This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215731.roa File: AS215731.roa (raw, json) Hash identifier: aXQjN4Zf4RmHn6yHkwm5HoXHonQkIUWaCwSyrxRq04k= Subject key identifier: 60:DD:A0:95:B7:1B:6B:C1:C5:BA:A2:C1:3A:F5:9A:B5:F8:F6:C7:7C Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 4A2FEA61B752AF78ED13409B6E1BE962C268BEE8 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215731.roa Signing time: Wed 19 Nov 2025 08:01:47 +0000 ROA not before: Wed 19 Nov 2025 07:56:47 +0000 ROA not after: Wed 18 Nov 2026 08:01:47 +0000 asID: 215731 IP address blocks: 2a14:7580:ffe2::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:2f:ea:61:b7:52:af:78:ed:13:40:9b:6e:1b:e9:62:c2:68:be:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Nov 19 07:56:47 2025 GMT Not After : Nov 18 08:01:47 2026 GMT Subject: CN=60DDA095B71B6BC1C5BAA2C13AF59AB5F8F6C77C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c9:0c:37:43:71:19:b8:07:28:c9:ae:7e:74: 6e:9f:90:4b:ae:ea:21:f6:56:0c:7b:ad:3c:47:11: 26:be:3b:89:f6:48:2d:a7:8f:70:f4:bc:90:27:24: 77:d8:06:ff:05:52:ac:99:7e:f2:f1:d2:19:e0:44: 10:f9:95:cd:c4:d8:47:9e:da:da:bd:7c:e1:e0:8b: 06:aa:6c:e4:11:06:9e:bb:66:03:28:b2:84:11:b0: 8a:15:95:d8:49:71:20:f6:f7:41:dd:48:94:5f:6c: 13:a7:4f:4e:1e:bd:0f:5a:7d:7f:7a:e9:34:4e:be: 13:1f:ce:73:a3:57:7d:a8:f5:6d:72:3f:88:ae:0e: 20:de:6b:a3:a7:e6:bd:df:12:24:21:a4:43:47:99: 9f:3d:cc:1a:e6:97:b1:2a:22:4e:8a:d5:01:a6:24: 95:21:a3:03:f7:09:e3:9c:1a:31:3b:67:8b:55:a3: 24:c1:c5:1d:f2:b5:ca:0f:89:66:fd:0c:6a:ce:5e: bf:18:0a:c0:4b:b3:f8:ec:35:37:cc:df:36:2a:5c: 2b:b0:4d:85:a6:96:c0:d7:6d:d1:e6:2d:86:78:16: d5:0e:ac:7e:ba:4d:93:3c:79:ba:90:e4:c5:de:87: 39:e8:c6:bf:d3:f1:1e:23:0e:ba:69:18:e9:5a:a6: d9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DD:A0:95:B7:1B:6B:C1:C5:BA:A2:C1:3A:F5:9A:B5:F8:F6:C7:7C X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:ffe2::/48 Signature Algorithm: sha256WithRSAEncryption 50:26:bf:17:8f:03:77:ef:29:fe:c2:4b:66:f3:5e:1e:2e:ed: 38:1b:c1:54:e3:5b:d3:47:e3:79:b5:95:21:9f:8c:5e:27:7e: ab:ad:f0:e1:db:ce:b6:08:a4:85:b0:4d:1e:04:5b:d5:fb:c6: 2f:07:48:42:dd:30:be:22:6e:c5:c1:47:e3:13:7b:ab:20:d2: 2a:61:58:83:dd:1d:f3:3c:72:b4:25:ed:75:2b:3e:82:cc:b7: db:a5:e0:54:8d:7a:b3:54:93:5d:af:2b:f3:80:72:5b:15:70: e4:c4:dd:4a:3a:8e:57:47:ff:f4:5e:b6:10:50:b2:da:10:90: 28:c7:7d:12:67:44:0f:d6:ca:74:36:9c:45:9c:50:d9:7d:be: 2c:f7:99:c9:02:2f:26:7a:e8:5b:07:6f:96:da:3b:99:cf:28: 96:30:57:f2:5b:9c:d4:16:4f:c6:95:b9:47:d3:de:d1:6d:fb: 60:9d:54:84:1a:77:6c:f4:1d:87:36:6f:81:01:2f:fd:30:57: c9:40:58:66:cc:8d:4d:4d:5b:fc:73:eb:b2:11:90:ee:de:dd: 1e:bd:05:f6:e6:e4:f5:17:e0:17:42:66:db:92:28:60:ee:7a: 08:da:db:08:62:c7:a4:d2:e1:68:fa:b5:57:b4:7c:1d:43:9d: 67:86:c3:ac -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUSi/qYbdSr3jtE0CbbhvpYsJovugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTExMTkwNzU2NDdaFw0yNjExMTgwODAxNDdaMDMxMTAvBgNV BAMTKDYwRERBMDk1QjcxQjZCQzFDNUJBQTJDMTNBRjU5QUI1RjhGNkM3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVyQw3Q3EZuAcoya5+dG6fkEuu 6iH2Vgx7rTxHESa+O4n2SC2nj3D0vJAnJHfYBv8FUqyZfvLx0hngRBD5lc3E2Eee 2tq9fOHgiwaqbOQRBp67ZgMosoQRsIoVldhJcSD290HdSJRfbBOnT04evQ9afX96 6TROvhMfznOjV32o9W1yP4iuDiDea6On5r3fEiQhpENHmZ89zBrml7EqIk6K1QGm JJUhowP3CeOcGjE7Z4tVoyTBxR3ytcoPiWb9DGrOXr8YCsBLs/jsNTfM3zYqXCuw TYWmlsDXbdHmLYZ4FtUOrH66TZM8ebqQ5MXehznoxr/T8R4jDrppGOlaptk5AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUYN2glbcba8HFuqLBOvWatfj2x3wwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE1NzMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1 gP/iMA0GCSqGSIb3DQEBCwUAA4IBAQBQJr8XjwN37yn+wktm814eLu04G8FU41vT R+N5tZUhn4xeJ36rrfDh2862CKSFsE0eBFvV+8YvB0hC3TC+Im7FwUfjE3urINIq YViD3R3zPHK0Je11Kz6CzLfbpeBUjXqzVJNdryvzgHJbFXDkxN1KOo5XR//0XrYQ ULLaEJAox30SZ0QP1sp0NpxFnFDZfb4s95nJAi8meuhbB2+W2juZzyiWMFfyW5zU Fk/GlblH097RbftgnVSEGnds9B2HNm+BAS/9MFfJQFhmzI1NTVv8c+uyEZDu3t0e vQX25uT1F+AXQmbbkihg7noI2tsIYsek0uFo+rVXtHwdQ51nhsOs -----END CERTIFICATE-----Generated at Sat Dec 6 09:47:00 2025 by rpki-client