This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213772.roa File: AS213772.roa (raw, json) Hash identifier: /m4l37f+TFasrZnWZSH6/ni3h80uZonYlJXFE47DSHA= Subject key identifier: 29:51:E5:59:21:91:E4:29:60:1B:FC:83:45:41:AC:CD:65:5C:04:85 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 269C62F387F261B81A7BEA7A98117695B04BC59B Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213772.roa Signing time: Wed 26 Nov 2025 21:56:25 +0000 ROA not before: Wed 26 Nov 2025 21:51:25 +0000 ROA not after: Wed 25 Nov 2026 21:56:25 +0000 asID: 213772 IP address blocks: 146.103.25.0/24 maxlen: 24 146.103.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:9c:62:f3:87:f2:61:b8:1a:7b:ea:7a:98:11:76:95:b0:4b:c5:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Nov 26 21:51:25 2025 GMT Not After : Nov 25 21:56:25 2026 GMT Subject: CN=2951E5592191E429601BFC834541ACCD655C0485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fb:9c:0c:e5:2f:6c:8f:9b:60:32:b0:ba:76: da:6f:a9:50:48:51:3b:90:43:ae:69:1b:76:b7:b0: 9a:f7:78:59:bd:2d:d0:1b:4a:6a:92:7d:09:75:9e: 36:11:de:10:59:d0:26:73:ae:da:3a:0d:45:0f:00: 98:28:67:95:43:67:3f:31:40:22:b7:9e:9b:45:3c: 16:81:ee:7b:65:ce:41:82:d9:77:a9:56:90:ea:c0: 2f:fb:2e:fb:ad:f4:c9:6a:c2:a5:b1:c7:1c:9b:6c: 11:1a:25:80:e5:eb:b6:33:3f:82:c7:c7:89:aa:7d: b1:d2:68:64:21:45:1d:97:89:01:e0:18:12:df:e3: 20:4c:25:dd:e0:31:33:26:85:1b:95:ff:a0:55:46: 10:d6:53:68:bf:95:81:2b:08:98:e9:41:60:5e:46: 42:b9:e2:72:af:32:71:9f:e9:2f:2c:5a:00:80:d7: aa:c3:51:17:4c:6e:47:0a:36:67:b2:b7:6f:20:10: 00:ef:d8:53:03:d3:ac:c2:80:df:fd:a2:72:3a:6f: c4:42:63:34:56:c6:17:0b:7e:4b:d5:5c:5f:6f:18: 6a:76:1f:f0:ee:fd:91:77:d9:85:61:88:4c:02:33: 5f:5e:30:ae:c0:b5:34:92:42:90:55:cd:89:ec:7b: 96:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:51:E5:59:21:91:E4:29:60:1B:FC:83:45:41:AC:CD:65:5C:04:85 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS213772.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.103.25.0/24 146.103.38.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:0c:76:60:6a:15:63:fb:34:e9:97:9c:88:3f:ed:ae:6e:25: d8:52:cb:8c:43:d2:ae:b4:90:2c:5b:f1:f3:fb:f5:7c:76:fd: 58:19:3c:6d:fd:af:9d:56:27:a1:94:39:92:c1:3c:db:29:79: 15:df:36:83:3d:4f:3e:2e:73:e6:5e:f0:da:1e:f0:5e:6c:fc: e5:9f:6d:9d:1b:2c:22:bb:6b:61:da:f5:27:1c:41:c6:46:e9: 78:73:3f:93:f1:79:eb:e4:54:6c:40:38:92:49:a4:ef:e2:06: 58:b5:be:8c:42:fa:a3:f1:e5:27:de:3b:2d:da:19:85:f0:47: f0:18:65:1e:e6:b0:ed:df:74:f6:52:61:68:d4:da:c8:9d:4f: 30:dd:89:47:4f:46:f7:24:e6:be:71:bc:0d:ba:be:d3:85:0d: 91:bc:88:cc:71:dc:c1:c5:a1:7a:37:40:e9:b1:47:c4:67:e6: 6b:79:1a:b7:9c:e3:93:2c:24:9e:66:10:81:43:11:10:32:14: b1:e0:b0:f3:20:7e:fd:ce:77:85:cd:1a:6a:01:b0:cd:1b:e0: 2a:bd:e9:34:52:c5:45:67:88:68:df:35:38:eb:78:01:bf:20: ba:32:77:7c:ab:c6:25:37:e7:8b:c8:7f:b9:27:4b:6c:aa:10: 6a:8b:9d:53 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUJpxi84fyYbgae+p6mBF2lbBLxZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTExMjYyMTUxMjVaFw0yNjExMjUyMTU2MjVaMDMxMTAvBgNV BAMTKDI5NTFFNTU5MjE5MUU0Mjk2MDFCRkM4MzQ1NDFBQ0NENjU1QzA0ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT+5wM5S9sj5tgMrC6dtpvqVBI UTuQQ65pG3a3sJr3eFm9LdAbSmqSfQl1njYR3hBZ0CZzrto6DUUPAJgoZ5VDZz8x QCK3nptFPBaB7ntlzkGC2XepVpDqwC/7Lvut9MlqwqWxxxybbBEaJYDl67YzP4LH x4mqfbHSaGQhRR2XiQHgGBLf4yBMJd3gMTMmhRuV/6BVRhDWU2i/lYErCJjpQWBe RkK54nKvMnGf6S8sWgCA16rDURdMbkcKNmeyt28gEADv2FMD06zCgN/9onI6b8RC YzRWxhcLfkvVXF9vGGp2H/Du/ZF32YVhiEwCM19eMK7AtTSSQpBVzYnse5ZzAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUKVHlWSGR5ClgG/yDRUGszWVcBIUwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjEzNzcyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkmcZ AwQAkmcmMA0GCSqGSIb3DQEBCwUAA4IBAQCMDHZgahVj+zTpl5yIP+2ubiXYUsuM Q9KutJAsW/Hz+/V8dv1YGTxt/a+dViehlDmSwTzbKXkV3zaDPU8+LnPmXvDaHvBe bPzln22dGywiu2th2vUnHEHGRul4cz+T8Xnr5FRsQDiSSaTv4gZYtb6MQvqj8eUn 3jst2hmF8EfwGGUe5rDt33T2UmFo1NrInU8w3YlHT0b3JOa+cbwNur7ThQ2RvIjM cdzBxaF6N0DpsUfEZ+ZreRq3nOOTLCSeZhCBQxEQMhSx4LDzIH79zneFzRpqAbDN G+Aqvek0UsVFZ4ho3zU463gBvyC6Mnd8q8YlN+eLyH+5J0tsqhBqi51T -----END CERTIFICATE-----Generated at Fri Dec 5 05:06:13 2025 by rpki-client