This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS58212.roa File: AS58212.roa (raw, json) Hash identifier: nmFybPCZ6xNnxGobV+uPCnpHc/ua3+7+s2hEcu8A0o8= Subject key identifier: C1:94:0F:39:F7:F9:7A:1C:FC:CD:67:6E:6B:66:C5:27:8E:81:E6:EC Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 310CC45E39D996A499F01C44516AF1A24F3592BB Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS58212.roa Signing time: Mon 01 Dec 2025 00:05:22 +0000 ROA not before: Mon 01 Dec 2025 00:00:22 +0000 ROA not after: Mon 30 Nov 2026 00:05:22 +0000 asID: 58212 IP address blocks: 143.14.11.0/24 maxlen: 24 143.14.93.0/24 maxlen: 24 143.14.126.0/24 maxlen: 24 143.14.136.0/24 maxlen: 24 143.14.156.0/24 maxlen: 24 143.14.171.0/24 maxlen: 24 143.14.202.0/24 maxlen: 24 143.14.216.0/24 maxlen: 24 167.148.173.0/24 maxlen: 24 167.148.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:0c:c4:5e:39:d9:96:a4:99:f0:1c:44:51:6a:f1:a2:4f:35:92:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 1 00:00:22 2025 GMT Not After : Nov 30 00:05:22 2026 GMT Subject: CN=C1940F39F7F97A1CFCCD676E6B66C5278E81E6EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e5:7e:fc:6e:bf:b0:de:32:d6:d4:7d:d2:8e: 32:66:d9:33:68:85:4d:f0:25:68:b9:dc:c9:cf:82: 5c:77:24:61:98:23:38:e2:3f:36:09:07:23:36:dd: 12:af:5e:a5:f3:56:27:69:93:e0:0f:7d:63:0c:f4: d7:21:26:60:41:1e:22:10:ff:38:ef:6d:6b:08:fa: ea:8b:c1:9d:15:b2:e1:b7:a4:b8:de:f8:ea:46:13: 3d:4a:d8:0f:40:70:83:00:dd:22:c4:63:04:17:60: ac:f7:15:1e:3d:0c:b7:e0:2c:98:2f:3c:4a:08:76: f6:e1:7c:69:b7:2a:eb:b0:49:30:ed:1a:32:32:7b: 88:fc:40:9c:4d:b2:d6:bb:3d:3e:4d:53:a0:05:8a: 47:bc:9e:13:75:29:28:0d:6b:40:29:4e:ec:74:a5: 03:c8:e8:b3:fc:9b:c5:e6:df:f2:5d:27:ec:db:1a: 40:07:28:02:fe:f5:73:9e:55:e9:df:09:98:fb:08: c1:ff:82:8a:a8:df:ea:7f:ef:67:21:0d:3d:4b:cb: 49:c0:77:63:7f:e1:fd:4b:33:87:61:09:38:1a:20: bc:e1:1c:df:47:60:20:60:c7:1d:79:b5:8b:a0:42: 49:5a:88:1c:a6:9c:32:8d:f0:8d:f2:2d:ac:a1:37: ad:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:94:0F:39:F7:F9:7A:1C:FC:CD:67:6E:6B:66:C5:27:8E:81:E6:EC X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS58212.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.14.11.0/24 143.14.93.0/24 143.14.126.0/24 143.14.136.0/24 143.14.156.0/24 143.14.171.0/24 143.14.202.0/24 143.14.216.0/24 167.148.173.0/24 167.148.187.0/24 Signature Algorithm: sha256WithRSAEncryption 89:70:b3:10:7c:cb:ef:4f:03:3c:f0:cd:19:c8:c9:35:14:03: 4f:e4:e4:60:dc:d4:6c:bf:37:6b:c8:53:5c:7c:fd:e5:4d:4c: b7:b9:c6:de:e4:ec:24:0d:7c:c7:2a:3f:af:c9:c4:39:22:88: d5:99:0b:b7:9b:f9:c5:e7:16:17:1f:5d:90:fa:ee:53:1e:ab: cb:16:86:1e:d8:12:94:f4:f1:4c:77:4e:a3:b2:18:bf:a2:d3: 86:b5:2b:c4:ac:fb:9a:0b:7a:e0:05:3c:0f:5a:58:92:98:54: f5:b1:68:ba:be:fa:43:0f:1f:61:32:41:3b:04:9b:92:e6:74: 3f:99:53:41:f1:30:c2:a0:ba:05:6e:e7:a3:e6:7c:1f:4c:53: 2f:a7:78:59:20:8b:a5:f1:b8:9e:6c:b0:ed:20:7b:15:73:a6: 9e:08:2c:b0:2e:29:b8:2d:f2:90:d0:a2:3a:ea:30:3e:bd:b7: d4:f3:70:ac:46:d9:54:df:b2:ae:20:b8:27:95:70:13:b3:bb: 26:9a:08:65:56:01:fd:8a:21:1f:28:33:84:e7:00:0e:c0:f3: d6:fb:3d:cb:ea:a9:ce:90:89:89:42:b4:73:65:89:3a:9a:13: 4d:bb:16:61:85:22:c5:e8:02:e3:c2:8d:fc:67:1f:d3:54:a3: 8e:7c:97:16 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUMQzEXjnZlqSZ8BxEUWrxok81krswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMDEwMDAwMjJaFw0yNjExMzAwMDA1MjJaMDMxMTAvBgNV BAMTKEMxOTQwRjM5RjdGOTdBMUNGQ0NENjc2RTZCNjZDNTI3OEU4MUU2RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS5X78br+w3jLW1H3SjjJm2TNo hU3wJWi53MnPglx3JGGYIzjiPzYJByM23RKvXqXzVidpk+APfWMM9NchJmBBHiIQ /zjvbWsI+uqLwZ0VsuG3pLje+OpGEz1K2A9AcIMA3SLEYwQXYKz3FR49DLfgLJgv PEoIdvbhfGm3KuuwSTDtGjIye4j8QJxNsta7PT5NU6AFike8nhN1KSgNa0ApTux0 pQPI6LP8m8Xm3/JdJ+zbGkAHKAL+9XOeVenfCZj7CMH/goqo3+p/72chDT1Ly0nA d2N/4f1LM4dhCTgaILzhHN9HYCBgxx15tYugQklaiBymnDKN8I3yLayhN61NAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUwZQPOff5ehz8zWdua2bFJ46B5uwwHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTNTgyMTIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwVQYIKwYBBQUHAQcBAf8ERjBEMEIEAgABMDwDBACPDgsD BACPDl0DBACPDn4DBACPDogDBACPDpwDBACPDqsDBACPDsoDBACPDtgDBACnlK0D BACnlLswDQYJKoZIhvcNAQELBQADggEBAIlwsxB8y+9PAzzwzRnIyTUUA0/k5GDc 1Gy/N2vIU1x8/eVNTLe5xt7k7CQNfMcqP6/JxDkiiNWZC7eb+cXnFhcfXZD67lMe q8sWhh7YEpT08Ux3TqOyGL+i04a1K8Ss+5oLeuAFPA9aWJKYVPWxaLq++kMPH2Ey QTsEm5LmdD+ZU0HxMMKgugVu56PmfB9MUy+neFkgi6XxuJ5ssO0gexVzpp4ILLAu Kbgt8pDQojrqMD69t9TzcKxG2VTfsq4guCeVcBOzuyaaCGVWAf2KIR8oM4TnAA7A 89b7Pcvqqc6QiYlCtHNliTqaE027FmGFIsXoAuPCjfxnH9NUo458lxY= -----END CERTIFICATE-----Generated at Sat Dec 6 20:35:32 2025 by rpki-client