This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213576.roa File: AS213576.roa (raw, json) Hash identifier: GKb47qOfU+kNgGGOw/7T37iPhNgGuU19zYBYpbPIq00= Subject key identifier: E0:48:D6:09:11:EE:81:34:9D:0D:6E:34:1F:77:5E:33:81:73:A2:ED Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 3E15439DA4DE264F9E976CF37F06E36D62070946 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213576.roa Signing time: Sat 20 Dec 2025 22:08:14 +0000 ROA not before: Sat 20 Dec 2025 22:03:14 +0000 ROA not after: Sat 19 Dec 2026 22:08:14 +0000 asID: 213576 IP address blocks: 2a0f:85c1:b41::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:15:43:9d:a4:de:26:4f:9e:97:6c:f3:7f:06:e3:6d:62:07:09:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Dec 20 22:03:14 2025 GMT Not After : Dec 19 22:08:14 2026 GMT Subject: CN=E048D60911EE81349D0D6E341F775E338173A2ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:0c:fa:5d:34:96:6e:45:e8:d8:96:68:6c: 73:db:80:bb:42:d2:bb:02:49:cd:b4:98:e2:62:0b: b2:2f:2f:80:47:16:ab:86:27:d7:07:bb:48:01:2a: bc:9f:58:23:1d:92:fa:92:b9:f6:23:8f:c4:8f:c1: 21:4a:fb:d0:bc:5b:ee:89:87:46:11:18:9f:34:06: a1:b3:7d:cf:30:f2:5d:90:1e:79:1b:2c:3e:a4:ab: 4d:62:5a:67:39:5e:88:67:8a:66:c9:bc:3f:55:fb: f8:cd:ce:ba:ec:ea:0b:c3:19:17:44:4e:f8:a9:ff: 9f:ae:e5:92:41:e6:c3:87:1c:0b:75:3a:b3:19:ec: ae:bf:a9:a4:5f:6e:0a:38:67:11:86:e8:95:0a:c5: 05:cd:5d:20:59:20:ee:f5:41:31:12:68:27:63:20: d7:a9:2f:9a:7b:7f:1e:45:3f:d2:a2:c5:b5:32:0f: 0a:fd:8b:57:a1:ff:89:9f:e8:4b:5c:ab:c3:0d:2c: 6b:d3:1c:10:b9:1a:50:01:64:38:80:26:9a:39:b9: 2b:d8:99:40:5c:0f:1f:3e:4b:c7:26:ee:be:86:09: 03:44:aa:b2:41:4f:d3:3a:03:64:99:c5:4d:8b:51: 55:28:43:be:fa:64:cd:0f:7a:60:a0:b6:d1:2e:ba: 02:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:48:D6:09:11:EE:81:34:9D:0D:6E:34:1F:77:5E:33:81:73:A2:ED X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213576.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:b41::/48 Signature Algorithm: sha256WithRSAEncryption 37:a5:77:e8:f8:d2:85:30:23:df:0f:e1:98:27:56:7b:d9:78: bb:1d:07:97:ee:4f:8c:cb:4e:4c:a1:11:89:1d:e9:43:3c:fc: d0:88:b6:dd:0a:d4:75:07:c2:d4:09:f6:79:37:8a:82:36:61: 70:63:e5:9b:da:0c:b0:0e:8d:11:a6:b1:90:fb:4f:0a:d1:c0: 74:92:03:40:dd:10:6d:fe:ff:63:87:97:bc:32:de:fd:02:61: ba:25:e8:a7:cd:92:47:d1:be:54:60:cb:4d:30:93:1f:63:e2: bc:70:a9:70:e0:42:6c:12:ea:fc:2c:35:26:83:b9:cf:c5:92: 59:bf:4b:bf:e6:4b:2f:ed:60:11:76:6d:ab:8b:57:19:9c:4f: c5:16:63:eb:7e:b0:9f:96:d7:fb:2f:24:cd:a1:20:cd:29:be: 0c:db:1d:36:43:2f:78:44:18:22:47:99:9c:15:b1:c3:57:9e: cc:af:2b:1e:32:9a:fd:fb:29:01:c4:aa:3f:99:a9:a8:d5:0c: 1b:5e:ce:29:b0:c7:1c:fa:02:bf:70:15:47:5f:44:fe:2f:92: af:4b:6b:8d:ed:81:0f:d6:4c:67:00:b7:a2:29:7f:c1:08:90: 17:c1:8f:30:a2:1d:2e:91:7f:1d:ef:f5:ea:c7:75:9f:24:4e: d5:3c:e9:29 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUPhVDnaTeJk+el2zzfwbjbWIHCUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTEyMjAyMjAzMTRaFw0yNjEyMTkyMjA4MTRaMDMxMTAvBgNV BAMTKEUwNDhENjA5MTFFRTgxMzQ5RDBENkUzNDFGNzc1RTMzODE3M0EyRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5XAz6XTSWbkXo2JZobHPbgLtC 0rsCSc20mOJiC7IvL4BHFquGJ9cHu0gBKryfWCMdkvqSufYjj8SPwSFK+9C8W+6J h0YRGJ80BqGzfc8w8l2QHnkbLD6kq01iWmc5XohnimbJvD9V+/jNzrrs6gvDGRdE Tvip/5+u5ZJB5sOHHAt1OrMZ7K6/qaRfbgo4ZxGG6JUKxQXNXSBZIO71QTESaCdj INepL5p7fx5FP9KixbUyDwr9i1eh/4mf6Etcq8MNLGvTHBC5GlABZDiAJpo5uSvY mUBcDx8+S8cm7r6GCQNEqrJBT9M6A2SZxU2LUVUoQ776ZM0PemCgttEuugKJAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU4EjWCRHugTSdDW40H3deM4Fzou0wHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEzNTc2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQtBMA0GCSqGSIb3DQEBCwUAA4IBAQA3pXfo+NKFMCPfD+GYJ1Z72Xi7HQeX7k+M y05MoRGJHelDPPzQiLbdCtR1B8LUCfZ5N4qCNmFwY+Wb2gywDo0RprGQ+08K0cB0 kgNA3RBt/v9jh5e8Mt79AmG6JeinzZJH0b5UYMtNMJMfY+K8cKlw4EJsEur8LDUm g7nPxZJZv0u/5ksv7WARdm2ri1cZnE/FFmPrfrCfltf7LyTNoSDNKb4M2x02Qy94 RBgiR5mcFbHDV57MryseMpr9+ykBxKo/mamo1QwbXs4psMcc+gK/cBVHX0T+L5Kv S2uN7YEP1kxnALeiKX/BCJAXwY8woh0ukX8d7/Xqx3WfJE7VPOkp -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:18 2026 by rpki-client