This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212400.roa
File: AS212400.roa (raw, json)
Hash identifier: WC7nsJ5uTQb/OphJ6snHNDRGI1wOQE0A5TLYiurgmMA=
Subject key identifier: AE:61:B6:EF:AE:1C:B3:C4:B7:FF:AF:44:C8:43:47:F0:71:FE:A5:A0
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 44EC986BAA050B85597CAE016DBB5E6907A95B86
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212400.roa
Signing time: Thu 12 Feb 2026 23:57:00 +0000
ROA not before: Thu 12 Feb 2026 23:52:00 +0000
ROA not after: Thu 11 Feb 2027 23:57:00 +0000
asID: 212400
IP address blocks: 148.135.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 13:56:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ec:98:6b:aa:05:0b:85:59:7c:ae:01:6d:bb:5e:69:07:a9:5b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Feb 12 23:52:00 2026 GMT
Not After : Feb 11 23:57:00 2027 GMT
Subject: CN=AE61B6EFAE1CB3C4B7FFAF44C84347F071FEA5A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:11:b0:de:71:0f:34:0d:3f:5a:07:b9:95:
6b:58:fb:8b:54:b4:49:ef:9d:8b:5a:05:d4:6f:82:
25:6c:a1:76:b7:39:2e:fe:f7:55:7a:63:10:11:2a:
04:12:19:a7:3b:42:27:4e:d8:87:e4:45:0d:52:8b:
4a:94:db:f5:cd:64:3d:cd:ed:77:c6:d8:1c:8a:1c:
77:ba:a1:19:c4:e2:6b:89:ff:c8:a5:08:7a:dd:9a:
42:f4:70:13:87:ef:2c:41:bf:9f:2f:3c:87:de:95:
f6:d2:ca:88:83:ac:c4:36:47:91:75:e8:21:3c:8a:
e4:5f:73:1b:28:79:e5:a3:74:26:0f:66:8b:d7:e6:
8e:be:3b:b3:e7:2a:85:eb:ab:c4:02:a3:8b:7c:fe:
56:a4:d2:62:b5:68:d5:5d:b3:6f:04:1c:a3:f5:89:
59:72:09:49:61:a9:9b:59:24:3e:30:33:86:bd:8c:
e2:66:c1:7e:7f:2c:41:1b:3c:d6:97:b4:30:36:c3:
38:7d:64:56:d9:f4:70:ce:96:2f:43:9f:61:e8:5a:
45:ae:ac:5b:c6:49:ea:3b:93:ff:7a:11:3d:c0:45:
71:5f:99:a2:5b:ac:91:df:7e:f5:7a:8b:50:68:10:
c9:17:8b:75:29:db:a0:27:92:62:2a:ae:de:52:01:
5e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:61:B6:EF:AE:1C:B3:C4:B7:FF:AF:44:C8:43:47:F0:71:FE:A5:A0
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212400.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.194.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:cb:15:54:7d:a8:01:c1:eb:25:e3:20:07:35:e6:20:e5:3c:
47:ae:c5:52:bd:13:49:be:dc:7c:fd:7a:fe:ad:01:c9:36:af:
fb:cc:b5:e3:de:71:d3:fb:4f:bc:7a:1e:74:36:ab:8b:f1:95:
ae:be:0c:34:4a:1a:76:b8:d8:94:05:da:84:c2:fb:32:73:e6:
1e:3a:a8:51:40:7d:c9:98:cd:d7:06:c6:85:37:fa:b2:a4:17:
25:4e:5f:bc:71:44:ed:71:d4:76:85:4e:22:13:cd:9d:38:e0:
99:fd:cc:d0:fc:af:10:ad:7b:a5:64:3c:0b:0c:58:c9:85:32:
eb:a0:90:1e:c9:dc:dc:9d:aa:aa:1e:e0:e9:87:ce:74:17:5f:
5c:4d:cf:9b:45:2f:f3:02:95:78:fb:16:cd:44:a5:9e:dd:bb:
10:de:61:d2:49:15:a9:36:28:d2:a6:0b:12:3d:86:bb:4f:c8:
7a:95:07:db:24:2f:37:d3:5f:46:be:10:1b:cf:9c:06:2c:e8:
c9:b4:26:cd:5b:4a:6e:1f:7d:d7:a0:6f:97:c5:c6:87:47:a1:
f5:3e:d3:02:b1:aa:40:c6:94:40:76:30:51:32:f2:1f:98:e6:
64:bd:cb:8b:e3:ab:d5:e6:98:93:39:ec:b4:c3:98:77:5b:fc:
86:e7:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 22:25:28 2026 by rpki-client