This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216099.roa File: AS216099.roa (raw, json) Hash identifier: af5fffv6omg/OL6hBgoL5VmGeFovo5UTgxga3sFxV3s= Subject key identifier: 74:4A:10:FB:0B:6C:AC:B6:CF:F7:A2:73:E1:F9:67:D5:4B:D4:62:B7 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 394CC15D1196AE1F40FCE2A33BC79EBB52D4B72C Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216099.roa Signing time: Tue 13 Jan 2026 04:08:16 +0000 ROA not before: Tue 13 Jan 2026 04:03:16 +0000 ROA not after: Tue 12 Jan 2027 04:08:16 +0000 asID: 216099 IP address blocks: 2a0f:85c1:b3c::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:4c:c1:5d:11:96:ae:1f:40:fc:e2:a3:3b:c7:9e:bb:52:d4:b7:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Jan 13 04:03:16 2026 GMT Not After : Jan 12 04:08:16 2027 GMT Subject: CN=744A10FB0B6CACB6CFF7A273E1F967D54BD462B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1b:b1:d8:ff:a2:46:40:b1:9a:4d:16:30:f8: 5f:a7:77:f5:75:e5:c7:5c:fa:49:56:ec:06:f6:d5: 67:b9:c1:3e:5c:79:06:94:f0:b9:aa:21:e5:8e:87: 95:8f:5f:2b:22:e5:53:31:47:82:04:47:24:e8:1e: a7:13:ec:b7:bd:bb:c1:09:6d:de:a6:eb:49:f8:f2: a0:39:9b:1e:1a:26:d2:6a:2b:ad:cb:88:de:5b:00: d3:af:ec:ce:af:66:99:35:eb:c6:1e:b2:d6:df:82: fa:d1:db:ee:b1:94:77:b4:f6:c0:c2:ba:0a:42:c5: 33:86:2f:7d:35:8c:51:27:33:fc:49:68:23:a4:62: fc:23:da:9c:27:95:38:69:fc:fb:74:fc:17:bd:5f: b7:bf:df:4c:ce:cf:e4:44:87:d6:e1:49:6a:dc:26: df:12:67:77:4b:f5:5a:e4:46:c3:c7:bd:f2:b5:d7: 83:0d:98:42:45:b2:1d:8c:1b:af:82:44:b2:30:bf: 04:da:6a:b5:20:f4:56:30:c2:90:05:85:3e:ed:6a: c0:33:2b:54:6b:17:6d:72:c2:72:53:d2:c0:cf:dd: de:ad:aa:3e:60:c4:20:29:28:38:8c:db:56:2d:f4: f4:db:98:09:3b:b6:f9:c3:22:d3:7c:f7:db:ba:1b: 57:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4A:10:FB:0B:6C:AC:B6:CF:F7:A2:73:E1:F9:67:D5:4B:D4:62:B7 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216099.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:b3c::/48 Signature Algorithm: sha256WithRSAEncryption 94:b3:ad:bc:b4:21:f4:bf:db:01:9b:b5:47:0e:8f:e5:bc:d7: 80:de:63:63:49:10:9c:b6:36:98:79:cd:8d:d5:88:1c:e7:6d: c5:19:5b:e7:7e:96:f5:2d:75:1e:66:dc:24:89:8f:97:36:ab: 20:81:61:f8:86:72:d6:0b:2f:a4:e2:2f:50:23:57:23:24:d0: 6b:ec:77:dd:fb:a7:3e:7f:09:84:35:0e:0e:d2:82:01:32:b7: ed:99:b1:8f:48:18:20:e9:a8:a9:f0:be:b2:9f:c9:b0:c2:13: 9e:94:12:2a:c3:f3:10:62:5d:24:2a:45:c4:ed:d3:2f:e2:bc: c3:df:2b:c1:74:2c:54:4c:5b:89:15:6e:e3:da:dc:b9:47:02: 03:b1:30:2b:2d:9b:5e:28:d4:50:ae:be:61:a6:0f:53:1c:b4: 8b:1e:35:c2:ec:a8:4c:6c:00:bb:bb:2c:b4:28:0a:6e:bb:e6: b3:79:10:6f:be:5d:ad:e4:16:4c:36:c9:02:d6:9f:4c:59:29: 7d:78:de:12:e3:11:45:b4:43:3a:4d:9a:9d:d4:87:cc:1e:ad: ec:8a:0c:e4:51:1a:0d:80:d5:54:93:0c:2e:ac:d2:f2:68:f9: f6:a9:ee:fc:ea:15:5b:57:db:a9:94:e8:4f:2d:b8:69:3e:53: 94:f4:c1:e3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUOUzBXRGWrh9A/OKjO8eeu1LUtywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNjAxMTMwNDAzMTZaFw0yNzAxMTIwNDA4MTZaMDMxMTAvBgNV BAMTKDc0NEExMEZCMEI2Q0FDQjZDRkY3QTI3M0UxRjk2N0Q1NEJENDYyQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwG7HY/6JGQLGaTRYw+F+nd/V1 5cdc+klW7Ab21We5wT5ceQaU8LmqIeWOh5WPXysi5VMxR4IERyToHqcT7Le9u8EJ bd6m60n48qA5mx4aJtJqK63LiN5bANOv7M6vZpk168YestbfgvrR2+6xlHe09sDC ugpCxTOGL301jFEnM/xJaCOkYvwj2pwnlThp/Pt0/Be9X7e/30zOz+REh9bhSWrc Jt8SZ3dL9VrkRsPHvfK114MNmEJFsh2MG6+CRLIwvwTaarUg9FYwwpAFhT7tasAz K1RrF21ywnJT0sDP3d6tqj5gxCApKDiM21Yt9PTbmAk7tvnDItN899u6G1fNAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUdEoQ+wtsrLbP96Jz4fln1UvUYrcwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE2MDk5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQs8MA0GCSqGSIb3DQEBCwUAA4IBAQCUs628tCH0v9sBm7VHDo/lvNeA3mNjSRCc tjaYec2N1Ygc523FGVvnfpb1LXUeZtwkiY+XNqsggWH4hnLWCy+k4i9QI1cjJNBr 7Hfd+6c+fwmENQ4O0oIBMrftmbGPSBgg6aip8L6yn8mwwhOelBIqw/MQYl0kKkXE 7dMv4rzD3yvBdCxUTFuJFW7j2ty5RwIDsTArLZteKNRQrr5hpg9THLSLHjXC7KhM bAC7uyy0KApuu+azeRBvvl2t5BZMNskC1p9MWSl9eN4S4xFFtEM6TZqd1IfMHq3s igzkURoNgNVUkwwurNLyaPn2qe786hVbV9uplOhPLbhpPlOU9MHj -----END CERTIFICATE-----Generated at Sun Jan 25 11:07:00 2026 by rpki-client