This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213495.roa File: AS213495.roa (raw, json) Hash identifier: b73FmgNhqihOJQuZWpNAI+xyQpYsJNDkEPKf5om4UPQ= Subject key identifier: 36:EE:2B:74:F1:23:85:8E:2D:51:E9:7D:49:AA:16:26:BB:BF:8A:2B Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 0BDFBEFF12BEBA60A71B9A11837F05AD3232AC0F Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213495.roa Signing time: Thu 01 Jan 2026 21:08:15 +0000 ROA not before: Thu 01 Jan 2026 21:03:15 +0000 ROA not after: Thu 31 Dec 2026 21:08:15 +0000 asID: 213495 IP address blocks: 2a0f:85c1:b73::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:df:be:ff:12:be:ba:60:a7:1b:9a:11:83:7f:05:ad:32:32:ac:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Jan 1 21:03:15 2026 GMT Not After : Dec 31 21:08:15 2026 GMT Subject: CN=36EE2B74F123858E2D51E97D49AA1626BBBF8A2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:51:41:c2:fb:eb:cc:37:8a:28:52:f6:4c:38: c3:af:45:42:0d:49:d5:92:8d:6e:d5:21:7b:e9:62: 41:94:d1:69:21:1b:c1:d5:d3:8b:10:ec:42:06:9d: 3c:68:d7:5b:3d:0a:0e:d5:7c:75:e0:44:79:01:4a: df:72:fb:da:0a:de:48:f6:40:dd:2f:16:71:d7:cc: cb:9a:67:7a:3b:ad:4c:27:55:a3:d1:0b:86:08:08: 5f:25:23:16:8a:24:d5:56:54:3f:af:76:5e:f6:77: ee:59:a8:ee:e1:e6:5e:32:9b:2f:9a:61:54:d4:2e: e5:64:72:0b:11:0b:35:df:a5:e4:43:ca:63:38:ca: 87:b6:7e:74:06:64:9d:19:72:8d:78:58:db:40:94: b7:44:ba:b4:f6:50:02:cb:d1:74:6e:e6:3e:a6:0d: 03:ab:04:f4:25:cf:83:c8:ac:d2:5b:3f:a9:52:eb: 69:14:1f:15:f9:d3:ef:37:50:2d:1e:e7:d6:03:2c: 92:cc:e2:7e:13:d2:e6:d1:59:9f:c7:6e:79:64:49: b7:12:52:ba:d5:fe:0c:88:10:d3:ea:bd:61:86:1b: 2b:88:e3:6c:77:0e:5c:95:6c:c5:12:8b:40:2d:00: 3f:ed:3c:cf:20:04:6c:09:4d:f5:f1:9d:96:ef:45: db:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EE:2B:74:F1:23:85:8E:2D:51:E9:7D:49:AA:16:26:BB:BF:8A:2B X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213495.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:b73::/48 Signature Algorithm: sha256WithRSAEncryption 15:b7:c1:85:81:d4:95:12:df:a9:43:43:12:4a:e2:21:ec:db: 34:fb:c8:f7:ec:c8:52:d9:37:49:28:2a:20:a5:c0:6f:db:6e: 49:7f:42:b4:4f:49:1b:46:a1:3f:f2:23:86:9d:6e:1e:dc:8f: 24:86:ab:d6:1a:d4:a0:70:b1:26:45:16:e9:70:9f:3e:b5:8c: 83:9f:e5:9a:70:90:da:fc:38:9c:6b:02:9b:02:05:e4:b7:e5: 81:4e:e0:cf:02:a8:d0:f0:7d:9f:3a:d3:55:65:bf:9f:b6:01: f2:09:9c:b9:52:97:45:88:3b:27:e2:6e:8e:de:fc:be:a3:b9: ed:73:d2:07:06:77:7f:f4:e5:07:47:46:08:2e:4f:ee:da:d8: d0:6c:85:4e:ed:b4:c6:32:2d:aa:68:6d:1f:f5:aa:f6:d3:08: fb:51:d6:6c:73:08:c5:c6:9b:1e:2c:bc:78:f8:5f:b1:66:e2: 9d:f7:70:26:bc:74:87:1a:66:8f:be:20:9f:d4:00:8d:69:a9: 6a:0b:ae:18:68:03:0c:22:85:45:78:59:0f:ae:97:6d:e8:d7: 21:19:55:6e:87:d4:9f:8f:63:e3:fa:e0:99:b5:d5:dc:44:5c: e8:94:fc:88:fe:c2:0b:ee:76:e9:c3:2b:73:db:1e:8d:30:0e: 92:e8:fa:19 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUC9++/xK+umCnG5oRg38FrTIyrA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNjAxMDEyMTAzMTVaFw0yNjEyMzEyMTA4MTVaMDMxMTAvBgNV BAMTKDM2RUUyQjc0RjEyMzg1OEUyRDUxRTk3RDQ5QUExNjI2QkJCRjhBMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDUUHC++vMN4ooUvZMOMOvRUIN SdWSjW7VIXvpYkGU0WkhG8HV04sQ7EIGnTxo11s9Cg7VfHXgRHkBSt9y+9oK3kj2 QN0vFnHXzMuaZ3o7rUwnVaPRC4YICF8lIxaKJNVWVD+vdl72d+5ZqO7h5l4ymy+a YVTULuVkcgsRCzXfpeRDymM4yoe2fnQGZJ0Zco14WNtAlLdEurT2UALL0XRu5j6m DQOrBPQlz4PIrNJbP6lS62kUHxX50+83UC0e59YDLJLM4n4T0ubRWZ/HbnlkSbcS UrrV/gyIENPqvWGGGyuI42x3DlyVbMUSi0AtAD/tPM8gBGwJTfXxnZbvRdunAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUNu4rdPEjhY4tUel9SaoWJru/iiswHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEzNDk1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQtzMA0GCSqGSIb3DQEBCwUAA4IBAQAVt8GFgdSVEt+pQ0MSSuIh7Ns0+8j37MhS 2TdJKCogpcBv225Jf0K0T0kbRqE/8iOGnW4e3I8khqvWGtSgcLEmRRbpcJ8+tYyD n+WacJDa/DicawKbAgXkt+WBTuDPAqjQ8H2fOtNVZb+ftgHyCZy5UpdFiDsn4m6O 3vy+o7ntc9IHBnd/9OUHR0YILk/u2tjQbIVO7bTGMi2qaG0f9ar20wj7UdZscwjF xpseLLx4+F+xZuKd93AmvHSHGmaPviCf1ACNaalqC64YaAMMIoVFeFkPrpdt6Nch GVVuh9Sfj2Pj+uCZtdXcRFzolPyI/sIL7nbpwytz2x6NMA6S6PoZ -----END CERTIFICATE-----Generated at Sun Jan 25 12:30:31 2026 by rpki-client