This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215152.roa File: AS215152.roa (raw, json) Hash identifier: ipBGaVSF9to1XnEUI0iz0getH7gQ2ZpzE4pih+sZoFs= Subject key identifier: 8D:78:B4:5F:04:8D:6F:EE:40:A9:C3:6A:48:DF:1F:A0:3F:38:42:76 Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 441585D5D010D195EC73A858AA33CF9F7E07BC77 Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215152.roa Signing time: Thu 25 Dec 2025 06:46:26 +0000 ROA not before: Thu 25 Dec 2025 06:41:26 +0000 ROA not after: Thu 24 Dec 2026 06:46:26 +0000 asID: 215152 IP address blocks: 143.20.145.0/24 maxlen: 24 143.20.180.0/24 maxlen: 24 143.20.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:15:85:d5:d0:10:d1:95:ec:73:a8:58:aa:33:cf:9f:7e:07:bc:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Dec 25 06:41:26 2025 GMT Not After : Dec 24 06:46:26 2026 GMT Subject: CN=8D78B45F048D6FEE40A9C36A48DF1FA03F384276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cc:5b:8b:fa:33:eb:77:03:3b:69:a7:07:db: e0:13:50:23:66:1b:fb:46:f2:21:b0:36:a5:10:7b: dd:6d:42:d5:86:b6:ec:1b:b3:e8:a8:6b:22:fc:0a: e1:7c:fb:4b:3c:1a:54:5e:46:38:3c:91:2d:d6:42: e8:dd:00:3e:96:91:bd:c9:48:cb:d9:bf:a7:f0:06: 1f:ce:11:e3:62:56:56:43:72:56:b6:b1:47:14:f2: 7c:47:af:5f:26:ee:61:f5:1f:35:c0:10:63:59:61: a1:ff:93:bd:46:d7:91:eb:f1:52:a4:57:b2:2b:52: 32:2f:b3:87:c1:82:f2:95:7d:23:8b:3e:4c:e0:05: 34:d5:3c:59:e6:ba:52:bd:dc:df:62:48:e2:ec:ca: a6:82:b2:3f:ba:9c:45:f0:bf:ca:dc:62:f0:74:7a: 81:ad:2e:dc:51:2c:22:68:9e:e0:48:28:97:c4:11: a7:17:09:0f:7a:d4:90:1b:30:0f:ba:67:af:c2:6b: 18:f6:0f:4b:01:3e:e2:5f:66:55:20:99:47:ca:63: 75:19:dc:9f:22:70:da:41:34:ba:5d:0c:e7:2e:d2: cf:a3:af:b1:af:53:14:fa:f9:b0:7e:84:0a:07:99: 2c:37:1a:af:0a:08:0d:26:ca:1e:4c:4e:39:25:a5: 76:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:78:B4:5F:04:8D:6F:EE:40:A9:C3:6A:48:DF:1F:A0:3F:38:42:76 X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS215152.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.145.0/24 143.20.180.0/24 143.20.215.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:d5:22:5e:34:fd:00:07:de:bf:d1:a6:e8:a4:7e:60:70:10: cc:ac:b3:ab:56:13:fa:eb:f6:c3:eb:e6:73:bf:08:a3:ed:45: ed:59:f2:3e:ec:aa:6f:95:dc:de:60:53:e6:85:a1:17:6e:91: 19:91:17:48:f3:98:9e:4d:2c:8a:b9:58:e7:d2:22:3f:41:c4: 36:16:b5:04:8e:1d:62:27:4f:24:3d:11:68:a8:20:f5:3a:c3: 15:6f:2b:a4:da:41:9c:02:18:9e:08:aa:2a:8c:40:cc:e8:42: c5:06:9b:9e:20:21:78:d6:fa:7a:d2:d6:12:43:73:61:c9:a2: e4:79:4c:8c:aa:8c:16:38:4d:6b:83:cd:13:fa:46:59:be:1e: 1e:e2:a9:84:78:19:b9:df:1b:28:0c:60:9c:fc:cf:5f:f7:bf: cf:0c:4e:d3:49:fc:a8:36:60:bc:d5:48:a4:e6:d0:6b:f2:1c: d9:9d:c5:36:06:1c:33:68:a5:c8:b6:b4:cd:c8:71:dd:e6:d8: 11:a4:dd:f5:8b:84:56:c7:e3:ae:83:b5:d7:42:48:35:90:1a: 7d:4e:c4:80:9f:b8:d3:41:ff:d8:c8:7c:30:ed:54:44:c3:8f: e3:45:9d:6d:62:f6:51:86:2a:0f:ed:b4:ea:21:10:d8:3e:3f: fa:d9:35:7f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIURBWF1dAQ0ZXsc6hYqjPPn34HvHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTEyMjUwNjQxMjZaFw0yNjEyMjQwNjQ2MjZaMDMxMTAvBgNV BAMTKDhENzhCNDVGMDQ4RDZGRUU0MEE5QzM2QTQ4REYxRkEwM0YzODQyNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zFuL+jPrdwM7aacH2+ATUCNm G/tG8iGwNqUQe91tQtWGtuwbs+ioayL8CuF8+0s8GlReRjg8kS3WQujdAD6Wkb3J SMvZv6fwBh/OEeNiVlZDcla2sUcU8nxHr18m7mH1HzXAEGNZYaH/k71G15Hr8VKk V7IrUjIvs4fBgvKVfSOLPkzgBTTVPFnmulK93N9iSOLsyqaCsj+6nEXwv8rcYvB0 eoGtLtxRLCJonuBIKJfEEacXCQ961JAbMA+6Z6/Caxj2D0sBPuJfZlUgmUfKY3UZ 3J8icNpBNLpdDOcu0s+jr7GvUxT6+bB+hAoHmSw3Gq8KCA0myh5MTjklpXYlAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUjXi0XwSNb+5AqcNqSN8foD84QnYwHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMjE1MTUyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjxSR AwQAjxS0AwQAjxTXMA0GCSqGSIb3DQEBCwUAA4IBAQCO1SJeNP0AB96/0abopH5g cBDMrLOrVhP66/bD6+Zzvwij7UXtWfI+7KpvldzeYFPmhaEXbpEZkRdI85ieTSyK uVjn0iI/QcQ2FrUEjh1iJ08kPRFoqCD1OsMVbyuk2kGcAhieCKoqjEDM6ELFBpue ICF41vp60tYSQ3NhyaLkeUyMqowWOE1rg80T+kZZvh4e4qmEeBm53xsoDGCc/M9f 97/PDE7TSfyoNmC81Uik5tBr8hzZncU2BhwzaKXItrTNyHHd5tgRpN31i4RWx+Ou g7XXQkg1kBp9TsSAn7jTQf/YyHww7VREw4/jRZ1tYvZRhioP7bTqIRDYPj/62TV/ -----END CERTIFICATE-----Generated at Sat Jan 10 22:50:58 2026 by rpki-client