This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS211439.roa File: AS211439.roa (raw, json) Hash identifier: 64rqwBDZyowsDFKLfwIfwWKr3WMaZRpaqq4bu6focFE= Subject key identifier: 55:76:05:E9:6D:AD:02:A4:87:A4:E6:23:1E:D0:4D:B0:71:AE:79:45 Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 6479745EE59508EFAB88E3C4CA00B14CCFF62E70 Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS211439.roa Signing time: Thu 11 Dec 2025 12:18:06 +0000 ROA not before: Thu 11 Dec 2025 12:13:06 +0000 ROA not after: Thu 10 Dec 2026 12:18:06 +0000 asID: 211439 IP address blocks: 140.233.185.0/24 maxlen: 24 150.241.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:79:74:5e:e5:95:08:ef:ab:88:e3:c4:ca:00:b1:4c:cf:f6:2e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 11 12:13:06 2025 GMT Not After : Dec 10 12:18:06 2026 GMT Subject: CN=557605E96DAD02A487A4E6231ED04DB071AE7945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:6e:ed:72:9f:5b:bc:7a:cc:b3:b4:a0:ac: aa:87:39:85:68:6d:9b:c4:67:84:73:4c:30:a5:8d: 72:12:4b:8b:70:08:75:d3:08:2c:fd:48:0b:4d:19: dc:40:25:d8:88:ad:0a:38:ba:90:3c:7a:2c:03:39: 0e:de:54:1c:90:d7:8d:f3:dd:1a:39:47:ef:eb:67: 2c:87:85:ff:ce:ac:40:f6:f8:4b:7a:61:b4:4d:11: 42:89:df:8a:0e:dd:30:79:f7:39:27:d5:5d:4e:69: 32:64:3f:84:72:6f:ec:e0:8f:59:e0:44:74:8d:6f: 0f:08:63:5e:97:87:8a:f2:2d:34:75:bf:2f:61:94: 53:0b:ec:b6:ea:71:42:29:42:94:1e:8d:f2:ac:6c: a1:49:c2:43:37:ee:87:87:06:68:1e:0c:7e:02:55: 3e:1b:3b:7f:9c:5b:b2:5d:22:4a:1f:12:02:21:90: 3a:4a:9f:bf:13:c5:b2:b0:2f:ac:1f:fc:49:c3:c7: 25:c9:af:25:1d:93:ba:fd:e8:23:7a:fe:82:43:bf: 97:18:b1:3d:1f:a2:9f:5a:db:c6:f4:fb:f3:d8:5f: 6f:8d:90:37:16:35:d4:22:33:82:6d:6a:8f:e4:8f: 2c:ee:b1:16:10:02:d0:83:41:c0:8b:4d:f4:cb:b6: 1e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:76:05:E9:6D:AD:02:A4:87:A4:E6:23:1E:D0:4D:B0:71:AE:79:45 X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS211439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.233.185.0/24 150.241.231.0/24 Signature Algorithm: sha256WithRSAEncryption 27:d4:7a:45:b0:b5:cf:1b:63:98:00:94:bf:fc:04:ef:33:f9: cf:5b:32:90:04:90:ff:cf:6e:3c:44:bd:af:4e:fd:51:cc:d5: 3e:fb:3d:d5:ba:cc:7c:14:cd:e1:80:8c:72:e2:11:4a:35:3a: df:09:d2:03:3e:9a:90:85:7f:29:88:ae:77:0a:5d:d9:d9:f7: f9:f7:a2:0b:51:d4:9d:75:07:80:dc:7c:a2:26:a4:90:a4:54: a7:b0:70:ca:c9:27:8f:e6:87:9e:c8:df:4c:c1:44:c0:e4:84: a2:db:b2:28:41:93:a9:c0:12:1a:98:47:c2:20:28:5d:dd:af: e1:46:b8:4e:d2:f9:e3:df:56:dd:18:b9:21:4d:81:4b:ab:02: 14:3a:af:c4:ea:f4:b8:06:95:bc:52:60:6b:1a:71:8b:41:26: 67:63:3f:31:b7:14:fb:e5:f0:8a:d3:2a:4f:f0:aa:22:e6:f3: dc:16:9b:fd:b3:b1:d1:e2:78:86:19:66:d3:85:9b:a9:e7:bb: 55:df:66:0f:45:a0:7e:00:63:bf:ae:05:42:a3:ab:da:d0:7f: 93:30:ee:e9:3d:86:7d:90:2f:ec:68:3b:34:8f:c0:7c:0b:e4: 02:07:cc:16:67:73:44:91:82:6c:d3:9f:f3:45:0e:8d:79:55: d5:e7:ee:12 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUZHl0XuWVCO+riOPEygCxTM/2LnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMTExMjEzMDZaFw0yNjEyMTAxMjE4MDZaMDMxMTAvBgNV BAMTKDU1NzYwNUU5NkRBRDAyQTQ4N0E0RTYyMzFFRDA0REIwNzFBRTc5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChbW7tcp9bvHrMs7SgrKqHOYVo bZvEZ4RzTDCljXISS4twCHXTCCz9SAtNGdxAJdiIrQo4upA8eiwDOQ7eVByQ143z 3Ro5R+/rZyyHhf/OrED2+Et6YbRNEUKJ34oO3TB59zkn1V1OaTJkP4Ryb+zgj1ng RHSNbw8IY16Xh4ryLTR1vy9hlFML7LbqcUIpQpQejfKsbKFJwkM37oeHBmgeDH4C VT4bO3+cW7JdIkofEgIhkDpKn78TxbKwL6wf/EnDxyXJryUdk7r96CN6/oJDv5cY sT0fop9a28b0+/PYX2+NkDcWNdQiM4Jtao/kjyzusRYQAtCDQcCLTfTLth5BAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUVXYF6W2tAqSHpOYjHtBNsHGueUUwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjExNDM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjOm5 AwQAlvHnMA0GCSqGSIb3DQEBCwUAA4IBAQAn1HpFsLXPG2OYAJS//ATvM/nPWzKQ BJD/z248RL2vTv1RzNU++z3Vusx8FM3hgIxy4hFKNTrfCdIDPpqQhX8piK53Cl3Z 2ff596ILUdSddQeA3HyiJqSQpFSnsHDKySeP5oeeyN9MwUTA5ISi27IoQZOpwBIa mEfCIChd3a/hRrhO0vnj31bdGLkhTYFLqwIUOq/E6vS4BpW8UmBrGnGLQSZnYz8x txT75fCK0ypP8Koi5vPcFpv9s7HR4niGGWbThZup57tV32YPRaB+AGO/rgVCo6va 0H+TMO7pPYZ9kC/saDs0j8B8C+QCB8wWZ3NEkYJs05/zRQ6NeVXV5+4S -----END CERTIFICATE-----Generated at Wed Dec 17 19:16:56 2025 by rpki-client