This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211615.roa
File: AS211615.roa (raw, json)
Hash identifier: UCaDtVkgP384SPuIeZ9PkX+o7D/bzXadLck95qD8XWU=
Subject key identifier: 3D:65:40:57:6F:F4:C2:A3:F4:13:33:CB:8B:0E:1E:82:B8:5F:40:C1
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4EF666E7836F9C6B8C6A2F2E783EDBD8742543F9
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211615.roa
Signing time: Sun 28 Dec 2025 12:12:06 +0000
ROA not before: Sun 28 Dec 2025 12:07:06 +0000
ROA not after: Sun 27 Dec 2026 12:12:06 +0000
asID: 211615
IP address blocks: 2a13:9500:11c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 04:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:f6:66:e7:83:6f:9c:6b:8c:6a:2f:2e:78:3e:db:d8:74:25:43:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 28 12:07:06 2025 GMT
Not After : Dec 27 12:12:06 2026 GMT
Subject: CN=3D6540576FF4C2A3F41333CB8B0E1E82B85F40C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:a2:e2:19:4e:25:db:8e:a8:57:d3:9f:3c:
de:6e:9d:bb:99:e5:aa:bd:65:f4:b7:d6:c9:4d:f8:
c5:c6:e7:0a:04:d2:86:9d:9c:e7:84:8e:0b:85:e5:
75:d9:58:7b:b0:88:76:c1:a7:ce:6e:f9:80:17:0f:
c7:b9:cb:71:7a:81:3c:28:9f:90:e6:74:67:62:b0:
d3:47:70:44:2d:be:ef:71:ca:c2:e6:a1:50:4f:c4:
68:c6:b6:43:38:59:c1:ef:07:f5:88:88:93:95:f5:
4a:33:2a:a8:3f:d8:92:17:30:fc:67:dd:e9:cc:46:
9e:ae:50:7c:08:ad:2a:f1:35:9b:47:71:07:68:66:
5b:cb:96:39:0a:7b:b5:4d:79:6b:ae:e4:bd:ca:fd:
7b:a2:27:54:b9:ad:d9:e5:d6:fc:1f:12:08:98:33:
e4:01:73:5f:c4:7b:19:2a:ae:7f:b6:61:ce:b4:56:
b1:16:09:7d:67:63:f0:c7:c5:4d:45:0d:d9:ec:e0:
e7:d3:22:77:79:15:82:9d:c8:58:14:d4:f0:9d:c0:
dc:b5:17:d2:78:5b:f5:f7:d8:dd:11:17:91:d2:92:
4f:46:62:4c:65:e3:cd:64:94:54:a1:ba:74:10:1c:
40:4a:57:ef:09:56:1d:c6:b6:c3:87:18:62:74:d3:
c8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:65:40:57:6F:F4:C2:A3:F4:13:33:CB:8B:0E:1E:82:B8:5F:40:C1
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211615.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:11c::/48
Signature Algorithm: sha256WithRSAEncryption
07:d5:17:04:6f:e9:6b:35:a9:3c:6b:e5:50:0b:20:03:a5:13:
93:fc:f2:51:f1:d3:0c:04:99:69:36:41:df:fb:b7:61:75:6c:
f1:fa:8e:9c:29:27:5f:8d:46:26:2f:43:02:20:06:72:a7:d9:
a4:7f:d5:e5:80:c9:b3:e2:91:d7:d2:e0:39:db:bd:ce:b2:96:
36:a3:e4:1d:bb:9d:a8:e2:c0:f7:dc:13:8f:d5:da:df:55:ad:
08:f2:0c:48:f7:e2:95:fc:24:ea:3c:2f:5e:2e:4a:ea:cf:77:
00:99:a0:0e:58:28:13:dd:fa:c5:31:a8:4b:3b:15:5f:08:19:
d7:5a:86:ed:70:a7:af:85:9b:73:56:90:4c:74:b8:f6:c2:a6:
fa:36:1a:ce:61:36:45:3d:c8:fd:e8:a0:ac:4b:b9:4b:37:94:
e3:c7:51:ca:4e:64:f9:f4:62:53:fb:dc:3f:ac:cc:ae:b5:b3:
d7:2e:fd:a4:9a:bc:c3:12:3d:58:de:38:e4:81:d8:45:85:d6:
d3:e0:46:77:52:c3:e0:48:c9:2a:35:e4:20:ea:52:cf:8a:e8:
84:c5:b1:6e:de:28:d1:08:cb:4a:36:30:2e:81:7f:4e:9d:dc:
04:f1:4a:1f:c1:62:a7:b0:7d:a9:05:b8:9d:bf:3f:6c:1c:3a:
8b:82:bc:6d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUTvZm54NvnGuMai8ueD7b2HQlQ/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTEyMjgxMjA3MDZaFw0yNjEyMjcxMjEyMDZaMDMxMTAvBgNV
BAMTKDNENjU0MDU3NkZGNEMyQTNGNDEzMzNDQjhCMEUxRTgyQjg1RjQwQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRFKLiGU4l246oV9OfPN5unbuZ
5aq9ZfS31slN+MXG5woE0oadnOeEjguF5XXZWHuwiHbBp85u+YAXD8e5y3F6gTwo
n5DmdGdisNNHcEQtvu9xysLmoVBPxGjGtkM4WcHvB/WIiJOV9UozKqg/2JIXMPxn
3enMRp6uUHwIrSrxNZtHcQdoZlvLljkKe7VNeWuu5L3K/XuiJ1S5rdnl1vwfEgiY
M+QBc1/Eexkqrn+2Yc60VrEWCX1nY/DHxU1FDdns4OfTInd5FYKdyFgU1PCdwNy1
F9J4W/X32N0RF5HSkk9GYkxl481klFShunQQHEBKV+8JVh3GtsOHGGJ008ixAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUPWVAV2/0wqP0EzPLiw4egrhfQMEwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjExNjE1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV
AAEcMA0GCSqGSIb3DQEBCwUAA4IBAQAH1RcEb+lrNak8a+VQCyADpROT/PJR8dMM
BJlpNkHf+7dhdWzx+o6cKSdfjUYmL0MCIAZyp9mkf9XlgMmz4pHX0uA5273OspY2
o+Qdu52o4sD33BOP1drfVa0I8gxI9+KV/CTqPC9eLkrqz3cAmaAOWCgT3frFMahL
OxVfCBnXWobtcKevhZtzVpBMdLj2wqb6NhrOYTZFPcj96KCsS7lLN5Tjx1HKTmT5
9GJT+9w/rMyutbPXLv2kmrzDEj1Y3jjkgdhFhdbT4EZ3UsPgSMkqNeQg6lLPiuiE
xbFu3ijRCMtKNjAugX9OndwE8UofwWKnsH2pBbidvz9sHDqLgrxt
-----END CERTIFICATE-----
Generated at Sun Jan 18 08:53:26 2026 by rpki-client