This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215287.roa File: AS215287.roa (raw, json) Hash identifier: +c4g15cQ5ZAR3Z63gRr1019Wx9ZcSdy6l350Dgn2ZMY= Subject key identifier: E6:B8:83:D1:0D:5B:36:37:25:1E:EC:63:18:4D:0D:28:62:A7:E6:A3 Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 0B0431983281A950F455D665E2D4B28648B1B411 Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215287.roa Signing time: Tue 30 Dec 2025 16:00:49 +0000 ROA not before: Tue 30 Dec 2025 15:55:49 +0000 ROA not after: Tue 29 Dec 2026 16:00:49 +0000 asID: 215287 IP address blocks: 194.104.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 03:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:04:31:98:32:81:a9:50:f4:55:d6:65:e2:d4:b2:86:48:b1:b4:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Dec 30 15:55:49 2025 GMT Not After : Dec 29 16:00:49 2026 GMT Subject: CN=E6B883D10D5B3637251EEC63184D0D2862A7E6A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:23:8a:8e:8a:6d:8d:bf:7f:31:a8:44:d4:dd: 56:1f:10:76:db:71:20:48:c1:f8:61:89:5f:dd:db: 74:15:d7:0c:eb:a7:21:ab:76:93:ca:d6:4e:66:c3: d7:84:17:93:bf:ac:36:00:db:4f:88:85:19:42:83: 5c:ad:99:05:38:a1:23:61:e0:1c:04:c5:a6:27:17: cf:a4:e7:78:d5:24:b7:24:6b:f6:91:37:36:1b:a1: 1f:bf:75:4e:22:12:52:24:5f:87:e1:36:c1:58:d2: 1f:73:22:55:94:82:70:77:c0:36:5b:fa:9e:14:f0: a5:43:11:19:80:54:4d:84:86:59:8a:91:5f:65:63: 78:04:fb:04:53:94:de:7f:9b:95:70:16:61:39:8b: 89:9f:d9:c0:25:42:e1:df:09:58:8a:3e:ad:a3:fa: 9a:53:a8:74:a9:db:37:b0:8e:23:6b:5b:70:81:6b: 40:d4:d6:34:30:38:51:9c:06:84:f8:75:69:42:3a: 1e:c2:75:f8:0d:48:0d:f8:87:e1:0d:9f:d1:9b:58: 03:9f:8d:13:97:76:cf:93:1b:3c:37:a9:84:50:05: d5:c5:6a:35:c1:90:0d:4e:66:eb:da:6c:09:f0:49: 7a:9c:cf:e3:03:21:71:d1:10:a3:4e:43:1e:a9:af: ba:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B8:83:D1:0D:5B:36:37:25:1E:EC:63:18:4D:0D:28:62:A7:E6:A3 X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215287.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.156.0/24 Signature Algorithm: sha256WithRSAEncryption 32:78:73:c6:b4:0d:88:3a:0f:ab:b2:c6:fd:d3:2f:2f:8c:4c: 31:bf:14:9a:27:5c:79:9a:23:b9:c9:04:17:a2:dc:16:49:f9: f1:77:09:b0:5f:6f:d4:69:07:47:6c:95:ad:a5:27:74:c6:89: da:77:f1:dc:a1:ee:ef:62:2a:37:6b:77:cb:55:6f:e0:72:6c: 36:4d:b2:dd:62:13:ae:8e:af:4f:95:01:74:60:42:33:03:64: 0d:76:43:20:ed:ad:22:9d:80:09:ae:85:35:21:9e:e5:54:2e: 2d:e8:0a:a5:b7:29:87:03:4a:59:3a:97:79:a0:d3:de:12:b5: 80:b9:7d:09:d7:ac:e7:79:af:e9:71:5b:e7:1d:c3:70:cf:23: ab:d4:cd:b2:4f:33:1e:f1:32:fb:38:3f:cf:b4:fd:b5:bd:c8: ef:00:dc:77:0b:0d:48:48:6e:ca:4e:fb:a6:5f:0e:95:f8:ba: 18:81:00:3c:f5:cf:41:4a:06:de:bb:7b:69:0e:c4:9e:df:d8: db:15:7d:4c:69:a5:37:07:a6:2f:04:6c:10:07:13:34:a0:cf: 43:69:a4:bc:38:70:a3:a2:e3:21:84:e3:37:96:ef:6c:80:09: 68:8c:54:15:26:0d:66:de:97:16:28:da:ea:1b:39:d0:9d:eb: eb:3e:d0:74 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUCwQxmDKBqVD0VdZl4tSyhkixtBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNTEyMzAxNTU1NDlaFw0yNjEyMjkxNjAwNDlaMDMxMTAvBgNV BAMTKEU2Qjg4M0QxMEQ1QjM2MzcyNTFFRUM2MzE4NEQwRDI4NjJBN0U2QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWI4qOim2Nv38xqETU3VYfEHbb cSBIwfhhiV/d23QV1wzrpyGrdpPK1k5mw9eEF5O/rDYA20+IhRlCg1ytmQU4oSNh 4BwExaYnF8+k53jVJLcka/aRNzYboR+/dU4iElIkX4fhNsFY0h9zIlWUgnB3wDZb +p4U8KVDERmAVE2EhlmKkV9lY3gE+wRTlN5/m5VwFmE5i4mf2cAlQuHfCViKPq2j +ppTqHSp2zewjiNrW3CBa0DU1jQwOFGcBoT4dWlCOh7CdfgNSA34h+ENn9GbWAOf jROXds+TGzw3qYRQBdXFajXBkA1OZuvabAnwSXqcz+MDIXHREKNOQx6pr7pPAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU5riD0Q1bNjclHuxjGE0NKGKn5qMwHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjE1Mjg3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmic MA0GCSqGSIb3DQEBCwUAA4IBAQAyeHPGtA2IOg+rssb90y8vjEwxvxSaJ1x5miO5 yQQXotwWSfnxdwmwX2/UaQdHbJWtpSd0xonad/Hcoe7vYio3a3fLVW/gcmw2TbLd YhOujq9PlQF0YEIzA2QNdkMg7a0inYAJroU1IZ7lVC4t6AqltymHA0pZOpd5oNPe ErWAuX0J16znea/pcVvnHcNwzyOr1M2yTzMe8TL7OD/PtP21vcjvANx3Cw1ISG7K TvumXw6V+LoYgQA89c9BSgbeu3tpDsSe39jbFX1MaaU3B6YvBGwQBxM0oM9DaaS8 OHCjouMhhOM3lu9sgAlojFQVJg1m3pcWKNrqGznQnevrPtB0 -----END CERTIFICATE-----Generated at Mon Jan 19 14:41:31 2026 by rpki-client