This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213743.roa File: AS213743.roa (raw, json) Hash identifier: H64gFmJp3Pr5JwwJaqdAbr9bCD9K7iPmu2dnRDN6Lww= Subject key identifier: DD:6E:E8:8A:6B:AB:DD:35:05:58:B6:20:89:C4:EE:2B:24:EC:21:3C Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 462F6B3F0194F61DE7B59E4A3F053982AA038935 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213743.roa Signing time: Fri 07 Nov 2025 13:07:58 +0000 ROA not before: Fri 07 Nov 2025 13:02:58 +0000 ROA not after: Fri 06 Nov 2026 13:07:58 +0000 asID: 213743 IP address blocks: 2a0f:85c1:b30::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:2f:6b:3f:01:94:f6:1d:e7:b5:9e:4a:3f:05:39:82:aa:03:89:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Nov 7 13:02:58 2025 GMT Not After : Nov 6 13:07:58 2026 GMT Subject: CN=DD6EE88A6BABDD350558B62089C4EE2B24EC213C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e4:5a:44:43:d4:58:65:30:02:a3:cf:44:bd: dd:72:54:67:40:44:7c:18:d7:74:91:9e:0e:a8:a4: c3:6a:17:28:04:66:a9:c5:6b:5a:c0:75:89:0f:d9: ac:e0:dd:a9:b6:19:04:b3:6b:0e:a2:52:41:1d:be: 1a:8d:76:24:39:6a:68:cc:f9:a7:7c:1c:d7:d1:71: a2:89:23:1d:75:75:a3:b2:66:66:4f:a5:ac:cf:ff: 0e:59:5d:ec:e2:4d:8a:b3:8d:e5:e9:77:e7:3f:ae: f2:e1:fa:6b:80:3c:6c:67:c5:84:92:1f:f1:c3:59: 15:88:ba:f3:ba:0d:0f:88:e2:b6:7f:c5:61:05:82: 0e:1e:3d:c8:d7:b8:c5:26:43:8c:d7:18:54:13:56: 4f:bb:dc:20:ae:dc:7c:cc:9c:f9:57:9b:36:b5:eb: 4f:a3:d5:bc:cd:02:99:5e:07:38:c8:14:f3:8d:76: 1f:bd:fa:48:bc:dc:53:03:d3:44:f2:94:50:60:88: db:7b:ce:21:47:6f:78:e1:17:1f:9d:2b:4d:af:08: 3b:a7:8f:58:31:e7:8c:71:9a:39:7c:da:41:99:51: ec:8f:48:61:f2:f3:f0:88:03:5b:6a:c3:93:ba:28: 0d:20:5c:77:51:2a:44:d0:eb:e8:25:cf:78:ab:cd: 14:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6E:E8:8A:6B:AB:DD:35:05:58:B6:20:89:C4:EE:2B:24:EC:21:3C X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213743.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:b30::/48 Signature Algorithm: sha256WithRSAEncryption 3d:7c:7f:e9:c4:04:c3:5b:50:95:dc:4f:ee:c4:5f:0b:b3:05: d1:d5:90:11:ca:63:1d:e9:db:bb:f1:dc:ee:81:9e:ba:6c:5f: cd:88:26:c9:25:02:cd:27:99:0e:32:26:88:3a:1d:b8:85:ea: 9c:2a:c5:45:ab:de:a4:15:7c:ff:a2:e0:df:ec:95:cd:c3:b4: b4:47:59:1a:ff:51:5a:95:32:3c:eb:d0:39:4d:f2:b7:bb:02: 59:d6:9c:fa:c7:0b:ce:b0:b7:34:0d:b1:50:78:b7:e9:d4:27: a7:30:0c:1c:f5:47:ae:05:71:a7:63:2b:ed:60:0c:95:24:f2: 5a:11:44:7d:f0:5d:36:59:0b:f0:31:91:35:5f:c1:4a:c3:69: 53:9f:55:c4:ee:90:7c:1c:be:8f:3a:95:f3:73:a2:6a:52:7f: 2f:95:d5:1c:c1:43:9d:d6:09:89:c8:67:60:17:f6:91:ac:0c: dc:64:a3:17:de:b0:73:12:51:3f:8d:ff:7e:90:55:fd:fe:5d: ad:e1:f5:75:49:0b:59:30:0c:e7:09:74:e3:a6:5f:1c:8a:01: 69:d3:54:90:94:d9:55:1f:95:a7:89:83:30:dd:91:b5:69:c2: 60:a9:d5:79:66:1e:7c:35:70:56:ba:c1:1a:33:d6:d0:3a:2d: 1a:5a:90:8b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIURi9rPwGU9h3ntZ5KPwU5gqoDiTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTExMDcxMzAyNThaFw0yNjExMDYxMzA3NThaMDMxMTAvBgNV BAMTKERENkVFODhBNkJBQkREMzUwNTU4QjYyMDg5QzRFRTJCMjRFQzIxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC25FpEQ9RYZTACo89Evd1yVGdA RHwY13SRng6opMNqFygEZqnFa1rAdYkP2azg3am2GQSzaw6iUkEdvhqNdiQ5amjM +ad8HNfRcaKJIx11daOyZmZPpazP/w5ZXeziTYqzjeXpd+c/rvLh+muAPGxnxYSS H/HDWRWIuvO6DQ+I4rZ/xWEFgg4ePcjXuMUmQ4zXGFQTVk+73CCu3HzMnPlXmza1 60+j1bzNApleBzjIFPONdh+9+ki83FMD00TylFBgiNt7ziFHb3jhFx+dK02vCDun j1gx54xxmjl82kGZUeyPSGHy8/CIA1tqw5O6KA0gXHdRKkTQ6+glz3irzRQZAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU3W7oimur3TUFWLYgicTuKyTsITwwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEzNzQzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQswMA0GCSqGSIb3DQEBCwUAA4IBAQA9fH/pxATDW1CV3E/uxF8LswXR1ZARymMd 6du78dzugZ66bF/NiCbJJQLNJ5kOMiaIOh24heqcKsVFq96kFXz/ouDf7JXNw7S0 R1ka/1FalTI869A5TfK3uwJZ1pz6xwvOsLc0DbFQeLfp1CenMAwc9UeuBXGnYyvt YAyVJPJaEUR98F02WQvwMZE1X8FKw2lTn1XE7pB8HL6POpXzc6JqUn8vldUcwUOd 1gmJyGdgF/aRrAzcZKMX3rBzElE/jf9+kFX9/l2t4fV1SQtZMAznCXTjpl8cigFp 01SQlNlVH5WniYMw3ZG1acJgqdV5Zh58NXBWusEaM9bQOi0aWpCL -----END CERTIFICATE-----Generated at Fri Dec 5 16:39:10 2025 by rpki-client