This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212396.roa File: AS212396.roa (raw, json) Hash identifier: gTjOx2IqwfWDgP3XwmW8ctAThw7w4y+oMjiWh7Hmt6Q= Subject key identifier: 11:9C:9F:C2:83:1F:67:4D:B2:4D:C9:34:B0:FB:41:D4:51:87:DA:57 Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Certificate serial: 0A9007AD01AB1B7E00B1F4DFFAE93DA98DC7DE67 Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212396.roa Signing time: Wed 03 Dec 2025 08:55:12 +0000 ROA not before: Wed 03 Dec 2025 08:50:12 +0000 ROA not after: Wed 02 Dec 2026 08:55:12 +0000 asID: 212396 IP address blocks: 109.106.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:90:07:ad:01:ab:1b:7e:00:b1:f4:df:fa:e9:3d:a9:8d:c7:de:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a Validity Not Before: Dec 3 08:50:12 2025 GMT Not After : Dec 2 08:55:12 2026 GMT Subject: CN=119C9FC2831F674DB24DC934B0FB41D45187DA57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:66:77:ea:46:d7:88:90:bd:14:c0:2a:ae: 44:25:7a:a1:3c:d0:ba:05:e4:4c:47:f4:d2:0b:84: 5b:f9:13:66:2c:2b:7a:9d:bf:3e:c3:24:5f:fe:99: e9:18:fe:31:ee:21:9c:92:5b:a1:aa:cf:bf:8d:83: 65:aa:37:96:e9:d5:66:b2:db:ef:45:fb:3c:2a:5a: 12:9e:75:3e:40:39:8e:ab:c5:de:42:a7:1c:96:d8: e7:4d:32:31:95:ca:9c:07:c1:ca:1a:75:58:68:97: c2:b5:31:a8:af:75:89:c8:ce:34:b3:0b:62:9f:ff: 3e:51:ac:3f:8f:f8:af:e4:dc:ac:a2:12:26:a4:45: 63:3a:1b:07:03:a2:b2:60:3f:13:8b:1a:05:b8:51: b2:02:49:e1:94:0a:3c:e7:7e:48:dd:fc:bc:c4:07: ec:07:27:6f:cc:5e:ee:4d:8e:e9:cf:c9:ad:49:fc: ab:4b:48:78:03:98:0c:d1:56:14:9f:90:00:45:a7: ff:b0:23:fb:11:b1:9a:1c:e6:dc:1b:1f:43:b1:1e: 53:31:17:7d:00:b7:03:31:8d:36:a9:1a:08:f0:43: 48:95:04:5c:92:31:5c:18:0e:c5:69:d6:71:7a:4e: c5:23:cd:34:f0:60:14:8a:1f:e0:7c:fb:1a:32:aa: 90:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9C:9F:C2:83:1F:67:4D:B2:4D:C9:34:B0:FB:41:D4:51:87:DA:57 X509v3 Authority Key Identifier: keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212396.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.106.1.0/24 Signature Algorithm: sha256WithRSAEncryption b0:57:e3:fb:8b:c4:04:03:ed:ac:88:d9:85:78:0f:bf:15:ed: 23:ad:d7:de:22:d0:c1:9c:02:d6:0c:de:64:84:55:db:5b:f5: 54:c3:72:d9:75:22:49:de:95:5b:aa:7d:64:40:e7:2c:57:47: 66:6c:f0:b6:ed:04:fb:b9:a6:95:5c:b6:ee:4a:52:92:93:57: 66:59:67:ca:8f:82:a9:00:14:40:37:64:2b:50:32:45:08:62: 29:f4:f4:aa:fd:ca:82:89:85:a3:09:b3:5d:ca:b9:fb:28:dc: 51:7b:75:2d:c8:96:8a:0d:a0:02:bc:45:cb:47:82:ea:fe:70: ef:30:86:ee:41:65:24:23:b5:e5:57:8c:ee:8d:74:82:95:ad: a7:bc:29:91:1f:11:d2:a5:40:b4:49:90:d3:98:52:d3:32:66: f4:d8:10:25:f7:da:d0:65:00:98:52:4e:bf:46:23:f4:a5:35: b8:b0:f1:18:0f:ac:b6:7a:45:80:b5:e1:0e:ac:b1:d1:8e:51: 12:13:5a:33:72:cb:17:a9:9e:f0:89:6b:8f:d0:b1:bc:29:9c: 17:05:0d:5f:24:b3:23:a0:7a:75:08:9d:41:71:04:96:21:b8: 2d:53:be:02:92:aa:27:71:62:69:58:9d:70:a4:eb:ab:89:58: e5:61:f9:5c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUCpAHrQGrG34AsfTf+uk9qY3H3mcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh NDFiYmEwYTAeFw0yNTEyMDMwODUwMTJaFw0yNjEyMDIwODU1MTJaMDMxMTAvBgNV BAMTKDExOUM5RkMyODMxRjY3NERCMjREQzkzNEIwRkI0MUQ0NTE4N0RBNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx4WZ36kbXiJC9FMAqrkQleqE8 0LoF5ExH9NILhFv5E2YsK3qdvz7DJF/+mekY/jHuIZySW6Gqz7+Ng2WqN5bp1Way 2+9F+zwqWhKedT5AOY6rxd5CpxyW2OdNMjGVypwHwcoadVhol8K1MaivdYnIzjSz C2Kf/z5RrD+P+K/k3KyiEiakRWM6GwcDorJgPxOLGgW4UbICSeGUCjznfkjd/LzE B+wHJ2/MXu5NjunPya1J/KtLSHgDmAzRVhSfkABFp/+wI/sRsZoc5twbH0OxHlMx F30AtwMxjTapGgjwQ0iVBFySMVwYDsVp1nF6TsUjzTTwYBSKH+B8+xoyqpBpAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUEZyfwoMfZ02yTck0sPtB1FGH2lcwHwYDVR0j BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjEyMzk2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWoB MA0GCSqGSIb3DQEBCwUAA4IBAQCwV+P7i8QEA+2siNmFeA+/Fe0jrdfeItDBnALW DN5khFXbW/VUw3LZdSJJ3pVbqn1kQOcsV0dmbPC27QT7uaaVXLbuSlKSk1dmWWfK j4KpABRAN2QrUDJFCGIp9PSq/cqCiYWjCbNdyrn7KNxRe3UtyJaKDaACvEXLR4Lq /nDvMIbuQWUkI7XlV4zujXSCla2nvCmRHxHSpUC0SZDTmFLTMmb02BAl99rQZQCY Uk6/RiP0pTW4sPEYD6y2ekWAteEOrLHRjlESE1ozcssXqZ7wiWuP0LG8KZwXBQ1f JLMjoHp1CJ1BcQSWIbgtU74CkqoncWJpWJ1wpOuriVjlYflc -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:56 2025 by rpki-client