This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64315.roa
File: AS64315.roa (raw, json)
Hash identifier: X74el57bYvBAt7G6XdgeTx5MHkVZCBOp181c3JcqS9I=
Subject key identifier: 4F:F7:57:2E:F1:89:70:25:9A:EB:69:BD:E2:00:0A:1C:E9:94:C7:E3
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 1E6EC51F17EE4A27EA23DDE4BBED126128524D30
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64315.roa
Signing time: Fri 02 Jan 2026 12:50:17 +0000
ROA not before: Fri 02 Jan 2026 12:45:17 +0000
ROA not after: Fri 01 Jan 2027 12:50:17 +0000
asID: 64315
IP address blocks: 2a13:9500:121::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Jan 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:6e:c5:1f:17:ee:4a:27:ea:23:dd:e4:bb:ed:12:61:28:52:4d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 2 12:45:17 2026 GMT
Not After : Jan 1 12:50:17 2027 GMT
Subject: CN=4FF7572EF18970259AEB69BDE2000A1CE994C7E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:09:8c:fe:76:2f:7b:ce:e2:b9:de:54:82:
4a:8d:9f:df:39:4c:bf:3a:d7:82:06:b6:3f:79:ef:
ab:93:5d:3b:b4:f3:64:25:c1:ea:ae:20:57:de:e6:
c6:24:6c:95:19:9b:1c:77:c2:63:dd:a6:89:2f:0b:
7a:ca:06:b9:bb:98:21:2e:77:df:ab:4a:16:88:7a:
48:67:e3:10:1b:70:55:6d:f5:1c:bc:2f:58:7d:5e:
6e:cc:e4:0a:de:ba:a6:66:93:87:0a:40:a7:1b:5a:
6e:04:f2:63:43:30:6d:c5:0f:94:50:3b:37:36:45:
28:39:5d:97:f7:c0:d6:83:da:ac:c9:f7:a8:1e:40:
ac:a6:ce:7f:d6:87:80:dc:3b:c4:8a:f6:36:01:23:
d1:0d:88:3f:53:0a:a9:61:93:4f:09:75:c8:bb:d1:
eb:ae:e1:18:54:d4:bc:e6:3e:74:d3:a7:3e:8b:65:
a9:d0:8a:60:4a:3b:cb:06:a6:a4:01:6e:1b:1b:5a:
3d:85:9c:80:da:cb:c6:60:f7:30:cc:0b:a0:8f:3f:
ff:9a:3a:e8:fd:61:65:28:ae:87:02:df:2e:2e:bb:
2c:2a:3f:67:bb:5f:73:f4:36:93:7b:8f:39:81:1a:
85:ae:88:0b:f9:3b:56:33:f0:1e:7a:5c:e4:86:6a:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F7:57:2E:F1:89:70:25:9A:EB:69:BD:E2:00:0A:1C:E9:94:C7:E3
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS64315.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:121::/48
Signature Algorithm: sha256WithRSAEncryption
1c:86:71:9c:36:1d:a9:3b:a3:84:be:7f:b5:1c:68:4c:eb:98:
1f:a8:d7:00:51:d1:ab:8c:82:13:9e:5a:17:cf:27:a4:8f:f2:
3b:62:17:1d:66:cd:7a:d0:19:fa:05:0e:d7:4a:19:37:74:62:
96:dc:99:66:ea:be:cf:28:da:f5:2e:98:e2:69:f8:94:de:54:
02:c9:ba:03:3a:31:87:77:b5:39:3b:7e:31:73:69:3a:4c:00:
77:5d:1c:47:c6:82:2e:94:01:4c:47:b4:e7:73:04:a8:10:23:
fa:a8:dc:3f:6a:00:cd:7e:4f:be:0c:44:4e:af:cf:ed:35:88:
96:7d:f8:9c:b0:a7:d2:1e:04:d8:98:36:a2:13:7f:27:27:0d:
a7:77:b3:79:5b:1a:9d:fd:9f:90:45:50:71:47:fd:67:24:ee:
42:94:ab:66:5a:bc:1c:9c:f5:cd:38:42:21:db:81:00:cb:79:
25:42:56:dc:a1:0c:19:cf:56:8c:43:25:a7:2b:a0:66:66:c5:
ff:3a:cd:42:40:e5:a7:2b:90:9d:a1:78:20:54:a5:1b:99:7e:
59:b0:c2:53:07:e0:8c:a4:0b:5c:c9:46:e4:7a:37:a1:0f:f1:
a0:4d:e8:4a:3a:50:04:0f:d4:10:e0:a5:d1:c4:d5:6e:65:42:
d2:1f:05:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 00:47:13 2026 by rpki-client