This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS215238.roa File: AS215238.roa (raw, json) Hash identifier: 6NMqs8NLSM3ApaI9WK+0bqE782GXaTrUSDyOkT9Z1Sg= Subject key identifier: 9B:50:BC:AC:CD:B9:45:ED:9A:D8:86:DD:BA:C3:18:F6:55:20:E4:73 Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 6AF8C7CE25F2698A5A6253335E5E31C298475F38 Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS215238.roa Signing time: Mon 22 Dec 2025 09:09:39 +0000 ROA not before: Mon 22 Dec 2025 09:04:39 +0000 ROA not after: Mon 21 Dec 2026 09:09:39 +0000 asID: 215238 IP address blocks: 185.231.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f8:c7:ce:25:f2:69:8a:5a:62:53:33:5e:5e:31:c2:98:47:5f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Dec 22 09:04:39 2025 GMT Not After : Dec 21 09:09:39 2026 GMT Subject: CN=9B50BCACCDB945ED9AD886DDBAC318F65520E473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:db:a1:c8:4f:ae:c5:87:5c:0c:f4:a0:1f:ab: ee:bb:d7:c3:37:e4:ec:7b:a2:33:e8:92:58:36:1f: 24:03:6a:e0:ec:5f:60:ae:85:0e:a9:a6:c6:24:44: bc:a6:35:05:a5:6a:d3:f6:66:49:90:08:c3:85:bc: 72:96:c6:25:01:bd:58:ad:5f:df:0d:3b:3e:a8:e7: 23:c3:cc:05:e8:e0:47:56:b1:d7:5b:bc:31:4c:b6: 35:af:70:6a:9f:fb:d0:52:24:ce:6a:9b:25:e1:85: c3:83:5d:d6:d0:d4:5a:71:a9:87:b0:60:90:83:12: 07:ef:fb:2b:2f:55:8e:9c:cc:1c:8b:78:8e:43:6d: a2:5e:42:89:85:00:45:2c:a6:52:68:00:a7:6f:0e: 14:a2:8c:2b:1a:ab:5d:69:40:5d:24:8c:6d:33:87: 4f:f9:74:40:8b:8f:8d:e1:3e:da:80:a6:d7:31:72: c4:15:3e:48:db:b9:0a:b4:a3:24:7a:b6:a0:ea:67: a7:ed:22:94:8f:cc:9c:f0:81:00:eb:79:5e:e8:64: 81:11:76:9f:af:7d:9b:d1:85:c1:04:3e:b2:83:92: a7:2b:0f:02:57:ee:80:f7:22:cb:5e:c6:7d:df:02: 9a:58:5c:54:70:2d:d7:3e:b3:91:14:3b:83:c9:35: 82:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:50:BC:AC:CD:B9:45:ED:9A:D8:86:DD:BA:C3:18:F6:55:20:E4:73 X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS215238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.227.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:e9:09:28:44:b1:dc:52:e6:5e:9d:bc:0a:79:27:c6:40:bd: ad:e2:73:f7:3a:69:a5:d8:ad:1c:d2:47:0f:85:12:c6:c9:2f: d2:1f:98:bc:96:81:9f:fa:fa:e4:d8:bf:44:b0:df:7d:45:3a: e9:6d:93:a4:7e:7d:ae:b0:d7:71:38:1f:bf:82:ab:d9:d8:9f: 54:1c:67:7b:df:41:d5:46:aa:ff:cb:06:00:17:e1:f6:74:0b: c1:01:72:17:3a:3f:48:bf:b4:c6:4e:08:3d:d6:99:ef:78:3d: 1e:31:5b:f8:f4:94:a9:15:7d:93:69:c6:65:a1:79:77:e8:b6: 92:2f:b5:44:a1:e7:95:2b:8c:f5:6f:2b:d7:2f:c4:44:a6:e8: 2b:31:23:78:ce:37:63:45:fb:44:b8:f1:59:bf:9d:36:5e:ff: 89:13:52:5c:2e:4b:9b:59:5f:6a:f5:e0:66:38:da:20:0b:0c: 78:ea:17:a4:80:e1:32:d0:dd:20:db:96:2b:17:87:58:02:1d: 47:ec:ba:28:9a:23:11:d4:15:16:3f:87:ec:2a:e4:eb:b7:ad: 33:26:41:5c:72:62:4c:c4:09:ca:6e:12:07:76:76:3d:23:90: 02:77:7d:9a:8b:cd:4b:a5:b7:7d:8c:b9:26:19:a5:29:6c:c2: d4:7f:79:01 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUavjHziXyaYpaYlMzXl4xwphHXzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNTEyMjIwOTA0MzlaFw0yNjEyMjEwOTA5MzlaMDMxMTAvBgNV BAMTKDlCNTBCQ0FDQ0RCOTQ1RUQ5QUQ4ODZEREJBQzMxOEY2NTUyMEU0NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu26HIT67Fh1wM9KAfq+6718M3 5Ox7ojPoklg2HyQDauDsX2CuhQ6ppsYkRLymNQWlatP2ZkmQCMOFvHKWxiUBvVit X98NOz6o5yPDzAXo4EdWsddbvDFMtjWvcGqf+9BSJM5qmyXhhcODXdbQ1FpxqYew YJCDEgfv+ysvVY6czByLeI5DbaJeQomFAEUsplJoAKdvDhSijCsaq11pQF0kjG0z h0/5dECLj43hPtqAptcxcsQVPkjbuQq0oyR6tqDqZ6ftIpSPzJzwgQDreV7oZIER dp+vfZvRhcEEPrKDkqcrDwJX7oD3Istexn3fAppYXFRwLdc+s5EUO4PJNYKtAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUm1C8rM25Re2a2IbdusMY9lUg5HMwHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjE1MjM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuefj MA0GCSqGSIb3DQEBCwUAA4IBAQCa6QkoRLHcUuZenbwKeSfGQL2t4nP3Omml2K0c 0kcPhRLGyS/SH5i8loGf+vrk2L9EsN99RTrpbZOkfn2usNdxOB+/gqvZ2J9UHGd7 30HVRqr/ywYAF+H2dAvBAXIXOj9Iv7TGTgg91pnveD0eMVv49JSpFX2TacZloXl3 6LaSL7VEoeeVK4z1byvXL8REpugrMSN4zjdjRftEuPFZv502Xv+JE1JcLkubWV9q 9eBmONogCwx46hekgOEy0N0g25YrF4dYAh1H7LoomiMR1BUWP4fsKuTrt60zJkFc cmJMxAnKbhIHdnY9I5ACd32ai81Lpbd9jLkmGaUpbMLUf3kB -----END CERTIFICATE-----Generated at Wed Jan 21 17:15:18 2026 by rpki-client