This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212238.roa File: AS212238.roa (raw, json) Hash identifier: iB3bGEW3lE/kEYukxFTnqc+CUo8F8mn7VuecYRArlx8= Subject key identifier: AF:7F:1A:A9:9A:F3:87:39:CF:59:54:8B:A4:7C:E9:FC:AE:E4:21:07 Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 7BCA2717C052CDA8A4E70062F5BFA4B2159389A7 Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212238.roa Signing time: Fri 05 Dec 2025 12:15:10 +0000 ROA not before: Fri 05 Dec 2025 12:10:10 +0000 ROA not after: Fri 04 Dec 2026 12:15:10 +0000 asID: 212238 IP address blocks: 193.187.108.0/24 maxlen: 24 193.187.109.0/24 maxlen: 24 193.187.132.0/24 maxlen: 24 212.115.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ca:27:17:c0:52:cd:a8:a4:e7:00:62:f5:bf:a4:b2:15:93:89:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Dec 5 12:10:10 2025 GMT Not After : Dec 4 12:15:10 2026 GMT Subject: CN=AF7F1AA99AF38739CF59548BA47CE9FCAEE42107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:10:64:ea:71:0e:bc:33:de:6c:bb:e3:2e:fe: e5:a7:58:05:66:9a:0f:04:72:a5:c5:74:28:5f:b6: 47:ba:bd:12:80:ba:68:45:11:3c:bf:16:92:96:0d: db:11:88:51:ab:0e:67:54:c8:90:6d:03:b8:df:30: a5:7c:d8:33:c9:10:fd:45:31:4c:93:7c:cd:5b:c6: c8:c5:f7:be:7f:c3:83:f7:1b:57:e7:91:9b:13:ac: 50:ed:75:b8:cc:28:1f:8a:e0:2c:da:13:d9:c7:8b: 64:c9:21:02:c3:7b:44:e6:11:6b:97:c6:6a:bf:fb: 8b:d7:6c:d7:b9:60:74:fc:6d:73:97:10:ca:c2:d7: 51:8d:b3:45:50:22:4e:26:32:27:b2:90:1a:66:7b: d5:f7:63:6d:98:ef:24:81:6f:78:e3:cc:f6:f1:8d: fa:6f:7c:a0:d9:cc:46:e7:aa:cc:89:2f:94:05:ca: 6b:07:e0:c6:22:d8:25:19:e1:d5:e5:f8:6c:28:21: 37:7b:a7:c7:31:f3:2e:8b:09:3e:0f:a0:58:d4:c1: 28:ef:5d:09:7e:77:81:3c:f5:d9:73:45:b0:d5:ca: 25:8c:14:28:76:09:8a:20:28:c7:97:62:0f:6b:30: 0a:4d:29:22:35:a2:15:d1:7e:49:9a:a3:90:2b:96: 82:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7F:1A:A9:9A:F3:87:39:CF:59:54:8B:A4:7C:E9:FC:AE:E4:21:07 X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.187.108.0/23 193.187.132.0/24 212.115.103.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:60:af:5b:c1:3d:b7:a5:9b:36:22:62:cc:2f:46:81:bd:ef: 29:cc:dd:0e:e5:33:8b:fe:cd:f6:b8:b6:63:ec:33:5c:92:28: d5:0c:25:0c:9a:f3:8e:fb:00:d7:c3:85:47:97:14:95:3d:7a: d9:f6:b7:af:8a:9d:2a:43:db:f2:4b:dd:9c:87:b3:51:1c:7c: b5:e7:b9:db:73:3b:70:f1:18:3c:d7:89:9b:97:cc:3f:77:fa: 9d:10:0c:42:0c:55:ca:29:dd:8f:69:e7:28:de:83:80:09:10: 69:35:52:46:06:b3:7a:00:a0:7b:aa:74:56:f1:ea:48:a4:be: dc:82:b2:5c:7a:36:96:41:f7:3f:89:bc:52:ab:5a:bc:00:42: bf:6a:0c:0d:1c:93:1d:44:ee:92:8e:47:03:9d:23:15:14:5d: 11:d0:34:5f:8a:f2:27:e6:38:e5:61:fa:ce:c5:38:01:69:ae: 89:63:4c:ef:1e:6c:cc:b5:bc:42:38:ae:4b:15:10:6e:e6:06: f8:61:8a:10:7a:19:8e:e4:fa:62:ab:88:f5:1a:dc:a3:93:bb: 21:c7:1a:84:19:9f:09:07:88:43:90:a2:be:ff:4e:82:fe:0f: 39:88:fa:0c:3e:d3:35:4c:e5:65:b3:e8:0a:7e:a2:a1:c1:14: 87:b6:fd:2c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUe8onF8BSzaik5wBi9b+kshWTiacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNTEyMDUxMjEwMTBaFw0yNjEyMDQxMjE1MTBaMDMxMTAvBgNV BAMTKEFGN0YxQUE5OUFGMzg3MzlDRjU5NTQ4QkE0N0NFOUZDQUVFNDIxMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiEGTqcQ68M95su+Mu/uWnWAVm mg8EcqXFdChftke6vRKAumhFETy/FpKWDdsRiFGrDmdUyJBtA7jfMKV82DPJEP1F MUyTfM1bxsjF975/w4P3G1fnkZsTrFDtdbjMKB+K4CzaE9nHi2TJIQLDe0TmEWuX xmq/+4vXbNe5YHT8bXOXEMrC11GNs0VQIk4mMieykBpme9X3Y22Y7ySBb3jjzPbx jfpvfKDZzEbnqsyJL5QFymsH4MYi2CUZ4dXl+GwoITd7p8cx8y6LCT4PoFjUwSjv XQl+d4E89dlzRbDVyiWMFCh2CYogKMeXYg9rMApNKSI1ohXRfkmao5ArloIvAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUr38aqZrzhznPWVSLpHzp/K7kIQcwHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjEyMjM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwbts AwQAwbuEAwQA1HNnMA0GCSqGSIb3DQEBCwUAA4IBAQBOYK9bwT23pZs2ImLML0aB ve8pzN0O5TOL/s32uLZj7DNckijVDCUMmvOO+wDXw4VHlxSVPXrZ9revip0qQ9vy S92ch7NRHHy157nbcztw8Rg814mbl8w/d/qdEAxCDFXKKd2Paeco3oOACRBpNVJG BrN6AKB7qnRW8epIpL7cgrJcejaWQfc/ibxSq1q8AEK/agwNHJMdRO6SjkcDnSMV FF0R0DRfivIn5jjlYfrOxTgBaa6JY0zvHmzMtbxCOK5LFRBu5gb4YYoQehmO5Ppi q4j1Gtyjk7shxxqEGZ8JB4hDkKK+/06C/g85iPoMPtM1TOVls+gKfqKhwRSHtv0s -----END CERTIFICATE-----Generated at Sat Dec 6 15:18:03 2025 by rpki-client