This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215607.roa File: AS215607.roa (raw, json) Hash identifier: eE/K5gc+nHux6nf04PN8CJZdZK0qMoVZBsBRE7FwwvU= Subject key identifier: 4B:7F:3A:43:D6:F1:96:F7:91:2F:47:26:F2:C1:E2:BC:E9:29:46:4A Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 431F5A7FE0E0E0D6EA4E45F3A7E08B7E86BE3CBD Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215607.roa Signing time: Sat 20 Dec 2025 18:13:04 +0000 ROA not before: Sat 20 Dec 2025 18:08:04 +0000 ROA not after: Sat 19 Dec 2026 18:13:04 +0000 asID: 215607 IP address blocks: 2a14:7586:5000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:1f:5a:7f:e0:e0:e0:d6:ea:4e:45:f3:a7:e0:8b:7e:86:be:3c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 20 18:08:04 2025 GMT Not After : Dec 19 18:13:04 2026 GMT Subject: CN=4B7F3A43D6F196F7912F4726F2C1E2BCE929464A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bf:b6:3f:c8:23:30:9b:5a:af:41:3d:ce:c1: b0:97:13:57:e5:0c:d2:bb:20:9c:ca:7d:01:a2:16: 06:37:58:b2:d9:30:ab:06:5a:e2:10:84:8c:f0:be: 22:09:2a:d7:a2:f9:a8:96:9e:eb:7e:f3:9f:a5:12: 53:4e:9e:fa:f3:69:5c:0a:2d:47:03:6b:ba:18:e3: 08:ae:89:a5:a5:cb:b4:df:7d:09:5d:47:e2:2c:a1: ec:d8:80:11:f9:84:db:c3:89:40:f8:60:6f:a8:02: c2:e4:f9:74:3e:31:4e:dd:d1:44:2f:db:21:3c:36: 7b:ac:02:d6:56:fd:ab:7b:87:91:03:6e:7f:72:ff: 27:d0:f5:30:77:58:b0:50:59:9e:4f:6b:b1:c2:1e: c3:94:40:23:16:d2:49:44:93:0d:42:5c:77:81:3d: f2:a2:48:e3:03:4b:51:75:b4:f4:bd:c2:4a:dc:63: 0c:0f:4f:08:0f:3d:41:a2:21:7b:10:be:ce:40:19: 6c:15:54:75:4c:01:19:2c:1a:59:de:00:26:12:e3: 5e:ea:76:93:15:4e:f1:50:31:7f:2d:08:70:f3:8a: 32:fa:e7:5f:89:d1:ff:77:f7:d3:ee:72:11:2c:22: 5e:a7:7e:87:4d:f1:5f:e2:f8:55:36:d3:40:88:9b: 4f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7F:3A:43:D6:F1:96:F7:91:2F:47:26:F2:C1:E2:BC:E9:29:46:4A X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS215607.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7586:5000::/36 Signature Algorithm: sha256WithRSAEncryption 7c:fb:77:a9:05:4a:ff:7e:5e:1d:ed:9e:ee:2d:e4:71:1f:dc: e2:bf:49:bd:a1:2d:a5:35:d8:39:04:7a:ea:41:52:d2:86:a6: 08:c8:be:e4:1b:44:6c:c8:32:e8:39:ec:f4:f6:74:74:08:10: 54:52:f4:2a:d6:48:3c:52:a1:99:68:89:96:76:1e:77:32:a2: a0:6e:29:b0:4f:af:06:06:6d:6e:5b:63:0b:47:b6:31:80:ce: 60:9a:e3:6d:4a:ed:0b:86:86:2a:8d:e8:63:2a:0c:9f:19:b5: 1f:fa:28:79:55:2f:c0:c8:97:8b:08:af:13:4f:de:f7:2e:e9: 42:a3:b0:1a:7d:3d:99:bc:d2:c2:18:9f:f4:4e:57:bc:ec:60: 3e:5b:0c:a9:85:b8:5b:d2:81:8a:95:d1:e9:d6:ff:83:b2:48: a3:ca:51:ba:77:54:43:20:8b:c3:42:ea:8e:2d:bc:10:90:da: b9:c2:fb:df:d5:b3:d1:b8:b9:ab:4f:a5:64:25:d9:60:8c:6c: 7b:d4:5d:1d:3e:f4:54:64:04:1a:57:54:7e:32:de:7d:0f:cc: 4b:b7:bc:6c:11:41:49:c5:03:e7:be:a2:4d:62:72:1c:f2:af: 22:9b:ab:b4:31:7d:71:0d:0d:3b:11:cd:e6:21:cf:c9:e3:21: d2:a6:09:c4 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUQx9af+Dg4NbqTkXzp+CLfoa+PL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMjAxODA4MDRaFw0yNjEyMTkxODEzMDRaMDMxMTAvBgNV BAMTKDRCN0YzQTQzRDZGMTk2Rjc5MTJGNDcyNkYyQzFFMkJDRTkyOTQ2NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYv7Y/yCMwm1qvQT3OwbCXE1fl DNK7IJzKfQGiFgY3WLLZMKsGWuIQhIzwviIJKtei+aiWnut+85+lElNOnvrzaVwK LUcDa7oY4wiuiaWly7TffQldR+IsoezYgBH5hNvDiUD4YG+oAsLk+XQ+MU7d0UQv 2yE8NnusAtZW/at7h5EDbn9y/yfQ9TB3WLBQWZ5Pa7HCHsOUQCMW0klEkw1CXHeB PfKiSOMDS1F1tPS9wkrcYwwPTwgPPUGiIXsQvs5AGWwVVHVMARksGlneACYS417q dpMVTvFQMX8tCHDzijL651+J0f9399PuchEsIl6nfodN8V/i+FU200CIm09vAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUS386Q9bxlveRL0cm8sHivOkpRkowHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE1NjA3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKhR1 hlAwDQYJKoZIhvcNAQELBQADggEBAHz7d6kFSv9+Xh3tnu4t5HEf3OK/Sb2hLaU1 2DkEeupBUtKGpgjIvuQbRGzIMug57PT2dHQIEFRS9CrWSDxSoZloiZZ2HncyoqBu KbBPrwYGbW5bYwtHtjGAzmCa421K7QuGhiqN6GMqDJ8ZtR/6KHlVL8DIl4sIrxNP 3vcu6UKjsBp9PZm80sIYn/ROV7zsYD5bDKmFuFvSgYqV0enW/4OySKPKUbp3VEMg i8NC6o4tvBCQ2rnC+9/Vs9G4uatPpWQl2WCMbHvUXR0+9FRkBBpXVH4y3n0PzEu3 vGwRQUnFA+e+ok1ichzyryKbq7QxfXENDTsRzeYhz8njIdKmCcQ= -----END CERTIFICATE-----Generated at Mon Dec 22 04:58:14 2025 by rpki-client