This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS216472.roa File: AS216472.roa (raw, json) Hash identifier: lWI7kQ6lFabST2uqNdCI4UZNShtCamk/IiWRUlU4IbE= Subject key identifier: D3:EB:5A:5A:5E:4C:12:1A:5E:AC:DE:35:B4:9C:72:7A:B5:A3:A3:1E Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 4304DF1860C899E6EE75853992E3508B924EF395 Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS216472.roa Signing time: Thu 13 Nov 2025 14:49:35 +0000 ROA not before: Thu 13 Nov 2025 14:44:35 +0000 ROA not after: Thu 12 Nov 2026 14:49:35 +0000 asID: 216472 IP address blocks: 139.28.48.0/24 maxlen: 24 139.28.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:04:df:18:60:c8:99:e6:ee:75:85:39:92:e3:50:8b:92:4e:f3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Nov 13 14:44:35 2025 GMT Not After : Nov 12 14:49:35 2026 GMT Subject: CN=D3EB5A5A5E4C121A5EACDE35B49C727AB5A3A31E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:4e:5b:50:58:00:c5:78:5a:8b:2f:ba:d7: 3a:23:ad:8d:6f:9a:24:26:a2:f2:1a:07:30:85:ef: a3:20:a5:46:94:b7:30:fd:67:36:8b:bd:b1:46:23: 5d:92:f1:00:ab:48:67:08:55:b8:17:8d:c1:5e:d6: 45:d2:7b:b6:7a:97:a3:07:d9:30:ae:ed:43:e7:a8: db:39:0f:84:c9:c5:f8:a9:ea:41:c5:eb:d9:1c:8b: f5:a5:76:92:fe:69:cc:a9:0e:7e:ed:b8:17:cb:0c: ed:8d:0d:3b:35:58:c5:65:5b:5e:cf:69:54:4b:cc: 69:fd:ac:6d:d8:26:12:9b:db:ac:c8:4b:70:06:79: ec:39:f6:72:9e:08:40:ce:54:97:e4:7d:3a:68:0b: 8a:6c:5d:78:a8:36:ef:99:3f:f9:96:1f:8f:9a:a1: b9:12:1a:f7:c6:e3:bc:75:9f:c1:92:a9:5a:f7:33: f3:0f:a6:3b:96:35:c8:85:02:25:56:6d:d2:78:8a: 7b:50:0b:b3:61:1f:93:c6:86:95:b3:f2:49:4b:3b: 93:d8:b3:f5:70:90:e8:f2:3d:1f:14:0d:98:4d:5e: 5b:16:47:5e:22:04:a3:f3:3f:60:1c:65:0a:46:f4: 7f:48:f2:d4:72:70:e1:e3:f7:86:9d:81:07:81:ac: 46:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EB:5A:5A:5E:4C:12:1A:5E:AC:DE:35:B4:9C:72:7A:B5:A3:A3:1E X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS216472.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.48.0/23 Signature Algorithm: sha256WithRSAEncryption a7:e4:db:66:63:2e:73:c7:fe:86:9d:2d:67:ed:97:3b:7b:46: 14:4d:91:0d:7a:89:02:e5:89:62:94:81:fd:39:22:91:e0:75: 9a:18:17:e1:94:99:ca:cb:c3:8e:5e:bb:80:61:93:3d:22:90: ae:3f:ad:f8:0a:04:da:c3:75:64:c4:e8:83:44:ea:c1:0f:13: a2:3e:25:01:f2:25:f5:c7:05:4f:ca:ae:bf:03:bd:23:32:67: ee:b4:4c:9e:c9:aa:9c:db:3d:54:d8:7a:ca:2e:84:07:f4:71: 3d:b9:14:e7:87:9a:31:e0:62:16:ff:43:50:66:96:d0:cc:da: da:27:9e:4b:da:0e:ef:b1:89:b1:cc:aa:23:c7:aa:88:1e:6f: 58:4c:9c:d0:39:4a:3b:c8:e6:e8:94:72:83:31:d0:e2:fc:30: ab:f2:f2:e3:94:9f:0f:4a:de:c1:b6:62:6f:d6:e9:b9:71:33: 8a:4d:b5:de:f8:a3:cc:f6:93:42:35:3b:35:d8:73:28:0b:33: 28:90:cc:76:03:ed:ad:bf:a5:3e:ab:a5:ec:f0:58:39:68:11: 6f:bb:16:02:1e:f0:85:fe:b6:fa:3f:a0:cc:91:df:51:fb:d4: 82:9a:03:03:4f:30:f7:3f:ba:b4:b2:e7:ce:a3:85:f9:80:fc: 0d:46:4d:8e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUQwTfGGDImebudYU5kuNQi5JO85UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNTExMTMxNDQ0MzVaFw0yNjExMTIxNDQ5MzVaMDMxMTAvBgNV BAMTKEQzRUI1QTVBNUU0QzEyMUE1RUFDREUzNUI0OUM3MjdBQjVBM0EzMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NE5bUFgAxXhaiy+61zojrY1v miQmovIaBzCF76MgpUaUtzD9ZzaLvbFGI12S8QCrSGcIVbgXjcFe1kXSe7Z6l6MH 2TCu7UPnqNs5D4TJxfip6kHF69kci/WldpL+acypDn7tuBfLDO2NDTs1WMVlW17P aVRLzGn9rG3YJhKb26zIS3AGeew59nKeCEDOVJfkfTpoC4psXXioNu+ZP/mWH4+a obkSGvfG47x1n8GSqVr3M/MPpjuWNciFAiVWbdJ4intQC7NhH5PGhpWz8klLO5PY s/VwkOjyPR8UDZhNXlsWR14iBKPzP2AcZQpG9H9I8tRycOHj94adgQeBrEabAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU0+taWl5MEhperN41tJxyerWjox4wHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjE2NDcyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBixww MA0GCSqGSIb3DQEBCwUAA4IBAQCn5NtmYy5zx/6GnS1n7Zc7e0YUTZENeokC5Yli lIH9OSKR4HWaGBfhlJnKy8OOXruAYZM9IpCuP634CgTaw3VkxOiDROrBDxOiPiUB 8iX1xwVPyq6/A70jMmfutEyeyaqc2z1U2HrKLoQH9HE9uRTnh5ox4GIW/0NQZpbQ zNraJ55L2g7vsYmxzKojx6qIHm9YTJzQOUo7yObolHKDMdDi/DCr8vLjlJ8PSt7B tmJv1um5cTOKTbXe+KPM9pNCNTs12HMoCzMokMx2A+2tv6U+q6Xs8Fg5aBFvuxYC HvCF/rb6P6DMkd9R+9SCmgMDTzD3P7q0sufOo4X5gPwNRk2O -----END CERTIFICATE-----Generated at Fri Dec 5 10:45:03 2025 by rpki-client