This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215748.roa File: AS215748.roa (raw, json) Hash identifier: hAPvhZUlFPVtdDrtNZ54H6JRP4mOrH211qXl0/DAMOQ= Subject key identifier: 69:7A:9B:3C:B0:B8:5B:A2:43:E2:E9:FC:E0:E9:71:4F:9D:B2:B1:36 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 1DA41F668B2E04477F37C6F7837D5FC648FAAD3A Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215748.roa Signing time: Sun 04 Jan 2026 07:28:24 +0000 ROA not before: Sun 04 Jan 2026 07:23:24 +0000 ROA not after: Sun 03 Jan 2027 07:28:24 +0000 asID: 215748 IP address blocks: 96.62.110.0/24 maxlen: 24 96.62.123.0/24 maxlen: 24 96.62.142.0/24 maxlen: 24 96.62.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a4:1f:66:8b:2e:04:47:7f:37:c6:f7:83:7d:5f:c6:48:fa:ad:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 4 07:23:24 2026 GMT Not After : Jan 3 07:28:24 2027 GMT Subject: CN=697A9B3CB0B85BA243E2E9FCE0E9714F9DB2B136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f6:2d:83:f1:1c:74:1e:9f:fe:ce:da:36:ae: 9b:70:dc:27:a9:ca:2d:4f:f3:2d:15:c1:87:e8:91: df:4f:ed:2c:f0:59:64:eb:7a:e1:44:1b:5b:b5:42: 8c:bf:1e:f0:4f:58:06:15:92:30:73:de:ef:5e:a2: 82:eb:ea:c3:a6:1b:59:84:3c:65:1f:7f:b8:82:77: 38:57:62:23:53:0c:9b:18:9a:e5:ec:ed:dd:94:6a: 73:08:eb:32:7b:52:17:b1:57:06:15:20:dc:a0:5b: 34:af:6e:62:9c:3e:9c:3c:7f:40:7b:f6:0b:b3:db: 62:36:4d:a1:08:f8:97:ac:9e:67:74:20:43:bf:00: b0:79:ce:6c:92:b3:23:39:10:13:32:df:a0:f0:c5: 14:0d:0f:a7:fc:92:6b:1a:bd:da:1f:14:06:db:01: f5:a3:83:a2:7d:af:85:e3:6d:f7:7b:34:c6:25:4e: 5c:6b:e9:db:eb:cf:2e:54:7a:2f:ce:0d:d5:2c:b0: 9d:d6:73:60:18:9b:55:bc:51:95:be:d6:f2:ea:eb: d8:ab:e5:32:fa:55:9e:e8:b4:95:47:4c:01:6f:25: 13:06:86:e3:fe:a4:d9:6f:0e:71:da:97:fd:64:e1: 9e:ba:99:9a:93:65:37:ed:05:49:ac:d5:74:88:06: 0d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7A:9B:3C:B0:B8:5B:A2:43:E2:E9:FC:E0:E9:71:4F:9D:B2:B1:36 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215748.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 96.62.110.0/24 96.62.123.0/24 96.62.142.0/24 96.62.213.0/24 Signature Algorithm: sha256WithRSAEncryption 65:1b:55:a7:11:63:c8:e1:b2:1b:e6:3b:e8:d5:15:52:85:07: 75:8a:f0:50:1d:5d:d9:d5:ce:b9:95:75:d6:25:91:80:3e:f5: f8:fd:02:fd:d9:16:3e:d5:dd:f4:44:52:0c:4d:1e:4d:13:7c: 1c:a9:31:49:ae:c5:95:9b:75:17:86:fc:88:e3:fb:b3:5c:b8: 40:2d:7c:75:d7:ac:9e:4a:b2:d9:0c:89:bd:8f:a9:aa:a9:f5: c6:c5:bb:47:4b:3e:56:35:35:9b:45:50:7d:e5:db:98:f1:f1: 5a:c9:1a:83:7a:32:2c:e5:87:64:32:0e:b2:9d:13:2e:ec:cf: 9d:50:ec:64:12:bc:73:a1:9b:e1:ef:ca:3f:b1:d3:80:47:3a: c2:47:33:db:af:d2:70:1b:e9:7f:f8:fd:bb:12:70:00:68:be: 51:96:01:af:1c:ba:4e:99:3a:5b:cb:b1:e7:ae:9e:62:ec:34: e8:a5:5d:96:fd:c8:3a:3f:43:4c:34:0d:72:a2:8e:1e:16:ca: ec:2a:fe:b8:c0:73:69:e5:c6:c1:87:03:c0:68:20:4d:2b:ef: 50:ae:a2:6f:d4:e4:40:23:ca:db:b7:43:d8:8b:53:d3:15:76: b3:e2:92:e2:e1:84:60:d9:6a:a1:f6:12:9c:78:8b:3b:54:e1: 1f:77:e6:68 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUHaQfZosuBEd/N8b3g31fxkj6rTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMDQwNzIzMjRaFw0yNzAxMDMwNzI4MjRaMDMxMTAvBgNV BAMTKDY5N0E5QjNDQjBCODVCQTI0M0UyRTlGQ0UwRTk3MTRGOURCMkIxMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn9i2D8Rx0Hp/+zto2rptw3Cep yi1P8y0VwYfokd9P7SzwWWTreuFEG1u1Qoy/HvBPWAYVkjBz3u9eooLr6sOmG1mE PGUff7iCdzhXYiNTDJsYmuXs7d2UanMI6zJ7UhexVwYVINygWzSvbmKcPpw8f0B7 9guz22I2TaEI+Jesnmd0IEO/ALB5zmySsyM5EBMy36DwxRQND6f8kmsavdofFAbb AfWjg6J9r4Xjbfd7NMYlTlxr6dvrzy5Uei/ODdUssJ3Wc2AYm1W8UZW+1vLq69ir 5TL6VZ7otJVHTAFvJRMGhuP+pNlvDnHal/1k4Z66mZqTZTftBUms1XSIBg1nAgMB AAGjggIcMIICGDAdBgNVHQ4EFgQUaXqbPLC4W6JD4un84OlxT52ysTYwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE1NzQ4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAYD5u AwQAYD57AwQAYD6OAwQAYD7VMA0GCSqGSIb3DQEBCwUAA4IBAQBlG1WnEWPI4bIb 5jvo1RVShQd1ivBQHV3Z1c65lXXWJZGAPvX4/QL92RY+1d30RFIMTR5NE3wcqTFJ rsWVm3UXhvyI4/uzXLhALXx116yeSrLZDIm9j6mqqfXGxbtHSz5WNTWbRVB95duY 8fFayRqDejIs5YdkMg6ynRMu7M+dUOxkErxzoZvh78o/sdOARzrCRzPbr9JwG+l/ +P27EnAAaL5RlgGvHLpOmTpby7Hnrp5i7DTopV2W/cg6P0NMNA1yoo4eFsrsKv64 wHNp5cbBhwPAaCBNK+9QrqJv1ORAI8rbt0PYi1PTFXaz4pLi4YRg2Wqh9hKceIs7 VOEfd+Zo -----END CERTIFICATE-----Generated at Mon Jan 19 08:13:48 2026 by rpki-client