This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207612.roa File: AS207612.roa (raw, json) Hash identifier: bbw5osq4EHBJhT+ASw5ZWLYqUvuM2UraBrUuUTMnGME= Subject key identifier: B1:61:C2:F4:F3:5F:12:CB:CE:DC:F4:9A:9C:1E:B1:C6:5F:96:88:CE Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 0DF6E79B80448D880230896EDFC055FD99EBA078 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207612.roa Signing time: Thu 22 Jan 2026 03:42:20 +0000 ROA not before: Thu 22 Jan 2026 03:37:20 +0000 ROA not after: Thu 21 Jan 2027 03:42:20 +0000 asID: 207612 IP address blocks: 143.14.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f6:e7:9b:80:44:8d:88:02:30:89:6e:df:c0:55:fd:99:eb:a0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Jan 22 03:37:20 2026 GMT Not After : Jan 21 03:42:20 2027 GMT Subject: CN=B161C2F4F35F12CBCEDCF49A9C1EB1C65F9688CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:df:8d:ba:a4:67:57:d5:9a:80:e1:f0:3a:2f: ec:44:e8:34:c8:77:ff:26:65:b8:60:49:9c:25:fd: 9c:31:bf:c6:0d:aa:8a:cd:3d:d4:61:c9:f6:e9:55: 35:6c:18:c8:c4:14:fd:67:9e:00:ff:bf:ff:f2:3e: 57:c3:b2:23:98:c9:88:18:9c:e3:67:40:0e:23:e5: 92:c1:27:a0:63:69:63:6b:7c:94:d7:78:62:4c:b1: 19:6a:0c:d7:bd:69:e9:9b:1c:72:c3:ff:30:24:80: 16:88:b1:79:57:23:64:b6:a7:35:b1:c8:b8:bd:5e: ea:13:d1:64:4b:4f:d3:5e:e6:71:2d:f3:7b:b9:d3: 55:e0:59:e9:b8:a2:5d:51:28:6b:f9:eb:6d:6b:b5: 5c:87:5c:99:c5:49:89:c8:e4:a7:bf:56:20:e9:00: 22:d5:84:d2:68:c8:3f:51:66:c0:59:e9:1d:2c:36: 3e:d2:cc:7b:4e:8a:6e:b7:ab:75:96:27:dc:9a:39: cf:c4:f3:1f:67:1c:6d:83:07:c8:13:40:3e:27:3c: 7b:11:97:26:a8:cf:3f:33:5b:86:52:7f:f7:60:ae: 3b:dc:25:56:63:e6:44:74:f7:ee:33:e8:15:ef:1b: 73:f8:87:ea:cb:49:e1:49:ab:e3:be:9f:d0:1b:09: 2e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:61:C2:F4:F3:5F:12:CB:CE:DC:F4:9A:9C:1E:B1:C6:5F:96:88:CE X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207612.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.14.250.0/24 Signature Algorithm: sha256WithRSAEncryption 42:62:4e:30:41:c6:be:b7:b8:7e:15:bc:cc:7f:9a:81:3f:06: 63:68:25:93:08:15:78:38:df:33:59:9e:d5:b5:52:2e:be:ad: 92:fa:9c:96:fd:6f:0b:3e:a8:6b:18:fc:62:40:6f:86:39:93: 3b:9e:7d:b9:2b:09:53:1a:05:3f:ea:b3:88:b0:75:95:21:dd: e3:98:d5:57:4c:d3:b7:13:2d:a3:1b:c7:a6:5e:38:88:ef:a7: 09:08:25:0d:1d:37:d9:f2:a2:37:a7:57:1a:25:90:ae:29:9a: ed:62:b4:d0:f1:22:3f:11:44:e2:f9:aa:99:be:bd:58:5a:e6: f1:15:d0:69:09:ef:c8:c3:ff:08:7b:6f:8d:30:0b:ff:25:53: 57:ef:68:c8:36:47:9e:ac:1a:4c:2b:34:d8:f7:33:85:48:6e: b6:d8:3b:94:f4:e3:61:35:96:25:17:9d:8f:09:0f:3f:a8:03: c6:8f:fe:56:09:41:f7:1b:fc:94:6d:50:5f:4a:77:87:b1:8b: 8a:46:3e:e8:68:3e:00:86:13:ba:34:e7:b5:fa:d0:ea:3f:4d: 4b:b6:e4:77:34:49:f1:27:a9:0c:86:1f:06:fd:1e:62:63:53: 4a:5f:ea:2a:56:a9:eb:bf:55:42:40:6d:88:20:7e:82:08:b6: e8:8c:1f:0e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUDfbnm4BEjYgCMIlu38BV/ZnroHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNjAxMjIwMzM3MjBaFw0yNzAxMjEwMzQyMjBaMDMxMTAvBgNV BAMTKEIxNjFDMkY0RjM1RjEyQ0JDRURDRjQ5QTlDMUVCMUM2NUY5Njg4Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR3426pGdX1ZqA4fA6L+xE6DTI d/8mZbhgSZwl/Zwxv8YNqorNPdRhyfbpVTVsGMjEFP1nngD/v//yPlfDsiOYyYgY nONnQA4j5ZLBJ6BjaWNrfJTXeGJMsRlqDNe9aembHHLD/zAkgBaIsXlXI2S2pzWx yLi9XuoT0WRLT9Ne5nEt83u501XgWem4ol1RKGv5621rtVyHXJnFSYnI5Ke/ViDp ACLVhNJoyD9RZsBZ6R0sNj7SzHtOim63q3WWJ9yaOc/E8x9nHG2DB8gTQD4nPHsR lyaozz8zW4ZSf/dgrjvcJVZj5kR09+4z6BXvG3P4h+rLSeFJq+O+n9AbCS5lAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUsWHC9PNfEsvO3PSanB6xxl+WiM4wHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjA3NjEyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjw76 MA0GCSqGSIb3DQEBCwUAA4IBAQBCYk4wQca+t7h+FbzMf5qBPwZjaCWTCBV4ON8z WZ7VtVIuvq2S+pyW/W8LPqhrGPxiQG+GOZM7nn25KwlTGgU/6rOIsHWVId3jmNVX TNO3Ey2jG8emXjiI76cJCCUNHTfZ8qI3p1caJZCuKZrtYrTQ8SI/EUTi+aqZvr1Y WubxFdBpCe/Iw/8Ie2+NMAv/JVNX72jINkeerBpMKzTY9zOFSG622DuU9ONhNZYl F52PCQ8/qAPGj/5WCUH3G/yUbVBfSneHsYuKRj7oaD4AhhO6NOe1+tDqP01LtuR3 NEnxJ6kMhh8G/R5iY1NKX+oqVqnrv1VCQG2IIH6CCLbojB8O -----END CERTIFICATE-----Generated at Sun Jan 25 10:12:49 2026 by rpki-client