This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213568.roa File: AS213568.roa (raw, json) Hash identifier: ZIzs6HrxTV9m3/910lEKsleg9RDn73gAAGJSOMRUyy8= Subject key identifier: 2E:6A:35:3B:B7:23:E6:64:7F:5E:EF:A5:67:18:E2:5D:B6:D4:A0:A1 Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 1D35D31CB5DE27E6C3022B0CCF390F96683CCD28 Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213568.roa Signing time: Thu 27 Nov 2025 18:49:06 +0000 ROA not before: Thu 27 Nov 2025 18:44:06 +0000 ROA not after: Thu 26 Nov 2026 18:49:06 +0000 asID: 213568 IP address blocks: 85.235.73.0/24 maxlen: 24 92.249.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:35:d3:1c:b5:de:27:e6:c3:02:2b:0c:cf:39:0f:96:68:3c:cd:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Nov 27 18:44:06 2025 GMT Not After : Nov 26 18:49:06 2026 GMT Subject: CN=2E6A353BB723E6647F5EEFA56718E25DB6D4A0A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:75:bd:37:0d:a4:4b:18:1f:f1:30:7a:20: 03:dd:f1:ae:4c:89:07:40:ce:4c:63:62:2a:18:49: 50:fe:a5:bb:a7:66:60:b4:0c:1b:74:70:02:84:c7: 8b:b4:b3:e9:e6:b2:8f:d9:77:6c:8f:62:cb:3a:ee: dc:06:c6:b1:5e:32:6f:43:eb:b0:c2:d1:48:76:e8: 48:db:39:61:28:3f:8b:9d:64:7b:73:8e:33:83:e2: a9:12:95:20:43:c4:b5:b3:69:1e:d2:f7:c0:16:39: 11:b1:bb:a4:1b:16:33:a7:75:7d:57:a2:e5:0b:df: 31:fd:ec:8d:f2:91:77:33:11:21:b6:cc:2c:4c:ec: 55:55:54:a4:58:b1:25:9b:d8:dd:af:05:8c:b9:18: 2e:8c:49:c3:b2:b8:6c:83:30:a3:8b:ad:7a:64:24: e6:2a:cf:7c:55:f2:2f:7f:38:95:e5:ea:f9:0b:9d: b4:88:96:03:18:f1:c9:7a:b8:7d:83:3a:55:38:7a: 34:00:29:9a:79:c3:84:d9:17:f6:e8:92:88:f4:8d: 00:58:2a:cb:ff:09:fc:be:6d:a4:6c:eb:61:fc:eb: c7:da:24:f1:ce:98:5b:4e:01:93:25:0d:12:2b:ea: 79:d1:91:f8:d3:99:36:f9:2e:af:6a:5c:52:c3:e8: 4a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6A:35:3B:B7:23:E6:64:7F:5E:EF:A5:67:18:E2:5D:B6:D4:A0:A1 X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213568.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.235.73.0/24 92.249.62.0/24 Signature Algorithm: sha256WithRSAEncryption 05:df:e3:9b:87:ee:3d:5b:d0:33:9e:5f:4b:76:0a:78:48:36: f4:d8:0a:5b:d3:49:43:7c:86:f4:ff:db:fd:46:0c:63:3b:3f: 2a:54:a5:bc:1b:1c:e1:9e:a6:fb:3e:cc:c3:5d:e7:7e:a4:76: 99:46:a1:9a:de:07:60:e7:4b:5c:08:46:64:79:bf:8b:f0:90: 9d:ca:ae:b8:7a:0d:12:89:05:0c:b6:b0:f1:f5:d8:ec:55:e8: 7e:11:a2:43:ac:be:3a:1a:5a:bd:7c:89:02:5b:f4:bb:dc:77: 26:77:65:50:04:2f:59:81:d2:8e:3a:1f:b2:30:6a:48:88:a3: b1:04:63:60:2c:07:5c:47:0a:bf:6f:b8:db:21:16:85:da:f1: 76:eb:9e:9e:8f:21:5d:12:8d:dc:62:af:55:cd:58:cb:97:08: 9c:26:96:4a:cc:4b:14:24:00:e7:0b:16:c2:4f:16:ba:b9:72: 9a:66:1e:67:00:ea:60:56:a5:a9:eb:3c:98:85:88:da:1d:af: 81:17:06:6a:f4:59:9d:ea:83:5e:e4:ff:58:4f:b5:e2:93:49: 4a:8b:6a:ed:c2:cc:56:f8:8a:b8:bd:30:c8:97:ba:8c:9a:a9: 32:3d:7d:17:5a:67:7f:11:c0:19:6f:70:56:1e:0c:a2:29:d5: 12:f5:fc:82 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUHTXTHLXeJ+bDAisMzzkPlmg8zSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNTExMjcxODQ0MDZaFw0yNjExMjYxODQ5MDZaMDMxMTAvBgNV BAMTKDJFNkEzNTNCQjcyM0U2NjQ3RjVFRUZBNTY3MThFMjVEQjZENEEwQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq1HW9Nw2kSxgf8TB6IAPd8a5M iQdAzkxjYioYSVD+pbunZmC0DBt0cAKEx4u0s+nmso/Zd2yPYss67twGxrFeMm9D 67DC0Uh26EjbOWEoP4udZHtzjjOD4qkSlSBDxLWzaR7S98AWORGxu6QbFjOndX1X ouUL3zH97I3ykXczESG2zCxM7FVVVKRYsSWb2N2vBYy5GC6MScOyuGyDMKOLrXpk JOYqz3xV8i9/OJXl6vkLnbSIlgMY8cl6uH2DOlU4ejQAKZp5w4TZF/bokoj0jQBY Ksv/Cfy+baRs62H868faJPHOmFtOAZMlDRIr6nnRkfjTmTb5Lq9qXFLD6Eo7AgMB AAGjggIQMIICDDAdBgNVHQ4EFgQULmo1O7cj5mR/Xu+lZxjiXbbUoKEwHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjEzNTY4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVetJ AwQAXPk+MA0GCSqGSIb3DQEBCwUAA4IBAQAF3+Obh+49W9Aznl9Ldgp4SDb02Apb 00lDfIb0/9v9RgxjOz8qVKW8Gxzhnqb7PszDXed+pHaZRqGa3gdg50tcCEZkeb+L 8JCdyq64eg0SiQUMtrDx9djsVeh+EaJDrL46Glq9fIkCW/S73Hcmd2VQBC9ZgdKO Oh+yMGpIiKOxBGNgLAdcRwq/b7jbIRaF2vF2656ejyFdEo3cYq9VzVjLlwicJpZK zEsUJADnCxbCTxa6uXKaZh5nAOpgVqWp6zyYhYjaHa+BFwZq9Fmd6oNe5P9YT7Xi k0lKi2rtwsxW+Iq4vTDIl7qMmqkyPX0XWmd/EcAZb3BWHgyiKdUS9fyC -----END CERTIFICATE-----Generated at Sun Dec 7 09:21:00 2025 by rpki-client