This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215224.roa File: AS215224.roa (raw, json) Hash identifier: zgqFn+9g67xnMC3GbDs1j2ux6obBcvYv7ICjvKs5CtM= Subject key identifier: 18:72:84:1D:81:FA:89:F2:41:F7:3E:32:02:03:BE:70:31:20:5E:A9 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 1C5F85B98DC4E43A69D763A74F98B0DE54D2B318 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215224.roa Signing time: Wed 03 Dec 2025 00:05:23 +0000 ROA not before: Wed 03 Dec 2025 00:00:23 +0000 ROA not after: Wed 02 Dec 2026 00:05:23 +0000 asID: 215224 IP address blocks: 181.215.178.0/24 maxlen: 24 191.96.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 10:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:5f:85:b9:8d:c4:e4:3a:69:d7:63:a7:4f:98:b0:de:54:d2:b3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 00:00:23 2025 GMT Not After : Dec 2 00:05:23 2026 GMT Subject: CN=1872841D81FA89F241F73E320203BE7031205EA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4b:f8:33:d6:ae:b4:2d:5f:45:94:92:8a:d0: 24:f2:d4:b6:bf:f5:9c:6f:79:3d:9f:d0:d4:f7:7a: fd:8c:83:16:e7:25:a2:72:74:c1:96:0d:ee:b1:f5: 0f:73:5d:6d:55:5d:e6:45:4f:08:94:f5:a9:52:fc: 0f:af:16:f2:69:d7:3a:3c:15:97:3b:83:2f:49:ab: 4e:2c:d3:61:b8:ac:76:35:21:87:d2:b2:46:a2:ee: e2:49:9d:b8:8a:19:70:08:ce:69:8a:7a:12:ec:33: cc:43:94:88:6d:42:23:a2:3e:c8:4b:da:36:90:e7: 4b:02:93:98:41:60:d4:ca:d5:22:a0:21:7b:c0:0e: f9:bf:63:b5:0f:d3:e7:0f:8d:f1:a8:41:bc:9e:f5: 69:c2:36:2a:83:59:af:b9:a4:4d:8c:88:eb:e3:8b: 0f:4f:ca:3c:de:7d:b3:e9:e3:d1:49:7d:3e:ce:aa: c6:d5:52:5c:d7:6a:26:a6:c1:14:47:71:6f:7d:39: 82:a7:57:a0:d2:69:70:63:e5:3e:1f:57:ce:5d:d0: 88:ed:fd:31:33:2b:05:f5:1d:32:c7:46:e3:fb:13: b7:a2:7e:92:fd:47:b2:85:35:1e:12:73:50:a8:7f: 11:dc:96:e6:35:19:15:7f:72:e8:58:38:ce:3c:64: ec:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:72:84:1D:81:FA:89:F2:41:F7:3E:32:02:03:BE:70:31:20:5E:A9 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215224.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.215.178.0/24 191.96.100.0/24 Signature Algorithm: sha256WithRSAEncryption 76:cf:a8:66:37:25:48:d2:3b:f8:90:95:80:35:1a:87:32:4a: 1b:b8:b5:c2:4a:41:55:87:17:6e:54:07:39:5f:55:a2:09:ee: 12:0f:3b:97:5d:62:c5:25:8f:3e:ca:50:86:45:2a:bb:d7:0c: 35:93:b5:44:6b:9e:04:16:4e:55:44:fb:e7:ea:20:d1:47:7e: be:a7:bf:10:37:32:36:3d:fa:23:49:e5:de:f7:90:5b:4e:ab: 16:87:eb:91:ac:fe:df:89:35:f2:73:7d:72:ff:2c:74:27:fd: 6c:32:d0:82:68:6c:b6:db:be:df:f6:e6:8f:6d:7b:0e:5f:df: 74:c1:14:f3:3f:17:86:df:9d:6c:58:6e:4c:51:2d:6f:82:e6: 8b:f3:26:78:56:52:40:6b:fb:50:97:f0:f0:34:41:d0:df:7d: d0:aa:6a:bc:b1:00:99:df:66:78:25:a3:43:f0:9c:f4:6d:5e: 0c:a7:65:b1:6d:a2:3a:3d:ac:c4:a5:d5:78:6e:08:be:56:11: 05:12:a7:a4:83:a3:9a:a3:3f:62:0d:eb:8c:28:9a:49:9a:12: bf:6f:17:f5:33:43:e8:9b:64:57:a1:e9:e2:33:b1:ec:29:4c: 16:ae:27:df:41:6d:e5:46:16:ba:13:e8:ce:c6:96:fe:b6:7e: b8:ae:25:a5 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUHF+FuY3E5Dpp12OnT5iw3lTSsxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwMDAwMjNaFw0yNjEyMDIwMDA1MjNaMDMxMTAvBgNV BAMTKDE4NzI4NDFEODFGQTg5RjI0MUY3M0UzMjAyMDNCRTcwMzEyMDVFQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDS/gz1q60LV9FlJKK0CTy1La/ 9ZxveT2f0NT3ev2MgxbnJaJydMGWDe6x9Q9zXW1VXeZFTwiU9alS/A+vFvJp1zo8 FZc7gy9Jq04s02G4rHY1IYfSskai7uJJnbiKGXAIzmmKehLsM8xDlIhtQiOiPshL 2jaQ50sCk5hBYNTK1SKgIXvADvm/Y7UP0+cPjfGoQbye9WnCNiqDWa+5pE2MiOvj iw9PyjzefbPp49FJfT7OqsbVUlzXaiamwRRHcW99OYKnV6DSaXBj5T4fV85d0Ijt /TEzKwX1HTLHRuP7E7eifpL9R7KFNR4Sc1CofxHcluY1GRV/cuhYOM48ZOxjAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUGHKEHYH6ifJB9z4yAgO+cDEgXqkwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjE1MjI0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAtdey AwQAv2BkMA0GCSqGSIb3DQEBCwUAA4IBAQB2z6hmNyVI0jv4kJWANRqHMkobuLXC SkFVhxduVAc5X1WiCe4SDzuXXWLFJY8+ylCGRSq71ww1k7VEa54EFk5VRPvn6iDR R36+p78QNzI2PfojSeXe95BbTqsWh+uRrP7fiTXyc31y/yx0J/1sMtCCaGy2277f 9uaPbXsOX990wRTzPxeG351sWG5MUS1vguaL8yZ4VlJAa/tQl/DwNEHQ333Qqmq8 sQCZ32Z4JaND8Jz0bV4Mp2WxbaI6PazEpdV4bgi+VhEFEqekg6Oaoz9iDeuMKJpJ mhK/bxf1M0Pom2RXoeniM7HsKUwWriffQW3lRha6E+jOxpb+tn64riWl -----END CERTIFICATE-----Generated at Fri Dec 5 20:11:50 2025 by rpki-client