This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS216138.roa
File: AS216138.roa (raw, json)
Hash identifier: D+rdYY6vrwAjx9iaeCwxAJZlKlY0L9IEANZriTAqv+E=
Subject key identifier: E6:F8:D6:39:F5:87:9C:39:34:2C:79:9E:47:5B:61:7E:17:97:26:D9
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 1C2DB0253E421E77A567995840B5D07B717B976E
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS216138.roa
Signing time: Wed 10 Dec 2025 15:20:59 +0000
ROA not before: Wed 10 Dec 2025 15:15:59 +0000
ROA not after: Wed 09 Dec 2026 15:20:59 +0000
asID: 216138
IP address blocks: 176.53.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:2d:b0:25:3e:42:1e:77:a5:67:99:58:40:b5:d0:7b:71:7b:97:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Dec 10 15:15:59 2025 GMT
Not After : Dec 9 15:20:59 2026 GMT
Subject: CN=E6F8D639F5879C39342C799E475B617E179726D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:0f:09:7c:8a:d3:43:0e:ae:4c:74:d7:e3:
68:20:40:1e:56:49:8e:9c:ea:7b:f7:c3:3b:19:40:
55:4b:11:ff:3c:ed:cb:c9:16:15:30:6f:82:72:cc:
d9:e5:0a:00:14:d8:8f:e8:90:b9:d9:3d:45:fa:31:
15:bd:c2:be:2f:d9:e8:1f:f1:b9:1c:35:3c:d3:f1:
d1:80:d9:ef:a8:55:fb:42:84:5f:02:6a:9a:f6:41:
7a:2f:85:38:f9:2a:b3:0d:6d:13:9a:ed:0c:25:89:
04:e2:92:a6:69:5c:05:f5:40:8c:82:93:c7:e2:9c:
a5:f7:97:be:00:c5:04:41:12:3d:82:5d:48:28:c6:
6d:14:75:c3:44:13:f8:50:a7:cd:22:86:7e:f9:a6:
bf:41:1e:31:7d:2a:2c:bd:e9:14:8b:50:7b:8c:25:
d1:8f:44:db:36:7b:4a:08:6e:4f:61:6a:09:ab:67:
e7:d6:64:45:70:90:dc:ef:a4:04:7f:62:a3:34:ab:
3a:a8:84:c6:c2:5d:39:7f:5d:4a:cc:ba:c2:d1:05:
9d:7c:ec:ab:be:7c:31:9c:b2:a8:fa:de:91:b1:9d:
10:39:7a:17:cb:10:3f:a8:1d:b8:89:d5:6d:dd:71:
1f:1e:2b:29:23:ff:24:76:bc:db:8f:a7:04:8b:e3:
be:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F8:D6:39:F5:87:9C:39:34:2C:79:9E:47:5B:61:7E:17:97:26:D9
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS216138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.169.0/24
Signature Algorithm: sha256WithRSAEncryption
75:58:25:8b:fa:2f:73:6e:76:2d:24:f9:ba:19:c3:33:9c:18:
5b:16:be:53:dc:3a:45:29:a3:33:cb:46:fa:f3:e8:99:1e:db:
e0:bf:6d:9c:41:7d:fc:c0:09:4e:36:28:01:0a:74:63:6b:9f:
a2:f5:8f:75:f0:dd:f8:8d:91:d5:44:db:41:9e:fd:98:4a:e7:
df:49:19:4b:3d:5d:f1:54:f3:a0:91:a0:72:99:a3:22:3a:7f:
60:9d:c5:84:86:ae:e4:72:bb:be:cb:9d:ec:e8:e9:74:eb:0e:
16:03:96:6e:ae:6e:84:7f:fe:5b:77:71:94:82:a7:3f:0f:9f:
e3:7c:ee:26:3d:bc:d0:74:6a:6d:3a:94:a4:8d:7e:2a:20:fc:
7d:70:16:0e:9a:4c:7b:65:f6:19:cd:b7:5f:f2:47:07:d1:f0:
00:89:e8:e7:bf:72:4b:b0:34:cc:70:0a:0a:f7:93:ff:5a:aa:
eb:97:4b:be:d7:9e:83:3d:96:2f:c3:5f:db:48:56:76:c9:f4:
24:9b:58:94:26:64:61:f1:23:30:82:66:ba:46:2c:2b:35:1a:
44:66:e9:82:7f:56:e2:6c:49:65:39:54:7b:ef:ab:8a:b9:ea:
78:eb:78:45:40:f0:93:69:31:26:17:9c:ea:9f:a6:72:7c:3f:
80:6c:38:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:45:26 2025 by rpki-client