This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS43350.roa File: AS43350.roa (raw, json) Hash identifier: TzsPbgY80eagxfadIx41TU/imbDu3hd0LycW9397vF0= Subject key identifier: 51:84:13:91:64:AE:B4:86:7F:9E:40:76:CB:01:5D:1D:A8:0B:B3:90 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 356150A7B208F0226607A0A59618446453962361 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS43350.roa Signing time: Wed 07 Jan 2026 06:40:55 +0000 ROA not before: Wed 07 Jan 2026 06:35:55 +0000 ROA not after: Wed 06 Jan 2027 06:40:55 +0000 asID: 43350 IP address blocks: 2a13:9500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 19:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:61:50:a7:b2:08:f0:22:66:07:a0:a5:96:18:44:64:53:96:23:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 7 06:35:55 2026 GMT Not After : Jan 6 06:40:55 2027 GMT Subject: CN=5184139164AEB4867F9E4076CB015D1DA80BB390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b7:95:54:20:47:0a:15:32:c8:1a:a6:71:79: 9d:20:54:fd:a3:9a:52:c0:e3:52:41:a2:6c:f1:e8: 2c:0f:e3:7a:86:dc:68:4e:80:65:37:f4:d1:fb:82: 2a:f2:f2:a3:2e:04:fb:f8:df:d5:de:fb:4f:51:90: 28:94:ce:6d:88:9a:a2:02:82:d6:5f:f2:cc:16:38: b6:cc:0c:28:af:b4:0a:44:0a:f1:e5:86:db:12:1c: 95:3b:7f:66:9a:9a:26:34:7c:fc:9a:c9:70:92:34: 37:67:29:66:e6:ee:b0:22:9c:24:3b:74:c5:bb:09: d8:10:35:5f:6b:4c:e9:90:76:46:65:ea:03:a7:d0: 03:7d:94:19:56:36:2d:e7:1a:ac:69:7a:a3:32:3a: 57:5d:6e:01:de:7b:25:08:39:6d:ec:7e:76:cf:bb: c4:69:90:17:98:57:9c:6c:41:41:71:c4:25:34:d5: 56:4f:5f:3b:ff:b9:00:8f:9d:b2:a6:d3:2a:dc:ac: 56:0d:d4:34:b9:d2:b8:5a:cc:a2:21:5d:b3:57:e9: f8:7f:92:1a:89:fc:f3:9f:3f:a1:8d:ad:f3:ff:7e: 1e:3b:d0:a5:53:3e:d6:1a:2d:92:f6:74:50:fe:cb: b8:ce:36:9a:f1:05:35:b0:14:1e:8c:db:f2:4e:6f: ac:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:84:13:91:64:AE:B4:86:7F:9E:40:76:CB:01:5D:1D:A8:0B:B3:90 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS43350.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9500:126::/48 Signature Algorithm: sha256WithRSAEncryption 5e:15:f4:ad:3d:66:29:48:7f:82:57:0f:9c:e9:16:47:25:94: 78:e1:97:0f:fd:72:4c:6e:f9:32:02:87:cf:c8:6d:84:7f:44: d8:75:68:0a:27:b5:d3:df:83:2b:df:d6:3a:84:28:19:36:ee: 25:f5:3f:ea:9c:8d:3c:1b:cc:4c:e7:34:08:33:b8:81:d1:a6: 35:47:9a:3c:2f:6c:e7:fd:bd:32:30:f1:dc:14:0c:c1:a1:df: 22:44:bc:10:a0:86:18:a5:2d:29:cf:72:e8:da:71:37:0e:61: 84:26:49:1b:0a:4b:c2:9b:22:ec:c7:85:8f:c0:40:fe:58:de: d3:95:ff:75:2f:32:3d:64:47:e6:c2:ee:82:e4:35:6e:e2:a4: d4:4f:71:18:6a:fc:3d:2c:9d:38:04:41:06:64:a9:fa:dc:58: d5:28:ec:5d:4b:eb:fc:15:26:df:ae:5e:b2:35:2b:fc:78:08: a2:18:d5:85:b6:2a:1b:4b:ac:33:eb:4b:a6:3b:14:7e:c2:94: 17:62:c5:aa:3d:a1:11:50:f9:8e:a6:f0:78:ff:fe:2c:a8:a8: 8e:ce:2b:95:e5:92:af:5f:9f:53:2f:4f:d4:4d:9c:88:c4:4e: 6a:cf:91:0c:d7:18:23:e9:fb:60:50:1b:cd:65:0d:d0:4c:e3: b5:00:a8:12 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUNWFQp7II8CJmB6CllhhEZFOWI2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMDcwNjM1NTVaFw0yNzAxMDYwNjQwNTVaMDMxMTAvBgNV BAMTKDUxODQxMzkxNjRBRUI0ODY3RjlFNDA3NkNCMDE1RDFEQTgwQkIzOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCct5VUIEcKFTLIGqZxeZ0gVP2j mlLA41JBomzx6CwP43qG3GhOgGU39NH7giry8qMuBPv439Xe+09RkCiUzm2ImqIC gtZf8swWOLbMDCivtApECvHlhtsSHJU7f2aamiY0fPyayXCSNDdnKWbm7rAinCQ7 dMW7CdgQNV9rTOmQdkZl6gOn0AN9lBlWNi3nGqxpeqMyOlddbgHeeyUIOW3sfnbP u8RpkBeYV5xsQUFxxCU01VZPXzv/uQCPnbKm0yrcrFYN1DS50rhazKIhXbNX6fh/ khqJ/POfP6GNrfP/fh470KVTPtYaLZL2dFD+y7jONprxBTWwFB6M2/JOb6wxAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUUYQTkWSutIZ/nkB2ywFdHagLs5AwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDMzNTAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqE5UA ASYwDQYJKoZIhvcNAQELBQADggEBAF4V9K09ZilIf4JXD5zpFkcllHjhlw/9ckxu +TICh8/IbYR/RNh1aAontdPfgyvf1jqEKBk27iX1P+qcjTwbzEznNAgzuIHRpjVH mjwvbOf9vTIw8dwUDMGh3yJEvBCghhilLSnPcujacTcOYYQmSRsKS8KbIuzHhY/A QP5Y3tOV/3UvMj1kR+bC7oLkNW7ipNRPcRhq/D0snTgEQQZkqfrcWNUo7F1L6/wV Jt+uXrI1K/x4CKIY1YW2KhtLrDPrS6Y7FH7ClBdixao9oRFQ+Y6m8Hj//iyoqI7O K5Xlkq9fn1MvT9RNnIjETmrPkQzXGCPp+2BQG81lDdBM47UAqBI= -----END CERTIFICATE-----Generated at Wed Jan 14 02:59:28 2026 by rpki-client