This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212810.roa File: AS212810.roa (raw, json) Hash identifier: y7vOwDxD0eP7JcQxNOiCeg0WQucjtkpEYfv9S3RRmDY= Subject key identifier: 8D:A1:74:3C:56:4D:7A:3A:49:77:F9:03:65:C8:6F:BD:EB:E3:6D:BA Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Certificate serial: 753E33C685D74F229C62F89FBEB6570A2612A30F Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212810.roa Signing time: Mon 22 Dec 2025 14:11:05 +0000 ROA not before: Mon 22 Dec 2025 14:06:05 +0000 ROA not after: Mon 21 Dec 2026 14:11:05 +0000 asID: 212810 IP address blocks: 162.141.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:3e:33:c6:85:d7:4f:22:9c:62:f8:9f:be:b6:57:0a:26:12:a3:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc Validity Not Before: Dec 22 14:06:05 2025 GMT Not After : Dec 21 14:11:05 2026 GMT Subject: CN=8DA1743C564D7A3A4977F90365C86FBDEBE36DBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:93:2b:0e:fe:89:26:08:6e:22:06:73:00:47: b4:a2:7a:76:4c:bd:47:54:d6:b4:0a:35:a5:0e:c3: 4d:d1:ed:9c:6d:72:3f:6d:c3:33:00:d6:7e:3a:93: d3:fa:c9:cb:4c:e2:f7:ba:87:9e:b2:5b:17:6f:0a: 80:88:08:83:62:eb:ae:bc:35:22:c7:31:ac:39:1e: 12:1e:dd:6f:5e:81:a8:ac:61:ab:fb:86:27:81:38: f2:2d:2b:3d:40:cc:e3:5c:4e:e2:5f:1c:c5:54:04: 0a:5c:de:35:a9:9a:b2:8c:af:7d:ab:59:fd:ef:d0: b7:48:da:0a:38:cb:bb:3f:a9:fb:07:a6:84:74:fc: 03:ba:e4:a1:c9:90:95:50:35:dd:7f:df:83:4c:ca: 30:b7:78:ff:0b:2f:00:7c:a9:e6:55:85:a0:ee:8b: ee:7f:ac:d1:c6:d0:f5:13:af:af:92:cd:6b:77:b5: 2d:69:69:af:99:22:58:93:b5:c0:cb:6e:a5:e9:9c: 78:98:8c:8e:ae:f1:a0:9d:f3:cf:73:28:b2:b3:f9: 41:80:26:09:d8:3c:12:44:79:4a:a1:60:53:ee:db: ca:7f:47:30:ff:9f:25:aa:2c:c0:11:37:50:b2:33: 9e:c8:33:9d:b6:e0:e5:12:ae:db:f8:97:63:46:cf: 49:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A1:74:3C:56:4D:7A:3A:49:77:F9:03:65:C8:6F:BD:EB:E3:6D:BA X509v3 Authority Key Identifier: keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS212810.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.141.167.0/24 Signature Algorithm: sha256WithRSAEncryption 74:86:b1:c0:a6:f8:cf:ef:cc:1d:16:c9:12:23:e1:7c:2e:a1: 8e:32:ee:9d:ba:ce:b6:ac:25:a0:45:19:89:3a:55:95:0d:a3: ae:d8:59:59:03:e1:9d:a5:33:b0:16:5a:02:f1:ae:34:ed:ab: 24:67:96:b3:3e:dd:af:28:36:08:c6:13:13:65:09:c9:bf:d6: ed:6b:44:b0:59:3e:ac:6e:b6:f2:39:32:02:19:d2:9e:cd:fe: 7f:19:3a:64:f6:86:69:d1:da:93:52:b3:ba:9d:e3:78:9f:d1: 3b:7b:b7:39:e0:49:2a:14:64:c9:76:6e:85:ed:52:d5:f7:65: 46:b0:30:a3:98:34:c5:10:88:db:39:89:8a:6f:a8:88:11:b6: 36:83:fd:80:31:e9:6b:00:ba:5d:2b:dd:b4:96:c8:7e:1a:59: b7:66:fb:6c:17:a2:14:2c:77:de:0d:0c:e0:83:6f:6f:67:0a: 31:55:5d:42:0d:9c:31:aa:6b:72:c2:76:10:9d:96:f4:4b:fc: f9:01:20:57:6a:a5:9e:98:ee:1b:dc:d4:1a:a1:5f:f6:03:59: 14:35:7b:41:4e:51:2a:82:c8:de:14:f4:75:92:9f:ee:7c:dd: 15:68:ad:3b:fa:f1:58:3e:6a:2a:f4:28:57:51:45:56:e5:65: ef:79:2c:91 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUdT4zxoXXTyKcYvifvrZXCiYSow8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi MjQ2YmZjYzAeFw0yNTEyMjIxNDA2MDVaFw0yNjEyMjExNDExMDVaMDMxMTAvBgNV BAMTKDhEQTE3NDNDNTY0RDdBM0E0OTc3RjkwMzY1Qzg2RkJERUJFMzZEQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgkysO/okmCG4iBnMAR7SienZM vUdU1rQKNaUOw03R7Zxtcj9twzMA1n46k9P6yctM4ve6h56yWxdvCoCICINi6668 NSLHMaw5HhIe3W9egaisYav7hieBOPItKz1AzONcTuJfHMVUBApc3jWpmrKMr32r Wf3v0LdI2go4y7s/qfsHpoR0/AO65KHJkJVQNd1/34NMyjC3eP8LLwB8qeZVhaDu i+5/rNHG0PUTr6+SzWt3tS1paa+ZIliTtcDLbqXpnHiYjI6u8aCd889zKLKz+UGA JgnYPBJEeUqhYFPu28p/RzD/nyWqLMARN1CyM57IM5224OUSrtv4l2NGz0m5AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUjaF0PFZNejpJd/kDZchvvevjbbowHwYDVR0j BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjEyODEwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoo2n MA0GCSqGSIb3DQEBCwUAA4IBAQB0hrHApvjP78wdFskSI+F8LqGOMu6dus62rCWg RRmJOlWVDaOu2FlZA+GdpTOwFloC8a407askZ5azPt2vKDYIxhMTZQnJv9bta0Sw WT6sbrbyOTICGdKezf5/GTpk9oZp0dqTUrO6neN4n9E7e7c54EkqFGTJdm6F7VLV 92VGsDCjmDTFEIjbOYmKb6iIEbY2g/2AMelrALpdK920lsh+Glm3ZvtsF6IULHfe DQzgg29vZwoxVV1CDZwxqmtywnYQnZb0S/z5ASBXaqWemO4b3NQaoV/2A1kUNXtB TlEqgsjeFPR1kp/ufN0VaK07+vFYPmoq9ChXUUVW5WXveSyR -----END CERTIFICATE-----Generated at Mon Jan 19 08:13:43 2026 by rpki-client