This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213579.roa File: AS213579.roa (raw, json) Hash identifier: 4Lfi4qJ6/H1JR1YLSxEhsb44NcbWu8YkfSWfkn0/1UA= Subject key identifier: 8B:01:B3:5F:E7:EC:DB:10:21:F7:A8:D6:07:A7:7E:0C:9C:41:FE:EF Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 7A71005D0D7C7989D5F0C21D89F12AF580514F1B Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213579.roa Signing time: Tue 13 Jan 2026 04:08:16 +0000 ROA not before: Tue 13 Jan 2026 04:03:16 +0000 ROA not after: Tue 12 Jan 2027 04:08:16 +0000 asID: 213579 IP address blocks: 2a0f:85c1:b3f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:71:00:5d:0d:7c:79:89:d5:f0:c2:1d:89:f1:2a:f5:80:51:4f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Jan 13 04:03:16 2026 GMT Not After : Jan 12 04:08:16 2027 GMT Subject: CN=8B01B35FE7ECDB1021F7A8D607A77E0C9C41FEEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2d:3e:c2:d1:d0:f4:79:87:b4:83:76:0a:c2: dc:58:04:d8:6c:87:9b:05:0c:de:28:5e:68:2a:e3: ab:89:26:07:56:42:b7:9c:4d:80:4e:7d:d4:c8:bb: d2:76:36:b4:f1:e1:56:c5:e9:e3:35:b3:95:c2:52: 3b:d4:40:77:b0:da:2f:96:12:34:dd:a6:d1:b4:13: 2e:17:0d:c9:e7:b0:d3:46:18:e8:bc:af:d7:a0:79: 9a:48:42:f3:61:da:ee:22:e6:c1:db:e0:6e:c3:3c: 09:c4:c2:84:08:1c:59:f1:1d:89:1c:34:4a:85:78: 61:e5:66:af:48:19:ea:cb:b8:d3:40:10:05:fa:e3: 9e:b0:13:ba:48:cd:3f:9f:6f:d8:83:fa:5f:9e:7c: 7e:ed:fe:ec:af:dd:74:08:f9:5e:c5:37:df:93:da: 44:a9:fc:63:8f:6a:00:e9:2e:65:1c:c2:4b:63:a1: 59:50:76:ba:be:d7:5b:14:69:c1:b4:b8:f2:53:81: 2d:5e:a3:ca:c7:a9:ef:b7:93:00:ad:c7:18:ec:86: ed:67:2d:1f:2d:42:fb:03:ce:64:82:b0:69:4f:b3: a6:14:fd:c7:17:a5:75:e3:26:aa:ee:32:12:84:09: 06:71:00:77:84:08:e3:e0:c8:91:08:66:fa:fd:48: f7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:01:B3:5F:E7:EC:DB:10:21:F7:A8:D6:07:A7:7E:0C:9C:41:FE:EF X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213579.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:b3f::/48 Signature Algorithm: sha256WithRSAEncryption 07:93:0e:45:65:f5:87:e0:ef:c0:43:c2:8b:4e:aa:21:34:b8: 5c:d8:9f:07:c7:4a:5f:db:8d:f6:8d:b8:b3:35:c9:43:2c:30: 5b:44:f7:71:b2:16:2a:1b:97:cf:13:81:64:50:7a:b5:88:cb: 97:e6:14:cc:64:ee:92:fd:ae:f8:f5:cf:35:04:d2:3e:4f:4e: 4f:a4:ab:62:ae:e7:37:2b:3f:5e:a2:ef:00:41:5c:25:4e:a5: 51:3e:11:7f:16:99:c5:ec:3f:d3:1a:1e:1b:18:f4:42:0d:e0: 8a:94:3d:ec:89:6f:3f:57:8e:c8:0f:17:80:ff:81:f9:7e:a4: 4a:18:b1:8d:b7:f3:43:36:44:b4:9d:2a:5d:98:23:28:02:c3: 99:8a:45:9e:79:dc:6a:7b:5a:15:37:2f:d0:d8:96:32:b3:9b: 10:60:b0:6e:9c:83:72:d6:7e:cf:4d:e1:ca:f1:f7:1c:7b:35: ce:e1:5a:27:9e:14:7f:b2:f2:d1:1e:24:ed:a6:32:65:fa:a7: 85:15:05:38:76:19:78:39:a9:ac:1d:bc:15:7e:43:0e:86:3b: 3f:5e:44:b4:95:4c:27:8c:c1:73:86:10:dd:58:4d:58:66:17: 3e:fc:14:c2:b4:40:88:9a:f1:73:f8:81:8c:2d:73:5f:99:b6: 06:c8:b0:3f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUenEAXQ18eYnV8MIdifEq9YBRTxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNjAxMTMwNDAzMTZaFw0yNzAxMTIwNDA4MTZaMDMxMTAvBgNV BAMTKDhCMDFCMzVGRTdFQ0RCMTAyMUY3QThENjA3QTc3RTBDOUM0MUZFRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJLT7C0dD0eYe0g3YKwtxYBNhs h5sFDN4oXmgq46uJJgdWQrecTYBOfdTIu9J2NrTx4VbF6eM1s5XCUjvUQHew2i+W EjTdptG0Ey4XDcnnsNNGGOi8r9egeZpIQvNh2u4i5sHb4G7DPAnEwoQIHFnxHYkc NEqFeGHlZq9IGerLuNNAEAX6456wE7pIzT+fb9iD+l+efH7t/uyv3XQI+V7FN9+T 2kSp/GOPagDpLmUcwktjoVlQdrq+11sUacG0uPJTgS1eo8rHqe+3kwCtxxjshu1n LR8tQvsDzmSCsGlPs6YU/ccXpXXjJqruMhKECQZxAHeECOPgyJEIZvr9SPc9AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUiwGzX+fs2xAh96jWB6d+DJxB/u8wHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEzNTc5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQs/MA0GCSqGSIb3DQEBCwUAA4IBAQAHkw5FZfWH4O/AQ8KLTqohNLhc2J8Hx0pf 2432jbizNclDLDBbRPdxshYqG5fPE4FkUHq1iMuX5hTMZO6S/a749c81BNI+T05P pKtiruc3Kz9eou8AQVwlTqVRPhF/FpnF7D/TGh4bGPRCDeCKlD3siW8/V47IDxeA /4H5fqRKGLGNt/NDNkS0nSpdmCMoAsOZikWeedxqe1oVNy/Q2JYys5sQYLBunINy 1n7PTeHK8fccezXO4VonnhR/svLRHiTtpjJl+qeFFQU4dhl4OamsHbwVfkMOhjs/ XkS0lUwnjMFzhhDdWE1YZhc+/BTCtECImvFz+IGMLXNfmbYGyLA/ -----END CERTIFICATE-----Generated at Sun Jan 25 12:30:24 2026 by rpki-client