This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216416.roa File: AS216416.roa (raw, json) Hash identifier: d8FHBZEz/fZAhViclrTt6X4U0lbl0DCM1Ko0CvgS/M8= Subject key identifier: D7:B6:2E:26:C4:AF:83:3D:3D:8E:00:6C:11:07:2E:9F:93:7E:D7:51 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 47367FB8A33B06AB86E247190093482D40D92E11 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216416.roa Signing time: Mon 01 Dec 2025 19:24:49 +0000 ROA not before: Mon 01 Dec 2025 19:19:49 +0000 ROA not after: Mon 30 Nov 2026 19:24:49 +0000 asID: 216416 IP address blocks: 167.148.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:36:7f:b8:a3:3b:06:ab:86:e2:47:19:00:93:48:2d:40:d9:2e:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 1 19:19:49 2025 GMT Not After : Nov 30 19:24:49 2026 GMT Subject: CN=D7B62E26C4AF833D3D8E006C11072E9F937ED751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5e:2a:55:fc:5f:de:da:82:9f:c7:25:38:ec: db:e6:74:18:9c:7c:0c:59:70:0a:23:df:33:30:e3: 6d:9a:75:d4:80:a8:6b:3b:7c:3c:dc:a2:3c:13:a9: 4d:06:37:8e:b7:a8:20:dc:ba:99:b8:e1:9a:90:40: e4:23:ee:4b:7b:6e:35:60:05:a9:10:e2:96:ca:80: 04:45:f2:96:ea:2c:3f:c5:6c:43:6f:18:8b:c2:d9: 10:86:d2:71:13:e7:2f:c6:e3:5c:22:83:21:2a:41: ed:9f:5b:02:9b:13:d2:79:e4:18:75:08:0f:a7:e9: 85:e6:c6:86:fa:88:b0:b4:02:b1:d4:fa:11:fc:a4: be:fe:2c:19:44:8f:6d:b1:50:50:1a:9b:e9:5a:1a: 5f:7f:de:0a:da:30:35:36:3f:98:8b:d2:47:75:5a: e5:70:c9:f2:6a:b7:2f:91:c9:e7:1e:6d:32:ba:6c: 80:cb:03:15:14:62:86:3c:0b:e9:8b:6f:3b:f2:44: e1:ed:65:d7:3c:83:0e:d8:bb:6b:c6:7e:64:a6:fa: cb:a3:dd:a3:fc:08:35:3c:e1:e7:d5:2f:87:da:6f: bd:39:8f:43:80:00:28:c7:61:91:9b:de:a7:d9:71: c0:9a:3e:98:74:dc:ea:38:c4:48:65:e8:0f:1f:44: 1f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B6:2E:26:C4:AF:83:3D:3D:8E:00:6C:11:07:2E:9F:93:7E:D7:51 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216416.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.148.159.0/24 Signature Algorithm: sha256WithRSAEncryption 98:b0:22:6a:56:98:e0:60:f3:0a:c6:db:ad:ba:d6:bc:24:7e: b9:9a:8c:d2:7c:b4:4f:ea:58:26:de:c6:2e:2d:9d:4d:db:59: 81:30:70:b7:ad:9d:7c:7f:8b:9a:e6:ef:c0:f2:57:99:2f:8d: 4e:a4:7b:7c:70:9d:c4:03:95:f9:ba:af:44:d8:f6:57:3a:87: b2:66:52:66:9a:23:37:82:11:3d:4d:03:70:b0:dc:b9:b8:dd: aa:8c:25:93:71:82:3c:82:f1:d7:8d:30:e2:4e:9a:32:4f:3a: 51:b8:6b:76:9d:8f:e7:8d:ad:cd:cb:7a:c2:55:d6:42:58:f6: 54:21:22:d4:66:a2:b0:b1:8e:ef:5d:d4:41:9d:10:fd:71:0d: 29:1a:bd:c9:f5:b8:3c:1f:c4:78:27:45:d3:39:03:47:71:78: ba:4e:92:f8:22:f6:79:e8:c0:81:ca:10:aa:3c:96:ec:c0:c7: 58:73:3e:3b:31:42:f9:bd:db:da:82:9e:81:f1:72:67:82:25: 89:fe:27:56:7e:ce:c8:03:6a:28:5d:2e:6d:23:ed:e5:d1:91: 0c:1f:72:e9:85:31:ba:1d:42:21:9a:08:2b:af:22:c3:9c:f9: 53:bb:86:7e:41:f1:f0:e8:44:ea:8c:cd:35:1c:ab:a1:88:86: e0:68:68:19 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIURzZ/uKM7BquG4kcZAJNILUDZLhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMDExOTE5NDlaFw0yNjExMzAxOTI0NDlaMDMxMTAvBgNV BAMTKEQ3QjYyRTI2QzRBRjgzM0QzRDhFMDA2QzExMDcyRTlGOTM3RUQ3NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiXipV/F/e2oKfxyU47NvmdBic fAxZcAoj3zMw422addSAqGs7fDzcojwTqU0GN463qCDcupm44ZqQQOQj7kt7bjVg BakQ4pbKgARF8pbqLD/FbENvGIvC2RCG0nET5y/G41wigyEqQe2fWwKbE9J55Bh1 CA+n6YXmxob6iLC0ArHU+hH8pL7+LBlEj22xUFAam+laGl9/3graMDU2P5iL0kd1 WuVwyfJqty+RyecebTK6bIDLAxUUYoY8C+mLbzvyROHtZdc8gw7Yu2vGfmSm+suj 3aP8CDU84efVL4fab705j0OAACjHYZGb3qfZccCaPph03Oo4xEhl6A8fRB+tAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU17YuJsSvgz09jgBsEQcun5N+11EwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE2NDE2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp5Sf MA0GCSqGSIb3DQEBCwUAA4IBAQCYsCJqVpjgYPMKxtututa8JH65mozSfLRP6lgm 3sYuLZ1N21mBMHC3rZ18f4ua5u/A8leZL41OpHt8cJ3EA5X5uq9E2PZXOoeyZlJm miM3ghE9TQNwsNy5uN2qjCWTcYI8gvHXjTDiTpoyTzpRuGt2nY/nja3Ny3rCVdZC WPZUISLUZqKwsY7vXdRBnRD9cQ0pGr3J9bg8H8R4J0XTOQNHcXi6TpL4IvZ56MCB yhCqPJbswMdYcz47MUL5vdvagp6B8XJngiWJ/idWfs7IA2ooXS5tI+3l0ZEMH3Lp hTG6HUIhmggrryLDnPlTu4Z+QfHw6ETqjM01HKuhiIbgaGgZ -----END CERTIFICATE-----Generated at Fri Dec 5 05:06:09 2025 by rpki-client