This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215304.roa File: AS215304.roa (raw, json) Hash identifier: RnO8sRMCZ8gufGX5wRjhhLLVQu93lNBxPesUN/5QOLY= Subject key identifier: 17:DC:B0:A9:D5:DD:23:73:3C:90:D9:C3:8F:C0:81:DB:F3:A3:EF:52 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 2CED2F38F1B118B211893CB402D5B17CC19DDCDC Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215304.roa Signing time: Thu 11 Dec 2025 00:03:42 +0000 ROA not before: Wed 10 Dec 2025 23:58:42 +0000 ROA not after: Thu 10 Dec 2026 00:03:42 +0000 asID: 215304 IP address blocks: 46.203.98.0/24 maxlen: 24 46.203.203.0/24 maxlen: 24 92.113.106.0/23 maxlen: 24 92.113.112.0/23 maxlen: 24 92.113.124.0/23 maxlen: 24 92.113.136.0/23 maxlen: 24 92.113.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ed:2f:38:f1:b1:18:b2:11:89:3c:b4:02:d5:b1:7c:c1:9d:dc:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 10 23:58:42 2025 GMT Not After : Dec 10 00:03:42 2026 GMT Subject: CN=17DCB0A9D5DD23733C90D9C38FC081DBF3A3EF52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:90:c2:45:39:9e:5b:c1:27:c9:49:29:9e:83: 52:67:12:f0:5c:00:f7:8d:72:1f:74:05:85:d9:35: 74:e5:b2:47:38:db:7d:87:a4:d8:a6:16:5d:5f:c2: ea:89:98:41:38:8a:1c:9d:3a:cd:fe:62:f8:e7:59: 2c:56:49:95:99:95:71:30:29:c8:14:7e:85:23:6c: 4d:40:57:70:1f:c2:17:fb:89:00:ea:25:9b:eb:ef: ba:4a:f6:fc:07:63:9b:9e:8d:92:8c:8f:3a:4a:b2: 3d:11:de:4f:99:16:4c:e4:f1:e5:ab:16:42:d6:f0: a9:85:0d:c2:5c:ee:06:3b:57:cd:98:73:78:f0:63: a0:b6:4b:14:e5:6d:14:85:d6:8f:10:19:ff:24:73: fd:3b:16:aa:06:87:96:ba:06:f9:5d:4a:49:2c:8e: ff:6a:8a:2a:0f:1f:13:ba:db:69:98:cc:c7:d4:5c: 28:c3:63:17:91:ed:38:c4:9b:ae:d4:51:03:55:2b: ba:e8:51:b2:f5:8f:b9:87:b5:b3:5f:1f:48:3f:cd: cd:79:2f:d7:03:5a:7c:53:b9:c4:54:23:df:92:38: da:16:ac:e6:77:8f:5c:4e:ab:13:7c:43:dd:ee:14: 0f:57:f9:96:99:96:b2:7c:c7:60:41:f3:3d:87:f4: 6f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DC:B0:A9:D5:DD:23:73:3C:90:D9:C3:8F:C0:81:DB:F3:A3:EF:52 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.203.98.0/24 46.203.203.0/24 92.113.106.0/23 92.113.112.0/23 92.113.124.0/23 92.113.136.0/23 92.113.142.0/23 Signature Algorithm: sha256WithRSAEncryption 48:71:4e:00:6f:6a:8b:47:02:ce:c2:96:b3:a4:8e:5b:75:a5: 7c:7c:00:06:81:b6:59:fd:30:1c:ac:cb:67:04:07:f5:92:b0: ec:17:d9:08:a7:25:ab:ce:b6:42:79:c4:27:12:74:31:a4:f2: f6:c2:2e:d2:61:da:1b:0f:01:d7:0d:e0:4d:d3:6e:25:98:1a: 9f:9a:71:2f:81:81:7a:39:41:2e:98:58:74:62:ed:23:f5:b9: 90:7e:de:81:7a:b2:42:e2:d7:06:52:c2:9b:dc:c8:63:48:2d: 67:ba:b2:10:40:b7:71:e1:63:5a:2e:aa:6d:22:c4:5d:ae:53: 6d:a2:37:01:41:0f:53:5f:32:8a:04:d6:25:f2:53:c3:36:ef: 06:f7:95:c1:55:14:ea:ec:b7:07:32:0a:aa:b5:5d:4a:42:03: d2:cc:de:f5:71:46:99:bd:1d:91:d2:2b:ae:90:bf:67:0b:44: da:b0:b1:1c:d5:7e:02:d8:7f:c1:d6:5a:81:d1:87:db:f1:32: 04:be:08:14:c8:93:e4:e1:82:09:14:ab:11:7c:3e:c2:29:03: 6f:71:16:f0:39:b8:8b:d4:44:df:72:51:fa:6a:c5:46:a6:af: 55:bb:04:5a:35:09:6e:f4:e7:3d:fa:36:62:41:d5:74:77:50: 20:ac:63:c3 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIULO0vOPGxGLIRiTy0AtWxfMGd3NwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMTAyMzU4NDJaFw0yNjEyMTAwMDAzNDJaMDMxMTAvBgNV BAMTKDE3RENCMEE5RDVERDIzNzMzQzkwRDlDMzhGQzA4MURCRjNBM0VGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4kMJFOZ5bwSfJSSmeg1JnEvBc APeNch90BYXZNXTlskc4232HpNimFl1fwuqJmEE4ihydOs3+YvjnWSxWSZWZlXEw KcgUfoUjbE1AV3Afwhf7iQDqJZvr77pK9vwHY5uejZKMjzpKsj0R3k+ZFkzk8eWr FkLW8KmFDcJc7gY7V82Yc3jwY6C2SxTlbRSF1o8QGf8kc/07FqoGh5a6BvldSkks jv9qiioPHxO622mYzMfUXCjDYxeR7TjEm67UUQNVK7roUbL1j7mHtbNfH0g/zc15 L9cDWnxTucRUI9+SONoWrOZ3j1xOqxN8Q93uFA9X+ZaZlrJ8x2BB8z2H9G/vAgMB AAGjggIuMIICKjAdBgNVHQ4EFgQUF9ywqdXdI3M8kNnDj8CB2/Oj71IwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE1MzA0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALsti AwQALsvLAwQBXHFqAwQBXHFwAwQBXHF8AwQBXHGIAwQBXHGOMA0GCSqGSIb3DQEB CwUAA4IBAQBIcU4Ab2qLRwLOwpazpI5bdaV8fAAGgbZZ/TAcrMtnBAf1krDsF9kI pyWrzrZCecQnEnQxpPL2wi7SYdobDwHXDeBN024lmBqfmnEvgYF6OUEumFh0Yu0j 9bmQft6BerJC4tcGUsKb3MhjSC1nurIQQLdx4WNaLqptIsRdrlNtojcBQQ9TXzKK BNYl8lPDNu8G95XBVRTq7LcHMgqqtV1KQgPSzN71cUaZvR2R0iuukL9nC0TasLEc 1X4C2H/B1lqB0Yfb8TIEvggUyJPk4YIJFKsRfD7CKQNvcRbwObiL1ETfclH6asVG pq9VuwRaNQlu9Oc9+jZiQdV0d1AgrGPD -----END CERTIFICATE-----Generated at Mon Dec 15 15:35:11 2025 by rpki-client