This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216022.roa File: AS216022.roa (raw, json) Hash identifier: Ti0ZRtQLsLLds/is/KsJDI+Itc0yhg3QotBi+nGIcgY= Subject key identifier: 7F:7B:A3:B8:93:6F:15:61:CF:1D:01:C0:CA:61:5B:E4:37:15:30:A8 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 38B845542A0BAF9B7DF42DA1A6257A297A7F298A Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216022.roa Signing time: Wed 10 Dec 2025 06:50:32 +0000 ROA not before: Wed 10 Dec 2025 06:45:32 +0000 ROA not after: Wed 09 Dec 2026 06:50:32 +0000 asID: 216022 IP address blocks: 2a13:9500:113::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 19:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b8:45:54:2a:0b:af:9b:7d:f4:2d:a1:a6:25:7a:29:7a:7f:29:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 10 06:45:32 2025 GMT Not After : Dec 9 06:50:32 2026 GMT Subject: CN=7F7BA3B8936F1561CF1D01C0CA615BE4371530A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:57:07:29:b6:bc:8c:f9:5c:5d:2d:38:e2:b0: 0f:79:c6:c6:15:47:28:55:d7:d9:b0:34:7f:15:c8: 8a:74:da:90:24:66:85:1a:42:28:8c:50:39:ea:61: d3:db:0a:a0:42:4e:47:bc:6c:81:6b:14:80:14:aa: 3c:a5:5c:24:76:08:69:b7:e7:22:66:bf:2e:19:f8: 04:e4:39:0b:85:29:77:33:f1:d4:1e:13:e6:b3:a1: 9f:01:d2:93:a4:06:38:74:50:12:82:25:44:45:28: e8:6e:79:7e:15:46:cd:ad:e9:cb:7a:4a:7c:78:72: 3e:c1:b7:41:81:47:36:fa:30:bb:3f:a3:14:cc:48: 65:3c:ad:4a:01:5c:07:2f:bb:9c:78:ac:c6:a9:bb: 72:63:69:60:84:29:00:45:ad:52:00:b9:88:bb:14: bf:5d:be:5e:08:68:21:9e:ca:4e:52:0f:c3:3b:ad: c4:e8:21:bd:a5:c4:d3:9c:e0:4e:5a:cf:16:14:48: bd:f4:df:6e:88:97:7c:96:b0:dc:e0:ea:8d:72:a6: b8:b3:b9:3a:50:b2:11:4c:b6:83:27:8c:27:16:a4: 79:a8:c4:34:b7:fd:ea:74:47:f2:bd:78:44:89:19: c0:d5:03:63:fd:c4:36:26:00:d0:9e:12:25:f5:99: 2a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7B:A3:B8:93:6F:15:61:CF:1D:01:C0:CA:61:5B:E4:37:15:30:A8 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216022.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9500:113::/48 Signature Algorithm: sha256WithRSAEncryption 3e:24:97:82:10:f8:6e:b4:ac:c7:bd:29:df:b4:d0:e7:e5:ad: e6:45:9d:a4:fb:23:55:28:d4:70:6f:7f:4a:a9:85:c1:71:70: e7:74:93:60:b7:a5:54:47:0a:af:c0:9e:cd:c4:be:88:2a:89: a2:7e:64:0b:a8:3d:91:90:9f:fd:08:16:29:de:e8:02:d7:13: 7c:5d:08:a5:59:20:68:79:9c:4c:f5:8e:bc:8c:ee:56:1d:09: 4c:91:94:b6:3b:fa:3c:e8:cf:9e:a4:07:a1:45:9d:58:48:5a: 9f:06:10:e8:f1:02:a9:07:22:29:0d:02:b0:ac:c8:73:61:a5: 0f:0c:c4:b6:5c:96:e5:40:0e:4f:91:0a:1e:e7:2f:d6:50:2c: 6e:4d:0c:95:3a:2e:7b:7d:d9:f2:08:0d:ef:2d:f1:73:ad:11: 1b:2d:dd:fb:ff:78:f6:f3:42:13:5f:78:4f:61:f7:61:b6:2b: b6:a3:f4:0a:b8:39:c7:e4:2f:35:e4:e4:ed:1a:86:e7:54:20: b2:bc:75:d5:1e:59:c5:ed:8a:8a:a9:f7:fd:4f:56:97:bd:ce: 35:1c:e5:40:02:29:bc:0d:68:4b:a0:fd:da:11:58:02:08:03: 42:18:56:39:09:f0:70:b3:c4:40:85:14:bc:e8:66:0b:f7:c6: d3:99:f1:8f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUOLhFVCoLr5t99C2hpiV6KXp/KYowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMTAwNjQ1MzJaFw0yNjEyMDkwNjUwMzJaMDMxMTAvBgNV BAMTKDdGN0JBM0I4OTM2RjE1NjFDRjFEMDFDMENBNjE1QkU0MzcxNTMwQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkVwcptryM+VxdLTjisA95xsYV RyhV19mwNH8VyIp02pAkZoUaQiiMUDnqYdPbCqBCTke8bIFrFIAUqjylXCR2CGm3 5yJmvy4Z+ATkOQuFKXcz8dQeE+azoZ8B0pOkBjh0UBKCJURFKOhueX4VRs2t6ct6 Snx4cj7Bt0GBRzb6MLs/oxTMSGU8rUoBXAcvu5x4rMapu3JjaWCEKQBFrVIAuYi7 FL9dvl4IaCGeyk5SD8M7rcToIb2lxNOc4E5azxYUSL30326Il3yWsNzg6o1ypriz uTpQshFMtoMnjCcWpHmoxDS3/ep0R/K9eESJGcDVA2P9xDYmANCeEiX1mSrHAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUf3ujuJNvFWHPHQHAymFb5DcVMKgwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE2MDIyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV AAETMA0GCSqGSIb3DQEBCwUAA4IBAQA+JJeCEPhutKzHvSnftNDn5a3mRZ2k+yNV KNRwb39KqYXBcXDndJNgt6VURwqvwJ7NxL6IKomifmQLqD2RkJ/9CBYp3ugC1xN8 XQilWSBoeZxM9Y68jO5WHQlMkZS2O/o86M+epAehRZ1YSFqfBhDo8QKpByIpDQKw rMhzYaUPDMS2XJblQA5PkQoe5y/WUCxuTQyVOi57fdnyCA3vLfFzrREbLd37/3j2 80ITX3hPYfdhtiu2o/QKuDnH5C815OTtGobnVCCyvHXVHlnF7YqKqff9T1aXvc41 HOVAAim8DWhLoP3aEVgCCANCGFY5CfBws8RAhRS86GYL98bTmfGP -----END CERTIFICATE-----Generated at Sun Dec 14 11:44:43 2025 by rpki-client