This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa File: AS212238.roa (raw, json) Hash identifier: zJp2aEkjh99e2FXstAU4PxW2M+bt4aP8/r2SLNgzMjw= Subject key identifier: A6:75:65:00:FC:A8:DA:B6:A5:09:A8:86:25:82:BD:2A:3D:8F:D4:92 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 6370BCF14AF6A47102C25C6CA9837BED6F5D9344 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa Signing time: Tue 02 Dec 2025 00:02:04 +0000 ROA not before: Mon 01 Dec 2025 23:57:04 +0000 ROA not after: Tue 01 Dec 2026 00:02:04 +0000 asID: 212238 IP address blocks: 46.202.249.0/24 maxlen: 24 46.202.250.0/24 maxlen: 24 46.203.0.0/24 maxlen: 24 46.203.7.0/24 maxlen: 24 46.203.34.0/24 maxlen: 24 46.203.40.0/24 maxlen: 24 46.203.73.0/24 maxlen: 24 46.203.79.0/24 maxlen: 24 46.203.103.0/24 maxlen: 24 46.203.115.0/24 maxlen: 24 46.203.147.0/24 maxlen: 24 46.203.154.0/24 maxlen: 24 46.203.157.0/24 maxlen: 24 46.203.185.0/24 maxlen: 24 46.203.190.0/24 maxlen: 24 46.203.195.0/24 maxlen: 24 91.124.129.0/24 maxlen: 24 91.124.144.0/24 maxlen: 24 91.124.187.0/24 maxlen: 24 92.112.52.0/24 maxlen: 24 92.112.53.0/24 maxlen: 24 92.112.57.0/24 maxlen: 24 92.112.67.0/24 maxlen: 24 92.112.77.0/24 maxlen: 24 92.112.81.0/24 maxlen: 24 92.112.92.0/24 maxlen: 24 92.112.119.0/24 maxlen: 24 92.112.128.0/24 maxlen: 24 92.112.137.0/24 maxlen: 24 92.112.143.0/24 maxlen: 24 95.134.179.0/24 maxlen: 24 95.134.185.0/24 maxlen: 24 95.134.212.0/24 maxlen: 24 95.135.39.0/24 maxlen: 24 95.135.41.0/24 maxlen: 24 95.135.59.0/24 maxlen: 24 95.135.101.0/24 maxlen: 24 95.135.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:70:bc:f1:4a:f6:a4:71:02:c2:5c:6c:a9:83:7b:ed:6f:5d:93:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 1 23:57:04 2025 GMT Not After : Dec 1 00:02:04 2026 GMT Subject: CN=A6756500FCA8DAB6A509A8862582BD2A3D8FD492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:0b:21:cb:af:02:f1:fe:23:3e:05:bc:f9: 97:12:dd:f1:be:3a:d6:00:12:30:af:98:64:2c:f2: ae:c8:5f:4f:63:c5:3c:43:30:7f:32:0d:6a:20:17: bc:4b:ef:28:2f:db:9f:c3:06:2d:e0:65:cd:5b:a2: 37:fb:26:06:17:f4:11:5a:12:56:8d:50:26:77:98: ca:9f:17:1e:f7:0f:a9:d5:0e:78:ad:6b:c5:57:9c: 18:da:55:64:45:fe:65:41:a1:ee:79:c5:b8:8e:b1: 48:ba:6e:69:21:08:fc:4a:b5:36:d0:e9:f9:1d:1e: 0d:ff:cf:5e:a4:6c:9c:ea:66:0a:0b:1a:98:de:e0: 21:c5:da:bd:a4:0c:13:f4:ea:96:6f:00:60:2a:4b: 47:e3:70:d2:ff:66:aa:5a:15:4f:2d:24:14:d3:69: 43:54:d7:ad:a1:fa:bd:bf:27:8f:c1:f3:99:22:cf: ff:34:36:07:31:a9:11:8f:69:05:6a:0f:70:79:f3: 69:14:35:55:8f:45:f5:72:27:f7:a8:71:06:b5:a6: 2c:bb:b9:8e:c6:0b:22:3c:22:15:28:f3:dc:61:7c: bf:5f:4b:51:e5:bf:21:7c:d5:b9:91:23:30:4c:12: 20:c8:76:01:0b:de:5b:f8:60:db:64:73:9c:b5:91: 76:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:75:65:00:FC:A8:DA:B6:A5:09:A8:86:25:82:BD:2A:3D:8F:D4:92 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.202.249.0-46.202.250.255 46.203.0.0/24 46.203.7.0/24 46.203.34.0/24 46.203.40.0/24 46.203.73.0/24 46.203.79.0/24 46.203.103.0/24 46.203.115.0/24 46.203.147.0/24 46.203.154.0/24 46.203.157.0/24 46.203.185.0/24 46.203.190.0/24 46.203.195.0/24 91.124.129.0/24 91.124.144.0/24 91.124.187.0/24 92.112.52.0/23 92.112.57.0/24 92.112.67.0/24 92.112.77.0/24 92.112.81.0/24 92.112.92.0/24 92.112.119.0/24 92.112.128.0/24 92.112.137.0/24 92.112.143.0/24 95.134.179.0/24 95.134.185.0/24 95.134.212.0/24 95.135.39.0/24 95.135.41.0/24 95.135.59.0/24 95.135.101.0/24 95.135.105.0/24 Signature Algorithm: sha256WithRSAEncryption 42:bc:dd:e0:5d:83:2f:4b:c2:02:73:cd:cb:3f:86:82:22:38: 39:c8:0e:18:cb:67:f3:56:fb:cd:43:80:a3:61:3a:ef:df:b8: 8b:2c:27:7c:02:bb:bd:a2:e2:30:7f:63:37:a5:07:ed:df:9f: 96:ff:b4:8d:6e:f4:80:77:d1:68:88:53:92:6e:f1:39:f6:6b: 73:c4:f5:e6:c2:0e:3b:1b:9e:09:fc:61:98:cd:3f:26:0c:e1: 32:b7:18:b5:30:f1:7b:a6:7c:50:e1:df:cd:ae:2e:15:95:5e: 1a:f5:c4:56:20:86:6e:6b:a6:f8:40:70:45:3e:b1:74:b7:14: b4:54:e5:75:6a:05:96:5c:55:fc:00:aa:bd:bc:f6:61:55:28: 71:5b:b4:27:27:7b:a2:1e:03:73:6e:f6:71:46:a3:02:79:e9: f3:00:c5:d9:94:38:26:01:62:d5:b3:ee:d4:0b:88:c1:ce:fd: c9:8f:7c:54:b0:03:fb:bd:c0:fc:33:3b:ac:7d:3f:8a:bc:8a: 01:43:a4:51:e6:5b:6a:d4:08:2e:1f:ca:90:60:e8:12:07:fe: 2d:21:55:b2:51:0c:58:fe:1d:05:48:40:ed:72:bc:cd:5c:0d: cd:e9:65:da:01:4b:73:65:9e:51:a0:a8:cc:fb:3f:9d:a3:3e: 0a:f1:24:f0 -----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgIUY3C88Ur2pHECwlxsqYN77W9dk0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMDEyMzU3MDRaFw0yNjEyMDEwMDAyMDRaMDMxMTAvBgNV BAMTKEE2NzU2NTAwRkNBOERBQjZBNTA5QTg4NjI1ODJCRDJBM0Q4RkQ0OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwNgshy68C8f4jPgW8+ZcS3fG+ OtYAEjCvmGQs8q7IX09jxTxDMH8yDWogF7xL7ygv25/DBi3gZc1bojf7JgYX9BFa ElaNUCZ3mMqfFx73D6nVDnita8VXnBjaVWRF/mVBoe55xbiOsUi6bmkhCPxKtTbQ 6fkdHg3/z16kbJzqZgoLGpje4CHF2r2kDBP06pZvAGAqS0fjcNL/ZqpaFU8tJBTT aUNU162h+r2/J4/B85kiz/80NgcxqRGPaQVqD3B582kUNVWPRfVyJ/eocQa1piy7 uY7GCyI8IhUo89xhfL9fS1HlvyF81bmRIzBMEiDIdgEL3lv4YNtkc5y1kXbzAgMB AAGjggLpMIIC5TAdBgNVHQ4EFgQUpnVlAPyo2ralCaiGJYK9Kj2P1JIwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjEyMjM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMIH9BggrBgEFBQcBBwEB/wSB7TCB6jCB5wQCAAEwgeAw DAMEAC7K+QMEAC7K+gMEAC7LAAMEAC7LBwMEAC7LIgMEAC7LKAMEAC7LSQMEAC7L TwMEAC7LZwMEAC7LcwMEAC7LkwMEAC7LmgMEAC7LnQMEAC7LuQMEAC7LvgMEAC7L wwMEAFt8gQMEAFt8kAMEAFt8uwMEAVxwNAMEAFxwOQMEAFxwQwMEAFxwTQMEAFxw UQMEAFxwXAMEAFxwdwMEAFxwgAMEAFxwiQMEAFxwjwMEAF+GswMEAF+GuQMEAF+G 1AMEAF+HJwMEAF+HKQMEAF+HOwMEAF+HZQMEAF+HaTANBgkqhkiG9w0BAQsFAAOC AQEAQrzd4F2DL0vCAnPNyz+GgiI4OcgOGMtn81b7zUOAo2E679+4iywnfAK7vaLi MH9jN6UH7d+flv+0jW70gHfRaIhTkm7xOfZrc8T15sIOOxueCfxhmM0/JgzhMrcY tTDxe6Z8UOHfza4uFZVeGvXEViCGbmum+EBwRT6xdLcUtFTldWoFllxV/ACqvbz2 YVUocVu0Jyd7oh4Dc272cUajAnnp8wDF2ZQ4JgFi1bPu1AuIwc79yY98VLAD+73A /DM7rH0/iryKAUOkUeZbatQILh/KkGDoEgf+LSFVslEMWP4dBUhA7XK8zVwNzell 2gFLc2WeUaCozPs/naM+CvEk8A== -----END CERTIFICATE-----Generated at Sat Dec 6 17:49:13 2025 by rpki-client