This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215470.roa File: AS215470.roa (raw, json) Hash identifier: OBRXxpKkBa5XhiHtrlyr1kPnj30Zu8o47dF3kCnTLds= Subject key identifier: EA:C0:30:F9:2D:B7:F3:1E:FD:5F:1F:19:4B:C6:00:5E:B2:22:30:E4 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 1170AA558B3667B9EF7E546D8C169D1A0D1E10DA Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215470.roa Signing time: Tue 06 Jan 2026 01:00:49 +0000 ROA not before: Tue 06 Jan 2026 00:55:49 +0000 ROA not after: Tue 05 Jan 2027 01:00:49 +0000 asID: 215470 IP address blocks: 2a14:7580:8000::/36 maxlen: 48 2a14:7580:f300::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:70:aa:55:8b:36:67:b9:ef:7e:54:6d:8c:16:9d:1a:0d:1e:10:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 6 00:55:49 2026 GMT Not After : Jan 5 01:00:49 2027 GMT Subject: CN=EAC030F92DB7F31EFD5F1F194BC6005EB22230E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:16:34:53:4e:6d:2f:57:b1:ab:62:41:e3:3e: b4:1f:57:66:79:c1:37:11:e3:c8:0f:7d:35:49:47: 4d:c8:a1:13:08:f0:81:f8:73:75:3e:82:34:5f:c5: e8:8c:1b:53:56:09:d3:b6:05:ad:54:64:2b:70:47: bb:90:50:98:89:35:66:6b:46:c2:67:99:9a:60:19: 77:25:a9:00:85:ac:78:fb:c0:e5:f0:a1:9a:4e:e7: b7:04:9e:c4:dc:cd:d6:bc:30:ae:6f:10:ea:d3:db: 36:e4:b1:2e:91:eb:86:e3:c2:7e:14:f4:a9:ec:7c: 28:fb:82:ed:91:fb:11:4a:ee:bf:6b:6d:16:ad:a9: cb:31:05:9b:f0:ba:ac:73:53:d5:19:fe:cc:5f:09: 01:e5:85:fc:b3:2f:c1:a8:d9:1b:94:de:c8:69:8c: 5f:42:b1:dc:63:df:d1:92:7f:dd:80:32:96:ae:f8: 82:77:3b:35:9f:c3:bb:1d:2d:55:29:62:68:16:e6: c3:ad:a1:5b:80:60:26:74:c1:ba:8a:2a:df:c4:ef: 07:a4:e4:5d:70:39:ad:53:8f:43:d7:d9:fb:16:2f: 63:2b:1c:6c:94:70:b2:73:b8:ea:91:99:ce:50:19: 0a:6c:cc:d4:86:a7:d6:20:be:88:aa:58:71:74:24: 41:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C0:30:F9:2D:B7:F3:1E:FD:5F:1F:19:4B:C6:00:5E:B2:22:30:E4 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215470.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:8000::/36 2a14:7580:f300::/40 Signature Algorithm: sha256WithRSAEncryption 3c:13:11:0c:0a:c0:11:c9:6a:c2:fb:73:9a:b2:3b:b3:58:f4: 74:16:59:b9:7e:d2:91:27:51:31:36:54:9c:f8:0e:2d:00:72: 46:cd:d3:d6:7b:7d:9b:54:70:e8:c8:d7:26:e5:75:5e:49:9e: fc:0a:db:2a:05:6c:e5:ca:b0:04:e7:a7:96:8d:3b:9c:86:07: 16:f6:81:ca:87:e8:86:94:2c:9d:ed:28:79:2a:2f:5d:b0:0c: e6:4f:57:b8:21:8c:f8:9f:7f:ec:45:9a:0d:a5:67:c9:84:0d: e7:2f:7c:b9:fa:5f:5d:dd:2d:c7:d9:5b:d4:bd:b5:a3:4e:fe: ce:a6:f6:ec:89:7f:82:c0:af:99:61:59:15:38:99:8c:6d:57: 6d:66:9c:1d:94:31:36:5d:ad:58:35:41:4c:5c:38:5b:97:a8: e2:3f:be:30:9e:23:cb:ae:a8:a7:ac:7c:bc:a6:d7:b9:ec:03: 79:21:74:58:5e:2c:c7:02:e5:1d:4a:f0:c9:c3:50:24:c0:f5: 8f:7e:b9:87:08:e7:8b:ff:aa:cb:24:7d:00:97:a7:1b:0a:2f: bf:69:ec:46:1d:12:b2:a2:7c:1e:f2:3d:09:64:ee:7c:c0:05: 80:f1:54:96:66:52:7e:70:4c:67:0d:05:35:99:32:e8:9d:0a: e9:6f:15:d3 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUEXCqVYs2Z7nvflRtjBadGg0eENowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMDYwMDU1NDlaFw0yNzAxMDUwMTAwNDlaMDMxMTAvBgNV BAMTKEVBQzAzMEY5MkRCN0YzMUVGRDVGMUYxOTRCQzYwMDVFQjIyMjMwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTFjRTTm0vV7GrYkHjPrQfV2Z5 wTcR48gPfTVJR03IoRMI8IH4c3U+gjRfxeiMG1NWCdO2Ba1UZCtwR7uQUJiJNWZr RsJnmZpgGXclqQCFrHj7wOXwoZpO57cEnsTczda8MK5vEOrT2zbksS6R64bjwn4U 9KnsfCj7gu2R+xFK7r9rbRatqcsxBZvwuqxzU9UZ/sxfCQHlhfyzL8Go2RuU3shp jF9Csdxj39GSf92AMpau+IJ3OzWfw7sdLVUpYmgW5sOtoVuAYCZ0wbqKKt/E7wek 5F1wOa1Tj0PX2fsWL2MrHGyUcLJzuOqRmc5QGQpszNSGp9YgvoiqWHF0JEErAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU6sAw+S238x79Xx8ZS8YAXrIiMOQwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE1NDcwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYEKhR1 gIADBgAqFHWA8zANBgkqhkiG9w0BAQsFAAOCAQEAPBMRDArAEclqwvtzmrI7s1j0 dBZZuX7SkSdRMTZUnPgOLQByRs3T1nt9m1Rw6MjXJuV1Xkme/ArbKgVs5cqwBOen lo07nIYHFvaByofohpQsne0oeSovXbAM5k9XuCGM+J9/7EWaDaVnyYQN5y98ufpf Xd0tx9lb1L21o07+zqb27Il/gsCvmWFZFTiZjG1XbWacHZQxNl2tWDVBTFw4W5eo 4j++MJ4jy66op6x8vKbXuewDeSF0WF4sxwLlHUrwycNQJMD1j365hwjni/+qyyR9 AJenGwovv2nsRh0SsqJ8HvI9CWTufMAFgPFUlmZSfnBMZw0FNZky6J0K6W8V0w== -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:04 2026 by rpki-client