This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215108.roa File: AS215108.roa (raw, json) Hash identifier: HFQtfFjH0gDJKLFp0F7DW0bOdzRjwBATgk0Itgsq8qs= Subject key identifier: B1:D6:4B:A8:EF:BC:36:AF:50:61:1A:09:A2:CA:3B:BC:58:59:F6:D3 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 76E330AC95B748C277D07F5502E49F26A01D046C Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215108.roa Signing time: Thu 11 Dec 2025 19:36:23 +0000 ROA not before: Thu 11 Dec 2025 19:31:23 +0000 ROA not after: Thu 10 Dec 2026 19:36:23 +0000 asID: 215108 IP address blocks: 2a14:7580:7000::/36 maxlen: 36 2a14:7583:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:27:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e3:30:ac:95:b7:48:c2:77:d0:7f:55:02:e4:9f:26:a0:1d:04:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 11 19:31:23 2025 GMT Not After : Dec 10 19:36:23 2026 GMT Subject: CN=B1D64BA8EFBC36AF50611A09A2CA3BBC5859F6D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b5:94:fa:49:f7:24:a0:1d:6a:4a:69:6e:66: f6:09:f3:74:c4:9b:f3:4a:05:09:43:75:28:d9:9c: 58:a5:06:e6:65:54:9d:79:4e:ad:53:85:33:ed:9d: d2:57:e6:65:0f:6c:81:01:5b:f2:2e:aa:c0:e8:e5: 82:bf:49:0c:3d:bb:74:9a:f1:bd:fd:a7:68:d9:9d: 88:f4:68:81:b9:3a:0f:da:22:57:19:1b:84:61:00: 66:b9:6d:f7:b9:7f:e3:aa:59:e6:ff:e3:ff:b9:b2: 0a:95:16:58:81:73:57:f5:f0:b4:a8:94:09:25:a9: fb:26:57:11:c7:53:6f:39:a8:0a:91:dc:cf:5b:4c: 86:7f:ee:2f:71:eb:41:9b:91:cb:e4:16:6d:2a:98: 00:6f:c7:c0:7a:6f:70:00:8f:40:64:de:68:58:4b: 10:53:56:cb:61:80:54:b2:a6:25:ea:8f:49:e4:a1: bd:fb:04:cb:8d:a6:d6:da:bf:2e:f2:f2:c1:45:87: 7f:a0:f6:f3:2f:0d:ff:4a:a4:48:36:d6:a9:ec:72: c0:a9:ff:ee:7c:7d:f3:ae:8e:71:e9:db:42:1d:ad: 6b:08:bb:03:98:0a:f0:2e:e7:06:92:c9:a4:20:96: ea:32:3d:10:ab:3f:b1:91:b1:69:71:58:89:10:e7: eb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D6:4B:A8:EF:BC:36:AF:50:61:1A:09:A2:CA:3B:BC:58:59:F6:D3 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215108.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:7000::/36 2a14:7583:1000::/36 Signature Algorithm: sha256WithRSAEncryption 2f:15:67:cf:49:b6:dc:61:09:86:bc:fd:81:f6:d2:6e:63:48: a9:cd:e1:21:a3:3a:c1:7d:83:0c:ef:27:c5:00:44:9f:cc:e9: 28:3e:7a:d6:55:25:13:c2:37:15:6a:96:67:2b:3b:c8:7f:6a: a1:a3:d6:6c:ee:d8:53:75:41:11:cd:96:59:e1:fe:6c:50:bb: e1:71:8d:41:46:b3:a3:47:17:f4:a4:bf:c3:8e:86:e3:6f:34: 92:ee:ca:50:80:77:3d:88:47:9f:02:57:af:8a:d8:f2:41:5a: 9f:58:47:c4:01:95:bc:68:3a:35:99:84:c6:d7:7e:88:24:8f: 72:8c:51:ee:4f:54:c9:d8:e7:1f:4a:f2:de:54:b0:d5:66:6b: ee:d7:eb:16:e7:34:ba:3c:63:9b:5d:5a:ad:cd:da:03:ee:85: 0a:11:43:df:a0:fe:05:4e:5a:33:e1:84:93:a9:4b:7e:62:00: 17:4e:26:f1:55:d2:6f:14:60:0c:cd:55:70:96:ba:3e:8e:a3: 3a:4c:d2:9b:bb:d9:d4:8f:e0:72:45:bc:af:c8:30:3b:09:c9: 8c:0b:96:19:34:06:c5:03:78:6f:7d:d1:c0:3c:34:23:c8:2d: 9c:fa:34:be:0a:47:f9:db:62:7c:ae:64:c6:18:80:2f:1d:e6: bd:ef:74:75 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUduMwrJW3SMJ30H9VAuSfJqAdBGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMTExOTMxMjNaFw0yNjEyMTAxOTM2MjNaMDMxMTAvBgNV BAMTKEIxRDY0QkE4RUZCQzM2QUY1MDYxMUEwOUEyQ0EzQkJDNTg1OUY2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvtZT6SfckoB1qSmluZvYJ83TE m/NKBQlDdSjZnFilBuZlVJ15Tq1ThTPtndJX5mUPbIEBW/IuqsDo5YK/SQw9u3Sa 8b39p2jZnYj0aIG5Og/aIlcZG4RhAGa5bfe5f+OqWeb/4/+5sgqVFliBc1f18LSo lAklqfsmVxHHU285qAqR3M9bTIZ/7i9x60GbkcvkFm0qmABvx8B6b3AAj0Bk3mhY SxBTVsthgFSypiXqj0nkob37BMuNptbavy7y8sFFh3+g9vMvDf9KpEg21qnscsCp /+58ffOujnHp20IdrWsIuwOYCvAu5waSyaQgluoyPRCrP7GRsWlxWIkQ5+uDAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUsdZLqO+8Nq9QYRoJoso7vFhZ9tMwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE1MTA4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYEKhR1 gHADBgQqFHWDEDANBgkqhkiG9w0BAQsFAAOCAQEALxVnz0m23GEJhrz9gfbSbmNI qc3hIaM6wX2DDO8nxQBEn8zpKD561lUlE8I3FWqWZys7yH9qoaPWbO7YU3VBEc2W WeH+bFC74XGNQUazo0cX9KS/w46G4280ku7KUIB3PYhHnwJXr4rY8kFan1hHxAGV vGg6NZmExtd+iCSPcoxR7k9UydjnH0ry3lSw1WZr7tfrFuc0ujxjm11arc3aA+6F ChFD36D+BU5aM+GEk6lLfmIAF04m8VXSbxRgDM1VcJa6Po6jOkzSm7vZ1I/gckW8 r8gwOwnJjAuWGTQGxQN4b33RwDw0I8gtnPo0vgpH+dtifK5kxhiALx3mve90dQ== -----END CERTIFICATE-----Generated at Tue Dec 16 22:10:15 2025 by rpki-client