This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212577.roa File: AS212577.roa (raw, json) Hash identifier: nu9fSAWQXGVXZSeKsS9R3DtvfV1aRwrVsF00SaEpc3I= Subject key identifier: 07:B8:C4:76:8A:88:37:12:93:3C:66:88:C2:AD:2B:09:DF:BE:DE:6C Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 0150CDE964CA1A4D4315C527F73B36D96E585EB6 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212577.roa Signing time: Sat 15 Nov 2025 23:03:26 +0000 ROA not before: Sat 15 Nov 2025 22:58:26 +0000 ROA not after: Sat 14 Nov 2026 23:03:26 +0000 asID: 212577 IP address blocks: 2a14:7581:f60::/44 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:50:cd:e9:64:ca:1a:4d:43:15:c5:27:f7:3b:36:d9:6e:58:5e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Nov 15 22:58:26 2025 GMT Not After : Nov 14 23:03:26 2026 GMT Subject: CN=07B8C4768A883712933C6688C2AD2B09DFBEDE6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a7:15:49:96:3d:e6:c0:d8:90:83:4d:8a:fc: e2:43:22:45:f9:cc:a2:64:ee:85:5c:fa:01:91:6d: 94:51:6e:bd:d2:6e:2d:9f:6a:a9:4e:f9:cc:90:78: 5a:8b:0b:e3:fa:57:30:d4:34:a1:21:95:b3:17:64: 4f:04:07:1b:90:92:64:21:de:04:23:c5:e0:04:ee: 1d:8c:7e:28:30:79:20:e6:e8:a8:36:2d:c7:20:4f: 86:60:3e:3c:3f:6a:de:5f:cb:e3:96:3a:0e:26:b5: 57:0d:f5:87:84:cd:02:44:68:e9:5b:53:46:7e:b1: ec:a3:66:0e:15:d7:33:28:a8:1e:ae:7b:fe:57:51: 04:90:3c:53:6f:60:8f:f8:aa:91:e1:45:93:3b:f1: e2:c2:98:80:07:17:9a:5a:4f:e6:a3:aa:a1:eb:a0: 2b:95:b2:84:d8:22:e8:0e:cd:22:8f:49:cf:04:55: 88:c5:df:4f:2b:4a:b6:22:c8:a7:37:ad:5d:0f:d6: 49:25:6a:7a:08:b6:88:5c:a3:89:69:34:7c:a5:db: 8c:cf:28:34:93:b9:0a:18:8f:0a:0f:18:fd:8a:d0: 6f:43:3d:2d:fd:cb:7b:69:fe:98:cb:af:73:d9:89: 1b:0b:75:c6:b4:b9:62:9c:8b:15:d6:87:55:4c:9f: 5f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B8:C4:76:8A:88:37:12:93:3C:66:88:C2:AD:2B:09:DF:BE:DE:6C X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212577.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:f60::/44 Signature Algorithm: sha256WithRSAEncryption 06:ac:f0:6e:52:f2:c8:9e:d2:77:1e:41:23:73:96:51:b0:ff: 9b:57:68:69:05:4a:e1:31:da:8f:3b:43:1d:27:61:c1:b4:1e: ec:10:18:81:46:ab:c4:c2:c7:11:41:04:3d:ce:2a:ee:66:6d: aa:97:05:af:6a:33:93:72:ce:e2:4c:09:72:5e:f1:e7:de:e3: c7:48:ca:e9:e5:81:cf:63:06:35:c2:12:6d:43:c4:4c:47:c6: 53:9c:bc:5d:59:48:0f:90:c1:0b:37:f8:7f:f6:d6:20:83:7d: e2:2b:bc:eb:8a:00:12:ac:27:8d:3c:77:f9:28:dc:15:80:8e: 8a:f5:aa:a0:15:30:08:62:43:ce:f5:d8:e3:93:fe:ca:50:ba: b8:b0:aa:bd:9b:72:5a:16:53:27:7c:7b:ab:a2:9e:bf:a9:7c: 41:29:1d:3f:72:5f:f8:a5:c5:4a:9f:fc:56:32:cd:fc:66:86: e2:b2:cc:0e:f4:24:85:6a:00:ec:12:3c:fb:eb:54:9d:45:e8: b1:8c:13:92:47:31:fd:44:07:ec:82:7b:39:6c:9a:83:e9:8c: d9:27:30:62:9a:4e:c5:6c:6e:bb:02:0c:3a:a8:79:9f:65:03: 4a:bc:39:3f:5a:f9:dd:5a:9e:e5:c8:9d:82:b5:a3:69:ee:d1: d6:6c:89:3b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUAVDN6WTKGk1DFcUn9zs22W5YXrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNTExMTUyMjU4MjZaFw0yNjExMTQyMzAzMjZaMDMxMTAvBgNV BAMTKDA3QjhDNDc2OEE4ODM3MTI5MzNDNjY4OEMyQUQyQjA5REZCRURFNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqpxVJlj3mwNiQg02K/OJDIkX5 zKJk7oVc+gGRbZRRbr3Sbi2faqlO+cyQeFqLC+P6VzDUNKEhlbMXZE8EBxuQkmQh 3gQjxeAE7h2MfigweSDm6Kg2LccgT4ZgPjw/at5fy+OWOg4mtVcN9YeEzQJEaOlb U0Z+seyjZg4V1zMoqB6ue/5XUQSQPFNvYI/4qpHhRZM78eLCmIAHF5paT+ajqqHr oCuVsoTYIugOzSKPSc8EVYjF308rSrYiyKc3rV0P1kklanoItohco4lpNHyl24zP KDSTuQoYjwoPGP2K0G9DPS39y3tp/pjLr3PZiRsLdca0uWKcixXWh1VMn18xAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUB7jEdoqINxKTPGaIwq0rCd++3mwwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjEyNTc3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1 gQ9gMA0GCSqGSIb3DQEBCwUAA4IBAQAGrPBuUvLIntJ3HkEjc5ZRsP+bV2hpBUrh MdqPO0MdJ2HBtB7sEBiBRqvEwscRQQQ9ziruZm2qlwWvajOTcs7iTAlyXvHn3uPH SMrp5YHPYwY1whJtQ8RMR8ZTnLxdWUgPkMELN/h/9tYgg33iK7zrigASrCeNPHf5 KNwVgI6K9aqgFTAIYkPO9djjk/7KULq4sKq9m3JaFlMnfHurop6/qXxBKR0/cl/4 pcVKn/xWMs38ZobisswO9CSFagDsEjz761SdReixjBOSRzH9RAfsgns5bJqD6YzZ JzBimk7FbG67Agw6qHmfZQNKvDk/WvndWp7lyJ2CtaNp7tHWbIk7 -----END CERTIFICATE-----Generated at Sat Dec 6 11:45:42 2025 by rpki-client