This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215313.roa File: AS215313.roa (raw, json) Hash identifier: lvDre37/vUU5i/mTJcoQ43Y8xAo3Vn/3G6shI+MxiEc= Subject key identifier: 5F:25:3D:A3:11:D3:72:01:E5:28:7B:26:80:2B:59:B6:27:34:2B:29 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 4054EE8DFB33FA44DF6636E4AE8C60461AAAAB06 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215313.roa Signing time: Wed 12 Nov 2025 04:08:03 +0000 ROA not before: Wed 12 Nov 2025 04:03:03 +0000 ROA not after: Wed 11 Nov 2026 04:08:03 +0000 asID: 215313 IP address blocks: 2a0f:85c1:398::/48 maxlen: 48 2a0f:85c1:b20::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:54:ee:8d:fb:33:fa:44:df:66:36:e4:ae:8c:60:46:1a:aa:ab:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Nov 12 04:03:03 2025 GMT Not After : Nov 11 04:08:03 2026 GMT Subject: CN=5F253DA311D37201E5287B26802B59B627342B29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:13:70:a8:26:ce:bb:82:f8:53:1c:42:dc:01: e6:c2:36:74:6c:fa:c8:7d:50:dd:2e:b6:78:26:9c: f6:cd:06:41:9b:66:69:28:e3:e2:56:96:20:27:e4: fd:35:3f:55:8d:38:65:48:43:99:87:40:0c:ea:91: ea:bb:43:b3:c3:e8:07:de:6a:aa:cb:ed:26:db:52: a4:6b:6b:1a:bf:b1:d2:6e:4c:62:ca:59:00:f0:8e: f9:78:12:c9:2f:54:48:59:5a:ed:da:34:e8:a5:ad: 59:77:c0:b4:8c:d2:ec:75:10:26:14:dc:a0:b4:eb: d9:a2:2e:21:27:ab:2f:0a:50:d3:91:c2:1b:23:65: 1a:75:e0:1f:ee:60:18:ef:60:05:04:a3:1f:f0:ce: 19:be:e1:d0:95:ae:18:90:f1:ad:dd:fe:5c:e0:d0: 95:49:f0:c8:20:ea:ee:52:83:3a:68:54:50:ef:35: 77:29:c3:ee:05:55:ab:54:ee:32:3e:8d:11:09:f8: db:c7:30:e0:ec:02:2b:05:25:28:21:bc:ea:6a:32: 2d:63:83:d0:08:14:d8:4e:02:5d:d9:52:64:fa:d8: 6a:f9:a7:34:e0:a7:0f:94:f3:08:62:17:12:4b:ed: e8:fe:44:a7:10:17:d0:0c:4f:71:fd:24:ac:75:ad: 70:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:25:3D:A3:11:D3:72:01:E5:28:7B:26:80:2B:59:B6:27:34:2B:29 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215313.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:398::/48 2a0f:85c1:b20::/44 Signature Algorithm: sha256WithRSAEncryption c4:03:c8:f0:8c:df:ab:22:84:f0:6b:52:80:3b:3c:ab:fb:8b: 06:f1:33:b1:b7:31:a2:bf:bf:51:ca:e0:6f:a1:a9:53:e5:a0: 3b:20:5f:a3:5d:2c:8a:ba:5f:9c:9f:82:78:e2:09:51:08:11: 81:b5:33:0c:5a:ef:8c:66:97:d5:4f:95:80:f1:03:28:3d:de: 54:c8:bf:7e:65:04:73:ef:ec:e5:c4:62:a9:25:33:ef:df:a0: 82:8c:b5:39:c5:c1:75:63:c6:ba:02:91:2f:f8:3b:ce:97:fb: 5f:fd:c1:c3:b5:f6:60:0a:69:e8:b2:1f:7e:9b:11:1f:fa:5d: 28:c2:fb:b9:ba:0c:42:37:15:1d:31:d1:9f:ae:60:37:d7:dc: 7a:78:f5:67:c3:48:ec:10:da:3f:c3:8a:32:a5:e4:fb:ee:23: ff:04:ca:1d:3a:bb:06:b4:c9:d2:1a:93:19:dd:79:20:b0:b0: 65:d7:06:c9:1c:07:29:d1:1d:eb:c9:72:49:53:12:4c:22:36: bd:3a:e3:1c:22:d9:8b:c6:09:d5:99:f5:e9:cd:a0:18:4e:3e: 43:9c:7b:b1:77:32:bc:cf:4d:36:63:90:be:bd:7c:19:1d:2d: f6:6c:2c:01:2f:15:a4:ec:7d:df:1c:98:66:fe:86:b0:b9:8c: 09:e9:28:c3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUQFTujfsz+kTfZjbkroxgRhqqqwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTExMTIwNDAzMDNaFw0yNjExMTEwNDA4MDNaMDMxMTAvBgNV BAMTKDVGMjUzREEzMTFEMzcyMDFFNTI4N0IyNjgwMkI1OUI2MjczNDJCMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6E3CoJs67gvhTHELcAebCNnRs +sh9UN0utngmnPbNBkGbZmko4+JWliAn5P01P1WNOGVIQ5mHQAzqkeq7Q7PD6Afe aqrL7SbbUqRraxq/sdJuTGLKWQDwjvl4EskvVEhZWu3aNOilrVl3wLSM0ux1ECYU 3KC069miLiEnqy8KUNORwhsjZRp14B/uYBjvYAUEox/wzhm+4dCVrhiQ8a3d/lzg 0JVJ8Mgg6u5SgzpoVFDvNXcpw+4FVatU7jI+jREJ+NvHMODsAisFJSghvOpqMi1j g9AIFNhOAl3ZUmT62Gr5pzTgpw+U8whiFxJL7ej+RKcQF9AMT3H9JKx1rXAnAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUXyU9oxHTcgHlKHsmgCtZtic0KykwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE1MzEzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg+F wQOYAwcEKg+FwQsgMA0GCSqGSIb3DQEBCwUAA4IBAQDEA8jwjN+rIoTwa1KAOzyr +4sG8TOxtzGiv79RyuBvoalT5aA7IF+jXSyKul+cn4J44glRCBGBtTMMWu+MZpfV T5WA8QMoPd5UyL9+ZQRz7+zlxGKpJTPv36CCjLU5xcF1Y8a6ApEv+DvOl/tf/cHD tfZgCmnosh9+mxEf+l0owvu5ugxCNxUdMdGfrmA319x6ePVnw0jsENo/w4oypeT7 7iP/BModOrsGtMnSGpMZ3XkgsLBl1wbJHAcp0R3ryXJJUxJMIja9OuMcItmLxgnV mfXpzaAYTj5DnHuxdzK8z002Y5C+vXwZHS32bCwBLxWk7H3fHJhm/oawuYwJ6SjD -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:32 2025 by rpki-client