This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213035.roa File: AS213035.roa (raw, json) Hash identifier: YwtzRjulYYEYwH+kVYmYiwxXQFmDzgIy3kUDh0f18zM= Subject key identifier: 1C:BC:73:53:3B:42:CD:AB:13:B7:57:1B:31:CF:2D:80:CC:63:46:2C Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 0F83A3BF1CA540E87193B4026A66B8F6B4D4FDB2 Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213035.roa Signing time: Thu 15 Jan 2026 10:29:34 +0000 ROA not before: Thu 15 Jan 2026 10:24:34 +0000 ROA not after: Thu 14 Jan 2027 10:29:34 +0000 asID: 213035 IP address blocks: 91.198.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 03:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:83:a3:bf:1c:a5:40:e8:71:93:b4:02:6a:66:b8:f6:b4:d4:fd:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Jan 15 10:24:34 2026 GMT Not After : Jan 14 10:29:34 2027 GMT Subject: CN=1CBC73533B42CDAB13B7571B31CF2D80CC63462C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:15:1d:bd:1a:4e:e1:ff:ce:fd:1a:b5:c0:87: 56:6b:56:ee:56:bb:61:9b:3e:91:b9:2a:27:df:d4: 2a:8d:72:a7:19:cf:85:46:16:22:0a:92:a2:44:6e: d9:95:9f:b8:36:9b:de:41:55:f0:3d:53:8c:3c:c0: 95:f9:1b:da:3c:fc:11:89:82:c0:49:0d:e3:9a:33: 90:04:3f:98:f2:fd:16:72:08:0e:54:d2:7e:60:8d: f3:d2:82:38:32:7f:30:28:a2:55:a7:b2:86:9c:0d: f0:20:90:b5:36:6f:fe:ce:bc:82:16:8a:22:4d:f9: af:85:ea:6d:97:88:27:0e:df:db:84:6c:87:2b:48: 5f:95:3f:98:27:86:56:ed:f6:b2:f3:a1:f1:ed:88: f3:69:d8:62:ec:14:0a:f8:0c:88:a6:58:ba:d5:fb: f7:25:68:89:fd:3b:df:0e:3a:29:7f:96:c5:e9:d1: e2:8e:59:4c:df:dd:7f:36:6a:9c:07:c1:0f:fe:ef: 19:fc:26:63:68:a5:75:12:34:8a:97:45:69:8a:dc: 27:af:a0:4c:a2:c3:6e:42:2d:b1:33:ef:1a:1f:35: d1:21:ac:40:21:87:fe:b3:0e:91:01:bf:fa:13:84: a2:c9:17:d5:b0:6e:1e:9b:37:9f:4d:27:2c:20:f0: a5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:BC:73:53:3B:42:CD:AB:13:B7:57:1B:31:CF:2D:80:CC:63:46:2C X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.123.0/24 Signature Algorithm: sha256WithRSAEncryption ce:e0:80:ae:8e:2f:c9:78:09:ab:76:ec:31:83:29:ab:f8:80: 71:0b:97:8a:26:f7:20:5c:b0:d2:d7:d8:7e:d6:7a:48:35:9b: ea:65:f7:37:ca:53:9f:3f:d1:f9:92:9d:74:07:90:5c:2e:6c: 1c:4c:64:ac:21:93:8b:02:ab:5c:b2:3c:67:e6:87:3e:85:a8: e8:70:5d:ab:2e:bc:a5:3c:1a:18:27:da:d8:74:24:e4:ed:ef: ed:b9:34:46:f6:4c:ec:6f:0d:e3:8f:05:69:15:e6:78:39:1c: a1:18:f8:5e:7f:ae:ec:d5:e2:25:e1:03:74:ca:d1:11:15:f1: 40:d7:5b:34:c4:26:3c:2e:e6:c3:74:ac:45:91:23:9d:c9:ff: 54:49:9d:b9:46:e1:c1:7f:18:c1:58:cb:b8:81:91:22:c3:89: bb:42:df:82:5d:47:4d:32:cc:eb:29:33:74:c3:a3:03:4b:20: d7:a7:4a:f1:06:c2:98:db:66:43:9a:2a:55:90:3e:4b:09:74: 60:12:e7:d8:f6:54:c4:3d:31:c8:af:75:3e:5c:b3:20:3b:cf: 9e:6e:31:92:ac:99:7f:47:f7:12:91:6e:7a:18:9e:b9:71:6f: a3:e9:ae:44:67:2f:b9:13:3f:a9:10:b2:28:0a:71:e5:90:57: e5:ca:69:19 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUD4OjvxylQOhxk7QCama49rTU/bIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNjAxMTUxMDI0MzRaFw0yNzAxMTQxMDI5MzRaMDMxMTAvBgNV BAMTKDFDQkM3MzUzM0I0MkNEQUIxM0I3NTcxQjMxQ0YyRDgwQ0M2MzQ2MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwFR29Gk7h/879GrXAh1ZrVu5W u2GbPpG5Kiff1CqNcqcZz4VGFiIKkqJEbtmVn7g2m95BVfA9U4w8wJX5G9o8/BGJ gsBJDeOaM5AEP5jy/RZyCA5U0n5gjfPSgjgyfzAoolWnsoacDfAgkLU2b/7OvIIW iiJN+a+F6m2XiCcO39uEbIcrSF+VP5gnhlbt9rLzofHtiPNp2GLsFAr4DIimWLrV +/claIn9O98OOil/lsXp0eKOWUzf3X82apwHwQ/+7xn8JmNopXUSNIqXRWmK3Cev oEyiw25CLbEz7xofNdEhrEAhh/6zDpEBv/oThKLJF9Wwbh6bN59NJywg8KWnAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUHLxzUztCzasTt1cbMc8tgMxjRiwwHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjEzMDM1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8Z7 MA0GCSqGSIb3DQEBCwUAA4IBAQDO4ICuji/JeAmrduwxgymr+IBxC5eKJvcgXLDS 19h+1npINZvqZfc3ylOfP9H5kp10B5BcLmwcTGSsIZOLAqtcsjxn5oc+hajocF2r LrylPBoYJ9rYdCTk7e/tuTRG9kzsbw3jjwVpFeZ4ORyhGPhef67s1eIl4QN0ytER FfFA11s0xCY8LubDdKxFkSOdyf9USZ25RuHBfxjBWMu4gZEiw4m7Qt+CXUdNMszr KTN0w6MDSyDXp0rxBsKY22ZDmipVkD5LCXRgEufY9lTEPTHIr3U+XLMgO8+ebjGS rJl/R/cSkW56GJ65cW+j6a5EZy+5Ez+pELIoCnHlkFflymkZ -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:21 2026 by rpki-client