This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212085.roa File: AS212085.roa (raw, json) Hash identifier: Rm8YCimjKrtubvtfBEOo2ldKDTpB/4RtG8vkW0qpo48= Subject key identifier: AE:E1:65:C3:31:2B:B6:EC:99:D9:CE:E6:92:45:2E:A5:0A:03:CA:D2 Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Certificate serial: 21A52D5A98DFCC32D093AF4EEE631E646EE1F8B4 Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212085.roa Signing time: Sat 29 Nov 2025 09:59:27 +0000 ROA not before: Sat 29 Nov 2025 09:54:27 +0000 ROA not after: Sat 28 Nov 2026 09:59:27 +0000 asID: 212085 IP address blocks: 185.121.162.0/24 maxlen: 24 2a06:a001:a070::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a5:2d:5a:98:df:cc:32:d0:93:af:4e:ee:63:1e:64:6e:e1:f8:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177 Validity Not Before: Nov 29 09:54:27 2025 GMT Not After : Nov 28 09:59:27 2026 GMT Subject: CN=AEE165C3312BB6EC99D9CEE692452EA50A03CAD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:42:b3:78:13:59:24:b0:d0:69:7e:f7:72:8b: cc:25:a5:22:73:1d:0e:63:a0:41:07:02:0c:44:03: bc:f4:f3:e1:f6:e8:70:c9:8a:03:53:74:17:2f:f1: 11:aa:5e:ac:34:3d:4c:9f:2d:10:fe:b9:f6:3d:1f: b4:c8:53:ab:57:36:11:73:aa:46:fb:88:8c:7b:70: 05:2b:c2:c3:2d:51:6b:73:d4:65:23:02:4a:17:06: e9:15:9a:cf:44:b2:86:01:1f:db:b2:ae:43:7e:86: 37:81:ff:25:78:75:0f:16:9c:9f:00:2c:1b:88:66: 14:4b:ed:86:4d:fd:64:12:6c:cf:7a:e8:9d:a6:98: 1c:9b:a7:7b:b4:9e:d1:83:2e:dd:eb:24:63:2c:a2: 1b:25:b3:c9:38:5c:ea:45:9e:ac:50:8b:3c:e4:a2: cb:78:46:a5:21:4e:b2:a6:21:5d:35:dc:27:95:31: 9f:67:31:ad:00:f1:7d:b8:d8:51:97:8b:66:f3:9d: 73:62:75:b4:e4:cc:6f:56:ed:61:41:bd:5e:8e:95: a6:79:e6:2a:d2:78:24:be:fe:ff:9e:73:19:a7:24: 20:ae:39:c2:1e:14:4a:62:f5:02:c6:ea:2d:59:78: 74:4c:bc:32:95:cf:0c:21:1f:33:86:e1:a0:5c:5b: 72:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E1:65:C3:31:2B:B6:EC:99:D9:CE:E6:92:45:2E:A5:0A:03:CA:D2 X509v3 Authority Key Identifier: keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS212085.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.162.0/24 IPv6: 2a06:a001:a070::/44 Signature Algorithm: sha256WithRSAEncryption 57:10:47:d6:04:7c:84:e0:72:dd:58:33:41:35:1e:04:59:f9: c6:de:b2:e7:c7:f7:12:91:47:3f:a6:75:db:64:06:c7:b7:6e: bb:a3:b3:24:57:d6:fa:6a:d8:e3:12:d0:7c:22:9f:c7:72:dd: e6:26:b6:0a:69:19:b5:7f:1d:2b:19:9e:33:c3:90:d9:b7:da: d9:1b:b6:3e:e0:d6:ff:13:da:2d:33:83:bc:68:cd:93:e1:71: 1a:4e:cb:be:8c:b4:19:22:23:7b:1a:32:6c:5f:a2:18:22:11: b8:78:b2:a6:06:e4:76:f7:e3:0e:7e:1f:3a:a3:02:c5:87:3c: 43:eb:da:80:4a:52:c7:de:3e:46:cc:eb:b4:bd:31:67:90:02: a5:18:b9:45:ef:0d:5a:5a:d7:97:2c:8b:8a:d9:84:e7:6a:fd: 20:56:09:ee:52:3b:e4:a1:53:44:0c:c8:90:fc:c9:d1:a3:49: b9:97:2f:d2:cf:9a:9e:1b:8d:66:05:27:2c:11:4f:1c:49:c7: 48:10:61:1a:25:cb:3a:d6:39:15:40:e3:60:2d:ec:3d:d6:9f: 98:5b:bd:b4:eb:8b:40:9a:37:4f:2a:23:fc:8a:06:0e:84:9f: d0:ca:96:a5:b8:00:76:00:a8:db:32:17:e7:e3:31:94:cf:27: 77:38:a3:8a -----BEGIN CERTIFICATE----- MIIE9jCCA96gAwIBAgIUIaUtWpjfzDLQk69O7mMeZG7h+LQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4 ZWE1NDE3NzAeFw0yNTExMjkwOTU0MjdaFw0yNjExMjgwOTU5MjdaMDMxMTAvBgNV BAMTKEFFRTE2NUMzMzEyQkI2RUM5OUQ5Q0VFNjkyNDUyRUE1MEEwM0NBRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9QrN4E1kksNBpfvdyi8wlpSJz HQ5joEEHAgxEA7z08+H26HDJigNTdBcv8RGqXqw0PUyfLRD+ufY9H7TIU6tXNhFz qkb7iIx7cAUrwsMtUWtz1GUjAkoXBukVms9EsoYBH9uyrkN+hjeB/yV4dQ8WnJ8A LBuIZhRL7YZN/WQSbM966J2mmBybp3u0ntGDLt3rJGMsohsls8k4XOpFnqxQizzk ost4RqUhTrKmIV013CeVMZ9nMa0A8X242FGXi2bznXNidbTkzG9W7WFBvV6OlaZ5 5irSeCS+/v+ecxmnJCCuOcIeFEpi9QLG6i1ZeHRMvDKVzwwhHzOG4aBcW3IrAgMB AAGjggIAMIIB/DAdBgNVHQ4EFgQUruFlwzErtuyZ2c7mkkUupQoDytIwHwYDVR0j BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBwBggrBgEF BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT MjEyMDg1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH AQH/BCEwHzAMBAIAATAGAwQAuXmiMA8EAgACMAkDBwQqBqABoHAwDQYJKoZIhvcN AQELBQADggEBAFcQR9YEfITgct1YM0E1HgRZ+cbesufH9xKRRz+mddtkBse3bruj syRX1vpq2OMS0Hwin8dy3eYmtgppGbV/HSsZnjPDkNm32tkbtj7g1v8T2i0zg7xo zZPhcRpOy76MtBkiI3saMmxfohgiEbh4sqYG5Hb34w5+HzqjAsWHPEPr2oBKUsfe PkbM67S9MWeQAqUYuUXvDVpa15csi4rZhOdq/SBWCe5SO+ShU0QMyJD8ydGjSbmX L9LPmp4bjWYFJywRTxxJx0gQYRolyzrWORVA42At7D3Wn5hbvbTri0CaN08qI/yK Bg6En9DKlqW4AHYAqNsyF+fjMZTPJ3c4o4o= -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:08 2025 by rpki-client