This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212353.roa File: AS212353.roa (raw, json) Hash identifier: 7NFgEDeYyjQfjDk4STa6hr0ekDleeL5Pg71RWm/Tjww= Subject key identifier: 89:4A:70:EE:F3:31:16:CD:2F:63:AB:4E:2A:C9:F9:1C:05:9B:7A:FE Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 57E7982BF11095EF282D35F7E8B3CFCE394BF315 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212353.roa Signing time: Fri 05 Dec 2025 20:54:38 +0000 ROA not before: Fri 05 Dec 2025 20:49:38 +0000 ROA not after: Fri 04 Dec 2026 20:54:38 +0000 asID: 212353 IP address blocks: 2a14:7580:fff6::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:e7:98:2b:f1:10:95:ef:28:2d:35:f7:e8:b3:cf:ce:39:4b:f3:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Dec 5 20:49:38 2025 GMT Not After : Dec 4 20:54:38 2026 GMT Subject: CN=894A70EEF33116CD2F63AB4E2AC9F91C059B7AFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:57:cd:aa:a8:f6:0a:ed:ef:f2:b2:43:2f:67: ea:f6:0a:70:09:c2:03:6f:cc:da:ce:c6:30:63:00: e9:15:55:ed:73:7b:7d:25:90:43:9b:1d:dc:82:3e: a4:b6:79:51:b5:45:72:ff:3b:67:e5:68:e5:56:02: a7:97:33:93:02:47:3b:75:d8:26:8f:be:f4:82:26: c5:fe:38:1f:cc:1b:10:40:20:65:e6:4c:f5:f5:a8: 35:b2:e6:40:61:11:9e:ec:ff:0d:e0:9f:c5:91:cb: 5c:d5:97:7e:40:2d:88:74:f0:14:d3:53:4a:f6:bf: e1:8a:34:f3:42:01:b5:ac:e3:74:92:c2:d5:d2:c6: 11:df:5b:d2:b4:3d:19:cd:f9:7e:ca:48:d4:84:9c: 9c:93:72:c8:ad:e4:a3:6f:44:1a:01:de:c0:4e:36: a2:a2:14:f0:2a:ce:e9:72:3a:b7:a5:81:aa:0a:85: 6e:ca:33:f6:b3:9c:60:87:57:9d:7c:18:01:e3:5b: a6:71:b6:50:76:8e:fc:cc:2e:18:ea:ce:9b:15:79: c3:1f:f0:ad:9c:bd:a6:e5:3c:23:ea:e3:5e:2e:11: ee:62:67:4a:62:fb:7f:86:63:17:a4:36:44:6e:a6: a8:70:51:e9:72:6a:cd:16:d1:77:1b:17:7c:c4:26: 0e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4A:70:EE:F3:31:16:CD:2F:63:AB:4E:2A:C9:F9:1C:05:9B:7A:FE X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212353.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:fff6::/48 Signature Algorithm: sha256WithRSAEncryption 6d:76:31:99:66:b2:bd:1d:a1:6f:da:f0:ee:4b:79:dc:a5:81: b1:8a:6d:33:32:24:0a:82:52:e2:2a:4c:4f:f6:6e:00:97:cc: 47:2b:eb:7f:0d:9c:9a:9e:19:ce:ac:a7:95:67:16:b0:13:f0: 54:ec:83:75:2e:d8:a1:7f:5d:d2:a4:96:5a:15:38:5b:9f:a4: 36:d9:46:41:1d:49:05:56:a6:3c:c9:e7:b5:7a:d9:9d:b4:b1: f3:3a:86:70:f6:c1:b7:26:60:8c:d9:06:24:9a:17:13:05:8d: 8c:1d:69:7a:ff:7b:e2:74:a7:e0:79:2b:6a:1a:e3:b8:b6:a0: 64:06:cd:4a:bd:68:e3:f1:eb:47:25:49:72:75:83:ec:bc:3b: 89:62:cc:42:27:15:2c:10:53:0f:ee:56:41:60:33:b8:e0:be: 54:67:48:bc:89:42:87:ba:be:ef:32:53:7f:95:b3:f7:36:af: 8d:de:40:e7:b8:f1:80:b1:53:ca:36:ab:5c:08:ca:54:7c:55: 38:57:f3:32:6e:ae:a3:15:19:cc:61:ba:b9:d6:8f:0c:c4:dd: 75:bf:b0:ff:49:b6:89:65:74:1c:79:f3:f3:18:e9:c1:93:a3: a8:5a:3e:e9:8f:9a:4e:85:59:d8:cb:20:ac:34:77:4c:90:b6: 84:e6:47:17 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUV+eYK/EQle8oLTX36LPPzjlL8xUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTEyMDUyMDQ5MzhaFw0yNjEyMDQyMDU0MzhaMDMxMTAvBgNV BAMTKDg5NEE3MEVFRjMzMTE2Q0QyRjYzQUI0RTJBQzlGOTFDMDU5QjdBRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiV82qqPYK7e/yskMvZ+r2CnAJ wgNvzNrOxjBjAOkVVe1ze30lkEObHdyCPqS2eVG1RXL/O2flaOVWAqeXM5MCRzt1 2CaPvvSCJsX+OB/MGxBAIGXmTPX1qDWy5kBhEZ7s/w3gn8WRy1zVl35ALYh08BTT U0r2v+GKNPNCAbWs43SSwtXSxhHfW9K0PRnN+X7KSNSEnJyTcsit5KNvRBoB3sBO NqKiFPAqzulyOrelgaoKhW7KM/aznGCHV518GAHjW6ZxtlB2jvzMLhjqzpsVecMf 8K2cvablPCPq414uEe5iZ0pi+3+GYxekNkRupqhwUelyas0W0XcbF3zEJg6bAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUiUpw7vMxFs0vY6tOKsn5HAWbev4wHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjEyMzUzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1 gP/2MA0GCSqGSIb3DQEBCwUAA4IBAQBtdjGZZrK9HaFv2vDuS3ncpYGxim0zMiQK glLiKkxP9m4Al8xHK+t/DZyanhnOrKeVZxawE/BU7IN1Ltihf13SpJZaFThbn6Q2 2UZBHUkFVqY8yee1etmdtLHzOoZw9sG3JmCM2QYkmhcTBY2MHWl6/3vidKfgeStq GuO4tqBkBs1KvWjj8etHJUlydYPsvDuJYsxCJxUsEFMP7lZBYDO44L5UZ0i8iUKH ur7vMlN/lbP3Nq+N3kDnuPGAsVPKNqtcCMpUfFU4V/Mybq6jFRnMYbq51o8MxN11 v7D/SbaJZXQcefPzGOnBk6OoWj7pj5pOhVnYyyCsNHdMkLaE5kcX -----END CERTIFICATE-----Generated at Sat Dec 6 20:52:08 2025 by rpki-client