This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216416.roa File: AS216416.roa (raw, json) Hash identifier: BBNqXTrgfmDqDBuLn7eHkeGUl18GrSTc2o6feok1isA= Subject key identifier: 70:49:08:6B:B5:C8:B7:7C:12:77:63:57:16:D0:CA:76:97:2A:07:AA Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 6BDCC3BDBCDD6FDF3EA09C040DEE195DB1AA3FD3 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216416.roa Signing time: Wed 03 Dec 2025 00:11:40 +0000 ROA not before: Wed 03 Dec 2025 00:06:40 +0000 ROA not after: Wed 02 Dec 2026 00:11:40 +0000 asID: 216416 IP address blocks: 91.124.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:dc:c3:bd:bc:dd:6f:df:3e:a0:9c:04:0d:ee:19:5d:b1:aa:3f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 3 00:06:40 2025 GMT Not After : Dec 2 00:11:40 2026 GMT Subject: CN=7049086BB5C8B77C1277635716D0CA76972A07AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:81:65:1c:75:84:83:02:2c:38:7c:78:4c:8d: 58:14:16:5d:d4:b4:75:fc:50:23:41:a6:bf:d5:ab: bc:29:63:cd:bf:72:00:8a:a0:bc:04:1b:ba:8b:50: 6c:6f:b5:eb:13:8e:17:25:79:be:13:a1:08:7d:d2: 61:d0:14:d5:5b:dd:18:ee:1d:11:f5:fe:33:44:24: d0:68:22:da:4e:36:e1:40:7c:a0:e2:94:18:f5:30: 7a:b2:2e:34:db:6b:60:03:70:aa:a3:54:fd:cf:0c: 95:d7:56:26:52:82:8e:fe:c2:d7:7f:9a:9c:e6:0c: b6:87:70:bf:2e:8f:cf:91:0a:63:c7:a2:97:79:5e: 56:01:dc:55:18:89:cf:05:2f:78:2b:c3:e1:fa:38: 6f:d7:e4:90:e6:ca:6d:e4:ae:8a:78:8b:c3:2b:a4: 6a:b7:51:65:a6:68:6c:69:a1:d6:c2:98:2b:24:53: b8:56:a8:28:3f:e8:a8:05:a1:69:63:2e:2e:d2:d3: 9e:3e:aa:e5:f0:cf:1c:f1:c5:09:c5:a6:f9:62:f3: 8e:27:27:83:51:2c:95:0c:5d:22:b7:74:29:bd:9e: 04:3f:f3:72:3e:7e:3f:bf:e1:10:e8:97:d9:cf:3b: 4c:97:28:b5:b3:9d:98:ae:ef:4d:4b:1e:dd:e5:95: 37:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:49:08:6B:B5:C8:B7:7C:12:77:63:57:16:D0:CA:76:97:2A:07:AA X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS216416.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.124.149.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:4a:a9:6a:80:ce:c5:9e:0d:0d:91:25:b1:a0:34:bc:c2:cc: 3c:a2:a5:f8:47:ff:78:74:ec:85:6f:42:0a:7e:71:76:b5:7b: ae:70:2c:27:41:54:3d:83:88:fa:65:43:e6:e7:cf:8a:68:d3: 73:06:a5:e5:0e:72:95:b5:88:a1:11:11:dd:94:97:58:90:61: bf:38:94:c4:0e:f6:72:10:7b:49:57:97:ca:51:fd:0a:d6:8a: 99:fe:0a:a0:f4:8c:6d:49:7d:bc:37:e4:73:bc:4c:2e:01:8a: 33:d3:e7:a0:ea:d8:f4:a7:f1:73:fe:7c:ee:a9:d4:c7:36:bc: dc:77:2b:2f:cb:81:58:7f:d3:3b:65:c7:40:3c:7a:29:48:a5: ad:3d:09:49:2d:bd:82:27:1a:0f:d1:44:2f:05:d4:1a:c5:8c: 77:a0:6e:8d:10:63:39:24:ba:4a:21:9d:05:84:09:62:cd:92: 18:65:05:8b:a1:7b:38:10:fd:62:16:d6:36:88:14:f5:81:9b: 73:b9:f6:88:49:45:78:45:24:34:c6:97:1f:c4:b5:cb:57:37: f3:02:e7:44:8d:4e:91:c5:a2:06:0d:3e:78:9b:11:a4:44:28: b6:f3:c8:c2:b9:5d:da:2c:b8:49:89:0f:2d:42:0c:ce:7b:38: df:ce:4d:ae -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUa9zDvbzdb98+oJwEDe4ZXbGqP9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMDMwMDA2NDBaFw0yNjEyMDIwMDExNDBaMDMxMTAvBgNV BAMTKDcwNDkwODZCQjVDOEI3N0MxMjc3NjM1NzE2RDBDQTc2OTcyQTA3QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1gWUcdYSDAiw4fHhMjVgUFl3U tHX8UCNBpr/Vq7wpY82/cgCKoLwEG7qLUGxvtesTjhcleb4ToQh90mHQFNVb3Rju HRH1/jNEJNBoItpONuFAfKDilBj1MHqyLjTba2ADcKqjVP3PDJXXViZSgo7+wtd/ mpzmDLaHcL8uj8+RCmPHopd5XlYB3FUYic8FL3grw+H6OG/X5JDmym3krop4i8Mr pGq3UWWmaGxpodbCmCskU7hWqCg/6KgFoWljLi7S054+quXwzxzxxQnFpvli844n J4NRLJUMXSK3dCm9ngQ/83I+fj+/4RDol9nPO0yXKLWznZiu701LHt3llTcbAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUcEkIa7XIt3wSd2NXFtDKdpcqB6owHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjE2NDE2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW3yV MA0GCSqGSIb3DQEBCwUAA4IBAQAfSqlqgM7Fng0NkSWxoDS8wsw8oqX4R/94dOyF b0IKfnF2tXuucCwnQVQ9g4j6ZUPm58+KaNNzBqXlDnKVtYihERHdlJdYkGG/OJTE DvZyEHtJV5fKUf0K1oqZ/gqg9IxtSX28N+RzvEwuAYoz0+eg6tj0p/Fz/nzuqdTH Nrzcdysvy4FYf9M7ZcdAPHopSKWtPQlJLb2CJxoP0UQvBdQaxYx3oG6NEGM5JLpK IZ0FhAlizZIYZQWLoXs4EP1iFtY2iBT1gZtzufaISUV4RSQ0xpcfxLXLVzfzAudE jU6RxaIGDT54mxGkRCi288jCuV3aLLhJiQ8tQgzOezjfzk2u -----END CERTIFICATE-----Generated at Wed Dec 3 12:23:10 2025 by rpki-client