This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216030.roa File: AS216030.roa (raw, json) Hash identifier: hz6rlz63raF+mMFDThS3C765XZHdoh7ymVahD8hUw5M= Subject key identifier: 7C:2C:6D:98:78:B8:B7:D0:5C:DE:EB:A9:C2:45:53:3C:18:FB:3D:87 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 2CCC6B980A5AF74E66BB4994A46C748EE49918B9 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216030.roa Signing time: Wed 07 Jan 2026 22:44:22 +0000 ROA not before: Wed 07 Jan 2026 22:39:22 +0000 ROA not after: Wed 06 Jan 2027 22:44:22 +0000 asID: 216030 IP address blocks: 167.148.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:cc:6b:98:0a:5a:f7:4e:66:bb:49:94:a4:6c:74:8e:e4:99:18:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 7 22:39:22 2026 GMT Not After : Jan 6 22:44:22 2027 GMT Subject: CN=7C2C6D9878B8B7D05CDEEBA9C245533C18FB3D87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:86:ff:12:49:1f:14:cb:b9:b5:9f:48:93:e7: fe:e4:df:72:6b:65:bc:ae:cc:98:d8:7c:29:b7:27: fe:7c:f3:48:12:98:49:f6:0a:0e:35:32:ea:2a:34: 06:2a:64:47:88:05:ab:95:4a:d8:3c:6e:97:ed:2f: bd:c6:7e:29:71:26:1e:95:57:d1:d0:35:6f:09:30: 46:26:f7:6c:44:6c:1c:c6:8e:7f:03:c5:66:59:84: d8:ab:d8:2d:ae:12:a5:3e:02:a5:7f:35:11:30:f9: ea:5e:e1:8f:0f:1e:22:1c:54:ae:73:be:24:5f:c9: 3d:b4:53:34:12:45:72:f3:43:19:15:15:08:c2:41: e8:50:00:55:60:9f:db:a0:3e:47:36:d6:54:07:ad: 05:cf:58:43:5f:83:1a:04:26:97:ae:12:2d:a8:d1: 9c:55:8c:9e:3d:52:e8:59:03:01:8a:c2:d6:4a:f8: d9:2c:63:82:7f:df:ff:b3:e7:e0:0b:ec:1f:fa:2c: 02:8e:d3:80:f8:25:02:01:de:45:6c:94:bb:34:2f: 81:5b:31:45:de:84:1f:54:c6:54:5b:f2:de:4c:23: b8:5e:91:b8:14:1e:60:71:6a:05:24:27:b3:65:d2: 9e:f8:c7:78:29:9b:ed:ff:d7:b3:3c:b5:a4:a3:a3: 72:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2C:6D:98:78:B8:B7:D0:5C:DE:EB:A9:C2:45:53:3C:18:FB:3D:87 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.148.0.0/24 Signature Algorithm: sha256WithRSAEncryption 68:00:00:f5:0f:9d:0e:28:84:bc:3d:9d:bb:ea:6a:b6:78:ab: 57:1e:67:cb:f7:5b:ab:09:17:6f:e1:16:32:15:72:52:78:79: 4e:59:63:5d:c9:f7:28:f8:9f:fb:53:14:c2:99:c8:7b:22:10: ba:55:b6:ba:d9:0c:d1:03:b4:0e:d1:72:19:22:3b:86:04:24: 35:f6:8f:75:55:d6:b8:de:e5:97:92:b1:79:7d:55:37:55:78: 64:ac:3d:e4:6b:12:b6:60:d8:c2:62:f4:9e:a7:17:41:da:1c: e0:53:7a:5b:7f:c5:18:e5:ce:cb:b1:fe:00:e9:1d:2d:e9:71: 18:df:de:05:ce:03:4b:ac:e5:59:64:6f:52:9c:79:21:6d:88: e5:84:56:1d:86:bf:74:36:8e:f7:f2:0e:7b:8f:c7:e7:7a:79: 81:82:d0:fc:23:a2:64:dc:65:06:a0:b9:d3:9a:64:d8:e6:81: 53:8a:05:34:dd:b1:5d:aa:94:7e:41:7a:72:94:f6:a5:db:6a: f4:cf:7e:42:03:12:67:ec:48:d5:b4:40:62:23:41:5f:59:24: 98:8e:64:8c:d8:d6:3b:e7:ad:fb:db:48:84:9b:dd:b0:00:5a: 38:67:5f:9a:f6:ba:d2:d4:ef:a3:e6:64:92:14:6e:d8:bf:b6: 80:f6:8d:d3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIULMxrmApa905mu0mUpGx0juSZGLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMDcyMjM5MjJaFw0yNzAxMDYyMjQ0MjJaMDMxMTAvBgNV BAMTKDdDMkM2RDk4NzhCOEI3RDA1Q0RFRUJBOUMyNDU1MzNDMThGQjNEODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCehv8SSR8Uy7m1n0iT5/7k33Jr ZbyuzJjYfCm3J/5880gSmEn2Cg41MuoqNAYqZEeIBauVStg8bpftL73GfilxJh6V V9HQNW8JMEYm92xEbBzGjn8DxWZZhNir2C2uEqU+AqV/NREw+epe4Y8PHiIcVK5z viRfyT20UzQSRXLzQxkVFQjCQehQAFVgn9ugPkc21lQHrQXPWENfgxoEJpeuEi2o 0ZxVjJ49UuhZAwGKwtZK+NksY4J/3/+z5+AL7B/6LAKO04D4JQIB3kVslLs0L4Fb MUXehB9UxlRb8t5MI7hekbgUHmBxagUkJ7Nl0p74x3gpm+3/17M8taSjo3JpAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUfCxtmHi4t9Bc3uupwkVTPBj7PYcwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE2MDMwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp5QA MA0GCSqGSIb3DQEBCwUAA4IBAQBoAAD1D50OKIS8PZ276mq2eKtXHmfL91urCRdv 4RYyFXJSeHlOWWNdyfco+J/7UxTCmch7IhC6Vba62QzRA7QO0XIZIjuGBCQ19o91 Vda43uWXkrF5fVU3VXhkrD3kaxK2YNjCYvSepxdB2hzgU3pbf8UY5c7Lsf4A6R0t 6XEY394FzgNLrOVZZG9SnHkhbYjlhFYdhr90No738g57j8fnenmBgtD8I6Jk3GUG oLnTmmTY5oFTigU03bFdqpR+QXpylPal22r0z35CAxJn7EjVtEBiI0FfWSSYjmSM 2NY7563720iEm92wAFo4Z1+a9rrS1O+j5mSSFG7Yv7aA9o3T -----END CERTIFICATE-----Generated at Mon Jan 19 08:13:43 2026 by rpki-client