This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36352.roa File: AS36352.roa (raw, json) Hash identifier: d6d+hsThIfT+zZnN7Jal2oNzNvxqIlyh5elZpKLLWYo= Subject key identifier: B6:0D:0F:00:45:9E:38:EB:47:40:A7:AD:E4:CD:BF:FD:74:33:07:ED Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 619E77C42349C173ED5BC49FB647D94456495215 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36352.roa Signing time: Wed 07 Jan 2026 07:36:29 +0000 ROA not before: Wed 07 Jan 2026 07:31:29 +0000 ROA not after: Wed 06 Jan 2027 07:36:29 +0000 asID: 36352 IP address blocks: 2a13:9500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:9e:77:c4:23:49:c1:73:ed:5b:c4:9f:b6:47:d9:44:56:49:52:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 7 07:31:29 2026 GMT Not After : Jan 6 07:36:29 2027 GMT Subject: CN=B60D0F00459E38EB4740A7ADE4CDBFFD743307ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f1:bc:55:b5:43:05:7e:e5:4a:e4:36:b1:c4: dc:37:b2:8b:86:e4:66:82:15:fa:12:72:af:30:51: 4c:ce:37:c0:e5:e6:b5:aa:e1:f6:0c:ca:4a:d4:dd: 4d:b0:d8:92:7c:90:af:a8:3a:4e:24:f1:5f:31:24: b6:b1:7a:21:f3:d4:71:0b:c5:6e:80:8d:ee:93:66: f2:5a:95:f5:7f:a8:fc:38:3a:fa:fc:bd:1b:dd:ce: 66:2e:a3:f3:d5:49:6d:e6:e7:e7:46:44:5d:c8:8a: 8a:aa:37:6e:50:e5:dd:9c:8d:43:44:8d:f1:36:cd: 57:21:73:c2:5d:c8:54:7f:05:50:c1:a8:b8:48:d2: 2d:f2:f8:22:69:f2:7f:cf:6a:61:bc:d2:ee:b3:ba: c9:5b:fa:61:08:61:7a:5e:d3:c8:08:91:9f:bd:f4: 32:46:ee:65:d7:ac:82:ca:1d:b4:43:77:41:22:d5: 2c:a0:3b:ed:90:29:5f:50:b3:27:b1:3b:6b:51:30: b6:70:40:a5:83:81:68:06:e7:8b:8e:fa:a9:88:4f: 52:48:1a:6e:22:0b:a1:58:d2:fe:f8:d0:8c:c8:64: fe:c7:5f:d9:1e:b8:42:29:5d:40:6e:e8:9e:dd:a1: c4:d0:b0:f5:4c:7e:3c:00:0d:49:cd:63:52:fa:96: cf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0D:0F:00:45:9E:38:EB:47:40:A7:AD:E4:CD:BF:FD:74:33:07:ED X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS36352.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9500:127::/48 Signature Algorithm: sha256WithRSAEncryption 20:e1:7f:c0:3a:7a:23:e9:1d:a4:33:27:9e:d4:51:fa:11:46: fd:bb:9a:2c:30:7a:41:a3:fb:3e:d9:0e:c9:d8:06:22:31:93: 5c:45:66:eb:dc:b9:9a:ed:d2:e8:15:c2:a4:4d:93:0e:75:88: 56:35:b0:2c:f6:99:77:3d:7a:dd:9f:dc:7f:51:61:e9:03:1b: 1a:97:8a:71:86:39:f7:df:8e:9c:f5:85:0e:a1:a9:89:46:a8: 05:8c:28:0a:e0:e0:61:d4:4d:51:a3:a9:1b:fe:cd:07:5c:9f: d8:8a:bc:ad:72:24:51:5a:1a:8d:52:a4:fa:6d:ff:25:a9:5b: 1b:79:e0:cd:45:4d:44:cd:ca:8a:55:95:55:29:16:0c:8b:7c: 87:c5:57:e0:25:73:18:c4:90:46:94:ae:e5:f8:f5:6c:fe:d1: 5e:04:3a:53:80:b5:45:05:e2:95:3c:1f:f0:56:0d:5e:70:f4: 0a:44:37:c1:f1:56:cd:77:5d:b2:e4:81:b2:cc:ea:de:26:50: 62:4c:2f:81:78:d3:a8:bc:12:51:c0:2f:e2:d6:d2:40:2d:0e: 9d:b4:f4:89:6d:32:bf:ed:07:1f:66:24:0f:f4:f9:1c:1c:2c: 08:54:73:a5:df:5a:99:83:a5:8c:1a:14:26:eb:43:39:05:99: 21:22:45:a2 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUYZ53xCNJwXPtW8SftkfZRFZJUhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMDcwNzMxMjlaFw0yNzAxMDYwNzM2MjlaMDMxMTAvBgNV BAMTKEI2MEQwRjAwNDU5RTM4RUI0NzQwQTdBREU0Q0RCRkZENzQzMzA3RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe8bxVtUMFfuVK5DaxxNw3souG 5GaCFfoScq8wUUzON8Dl5rWq4fYMykrU3U2w2JJ8kK+oOk4k8V8xJLaxeiHz1HEL xW6Aje6TZvJalfV/qPw4Ovr8vRvdzmYuo/PVSW3m5+dGRF3IioqqN25Q5d2cjUNE jfE2zVchc8JdyFR/BVDBqLhI0i3y+CJp8n/PamG80u6zuslb+mEIYXpe08gIkZ+9 9DJG7mXXrILKHbRDd0Ei1SygO+2QKV9QsyexO2tRMLZwQKWDgWgG54uO+qmIT1JI Gm4iC6FY0v740IzIZP7HX9keuEIpXUBu6J7docTQsPVMfjwADUnNY1L6ls97AgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUtg0PAEWeOOtHQKet5M2//XQzB+0wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzYzNTIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqE5UA AScwDQYJKoZIhvcNAQELBQADggEBACDhf8A6eiPpHaQzJ57UUfoRRv27miwwekGj +z7ZDsnYBiIxk1xFZuvcuZrt0ugVwqRNkw51iFY1sCz2mXc9et2f3H9RYekDGxqX inGGOfffjpz1hQ6hqYlGqAWMKArg4GHUTVGjqRv+zQdcn9iKvK1yJFFaGo1SpPpt /yWpWxt54M1FTUTNyopVlVUpFgyLfIfFV+AlcxjEkEaUruX49Wz+0V4EOlOAtUUF 4pU8H/BWDV5w9ApEN8HxVs13XbLkgbLM6t4mUGJML4F406i8ElHAL+LW0kAtDp20 9IltMr/tBx9mJA/0+RwcLAhUc6XfWpmDpYwaFCbrQzkFmSEiRaI= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:26 2026 by rpki-client