This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216342.roa File: AS216342.roa (raw, json) Hash identifier: aITTK/PzUHwVqXLoS4nPiwegdPEG9jYcWTz9wlM3sOE= Subject key identifier: AC:E0:88:F9:35:A8:3F:C7:C3:58:FA:AE:3B:21:18:00:07:CC:28:3E Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 3A32DD6F17EFEB36CFE1034D6AC8D17A7E1A4C36 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216342.roa Signing time: Tue 06 Jan 2026 01:00:49 +0000 ROA not before: Tue 06 Jan 2026 00:55:49 +0000 ROA not after: Tue 05 Jan 2027 01:00:49 +0000 asID: 216342 IP address blocks: 2a14:7580:e400::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:32:dd:6f:17:ef:eb:36:cf:e1:03:4d:6a:c8:d1:7a:7e:1a:4c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 6 00:55:49 2026 GMT Not After : Jan 5 01:00:49 2027 GMT Subject: CN=ACE088F935A83FC7C358FAAE3B21180007CC283E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:90:e5:09:4a:3b:f3:7a:54:5b:15:98:22:ec: 0b:49:3b:43:6b:f1:e5:98:54:31:f7:d3:03:4e:38: 0e:c8:c2:4c:00:73:38:4c:1c:42:f0:da:df:0d:7c: 9f:55:4f:ba:8f:3b:0e:c8:c7:fd:a6:e0:9e:7d:65: 4d:20:14:48:ec:bb:95:b2:da:de:dc:9a:b8:81:1c: 13:22:55:ae:f3:ab:1a:8e:20:fd:5b:69:2a:19:d3: d7:b7:e2:f7:94:1d:11:c7:6c:2d:5d:51:ae:ec:bf: 83:f4:36:39:a3:39:32:dc:59:71:23:01:8b:37:4c: 6d:e0:5a:5a:93:0d:65:44:d9:00:1b:34:ab:21:75: e2:85:bd:59:ec:45:a8:e1:f0:85:0d:6d:39:f0:ff: 12:68:e3:20:26:a5:d9:3b:8c:62:e9:34:e1:76:0f: 2d:15:bb:70:d6:8c:be:c0:d5:36:3a:7c:4f:f9:7b: 1c:8f:f5:a5:71:30:a8:2f:ef:78:25:7d:cd:e2:fc: c0:cc:9a:4d:59:92:0d:ef:b0:a6:0f:ba:79:2d:6d: e7:00:55:c7:bd:be:c7:bf:dd:78:26:f9:d1:4c:7c: 60:04:e5:86:85:89:c4:dd:74:14:a9:d5:b4:84:91: 0f:09:cc:da:c6:a0:4c:60:bc:88:cc:c3:02:c1:b8: f2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E0:88:F9:35:A8:3F:C7:C3:58:FA:AE:3B:21:18:00:07:CC:28:3E X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS216342.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:e400::/40 Signature Algorithm: sha256WithRSAEncryption 73:50:db:d7:ab:5b:ef:ad:a1:bd:2e:2e:fe:0b:cc:6b:46:80: 96:aa:bb:66:2f:58:75:1a:b5:66:72:a0:ad:9c:c0:a1:f2:ba: 14:e4:c9:9f:0b:53:37:22:7a:fd:9d:65:81:2b:85:07:e3:c1: 40:f0:26:fd:bd:e9:d0:ff:d7:da:74:45:a2:a6:09:78:bc:30: 01:9d:c3:39:35:19:24:3b:62:98:ca:6e:4d:6b:61:42:69:2b: fb:f4:fb:8e:57:42:0b:82:ed:60:50:c2:5c:90:49:7f:04:8a: 80:31:bc:6b:8a:8c:10:cb:14:b8:6a:f4:62:ce:6a:0d:0c:b3: 60:84:7e:62:99:83:02:d3:c9:dc:25:3b:ce:f6:7a:45:35:fc: 1e:7a:97:96:72:ea:15:a4:fd:12:3f:b6:af:0e:47:49:5b:51: 43:5e:a0:32:1c:bf:21:cb:b2:2f:98:44:5a:dc:aa:f9:76:9d: 77:bc:a3:1a:bf:b5:ce:a1:26:5c:bc:75:55:d2:83:c6:76:2d: 2b:77:bd:e4:a7:08:22:4d:82:83:02:46:c3:74:71:a0:8c:61: aa:e4:65:e7:18:92:ff:73:08:aa:93:97:c1:58:49:79:4a:4c: 57:10:40:9e:51:2b:a8:f9:31:02:0a:c3:fb:44:0b:79:1c:f2: 36:a5:86:17 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUOjLdbxfv6zbP4QNNasjRen4aTDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMDYwMDU1NDlaFw0yNzAxMDUwMTAwNDlaMDMxMTAvBgNV BAMTKEFDRTA4OEY5MzVBODNGQzdDMzU4RkFBRTNCMjExODAwMDdDQzI4M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3kOUJSjvzelRbFZgi7AtJO0Nr 8eWYVDH30wNOOA7IwkwAczhMHELw2t8NfJ9VT7qPOw7Ix/2m4J59ZU0gFEjsu5Wy 2t7cmriBHBMiVa7zqxqOIP1baSoZ09e34veUHRHHbC1dUa7sv4P0NjmjOTLcWXEj AYs3TG3gWlqTDWVE2QAbNKshdeKFvVnsRajh8IUNbTnw/xJo4yAmpdk7jGLpNOF2 Dy0Vu3DWjL7A1TY6fE/5exyP9aVxMKgv73glfc3i/MDMmk1Zkg3vsKYPunktbecA Vce9vse/3Xgm+dFMfGAE5YaFicTddBSp1bSEkQ8JzNrGoExgvIjMwwLBuPLPAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUrOCI+TWoP8fDWPquOyEYAAfMKD4wHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjE2MzQyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1 gOQwDQYJKoZIhvcNAQELBQADggEBAHNQ29erW++tob0uLv4LzGtGgJaqu2YvWHUa tWZyoK2cwKHyuhTkyZ8LUzciev2dZYErhQfjwUDwJv296dD/19p0RaKmCXi8MAGd wzk1GSQ7YpjKbk1rYUJpK/v0+45XQguC7WBQwlyQSX8EioAxvGuKjBDLFLhq9GLO ag0Ms2CEfmKZgwLTydwlO872ekU1/B56l5Zy6hWk/RI/tq8OR0lbUUNeoDIcvyHL si+YRFrcqvl2nXe8oxq/tc6hJly8dVXSg8Z2LSt3veSnCCJNgoMCRsN0caCMYark ZecYkv9zCKqTl8FYSXlKTFcQQJ5RK6j5MQIKw/tEC3kc8jalhhc= -----END CERTIFICATE-----Generated at Tue Jan 20 22:21:13 2026 by rpki-client