This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS12129.roa File: AS12129.roa (raw, json) Hash identifier: kLLQom1oAdm9anln8ED9+OvN0U0DHp97KzMzZSGh198= Subject key identifier: E2:19:7F:84:55:7F:B4:FD:1B:5F:A4:43:A6:34:65:7B:9C:2C:39:EE Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 7BB4F0279573DCF240E35D6655B5EDE2672219D1 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS12129.roa Signing time: Wed 03 Dec 2025 08:55:14 +0000 ROA not before: Wed 03 Dec 2025 08:50:14 +0000 ROA not after: Wed 02 Dec 2026 08:55:14 +0000 asID: 12129 IP address blocks: 181.214.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b4:f0:27:95:73:dc:f2:40:e3:5d:66:55:b5:ed:e2:67:22:19:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 08:50:14 2025 GMT Not After : Dec 2 08:55:14 2026 GMT Subject: CN=E2197F84557FB4FD1B5FA443A634657B9C2C39EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:46:18:28:fd:65:71:ed:78:7f:b1:a9:4d: 34:61:f1:f3:b6:b8:66:9c:05:de:20:8c:b1:2c:aa: 7c:09:ac:ae:2d:8f:2d:93:58:c0:5c:14:5f:9a:a0: e0:31:c1:fb:ff:6c:8b:ef:ca:3a:1a:fc:ef:da:33: 2a:29:9d:c1:01:74:23:94:da:63:53:54:c5:80:44: c7:10:ca:70:38:55:f6:03:23:68:d7:bf:90:59:94: 1f:e6:30:20:c0:a2:2c:2b:34:01:5f:54:70:c7:e4: 39:a0:77:c9:a2:a9:8a:cb:d4:00:67:c3:f9:45:2c: 11:16:7d:74:8f:6c:54:f7:81:54:8a:a2:08:3a:fc: 34:13:60:0f:62:36:49:f7:37:9b:7b:2e:9e:a4:4b: 93:8e:5d:6a:ea:33:03:40:84:82:4d:7b:06:64:aa: 7d:40:c6:cd:7f:e8:4f:37:b7:be:c6:09:03:37:63: 97:b7:09:26:99:4f:90:c6:d6:7c:88:63:db:6d:39: e2:2e:88:95:0f:27:54:91:da:51:b0:c0:8c:10:05: c4:9a:f5:3d:65:7c:ab:fa:b4:35:a9:3b:be:19:ca: 7f:1e:8c:9c:c0:94:d5:58:35:2d:fa:10:44:c9:a3: 3b:b4:94:1c:11:ff:bf:5d:df:04:a8:05:87:b7:9c: 9b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:19:7F:84:55:7F:B4:FD:1B:5F:A4:43:A6:34:65:7B:9C:2C:39:EE X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS12129.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.214.238.0/23 Signature Algorithm: sha256WithRSAEncryption a2:fa:e4:23:3e:ae:18:c6:59:07:5c:29:b3:cd:99:17:b8:65: 04:b3:c2:3a:df:44:cf:cb:77:4e:1e:fc:ab:a3:57:1d:fa:68: ae:dd:ed:84:13:3a:0e:d2:f6:df:f4:4d:ff:58:42:2d:9d:5e: 56:35:bb:a0:7e:f3:e1:62:cb:a1:2a:a8:f2:10:28:f4:d1:22: 4c:4a:ed:c2:a5:1b:76:3a:e7:6a:5e:c7:e8:de:22:58:57:3d: 23:70:a4:2f:c8:98:20:87:44:b7:90:2d:2f:ce:20:76:33:11: 9b:70:14:42:df:f7:8d:55:6b:f7:43:7b:13:19:88:6e:8c:1e: 64:13:fa:ec:1e:46:31:45:1d:19:df:eb:ac:5d:3a:ab:ea:5e: 1a:42:48:d5:58:c1:0a:e0:ff:a4:9a:e5:f0:4b:b3:fe:45:39: e0:ab:64:42:74:d1:ea:60:cf:07:4a:52:79:db:ec:1c:da:04: d7:d3:11:9c:13:61:55:94:b5:0f:c7:ad:e7:f1:6d:4f:82:ef: cd:ec:2b:31:8e:84:77:6b:b0:cd:d2:d4:22:29:5f:bc:d2:35: 98:a0:f5:ee:a8:58:64:8d:3b:02:a9:32:bf:df:cc:51:35:6a: e3:10:ec:c6:1f:5a:f1:2e:43:1f:49:50:29:60:c8:df:09:3b: 31:31:f0:f5 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUe7TwJ5Vz3PJA411mVbXt4mciGdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwODUwMTRaFw0yNjEyMDIwODU1MTRaMDMxMTAvBgNV BAMTKEUyMTk3Rjg0NTU3RkI0RkQxQjVGQTQ0M0E2MzQ2NTdCOUMyQzM5RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+UYYKP1lce14f7GpTTRh8fO2 uGacBd4gjLEsqnwJrK4tjy2TWMBcFF+aoOAxwfv/bIvvyjoa/O/aMyopncEBdCOU 2mNTVMWARMcQynA4VfYDI2jXv5BZlB/mMCDAoiwrNAFfVHDH5Dmgd8miqYrL1ABn w/lFLBEWfXSPbFT3gVSKogg6/DQTYA9iNkn3N5t7Lp6kS5OOXWrqMwNAhIJNewZk qn1Axs1/6E83t77GCQM3Y5e3CSaZT5DG1nyIY9ttOeIuiJUPJ1SR2lGwwIwQBcSa 9T1lfKv6tDWpO74Zyn8ejJzAlNVYNS36EETJozu0lBwR/79d3wSoBYe3nJs1AgMB AAGjggIJMIICBTAdBgNVHQ4EFgQU4hl/hFV/tP0bX6RDpjRle5wsOe4wHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTIxMjkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG11u4w DQYJKoZIhvcNAQELBQADggEBAKL65CM+rhjGWQdcKbPNmRe4ZQSzwjrfRM/Ld04e /KujVx36aK7d7YQTOg7S9t/0Tf9YQi2dXlY1u6B+8+Fiy6EqqPIQKPTRIkxK7cKl G3Y652pex+jeIlhXPSNwpC/ImCCHRLeQLS/OIHYzEZtwFELf941Va/dDexMZiG6M HmQT+uweRjFFHRnf66xdOqvqXhpCSNVYwQrg/6Sa5fBLs/5FOeCrZEJ00epgzwdK Unnb7BzaBNfTEZwTYVWUtQ/HrefxbU+C783sKzGOhHdrsM3S1CIpX7zSNZig9e6o WGSNOwKpMr/fzFE1auMQ7MYfWvEuQx9JUClgyN8JOzEx8PU= -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:44 2025 by rpki-client