This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS215645.roa File: AS215645.roa (raw, json) Hash identifier: dpuwXRsg+dZ0bJ5d82fxt1JYMCEKRzYTZ6dpPoWkhlM= Subject key identifier: 4B:5B:21:BA:E8:80:E5:BB:F7:FC:7A:D4:C4:C1:4D:12:43:29:95:E5 Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 113214238C288519B8B34904D8012B84B1F4B991 Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS215645.roa Signing time: Fri 26 Dec 2025 13:55:15 +0000 ROA not before: Fri 26 Dec 2025 13:50:15 +0000 ROA not after: Fri 25 Dec 2026 13:55:15 +0000 asID: 215645 IP address blocks: 31.40.197.0/24 maxlen: 24 85.235.73.0/24 maxlen: 24 85.235.74.0/24 maxlen: 24 217.18.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:32:14:23:8c:28:85:19:b8:b3:49:04:d8:01:2b:84:b1:f4:b9:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Dec 26 13:50:15 2025 GMT Not After : Dec 25 13:55:15 2026 GMT Subject: CN=4B5B21BAE880E5BBF7FC7AD4C4C14D12432995E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:07:9a:93:f8:36:37:6d:79:b1:03:1f:c6:fc: e6:d4:47:95:57:1b:8f:f2:77:01:05:96:c8:a6:36: 0b:4b:88:f0:af:1b:3b:6c:d5:95:2f:d3:ce:b1:42: ea:45:75:5f:fa:77:fc:e0:93:3a:63:ee:44:98:49: 3e:ed:d2:43:47:28:e5:6e:17:2f:99:6a:76:7a:58: 98:29:d0:bd:08:14:c6:3d:1d:e4:fd:e9:03:45:5c: df:46:60:24:01:a5:99:d0:27:d3:e9:11:40:78:a9: 1a:1e:9b:41:d9:f7:bf:fe:80:78:81:6e:ea:da:5d: d5:a4:16:3f:12:d5:63:56:f4:db:b7:bb:44:11:77: 51:84:0c:46:f4:99:89:b4:a8:ac:66:6a:64:55:3b: 6e:a2:0d:72:d7:95:04:07:28:4d:10:f9:0b:a9:af: 33:b5:f1:de:a6:7a:9e:73:4c:e9:eb:69:d1:d6:2b: 9d:8f:36:91:53:97:68:10:8c:a0:89:87:6f:21:ba: 6f:f3:61:92:8b:5a:6c:5a:de:9b:b2:1c:9e:6a:1b: 20:58:23:9d:f1:e1:10:44:cd:fc:94:6b:1d:6c:04: 36:e0:0b:d5:93:7b:5e:92:51:27:f8:d9:0b:65:7a: 7d:f5:bc:3d:15:2b:a0:f4:dc:26:75:17:aa:8f:f3: 97:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5B:21:BA:E8:80:E5:BB:F7:FC:7A:D4:C4:C1:4D:12:43:29:95:E5 X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS215645.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.197.0/24 85.235.73.0-85.235.74.255 217.18.208.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:33:aa:b5:1a:8b:dc:dd:57:b2:e7:c2:02:e9:ba:dd:4f:90: 2f:63:96:c9:b2:85:69:09:80:f8:41:50:5f:3e:05:f0:3a:36: 25:54:ec:bc:f5:ac:c0:67:5f:48:01:db:3e:d8:31:92:0a:62: e4:18:ac:f6:a2:1a:80:3f:46:b3:b2:f1:5c:ce:e3:d9:1a:7d: 9f:c5:79:b0:e4:61:b1:ec:d0:20:d1:44:ef:9b:5c:6f:53:73: 9d:7b:00:08:60:4a:e8:2e:ea:19:6e:61:e3:60:9a:aa:69:06: c3:dc:8f:4c:f0:ff:66:8b:7a:4a:b6:8a:b4:0b:60:16:29:43: 15:48:90:b9:8f:91:ea:09:a6:c0:27:5b:48:d8:18:9c:51:ec: 6e:e7:8b:56:3a:a3:f9:fc:21:fd:9a:cc:02:86:52:cc:5d:13: 03:d2:c1:79:13:70:6e:2e:da:4c:de:67:88:c7:4d:4c:3a:13: 28:44:c8:5a:dc:c8:cc:eb:8d:a5:4a:0e:0e:ca:0d:e5:ed:0b: 99:19:c4:e9:29:7a:2f:64:77:2e:36:35:9a:2a:6c:b4:60:b7: 3a:e2:ab:5d:b8:ae:c1:f4:8d:5e:fa:1d:7b:b7:8d:28:b6:42: a1:25:c2:65:2f:c7:be:9a:1f:da:ca:87:f6:7f:28:44:34:c2: f6:31:b5:8a -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIUETIUI4wohRm4s0kE2AErhLH0uZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNTEyMjYxMzUwMTVaFw0yNjEyMjUxMzU1MTVaMDMxMTAvBgNV BAMTKDRCNUIyMUJBRTg4MEU1QkJGN0ZDN0FENEM0QzE0RDEyNDMyOTk1RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6B5qT+DY3bXmxAx/G/ObUR5VX G4/ydwEFlsimNgtLiPCvGzts1ZUv086xQupFdV/6d/zgkzpj7kSYST7t0kNHKOVu Fy+ZanZ6WJgp0L0IFMY9HeT96QNFXN9GYCQBpZnQJ9PpEUB4qRoem0HZ97/+gHiB buraXdWkFj8S1WNW9Nu3u0QRd1GEDEb0mYm0qKxmamRVO26iDXLXlQQHKE0Q+Qup rzO18d6mep5zTOnradHWK52PNpFTl2gQjKCJh28hum/zYZKLWmxa3puyHJ5qGyBY I53x4RBEzfyUax1sBDbgC9WTe16SUSf42Qtlen31vD0VK6D03CZ1F6qP85ehAgMB AAGjggIeMIICGjAdBgNVHQ4EFgQUS1shuuiA5bv3/HrUxMFNEkMpleUwHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjE1NjQ1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAHyjF MAwDBABV60kDBABV60oDBADZEtAwDQYJKoZIhvcNAQELBQADggEBAF8zqrUai9zd V7LnwgLput1PkC9jlsmyhWkJgPhBUF8+BfA6NiVU7Lz1rMBnX0gB2z7YMZIKYuQY rPaiGoA/RrOy8VzO49kafZ/FebDkYbHs0CDRRO+bXG9Tc517AAhgSugu6hluYeNg mqppBsPcj0zw/2aLekq2irQLYBYpQxVIkLmPkeoJpsAnW0jYGJxR7G7ni1Y6o/n8 If2azAKGUsxdEwPSwXkTcG4u2kzeZ4jHTUw6EyhEyFrcyMzrjaVKDg7KDeXtC5kZ xOkpei9kdy42NZoqbLRgtzriq124rsH0jV76HXu3jSi2QqElwmUvx76aH9rKh/Z/ KEQ0wvYxtYo= -----END CERTIFICATE-----Generated at Wed Jan 21 17:01:11 2026 by rpki-client