This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213580.roa File: AS213580.roa (raw, json) Hash identifier: SYTN60S0B26aALWfnoO2R2rfG5OUuDb3fLTFFfDv7Xc= Subject key identifier: 6F:C5:29:E6:07:39:09:0B:81:90:64:5E:B3:87:B6:39:C8:11:B9:0D Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 863199952D8DCED138EC09D617FD3A07E0932C Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213580.roa Signing time: Sat 20 Dec 2025 22:08:14 +0000 ROA not before: Sat 20 Dec 2025 22:03:14 +0000 ROA not after: Sat 19 Dec 2026 22:08:14 +0000 asID: 213580 IP address blocks: 2a0f:85c1:b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86:31:99:95:2d:8d:ce:d1:38:ec:09:d6:17:fd:3a:07:e0:93:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Dec 20 22:03:14 2025 GMT Not After : Dec 19 22:08:14 2026 GMT Subject: CN=6FC529E60739090B8190645EB387B639C811B90D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:73:6d:3c:bf:38:b5:2b:16:b7:66:2e:22:58: 98:f8:8b:42:ab:16:7b:b9:86:69:11:d5:78:1d:22: e7:fd:2c:fd:86:81:60:1d:8d:27:5d:03:7a:2d:91: 02:5b:1b:e9:96:84:28:a6:e4:ea:dc:77:36:d0:0b: 9b:24:d4:6f:57:22:26:b1:32:bb:f3:93:d9:73:ea: a3:e8:b1:b1:80:06:e6:cb:1b:b8:32:2e:61:f2:5f: 9f:84:81:8d:53:5c:ed:e8:ef:2b:bf:c1:e9:2e:72: 82:43:2d:33:b5:18:24:7c:44:59:72:a5:16:2b:b7: 5f:d3:da:de:e9:77:0c:bc:64:0b:cd:ad:1a:18:37: 2d:a9:1a:d3:65:e9:14:18:8c:ba:f4:9e:b8:61:96: 8d:f6:32:fb:0e:f7:62:fb:0c:83:c4:6b:9d:08:98: 49:9d:a8:47:56:17:1d:4f:bc:8f:5f:b3:a5:c4:d7: 82:df:fc:3a:74:1f:d3:be:63:47:b0:fe:5e:60:66: 4d:b7:60:29:f3:d2:6b:e5:39:a2:d2:cd:77:1a:98: be:6d:bc:9e:62:5b:30:00:86:00:ad:11:c8:89:5e: ac:a8:dd:3d:1d:81:2c:69:3f:7f:eb:3f:48:cf:e7: 52:97:12:be:db:19:00:fa:77:6e:17:9b:b6:4e:66: 57:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C5:29:E6:07:39:09:0B:81:90:64:5E:B3:87:B6:39:C8:11:B9:0D X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213580.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:b40::/48 Signature Algorithm: sha256WithRSAEncryption 29:98:b9:36:e6:84:f2:c1:e2:a5:c8:97:77:03:21:78:ff:56: 7f:f7:c6:3c:07:c0:87:8f:3d:09:41:09:45:fc:2b:b4:20:74: 9b:67:72:74:07:9c:76:2d:2d:59:60:b5:06:79:9b:08:7b:39: 0b:1a:9d:0f:4e:33:c0:28:3f:ad:25:bc:c5:1e:85:8b:3c:65: c0:a2:4a:30:63:3b:6e:19:7f:b9:fc:6e:72:69:9b:bb:f4:22: 48:ee:67:9b:af:ac:80:b2:1b:e0:dd:eb:c5:ea:76:d2:21:39: 1c:ac:52:81:ba:c1:53:b5:d9:e0:ac:53:c8:8f:8d:8b:24:b4: 66:52:6a:10:65:ba:11:af:cf:45:3b:2e:ba:be:9c:3b:22:c8: 61:99:6f:79:cc:8e:07:05:3c:46:04:4f:41:ba:ac:20:75:eb: 3d:ec:e6:e4:05:f5:b5:8f:4f:82:45:5b:62:dd:63:4b:52:d0: 9e:68:03:cd:75:0a:82:64:68:2a:34:8b:c2:d3:43:51:45:5b: 91:4c:02:3f:eb:1e:79:f1:02:fd:65:ad:3c:36:ea:4e:14:31: b9:47:4d:7a:79:4e:bd:8a:58:d2:07:4b:5c:62:d4:85:c7:f0: e1:5c:fc:4c:1d:b6:d2:10:b0:40:de:a5:bb:7b:4a:0c:e7:ff: cf:5e:3f:75 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUAIYxmZUtjc7ROOwJ1hf9OgfgkywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTEyMjAyMjAzMTRaFw0yNjEyMTkyMjA4MTRaMDMxMTAvBgNV BAMTKDZGQzUyOUU2MDczOTA5MEI4MTkwNjQ1RUIzODdCNjM5QzgxMUI5MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5c208vzi1Kxa3Zi4iWJj4i0Kr Fnu5hmkR1XgdIuf9LP2GgWAdjSddA3otkQJbG+mWhCim5OrcdzbQC5sk1G9XIiax Mrvzk9lz6qPosbGABubLG7gyLmHyX5+EgY1TXO3o7yu/wekucoJDLTO1GCR8RFly pRYrt1/T2t7pdwy8ZAvNrRoYNy2pGtNl6RQYjLr0nrhhlo32MvsO92L7DIPEa50I mEmdqEdWFx1PvI9fs6XE14Lf/Dp0H9O+Y0ew/l5gZk23YCnz0mvlOaLSzXcamL5t vJ5iWzAAhgCtEciJXqyo3T0dgSxpP3/rP0jP51KXEr7bGQD6d24Xm7ZOZlcPAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUb8Up5gc5CQuBkGRes4e2OcgRuQ0wHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEzNTgwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQtAMA0GCSqGSIb3DQEBCwUAA4IBAQApmLk25oTyweKlyJd3AyF4/1Z/98Y8B8CH jz0JQQlF/Cu0IHSbZ3J0B5x2LS1ZYLUGeZsIezkLGp0PTjPAKD+tJbzFHoWLPGXA okowYztuGX+5/G5yaZu79CJI7mebr6yAshvg3evF6nbSITkcrFKBusFTtdngrFPI j42LJLRmUmoQZboRr89FOy66vpw7IshhmW95zI4HBTxGBE9Buqwgdes97ObkBfW1 j0+CRVti3WNLUtCeaAPNdQqCZGgqNIvC00NRRVuRTAI/6x558QL9Za08NupOFDG5 R016eU69iljSB0tcYtSFx/DhXPxMHbbSELBA3qW7e0oM5//PXj91 -----END CERTIFICATE-----Generated at Mon Jan 19 20:59:27 2026 by rpki-client