This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213571.roa File: AS213571.roa (raw, json) Hash identifier: L2yRHr0r1FioLvM4inx6iGOEOYJMGksJwrqRcFpKGUw= Subject key identifier: 20:30:CD:2B:0A:C0:B6:3F:1D:A4:45:1C:CD:00:0B:8C:97:24:F5:D4 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 3431FA02A8884EDE8A50D0F9EE7BEA855BD2B1C6 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213571.roa Signing time: Tue 13 Jan 2026 04:08:16 +0000 ROA not before: Tue 13 Jan 2026 04:03:16 +0000 ROA not after: Tue 12 Jan 2027 04:08:16 +0000 asID: 213571 IP address blocks: 2a0f:85c1:b3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:31:fa:02:a8:88:4e:de:8a:50:d0:f9:ee:7b:ea:85:5b:d2:b1:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Jan 13 04:03:16 2026 GMT Not After : Jan 12 04:08:16 2027 GMT Subject: CN=2030CD2B0AC0B63F1DA4451CCD000B8C9724F5D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cd:41:7e:c8:1e:8e:ec:06:ed:ab:11:7a:ec: 76:a5:8a:e2:4c:8a:bf:40:f1:71:c3:05:69:a8:d7: b6:c6:f7:14:fe:66:fe:8a:b7:4a:09:ce:c9:3f:28: 59:b7:d5:d4:3c:6f:cc:9b:52:b4:dc:52:44:4e:e5: bd:99:ec:4c:55:9f:e9:67:12:57:76:a9:50:1f:b6: d0:03:fc:7d:fb:3f:95:e7:57:03:5c:d5:a6:3e:19: ff:02:5e:d4:bd:5e:fa:f5:63:40:ce:cb:5c:f7:1f: 53:df:66:f7:f1:30:35:75:7c:37:52:fe:e5:d5:cb: bc:b8:97:0a:e5:19:fc:7f:18:d8:36:43:3b:57:0a: ae:30:2c:6d:af:c1:73:17:8c:1b:2a:30:50:60:a0: cd:36:cc:14:6c:87:31:f8:db:9a:34:e9:a0:4e:02: 11:ee:f2:c9:7d:e7:ac:3a:d7:85:4c:ee:7a:41:6f: cf:b2:98:b1:53:f3:3d:8c:a2:dd:55:c0:5d:11:cf: 8c:dc:c8:fd:e0:a2:7d:72:02:15:21:2d:b7:9f:c4: 40:e0:73:44:4e:d3:45:04:fc:50:e8:19:cc:4c:fb: 3d:ca:87:3c:1f:8a:ed:60:5c:9a:6f:35:2b:39:5e: e8:28:50:2a:9d:8f:ee:99:f6:ca:94:56:2b:3f:13: 92:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:30:CD:2B:0A:C0:B6:3F:1D:A4:45:1C:CD:00:0B:8C:97:24:F5:D4 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213571.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:b3e::/48 Signature Algorithm: sha256WithRSAEncryption d5:fa:72:7f:c6:5d:53:c3:4f:4a:79:14:c0:fc:60:b6:e8:6a: fe:2f:f5:62:50:86:7a:dc:24:a0:11:c0:c8:55:23:a5:4c:8b: 31:81:2d:72:0d:91:24:cd:ae:48:dc:e3:2f:f9:b3:91:cb:cf: 8f:ed:45:f8:f7:6a:0d:31:2a:5b:8a:c9:83:12:38:9d:c9:d6: 7a:0d:ae:4f:e4:1a:97:67:8d:43:bd:1b:85:14:25:e5:e8:6a: ed:05:82:0f:c9:4f:f7:2c:1d:bb:72:f4:4e:db:be:eb:4b:58: c1:a6:a7:ed:74:bb:9c:8b:66:29:62:7c:34:08:54:12:27:06: 53:c3:72:a1:d0:d9:1e:bf:17:2a:c5:32:20:cd:fe:b8:99:c4: da:9d:85:cd:52:65:aa:58:de:b2:91:eb:3f:11:4d:42:06:13: 2b:0b:03:e0:98:10:d0:0b:3e:5f:b4:94:c4:ee:b0:c9:56:6c: e3:4d:0b:a8:27:e3:67:a0:f5:97:63:38:85:51:4c:be:34:14: 20:b5:ba:0d:fb:c3:a0:49:c5:fc:67:65:d4:0d:86:ed:a2:8d: 52:7a:16:15:a0:68:e3:f5:e8:47:7d:d8:67:aa:89:20:ab:3d: 8f:85:f4:19:76:47:9d:f6:da:68:fb:a0:36:c9:d6:c4:86:46: 2a:72:67:ae -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUNDH6AqiITt6KUND57nvqhVvSscYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNjAxMTMwNDAzMTZaFw0yNzAxMTIwNDA4MTZaMDMxMTAvBgNV BAMTKDIwMzBDRDJCMEFDMEI2M0YxREE0NDUxQ0NEMDAwQjhDOTcyNEY1RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAzUF+yB6O7AbtqxF67HaliuJM ir9A8XHDBWmo17bG9xT+Zv6Kt0oJzsk/KFm31dQ8b8ybUrTcUkRO5b2Z7ExVn+ln Eld2qVAfttAD/H37P5XnVwNc1aY+Gf8CXtS9Xvr1Y0DOy1z3H1PfZvfxMDV1fDdS /uXVy7y4lwrlGfx/GNg2QztXCq4wLG2vwXMXjBsqMFBgoM02zBRshzH425o06aBO AhHu8sl956w614VM7npBb8+ymLFT8z2Mot1VwF0Rz4zcyP3gon1yAhUhLbefxEDg c0RO00UE/FDoGcxM+z3Khzwfiu1gXJpvNSs5XugoUCqdj+6Z9sqUVis/E5IdAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUIDDNKwrAtj8dpEUczQALjJck9dQwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEzNTcxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQs+MA0GCSqGSIb3DQEBCwUAA4IBAQDV+nJ/xl1Tw09KeRTA/GC26Gr+L/ViUIZ6 3CSgEcDIVSOlTIsxgS1yDZEkza5I3OMv+bORy8+P7UX492oNMSpbismDEjidydZ6 Da5P5BqXZ41DvRuFFCXl6GrtBYIPyU/3LB27cvRO277rS1jBpqftdLuci2YpYnw0 CFQSJwZTw3Kh0NkevxcqxTIgzf64mcTanYXNUmWqWN6ykes/EU1CBhMrCwPgmBDQ Cz5ftJTE7rDJVmzjTQuoJ+NnoPWXYziFUUy+NBQgtboN+8OgScX8Z2XUDYbtoo1S ehYVoGjj9ehHfdhnqokgqz2PhfQZdked9tpo+6A2ydbEhkYqcmeu -----END CERTIFICATE-----Generated at Mon Jan 19 20:58:08 2026 by rpki-client