This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215084.roa File: AS215084.roa (raw, json) Hash identifier: VYEE36ay86hmCHlBcNYsFLRN/I/ANv35FB7vwNrwwIE= Subject key identifier: 46:E8:58:58:1A:10:C3:F4:1B:21:80:9D:DE:A0:8F:82:3D:B4:C1:77 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 3F7245E64277C20B40415921BB922220EF7BAF1A Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215084.roa Signing time: Tue 06 Jan 2026 01:00:48 +0000 ROA not before: Tue 06 Jan 2026 00:55:48 +0000 ROA not after: Tue 05 Jan 2027 01:00:48 +0000 asID: 215084 IP address blocks: 2a14:7581:a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:72:45:e6:42:77:c2:0b:40:41:59:21:bb:92:22:20:ef:7b:af:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 6 00:55:48 2026 GMT Not After : Jan 5 01:00:48 2027 GMT Subject: CN=46E858581A10C3F41B21809DDEA08F823DB4C177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:80:7d:5b:02:a8:60:69:16:2c:ed:28:38:b4: 56:95:34:fc:7a:25:93:16:c7:70:a7:32:f0:9a:20: 43:65:84:81:e6:46:fb:34:98:1f:15:eb:03:55:ea: eb:23:b5:14:60:1a:d1:ef:5a:40:2b:2f:f7:47:87: b4:36:dd:86:ba:c5:d6:14:54:5d:4e:9e:92:a5:d3: f6:f9:24:88:68:9c:93:9a:44:84:8c:16:73:01:cc: d0:40:bd:5f:76:0e:da:99:e8:71:f0:4c:d1:c2:e3: 4f:c3:6a:5a:de:03:37:ce:0a:18:dc:6d:6b:60:ed: 4b:d9:4b:bd:90:24:f0:08:fd:47:26:56:96:01:9b: 75:bb:a5:55:2f:72:28:cd:46:15:a4:ce:fa:73:88: 73:ca:0a:48:91:3f:14:2a:b3:ac:07:43:1f:f0:57: bb:c5:ad:2d:67:a9:a0:57:b5:44:6a:dd:e5:17:59: d0:f9:a4:6a:b1:ce:79:05:94:08:3a:b8:8b:75:8e: e7:de:27:5f:73:7d:7a:0e:61:2c:48:2a:22:13:72: 3f:53:ed:fa:e2:d0:60:c7:87:86:8d:77:27:37:0c: 64:06:05:e8:cf:2c:bd:f3:a7:1f:60:58:69:87:27: 22:37:84:e6:da:8a:6f:24:00:a7:67:36:aa:a3:63: 80:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E8:58:58:1A:10:C3:F4:1B:21:80:9D:DE:A0:8F:82:3D:B4:C1:77 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215084.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:a00::/40 Signature Algorithm: sha256WithRSAEncryption 20:cb:f1:ca:41:76:0c:98:c5:df:be:ba:c2:44:48:a6:67:41: a5:d1:58:6b:2d:ec:b2:b1:a9:e7:e9:e2:c8:92:e9:de:39:49: 85:c0:cb:15:80:f8:7b:e4:d1:a6:9e:2d:0a:54:22:ce:ae:b4: a5:6d:bd:36:ba:a2:1f:72:64:f0:50:01:9b:80:d5:6d:35:07: 55:09:d3:40:8c:1d:b5:11:4e:1a:24:d7:e9:36:62:0f:de:c9: 9e:c5:21:17:31:6f:7d:d6:10:7c:31:58:a5:55:21:77:4a:e2: 41:c7:bc:14:98:fe:45:89:4e:22:a6:1f:85:3b:8f:6d:e5:d7: 45:e3:c8:9e:c3:bd:71:71:e2:23:11:4d:38:09:94:5b:83:32: 14:02:38:52:5c:36:1f:93:1f:d9:74:a1:11:75:d3:3c:16:a5: db:57:45:1d:15:20:e8:33:6e:a6:92:12:2b:6b:f6:62:08:24: 28:39:b2:f1:ef:30:0b:30:df:d6:28:35:72:c6:f1:55:c2:90: 95:39:5b:95:46:b1:e4:3c:03:b4:05:94:e8:3c:93:e6:4d:a3: 50:83:b3:9e:bd:0f:0a:55:0a:7b:d6:e4:01:4d:a3:12:a7:3c: 4c:13:3e:b3:f1:f4:96:a3:f1:c5:82:2c:cf:ba:ca:10:5a:25: 51:ed:fa:e2 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUP3JF5kJ3wgtAQVkhu5IiIO97rxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMDYwMDU1NDhaFw0yNzAxMDUwMTAwNDhaMDMxMTAvBgNV BAMTKDQ2RTg1ODU4MUExMEMzRjQxQjIxODA5RERFQTA4RjgyM0RCNEMxNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwgH1bAqhgaRYs7Sg4tFaVNPx6 JZMWx3CnMvCaIENlhIHmRvs0mB8V6wNV6usjtRRgGtHvWkArL/dHh7Q23Ya6xdYU VF1OnpKl0/b5JIhonJOaRISMFnMBzNBAvV92DtqZ6HHwTNHC40/DalreAzfOChjc bWtg7UvZS72QJPAI/UcmVpYBm3W7pVUvcijNRhWkzvpziHPKCkiRPxQqs6wHQx/w V7vFrS1nqaBXtURq3eUXWdD5pGqxznkFlAg6uIt1jufeJ19zfXoOYSxIKiITcj9T 7fri0GDHh4aNdyc3DGQGBejPLL3zpx9gWGmHJyI3hObaim8kAKdnNqqjY4D9AgMB AAGjggIMMIICCDAdBgNVHQ4EFgQURuhYWBoQw/QbIYCd3qCPgj20wXcwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE1MDg0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1 gQowDQYJKoZIhvcNAQELBQADggEBACDL8cpBdgyYxd++usJESKZnQaXRWGst7LKx qefp4siS6d45SYXAyxWA+Hvk0aaeLQpUIs6utKVtvTa6oh9yZPBQAZuA1W01B1UJ 00CMHbURThok1+k2Yg/eyZ7FIRcxb33WEHwxWKVVIXdK4kHHvBSY/kWJTiKmH4U7 j23l10XjyJ7DvXFx4iMRTTgJlFuDMhQCOFJcNh+TH9l0oRF10zwWpdtXRR0VIOgz bqaSEitr9mIIJCg5svHvMAsw39YoNXLG8VXCkJU5W5VGseQ8A7QFlOg8k+ZNo1CD s569DwpVCnvW5AFNoxKnPEwTPrPx9Jaj8cWCLM+6yhBaJVHt+uI= -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:50 2026 by rpki-client