This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215916.roa File: AS215916.roa (raw, json) Hash identifier: p6lqCReVZpcPnGLOiaEdKNRIvGk6ew75ru7ep554gvc= Subject key identifier: CF:75:69:47:E9:F5:45:32:4C:1A:1A:CE:34:F0:97:6C:B1:20:D2:D3 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 66C3DF78B18EB34786333BBFCE68880A62D94FC5 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215916.roa Signing time: Fri 28 Nov 2025 03:21:45 +0000 ROA not before: Fri 28 Nov 2025 03:16:45 +0000 ROA not after: Fri 27 Nov 2026 03:21:45 +0000 asID: 215916 IP address blocks: 2a0f:85c1:d33::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c3:df:78:b1:8e:b3:47:86:33:3b:bf:ce:68:88:0a:62:d9:4f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Nov 28 03:16:45 2025 GMT Not After : Nov 27 03:21:45 2026 GMT Subject: CN=CF756947E9F545324C1A1ACE34F0976CB120D2D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:d3:af:3e:9d:e1:79:ee:be:e7:68:e4:25: 2c:c3:90:ef:51:e9:6b:54:2c:cc:7c:a3:64:f6:98: cc:cd:48:72:4b:6a:d3:00:53:2b:d2:a5:3c:32:d9: 94:63:06:c4:a8:82:3e:db:46:52:75:9d:6e:d6:23: cc:53:02:d7:46:d3:1a:36:2b:91:80:e4:5e:c2:ae: aa:92:33:1f:e0:f5:17:c7:7f:db:ef:d4:64:93:2f: 0b:e0:75:0f:80:07:25:9e:a3:dc:1f:69:1c:73:e9: d2:5c:40:c0:3f:df:6a:37:fe:99:8e:d1:7c:56:2a: 1e:0b:95:f5:b2:64:a3:cb:c4:61:c6:84:2e:11:87: ff:c4:64:5f:6b:32:22:35:3d:70:c5:df:53:65:a4: c1:43:73:fd:81:a1:75:e5:7e:01:f1:6f:9a:6c:3a: 73:bf:b9:60:f6:0b:31:29:8e:f4:e1:2a:17:80:b6: a6:1c:a6:fc:8b:b0:83:1d:9b:38:cb:6f:9a:c6:ab: 98:2b:2f:87:3e:e5:7d:63:8f:db:31:1f:cd:ca:5d: ca:d9:ff:bb:f3:0b:80:e7:80:0b:58:0c:e5:4d:a5: 8e:e9:b8:db:a1:ce:2b:48:b1:43:6f:de:39:2e:d7: ed:68:08:2d:a5:00:93:a4:49:a5:fa:c1:78:92:14: cf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:75:69:47:E9:F5:45:32:4C:1A:1A:CE:34:F0:97:6C:B1:20:D2:D3 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215916.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:d33::/48 Signature Algorithm: sha256WithRSAEncryption 03:dd:8c:28:08:39:3a:65:6f:42:df:b7:f0:f9:20:55:6f:b8: cc:1f:c8:a7:e6:a7:82:b1:31:f8:0e:8c:9f:a6:33:00:83:7b: 91:8d:6c:e4:74:0c:21:8a:44:12:fd:78:e9:c2:62:e0:71:56: e2:68:e2:03:bf:30:c9:ec:db:bd:cf:fc:f3:50:a2:71:68:6a: 37:25:78:c6:1f:d8:26:6e:9b:04:8b:e5:15:86:ab:a6:a1:0d: 7c:df:8f:dc:63:4b:1e:52:94:28:f8:9b:e2:2c:5d:d9:bd:b5: 00:03:79:1e:cf:cb:c6:e1:cc:cc:38:6d:22:15:a5:e5:cb:93: a1:d1:ec:ce:6e:86:3c:e7:b6:03:34:6d:ea:35:7c:11:fb:e6: db:28:c5:ff:77:40:77:10:ee:07:6f:30:11:a7:1a:f6:30:83: 85:f6:29:3a:e3:76:66:32:aa:54:40:d3:41:37:b5:dd:7d:ed: 57:f0:79:b5:b4:3a:23:ac:cd:d9:ca:11:0d:c8:d1:4d:3d:8e: 8d:b1:fa:92:fd:cf:76:ae:6f:a3:b0:bf:6e:a5:f3:fa:49:38: 98:44:67:17:18:0b:2f:aa:6b:c7:a6:01:fc:eb:04:6f:21:7f: 06:5e:6a:ba:16:42:23:f3:b7:76:00:41:d4:e3:70:1d:36:b4: 48:ef:35:86 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUZsPfeLGOs0eGMzu/zmiICmLZT8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTExMjgwMzE2NDVaFw0yNjExMjcwMzIxNDVaMDMxMTAvBgNV BAMTKENGNzU2OTQ3RTlGNTQ1MzI0QzFBMUFDRTM0RjA5NzZDQjEyMEQyRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ89OvPp3hee6+52jkJSzDkO9R 6WtULMx8o2T2mMzNSHJLatMAUyvSpTwy2ZRjBsSogj7bRlJ1nW7WI8xTAtdG0xo2 K5GA5F7CrqqSMx/g9RfHf9vv1GSTLwvgdQ+AByWeo9wfaRxz6dJcQMA/32o3/pmO 0XxWKh4LlfWyZKPLxGHGhC4Rh//EZF9rMiI1PXDF31NlpMFDc/2BoXXlfgHxb5ps OnO/uWD2CzEpjvThKheAtqYcpvyLsIMdmzjLb5rGq5grL4c+5X1jj9sxH83KXcrZ /7vzC4DngAtYDOVNpY7puNuhzitIsUNv3jku1+1oCC2lAJOkSaX6wXiSFM8vAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUz3VpR+n1RTJMGhrONPCXbLEg0tMwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE1OTE2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQ0zMA0GCSqGSIb3DQEBCwUAA4IBAQAD3YwoCDk6ZW9C37fw+SBVb7jMH8in5qeC sTH4DoyfpjMAg3uRjWzkdAwhikQS/XjpwmLgcVbiaOIDvzDJ7Nu9z/zzUKJxaGo3 JXjGH9gmbpsEi+UVhqumoQ1834/cY0seUpQo+JviLF3ZvbUAA3kez8vG4czMOG0i FaXly5Oh0ezOboY857YDNG3qNXwR++bbKMX/d0B3EO4HbzARpxr2MIOF9ik643Zm MqpUQNNBN7Xdfe1X8Hm1tDojrM3ZyhENyNFNPY6NsfqS/c92rm+jsL9upfP6STiY RGcXGAsvqmvHpgH86wRvIX8GXmq6FkIj87d2AEHU43AdNrRI7zWG -----END CERTIFICATE-----Generated at Fri Dec 5 16:35:40 2025 by rpki-client