This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211577.roa File: AS211577.roa (raw, json) Hash identifier: prxyy4gRqrpLjAsFqeZZ86v9xRkEe0c/0HKpXLS+7L8= Subject key identifier: D7:26:08:0E:06:66:88:D6:2E:E3:B8:05:36:F9:F8:B6:8D:17:F5:EF Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 39AFAEEEF78611B22FC4133CD7973E3E73FA9A56 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211577.roa Signing time: Thu 06 Nov 2025 14:28:33 +0000 ROA not before: Thu 06 Nov 2025 14:23:33 +0000 ROA not after: Thu 05 Nov 2026 14:28:33 +0000 asID: 211577 IP address blocks: 2a0f:85c1:bbf::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:af:ae:ee:f7:86:11:b2:2f:c4:13:3c:d7:97:3e:3e:73:fa:9a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Nov 6 14:23:33 2025 GMT Not After : Nov 5 14:28:33 2026 GMT Subject: CN=D726080E066688D62EE3B80536F9F8B68D17F5EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e9:b1:5a:ca:ea:ae:c6:b0:20:ad:58:41:1d: 9b:63:6d:06:de:d1:49:0b:ee:f4:7b:f1:50:df:5d: 00:95:89:4d:6a:9d:88:73:ab:7a:d0:38:01:ac:8c: f4:db:30:8d:41:cc:99:85:94:47:c1:29:16:b1:81: 4f:5a:56:a6:5b:73:c2:c1:eb:fb:d2:59:a0:62:01: cf:10:31:0f:fa:bb:95:30:2a:ac:53:fa:e1:c5:45: 03:f1:3a:9a:7a:6c:e6:d3:cc:e2:1c:f1:b3:d6:a2: ef:ad:ce:20:ab:dc:9b:6a:87:12:c3:68:3b:cf:6b: b1:87:77:fc:fb:1f:d4:c8:8d:fa:c8:1e:c6:84:01: 29:67:ba:ca:60:3c:2f:ac:1f:13:2a:cc:80:0d:17: f4:47:be:e4:45:6f:e0:ca:18:a6:c8:bc:75:d2:06: 69:49:31:97:a4:2b:b7:4a:7f:de:0f:cc:38:6b:70: 0a:12:63:d9:df:01:9e:bc:a1:22:79:bc:b7:1b:2a: e7:a1:df:d2:d6:4d:6e:9e:8b:77:b3:39:d9:ec:b2: aa:2c:71:42:1f:8a:ac:4c:8c:ef:16:00:07:0a:d9: 00:f2:8c:1c:94:69:df:2b:e2:1c:e3:60:74:38:b6: 0f:95:9f:43:86:17:64:6d:59:50:b6:7f:d0:cd:e5: f3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:26:08:0E:06:66:88:D6:2E:E3:B8:05:36:F9:F8:B6:8D:17:F5:EF X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS211577.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:bbf::/48 Signature Algorithm: sha256WithRSAEncryption ef:f2:c0:af:f8:5d:d3:9a:ac:49:9a:7e:d2:0c:eb:1c:e4:6b: 3a:e3:6a:2c:46:fd:bc:87:66:8e:cf:0e:3d:e2:3a:6e:4f:93: 64:25:88:9a:d2:22:2b:6e:dc:aa:cc:e4:9a:b4:9e:01:84:e3: 15:4b:ee:27:e7:0a:89:a6:b5:09:ae:c7:d4:af:80:35:93:9d: 9b:f2:c2:51:51:50:be:45:38:0b:9f:78:e8:73:9a:f6:95:33: 2b:ab:44:a3:03:eb:c6:7f:6b:95:2f:64:e1:68:1c:2c:99:09: a0:17:f7:48:2b:93:3e:c8:71:16:11:08:ee:c9:90:97:fd:d3: 21:c8:8c:2e:2a:30:3c:37:5f:f5:1a:91:42:e9:4a:28:68:b6: 4f:c1:8a:9f:1e:f4:18:95:fb:19:61:14:a3:28:d4:41:1b:ce: 35:fa:87:43:84:cd:77:ee:db:96:3b:e5:c5:31:c5:de:29:57: 23:4c:9e:88:34:10:04:15:cb:85:0f:c2:86:c2:95:be:6f:44: 0a:3b:b1:db:51:63:fc:d2:7b:44:c8:8a:23:41:05:49:02:52: 9c:a3:db:8f:d0:de:8f:3a:99:b1:79:65:24:0b:65:9c:c8:8c: 5a:75:8e:d2:81:4c:46:78:4c:00:5f:fe:09:50:5d:04:dc:83: df:24:f7:80 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUOa+u7veGEbIvxBM815c+PnP6mlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTExMDYxNDIzMzNaFw0yNjExMDUxNDI4MzNaMDMxMTAvBgNV BAMTKEQ3MjYwODBFMDY2Njg4RDYyRUUzQjgwNTM2RjlGOEI2OEQxN0Y1RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6bFayuquxrAgrVhBHZtjbQbe 0UkL7vR78VDfXQCViU1qnYhzq3rQOAGsjPTbMI1BzJmFlEfBKRaxgU9aVqZbc8LB 6/vSWaBiAc8QMQ/6u5UwKqxT+uHFRQPxOpp6bObTzOIc8bPWou+tziCr3JtqhxLD aDvPa7GHd/z7H9TIjfrIHsaEASlnuspgPC+sHxMqzIANF/RHvuRFb+DKGKbIvHXS BmlJMZekK7dKf94PzDhrcAoSY9nfAZ68oSJ5vLcbKueh39LWTW6ei3ezOdnssqos cUIfiqxMjO8WAAcK2QDyjByUad8r4hzjYHQ4tg+Vn0OGF2RtWVC2f9DN5fPnAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU1yYIDgZmiNYu47gFNvn4to0X9e8wHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjExNTc3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQu/MA0GCSqGSIb3DQEBCwUAA4IBAQDv8sCv+F3TmqxJmn7SDOsc5Gs642osRv28 h2aOzw494jpuT5NkJYia0iIrbtyqzOSatJ4BhOMVS+4n5wqJprUJrsfUr4A1k52b 8sJRUVC+RTgLn3joc5r2lTMrq0SjA+vGf2uVL2ThaBwsmQmgF/dIK5M+yHEWEQju yZCX/dMhyIwuKjA8N1/1GpFC6UooaLZPwYqfHvQYlfsZYRSjKNRBG841+odDhM13 7tuWO+XFMcXeKVcjTJ6INBAEFcuFD8KGwpW+b0QKO7HbUWP80ntEyIojQQVJAlKc o9uP0N6POpmxeWUkC2WcyIxadY7SgUxGeEwAX/4JUF0E3IPfJPeA -----END CERTIFICATE-----Generated at Fri Dec 5 16:35:42 2025 by rpki-client