b:04:b1:ad:d9:04:65:9b:08: 04:f5:c2:e1:ee:6d:d9:4a:cd:1b:93:dd:6b:88:e7:67:3e:33: 31:7e:ca:8e:cb:2b:e3:b2:8f:dd:ab:e1:cd:10:3b:ae:8d:b8: a7:10:71:53:f2:95:ee:64:4e:01:35:18:c8:8f:40:10:60:da: 47:0a:bd:db -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUD8zkeNKlrKY0d0BunCFa/EWk0CEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNjAxMTkyMTAzMjBaFw0yNzAxMTgyMTA4MjBaMDMxMTAvBgNV BAMTKDRGODJFRTc5NDUxQ0U5M0QzRUNENDY5QkM1QzRDMTRDNjhFRDkxMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrMQDb/46iecf7KGrzxMbYfJNz LSDZFjrxluShVFLQVyLua8OMnGazzE4uzMMo9V5c+xM1CMmVNLvRjnQUzzK2d7U6 Ylf6TKNVWI937P6S0rSSbOANb/o4l/VbH/sniLlztxttRqLbqn98YU8+eN7tiBdw 9JveV+d6eXXPI1qg+QdkZ/CnBUySppPDwEuJrQ6V8TWI2VDAzAu3R+h4R/BQIZqd a0TIwbkAxmAeryLE6Dzw7OJgLpKKeZ3g22gE3QPjVAM201HW+GNjBMfPWCTlt4XZ /4Bn0lSH3UO4fe24wRELdKlXP2Z7xJs2G5heB6dnKrUS5ghY8To3bo/kylcDAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUT4LueUUc6T0+zUabxcTBTGjtkScwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEzNDEzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQgDMA0GCSqGSIb3DQEBCwUAA4IBAQCZjGl/vAL3Wk9ICZcGIfhQnxrvdtrBjxxR acpi7okPtMOHxHCBl5ah7LRZY8ajwurVjXtQxWZeBBlFS05rVTtHlsoLJiuIbna3 VPZ1LI3QwE9ag+lPglXKiBdn9kLPCFpW14O7sCOCIjRHx+n5dJNhuBuLRBxnzZ7i Y7skle0mXXFJcLwKp9S632oQizPe4BgUHDXAz2wP31p3w46An9H/T6l7zbVu/UZ4 n0RfdCKaiUPalFEVd8BpswNuTYM7BLGt2QRlmwgE9cLh7m3ZSs0bk91riOdnPjMx fsqOyyvjso/dq+HNEDuujbinEHFT8pXuZE4BNRjIj0AQYNpHCr3b -----END CERTIFICATE-----Generated at Sun Jan 25 11:06:59 2026 by rpki-client