This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211337.roa File: AS211337.roa (raw, json) Hash identifier: VLDy0M8yA9kRMESEsQ/CO7wW7p6tlDyaeicRaNw2QRE= Subject key identifier: 0A:11:22:67:69:46:78:D8:72:47:67:24:D8:62:26:F0:68:50:DC:7D Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 15EBABB4B02AAF5C7C8CE9C325FA0680DCECB265 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211337.roa Signing time: Sat 27 Dec 2025 08:44:20 +0000 ROA not before: Sat 27 Dec 2025 08:39:20 +0000 ROA not after: Sat 26 Dec 2026 08:44:20 +0000 asID: 211337 IP address blocks: 2a13:9500:11b::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:eb:ab:b4:b0:2a:af:5c:7c:8c:e9:c3:25:fa:06:80:dc:ec:b2:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 27 08:39:20 2025 GMT Not After : Dec 26 08:44:20 2026 GMT Subject: CN=0A112267694678D872476724D86226F06850DC7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:92:25:05:4b:c5:9d:a7:9d:be:97:b2:66:d4: a8:18:1f:fe:42:7f:ec:a1:17:92:69:5a:6d:60:f9: 3a:ee:68:0e:bb:73:16:ff:4e:6b:00:35:83:c6:66: 04:d5:db:62:8b:46:b8:6a:ad:32:4f:ad:7d:8f:cb: 94:2f:0e:9e:15:d5:7a:62:6d:d3:2f:72:f3:45:35: 02:64:bf:d3:99:c0:71:e3:17:1b:43:7a:bf:9a:f9: 8f:8c:48:7b:0b:db:75:b3:ae:94:93:fc:b5:89:40: 60:0e:a5:69:c7:3b:37:1f:f0:7f:93:a0:1b:7d:be: fb:5d:94:c5:6e:38:da:d8:35:d5:b3:62:92:bd:1f: 77:3e:e2:aa:f0:2c:6a:d2:25:1e:b8:e8:66:12:08: eb:79:bb:50:6a:f3:4a:7f:bd:ed:8c:95:a8:37:24: 3e:8f:3f:cc:fe:88:4d:7f:c9:d1:04:f5:8a:ea:8d: 09:f3:0f:3f:20:07:41:cb:b7:b9:86:50:06:29:b4: a6:27:ae:8f:a7:1a:e0:b4:60:39:99:97:70:60:f1: e9:6b:d5:dc:b6:49:78:fc:40:95:0c:09:04:53:8a: fd:c4:fd:dc:98:b1:a7:d5:f9:09:40:0e:c1:f2:1e: 65:98:01:88:28:27:30:09:b2:30:45:a6:f8:f3:b0: 7a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:11:22:67:69:46:78:D8:72:47:67:24:D8:62:26:F0:68:50:DC:7D X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9500:11b::/48 Signature Algorithm: sha256WithRSAEncryption 67:6e:2c:0e:21:11:42:11:46:39:a5:2b:aa:38:e5:c5:06:ff: e2:8b:4e:4a:ff:39:e3:a6:22:d7:ac:5f:7b:74:cf:aa:5d:69: 8f:4b:50:27:95:a8:66:28:84:8e:c0:0c:e2:cb:2d:e8:16:97: ef:d0:0c:20:46:57:c6:f1:8d:08:16:be:60:fe:19:90:3a:51: 9a:05:a1:1c:2f:29:0e:b9:3f:0a:e1:ee:94:bf:99:86:0e:71: b9:93:2b:d9:1f:22:8b:72:ba:b8:f8:bc:3a:6b:13:0f:e1:01: 6b:b1:6d:f7:1f:f4:e3:70:7d:9a:3e:a3:1b:21:b2:a0:e5:5e: 54:d7:cb:5d:ff:ac:46:44:b4:36:66:0d:d9:18:b7:ef:11:2d: 50:31:c8:c8:ae:35:43:84:65:a3:3e:63:27:3a:40:56:71:17: d5:28:58:af:6c:46:fe:b2:a3:ae:78:d3:ee:6c:0a:53:df:3f: c7:fa:b0:f4:34:19:dd:ce:a4:fa:fb:95:c6:41:34:c3:36:e8: 31:4c:ff:25:9a:3b:e8:10:97:32:df:09:9c:f6:30:40:58:33: 51:bb:44:30:9e:96:45:36:ee:ed:4f:d3:37:d6:9e:8e:43:50: 7a:c3:b2:02:36:22:68:bf:96:50:dd:cc:ed:5f:bd:ea:92:20: aa:25:62:3d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUFeurtLAqr1x8jOnDJfoGgNzssmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMjcwODM5MjBaFw0yNjEyMjYwODQ0MjBaMDMxMTAvBgNV BAMTKDBBMTEyMjY3Njk0Njc4RDg3MjQ3NjcyNEQ4NjIyNkYwNjg1MERDN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzkiUFS8Wdp52+l7Jm1KgYH/5C f+yhF5JpWm1g+TruaA67cxb/TmsANYPGZgTV22KLRrhqrTJPrX2Py5QvDp4V1Xpi bdMvcvNFNQJkv9OZwHHjFxtDer+a+Y+MSHsL23WzrpST/LWJQGAOpWnHOzcf8H+T oBt9vvtdlMVuONrYNdWzYpK9H3c+4qrwLGrSJR646GYSCOt5u1Bq80p/ve2Mlag3 JD6PP8z+iE1/ydEE9YrqjQnzDz8gB0HLt7mGUAYptKYnro+nGuC0YDmZl3Bg8elr 1dy2SXj8QJUMCQRTiv3E/dyYsafV+QlADsHyHmWYAYgoJzAJsjBFpvjzsHpTAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUChEiZ2lGeNhyR2ck2GIm8GhQ3H0wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjExMzM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV AAEbMA0GCSqGSIb3DQEBCwUAA4IBAQBnbiwOIRFCEUY5pSuqOOXFBv/ii05K/znj piLXrF97dM+qXWmPS1AnlahmKISOwAziyy3oFpfv0AwgRlfG8Y0IFr5g/hmQOlGa BaEcLykOuT8K4e6Uv5mGDnG5kyvZHyKLcrq4+Lw6axMP4QFrsW33H/TjcH2aPqMb IbKg5V5U18td/6xGRLQ2Zg3ZGLfvES1QMcjIrjVDhGWjPmMnOkBWcRfVKFivbEb+ sqOueNPubApT3z/H+rD0NBndzqT6+5XGQTTDNugxTP8lmjvoEJcy3wmc9jBAWDNR u0QwnpZFNu7tT9M31p6OQ1B6w7ICNiJov5ZQ3cztX73qkiCqJWI9 -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:24 2026 by rpki-client