This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215023.roa File: AS215023.roa (raw, json) Hash identifier: S+ls66eUHRvZDcBGFaL0Fz7mdXXNdyZG8s514cxv0Jc= Subject key identifier: CA:F0:9E:2C:C3:3F:34:E8:C7:4A:3B:E0:EF:B2:15:E9:B6:4A:24:99 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 133FC3FFAE8BA6727FFF3EDD48ED1930AD32BCE3 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215023.roa Signing time: Thu 27 Nov 2025 07:41:43 +0000 ROA not before: Thu 27 Nov 2025 07:36:43 +0000 ROA not after: Thu 26 Nov 2026 07:41:43 +0000 asID: 215023 IP address blocks: 178.94.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 09:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:3f:c3:ff:ae:8b:a6:72:7f:ff:3e:dd:48:ed:19:30:ad:32:bc:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Nov 27 07:36:43 2025 GMT Not After : Nov 26 07:41:43 2026 GMT Subject: CN=CAF09E2CC33F34E8C74A3BE0EFB215E9B64A2499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:52:fd:98:87:f1:9e:27:1c:5d:69:31:ff: 52:2f:a0:84:5d:6a:41:48:95:ec:93:0c:ad:e1:29: 75:21:7a:02:7c:3f:73:f3:c1:bb:62:81:8d:60:16: 17:14:e8:26:bf:74:cd:46:fb:8a:e5:94:79:78:5a: 3d:2d:47:9a:de:d8:54:2e:39:3b:a3:0d:a8:2a:8c: 47:87:ee:26:fc:ff:18:e2:b5:46:61:2a:18:29:9d: b5:55:8f:30:41:c8:7d:f8:92:e7:dd:fc:cb:fb:44: 66:e8:0e:ec:24:3e:2c:b0:54:49:48:d6:55:3f:76: bc:2c:58:fe:99:d9:0d:d7:25:ac:e0:2e:b6:be:23: a4:a5:32:66:65:f0:c3:0d:53:9b:03:ea:c4:da:89: 5b:85:81:6b:de:74:05:95:71:13:a3:69:f8:3f:40: 00:00:d3:83:f7:e6:e5:b8:f5:32:f4:2c:ca:f7:64: 03:c7:f6:d7:fb:5e:8e:e1:b2:45:c3:6a:30:62:1c: 79:03:9d:41:6a:18:4d:6c:c4:59:10:99:4f:be:58: 62:92:d6:62:33:47:2d:d3:a5:2b:95:b3:fd:29:21: 2f:cf:62:57:04:ec:15:24:cb:de:1e:aa:82:03:61: b8:3a:05:e0:97:bb:d4:50:6b:cb:f3:c3:8e:ab:82: c0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F0:9E:2C:C3:3F:34:E8:C7:4A:3B:E0:EF:B2:15:E9:B6:4A:24:99 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS215023.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.94.140.0/22 Signature Algorithm: sha256WithRSAEncryption a3:a3:33:d5:1a:64:ea:08:3f:4a:76:cb:d3:88:83:ae:26:e9: fb:bc:97:1f:cd:a6:7c:13:7e:a6:b6:a8:2c:77:4d:35:a4:ee: 4e:f5:42:6d:97:03:43:0a:41:5a:ee:42:77:9a:ce:97:f2:b9: 95:ce:4a:e0:99:b5:e2:87:9b:31:3d:1e:10:0d:55:21:cd:eb: fa:cc:ba:1f:f6:35:98:e8:99:63:47:44:65:09:18:46:0c:9f: bc:7f:d1:2f:f6:2c:46:3b:bb:8c:65:eb:06:88:de:e7:d0:9b: 05:70:a9:58:85:af:02:dd:df:93:dc:fd:9d:7d:0a:56:9a:e2: a4:2a:05:93:a0:93:20:3d:ba:aa:4b:d2:68:66:81:6a:5e:d5: 41:fe:fd:c6:74:b6:c5:24:cb:15:d9:db:74:e2:fb:eb:aa:41: 30:e7:1c:82:ca:0e:f0:7a:ba:49:d9:f1:db:c4:1f:74:89:ec: 3e:81:df:39:69:82:da:f4:55:8a:cd:73:89:a6:68:b7:fc:e4: 4e:7c:09:22:de:31:2b:e0:0e:46:4d:9e:c5:50:e4:7b:ec:c8: cf:ca:a2:00:b9:67:5a:ee:14:16:96:97:f1:93:55:7d:90:f2: de:99:bc:9a:00:b4:3c:86:e0:34:fd:4a:f4:70:42:f7:ca:b8: ff:85:ea:3d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUEz/D/66LpnJ//z7dSO0ZMK0yvOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTExMjcwNzM2NDNaFw0yNjExMjYwNzQxNDNaMDMxMTAvBgNV BAMTKENBRjA5RTJDQzMzRjM0RThDNzRBM0JFMEVGQjIxNUU5QjY0QTI0OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm1FL9mIfxniccXWkx/1IvoIRd akFIleyTDK3hKXUhegJ8P3PzwbtigY1gFhcU6Ca/dM1G+4rllHl4Wj0tR5re2FQu OTujDagqjEeH7ib8/xjitUZhKhgpnbVVjzBByH34kufd/Mv7RGboDuwkPiywVElI 1lU/drwsWP6Z2Q3XJazgLra+I6SlMmZl8MMNU5sD6sTaiVuFgWvedAWVcROjafg/ QAAA04P35uW49TL0LMr3ZAPH9tf7Xo7hskXDajBiHHkDnUFqGE1sxFkQmU++WGKS 1mIzRy3TpSuVs/0pIS/PYlcE7BUky94eqoIDYbg6BeCXu9RQa8vzw46rgsA/AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUyvCeLMM/NOjHSjvg77IV6bZKJJkwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE1MDIzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsl6M MA0GCSqGSIb3DQEBCwUAA4IBAQCjozPVGmTqCD9KdsvTiIOuJun7vJcfzaZ8E36m tqgsd001pO5O9UJtlwNDCkFa7kJ3ms6X8rmVzkrgmbXih5sxPR4QDVUhzev6zLof 9jWY6JljR0RlCRhGDJ+8f9Ev9ixGO7uMZesGiN7n0JsFcKlYha8C3d+T3P2dfQpW muKkKgWToJMgPbqqS9JoZoFqXtVB/v3GdLbFJMsV2dt04vvrqkEw5xyCyg7werpJ 2fHbxB90iew+gd85aYLa9FWKzXOJpmi3/OROfAki3jEr4A5GTZ7FUOR77MjPyqIA uWda7hQWlpfxk1V9kPLembyaALQ8huA0/Ur0cEL3yrj/heo9 -----END CERTIFICATE-----Generated at Thu Nov 27 16:16:29 2025 by rpki-client