This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213568.roa File: AS213568.roa (raw, json) Hash identifier: 3scIw5vI4TI7OSNIjnHNCID+AIQB1kyQHV3EV8VH20Q= Subject key identifier: 1B:61:EF:6C:CC:1F:DF:1C:91:01:42:AC:D2:33:01:B9:23:09:25:4D Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 2918EF0466CB17759CF429555EBE8C468F924446 Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213568.roa Signing time: Wed 24 Dec 2025 09:07:55 +0000 ROA not before: Wed 24 Dec 2025 09:02:55 +0000 ROA not after: Wed 23 Dec 2026 09:07:55 +0000 asID: 213568 IP address blocks: 92.249.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:18:ef:04:66:cb:17:75:9c:f4:29:55:5e:be:8c:46:8f:92:44:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Dec 24 09:02:55 2025 GMT Not After : Dec 23 09:07:55 2026 GMT Subject: CN=1B61EF6CCC1FDF1C910142ACD23301B92309254D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:24:a3:d2:33:94:a6:16:99:5c:81:33:7c:ba: b3:34:21:95:c2:ed:6b:17:66:47:36:81:70:f0:cf: 21:86:25:1f:73:63:3f:ef:8a:7e:2f:4c:13:25:1b: d5:27:52:be:08:6d:10:cf:24:20:2f:16:74:18:9f: 29:58:59:62:95:e3:f2:0f:de:b7:91:b2:98:4d:39: 0e:71:07:ad:5d:8b:ac:e4:a9:26:53:44:c4:d2:5a: 19:de:04:fd:98:4c:c2:29:55:15:55:37:f5:ed:b7: fa:15:2f:8e:56:9c:c5:61:55:c6:15:45:2e:3d:99: 6f:b3:8a:c7:6d:8a:37:2b:67:cb:28:5c:99:83:25: 3b:c7:04:7d:41:4c:0a:1c:a3:4f:ef:c3:c8:ea:61: 23:ab:be:af:69:7e:dc:7b:bb:3f:76:1c:bb:60:aa: 34:c9:d6:c3:7c:6d:bc:9f:02:3b:4d:04:87:8d:01: e7:60:c4:b5:65:28:fe:04:53:a6:75:55:63:e6:9d: 56:5d:ca:c2:82:51:cb:85:0b:03:3f:a5:a9:f9:99: 83:ca:0b:8f:42:a8:6e:e1:fa:59:45:ee:01:d4:2d: 7d:e6:b3:43:5f:f7:a9:a5:17:4d:a3:2e:ba:f1:a1: 29:ae:81:7f:f9:1c:d4:1b:8e:b5:33:13:7a:ca:56: 57:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:61:EF:6C:CC:1F:DF:1C:91:01:42:AC:D2:33:01:B9:23:09:25:4D X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213568.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.249.62.0/24 Signature Algorithm: sha256WithRSAEncryption a5:14:46:08:a2:2a:f8:b5:2b:ed:94:41:75:52:95:7d:99:f3: 49:60:fd:db:d2:6c:d5:11:00:40:8f:ac:ee:dd:fd:0b:6b:a5: 45:eb:16:42:39:4a:aa:63:f7:be:f4:65:bd:f0:a5:a2:ce:b7: 71:3b:01:43:b7:77:17:cc:c3:a8:17:65:b1:8a:fe:77:af:4d: 97:c0:d5:1d:65:41:63:ac:b6:fb:52:1a:1e:d7:d5:7e:04:8e: 01:e8:e3:cb:bd:b0:e4:ee:0b:7b:20:ef:4b:4a:51:02:9e:7e: 91:5c:63:a5:46:fb:29:29:30:d3:28:bc:50:7f:05:5b:24:f8: 56:75:77:f9:a1:d0:3b:90:c5:6d:6a:10:64:46:0b:5c:35:1c: 95:10:9f:13:df:f6:95:e3:a9:bc:8d:2f:f8:84:41:3f:c3:f2: 24:d7:25:89:36:b5:0b:91:12:12:28:6d:6c:c6:32:5f:93:b6: ea:a9:1d:25:1c:2c:d7:db:67:29:d4:21:06:62:5f:2e:b5:34: 82:f5:1b:ff:12:9c:dc:79:aa:82:26:9a:32:0a:21:f1:fd:b6: 29:6b:d6:10:c7:c2:85:05:7b:c2:50:d9:60:74:8b:77:6d:1d: f4:a7:32:8a:66:73:c5:63:64:0d:71:e7:f8:4b:2b:fa:60:e9: 21:e8:32:40 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUKRjvBGbLF3Wc9ClVXr6MRo+SREYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNTEyMjQwOTAyNTVaFw0yNjEyMjMwOTA3NTVaMDMxMTAvBgNV BAMTKDFCNjFFRjZDQ0MxRkRGMUM5MTAxNDJBQ0QyMzMwMUI5MjMwOTI1NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlJKPSM5SmFplcgTN8urM0IZXC 7WsXZkc2gXDwzyGGJR9zYz/vin4vTBMlG9UnUr4IbRDPJCAvFnQYnylYWWKV4/IP 3reRsphNOQ5xB61di6zkqSZTRMTSWhneBP2YTMIpVRVVN/Xtt/oVL45WnMVhVcYV RS49mW+zisdtijcrZ8soXJmDJTvHBH1BTAoco0/vw8jqYSOrvq9pftx7uz92HLtg qjTJ1sN8bbyfAjtNBIeNAedgxLVlKP4EU6Z1VWPmnVZdysKCUcuFCwM/pan5mYPK C49CqG7h+llF7gHULX3ms0Nf96mlF02jLrrxoSmugX/5HNQbjrUzE3rKVlchAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUG2HvbMwf3xyRAUKs0jMBuSMJJU0wHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjEzNTY4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPk+ MA0GCSqGSIb3DQEBCwUAA4IBAQClFEYIoir4tSvtlEF1UpV9mfNJYP3b0mzVEQBA j6zu3f0La6VF6xZCOUqqY/e+9GW98KWizrdxOwFDt3cXzMOoF2Wxiv53r02XwNUd ZUFjrLb7Uhoe19V+BI4B6OPLvbDk7gt7IO9LSlECnn6RXGOlRvspKTDTKLxQfwVb JPhWdXf5odA7kMVtahBkRgtcNRyVEJ8T3/aV46m8jS/4hEE/w/Ik1yWJNrULkRIS KG1sxjJfk7bqqR0lHCzX22cp1CEGYl8utTSC9Rv/EpzceaqCJpoyCiHx/bYpa9YQ x8KFBXvCUNlgdIt3bR30pzKKZnPFY2QNcef4Syv6YOkh6DJA -----END CERTIFICATE-----Generated at Sun Jan 25 18:51:53 2026 by rpki-client