This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215323.roa File: AS215323.roa (raw, json) Hash identifier: 7em2wpsNWnhXIN2PM5w9jouMCCh0LUaz9GaWHElXFps= Subject key identifier: 1B:CE:7F:22:6C:9B:07:39:11:19:CD:A0:3B:61:86:34:27:B1:86:F1 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 144CEB980F317D9D21A129F62B5F8719F4CF90C1 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215323.roa Signing time: Wed 14 Jan 2026 18:46:27 +0000 ROA not before: Wed 14 Jan 2026 18:41:27 +0000 ROA not after: Wed 13 Jan 2027 18:46:27 +0000 asID: 215323 IP address blocks: 2a14:7583:7000::/44 maxlen: 44 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:4c:eb:98:0f:31:7d:9d:21:a1:29:f6:2b:5f:87:19:f4:cf:90:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 14 18:41:27 2026 GMT Not After : Jan 13 18:46:27 2027 GMT Subject: CN=1BCE7F226C9B07391119CDA03B61863427B186F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:90:d7:4e:89:a7:55:e2:55:43:72:f5:54:16: 90:77:f5:81:5a:5f:75:dd:be:70:38:0c:9f:ed:25: f5:a2:ed:ed:53:ec:02:af:d8:ed:65:55:49:d0:85: 19:bf:c5:a2:28:81:3c:56:cf:c0:1b:45:51:9c:e1: cd:a3:6e:5c:f9:8d:a0:cc:89:3a:3a:c2:23:9c:5c: 7a:8e:d7:91:60:a3:8e:2e:67:f1:15:7c:9e:d9:04: be:29:f9:4e:11:3c:bf:02:9f:6b:c9:48:7a:d2:ae: 3a:23:30:76:1e:3b:d8:7e:9f:b0:05:7f:cd:6f:72: af:fd:d9:c8:7f:cc:16:03:73:ac:9e:b9:d8:32:b0: 8a:9d:54:9c:ea:b2:32:58:7c:dc:bf:f1:e3:da:1f: d8:fe:49:9a:bc:4d:46:27:e3:d0:c9:5f:4d:ec:c6: 61:2b:d5:46:53:b5:12:7c:cb:05:36:6f:c7:d1:04: 30:4f:fe:a3:71:b9:97:98:24:c5:d3:a4:f1:85:2b: 41:59:31:7f:fc:8d:93:5f:5e:14:f6:ec:7f:97:0a: 8d:09:60:11:67:d9:7f:33:eb:a8:34:12:3e:e0:60: 7a:60:27:77:b3:53:78:89:bb:29:55:0a:e8:8a:19: 9c:d8:10:86:a1:86:e4:dc:04:7a:b6:d6:66:d5:eb: 4d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CE:7F:22:6C:9B:07:39:11:19:CD:A0:3B:61:86:34:27:B1:86:F1 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215323.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7583:7000::/44 Signature Algorithm: sha256WithRSAEncryption 94:b4:cc:bd:25:92:68:97:af:ac:57:c3:95:41:2f:c3:78:37: aa:0b:a3:a9:95:e5:e3:d1:87:5e:4a:f0:34:01:a4:aa:7e:c3: 04:c1:a3:03:61:85:ab:f9:14:67:2b:22:d1:6f:c0:aa:2a:fd: 77:9c:89:f1:9c:b6:c0:23:63:fb:81:e6:84:3e:2f:ff:95:29: 6f:9b:4b:0d:bf:2f:4b:e1:76:82:66:3f:60:10:31:ad:45:47: 55:51:3c:67:7f:01:80:7c:3c:d5:dc:b2:3b:c4:a4:23:91:f8: e1:e3:4a:40:9c:61:07:c0:2c:d2:49:43:e0:45:84:e5:88:d0: eb:d6:61:8a:70:fa:29:f4:0f:f6:18:b3:75:b5:7a:e9:2e:be: b3:23:13:03:b6:ea:bd:58:3b:24:18:e5:f6:01:72:6c:74:17: 14:2c:c7:b4:3d:50:cc:f1:7b:ae:0d:84:32:38:db:02:67:fb: b6:b6:f7:8d:66:1b:8f:5d:66:ba:e6:10:f7:69:82:c1:35:b6: 5e:0c:fb:29:f8:8b:e8:4d:46:95:f7:f4:30:13:ef:08:15:6c: 55:9d:e9:79:5b:92:22:f3:0e:43:9f:08:c0:92:fd:79:e2:a9: 76:70:63:b2:b3:d1:85:c3:a9:a3:60:86:06:88:f9:98:ac:f4: e7:90:3e:06 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUFEzrmA8xfZ0hoSn2K1+HGfTPkMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMTQxODQxMjdaFw0yNzAxMTMxODQ2MjdaMDMxMTAvBgNV BAMTKDFCQ0U3RjIyNkM5QjA3MzkxMTE5Q0RBMDNCNjE4NjM0MjdCMTg2RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUkNdOiadV4lVDcvVUFpB39YFa X3XdvnA4DJ/tJfWi7e1T7AKv2O1lVUnQhRm/xaIogTxWz8AbRVGc4c2jblz5jaDM iTo6wiOcXHqO15Fgo44uZ/EVfJ7ZBL4p+U4RPL8Cn2vJSHrSrjojMHYeO9h+n7AF f81vcq/92ch/zBYDc6yeudgysIqdVJzqsjJYfNy/8ePaH9j+SZq8TUYn49DJX03s xmEr1UZTtRJ8ywU2b8fRBDBP/qNxuZeYJMXTpPGFK0FZMX/8jZNfXhT27H+XCo0J YBFn2X8z66g0Ej7gYHpgJ3ezU3iJuylVCuiKGZzYEIahhuTcBHq21mbV602rAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUG85/ImybBzkRGc2gO2GGNCexhvEwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE1MzIzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1 g3AAMA0GCSqGSIb3DQEBCwUAA4IBAQCUtMy9JZJol6+sV8OVQS/DeDeqC6OpleXj 0YdeSvA0AaSqfsMEwaMDYYWr+RRnKyLRb8CqKv13nInxnLbAI2P7geaEPi//lSlv m0sNvy9L4XaCZj9gEDGtRUdVUTxnfwGAfDzV3LI7xKQjkfjh40pAnGEHwCzSSUPg RYTliNDr1mGKcPop9A/2GLN1tXrpLr6zIxMDtuq9WDskGOX2AXJsdBcULMe0PVDM 8XuuDYQyONsCZ/u2tveNZhuPXWa65hD3aYLBNbZeDPsp+IvoTUaV9/QwE+8IFWxV nel5W5Ii8w5DnwjAkv154ql2cGOys9GFw6mjYIYGiPmYrPTnkD4G -----END CERTIFICATE-----Generated at Tue Jan 20 22:19:41 2026 by rpki-client