This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215152.roa File: AS215152.roa (raw, json) Hash identifier: AaYpf4LfuXKZX6xJI0FUp9gqvCCn2WtXHfhExGVYiXA= Subject key identifier: 9B:B3:61:7C:58:6A:B9:4E:77:3E:65:25:08:E0:F8:95:4B:1A:BC:54 Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 79C1F4B7EDFCEB9FEAB3580FA59C3129C9CAF752 Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215152.roa Signing time: Sat 24 Jan 2026 07:27:32 +0000 ROA not before: Sat 24 Jan 2026 07:22:32 +0000 ROA not after: Sat 23 Jan 2027 07:27:32 +0000 asID: 215152 IP address blocks: 143.20.145.0/24 maxlen: 24 143.20.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c1:f4:b7:ed:fc:eb:9f:ea:b3:58:0f:a5:9c:31:29:c9:ca:f7:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Jan 24 07:22:32 2026 GMT Not After : Jan 23 07:27:32 2027 GMT Subject: CN=9BB3617C586AB94E773E652508E0F8954B1ABC54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:23:28:ac:b8:00:1d:44:69:f6:b2:e0:5a:59: 3d:a3:58:23:92:5d:87:a6:9e:b5:a0:75:b6:3b:b4: 8c:5b:cf:33:28:ca:30:12:9c:5a:8d:a4:62:d0:16: 70:18:0f:dd:12:ca:42:87:2a:2f:64:de:cd:9c:71: e8:97:54:cb:58:fa:f3:96:7e:62:4f:23:2b:b9:75: 1d:08:ef:f0:f1:a6:e7:3f:af:b8:aa:f7:7a:d5:f9: 8d:a8:d7:d1:7f:53:94:9a:b9:a3:d9:21:23:d7:76: 89:28:2e:13:26:37:a1:11:3c:ea:96:0c:30:f3:1b: 25:a2:08:3a:dc:bc:cf:4d:b3:2e:3c:9d:da:72:58: 3f:86:6b:fb:8c:18:d7:7c:f1:e5:c2:ff:99:d8:7a: b2:22:15:7a:7a:d6:49:e1:85:da:61:d4:8b:71:89: 93:94:45:65:30:f4:cb:51:07:69:f7:40:2a:df:e8: af:4f:7d:d5:89:61:f5:41:46:f4:be:cb:75:b2:70: b7:46:35:30:88:ba:a1:ae:c5:ba:c3:6e:c5:9a:42: e6:f5:de:b1:8a:49:18:ca:b7:b3:0e:6c:56:bd:89: c3:12:33:ce:d7:6d:ce:e7:95:bb:5a:d8:45:76:89: 89:91:45:13:54:23:1c:67:0d:7c:55:dc:a3:04:5e: 6b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B3:61:7C:58:6A:B9:4E:77:3E:65:25:08:E0:F8:95:4B:1A:BC:54 X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215152.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.145.0/24 143.20.180.0/24 Signature Algorithm: sha256WithRSAEncryption 10:5c:7c:39:8c:39:30:89:84:1c:c2:f5:fd:f1:10:ff:e9:49: f2:f4:e9:e0:e2:4c:23:5d:b1:b9:8a:b8:46:de:94:5b:14:b5: 3d:a2:ce:4d:4c:e8:b9:87:58:f5:bd:a2:c8:c6:c0:42:e3:dd: 57:7c:0d:c5:ac:f0:5a:3f:27:fc:b3:7d:53:ac:3e:e4:dc:f6: 44:e1:31:f1:7c:43:9b:0e:40:fc:1f:be:02:fd:c3:b7:77:4b: 52:3f:99:bb:4f:49:a6:09:e9:94:17:f5:0f:88:e0:16:50:ad: c7:0c:f5:83:3d:88:e6:4d:e7:84:c7:59:34:94:18:37:72:7d: e5:27:e6:bf:21:4a:ef:69:3f:20:2a:05:b9:21:aa:24:ea:60: f9:98:9b:ff:df:99:a2:d9:43:03:d9:37:34:28:6e:6a:26:c8: e6:f8:9b:b9:72:e6:18:68:48:0f:cc:78:93:cd:4e:a2:a2:2a: bb:a3:8e:30:07:fb:f0:c5:1a:66:9b:72:dc:c4:52:c0:11:53: c3:db:ef:aa:15:3e:4e:e9:df:9f:9e:a6:4a:13:9d:d8:7c:5b: e1:bf:be:cf:32:95:7e:ac:32:95:5c:9f:6c:2e:94:cc:8c:e9: e6:b2:ec:ac:48:44:cf:f0:8b:e3:fc:b7:0f:8a:e7:31:68:f8: 5d:ca:6d:84 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUecH0t+3865/qs1gPpZwxKcnK91IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNjAxMjQwNzIyMzJaFw0yNzAxMjMwNzI3MzJaMDMxMTAvBgNV BAMTKDlCQjM2MTdDNTg2QUI5NEU3NzNFNjUyNTA4RTBGODk1NEIxQUJDNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhIyisuAAdRGn2suBaWT2jWCOS XYemnrWgdbY7tIxbzzMoyjASnFqNpGLQFnAYD90SykKHKi9k3s2cceiXVMtY+vOW fmJPIyu5dR0I7/Dxpuc/r7iq93rV+Y2o19F/U5SauaPZISPXdokoLhMmN6ERPOqW DDDzGyWiCDrcvM9Nsy48ndpyWD+Ga/uMGNd88eXC/5nYerIiFXp61knhhdph1Itx iZOURWUw9MtRB2n3QCrf6K9PfdWJYfVBRvS+y3WycLdGNTCIuqGuxbrDbsWaQub1 3rGKSRjKt7MObFa9icMSM87Xbc7nlbta2EV2iYmRRRNUIxxnDXxV3KMEXmuPAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUm7NhfFhquU53PmUlCOD4lUsavFQwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjE1MTUyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjxSR AwQAjxS0MA0GCSqGSIb3DQEBCwUAA4IBAQAQXHw5jDkwiYQcwvX98RD/6Uny9Ong 4kwjXbG5irhG3pRbFLU9os5NTOi5h1j1vaLIxsBC491XfA3FrPBaPyf8s31TrD7k 3PZE4THxfEObDkD8H74C/cO3d0tSP5m7T0mmCemUF/UPiOAWUK3HDPWDPYjmTeeE x1k0lBg3cn3lJ+a/IUrvaT8gKgW5Iaok6mD5mJv/35mi2UMD2Tc0KG5qJsjm+Ju5 cuYYaEgPzHiTzU6ioiq7o44wB/vwxRpmm3LcxFLAEVPD2++qFT5O6d+fnqZKE53Y fFvhv77PMpV+rDKVXJ9sLpTMjOnmsuysSETP8Ivj/LcPiucxaPhdym2E -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:24 2026 by rpki-client