This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS212238.roa File: AS212238.roa (raw, json) Hash identifier: 0IyslS3CG8KwMKdb6hG7WmS6/jX6BN24to036ny5Oec= Subject key identifier: AC:8F:60:C7:B7:DA:78:01:24:4A:20:F8:07:86:89:ED:2F:E1:9F:06 Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 72C8181D1E2F9DBCB6C1D192ECAEA9827C717BF2 Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS212238.roa Signing time: Wed 12 Nov 2025 23:29:29 +0000 ROA not before: Wed 12 Nov 2025 23:24:29 +0000 ROA not after: Wed 11 Nov 2026 23:29:29 +0000 asID: 212238 IP address blocks: 46.236.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 01:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c8:18:1d:1e:2f:9d:bc:b6:c1:d1:92:ec:ae:a9:82:7c:71:7b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Nov 12 23:24:29 2025 GMT Not After : Nov 11 23:29:29 2026 GMT Subject: CN=AC8F60C7B7DA7801244A20F8078689ED2FE19F06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bb:82:45:00:a8:0a:79:ec:42:cc:54:5f:ea: a7:01:b0:13:60:dc:fd:60:87:ea:fe:a0:ba:4e:6f: 49:80:fe:18:12:87:8a:0a:6e:64:eb:58:e5:27:dc: 71:ce:8b:20:7f:a4:64:2f:0c:50:6e:6d:b8:88:37: bd:d6:42:4e:0b:c1:9d:56:9b:cd:b9:85:ff:e8:c9: e7:e9:2d:17:93:d1:c4:38:10:62:8f:8d:9c:2f:d3: 5b:b3:58:f1:db:cc:cd:c2:54:04:f4:37:3d:e9:fe: 4f:e4:ad:e0:71:89:24:46:52:14:de:d9:f8:2d:fa: ec:08:3d:2e:5c:1a:d6:7e:3c:37:9e:ed:bf:27:eb: 7d:70:d6:5f:04:08:9d:d3:1c:bc:88:45:ac:77:3a: cf:93:58:dc:f5:e2:36:75:31:ef:d2:a1:f2:6d:0e: f3:d4:d4:18:b3:54:b9:b7:3b:a7:19:5d:b3:fa:67: 63:ea:b4:26:ab:7c:7e:ac:2e:2e:84:cf:af:d2:96: 63:bc:53:25:62:50:f0:0c:32:09:89:a9:2d:bd:2b: 3f:b3:c3:3c:01:46:61:84:8b:26:18:e5:58:62:70: 69:86:39:28:21:5a:00:46:f8:57:3d:b0:4c:64:79: df:81:ab:29:9b:16:a6:63:c6:7d:c6:55:9f:aa:4b: 81:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8F:60:C7:B7:DA:78:01:24:4A:20:F8:07:86:89:ED:2F:E1:9F:06 X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS212238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.236.222.0/24 Signature Algorithm: sha256WithRSAEncryption 45:51:2c:20:85:c0:f4:77:34:6a:8d:4e:a0:5b:76:c6:7b:57: de:e4:b8:db:e0:9d:82:f3:da:61:1e:fe:34:47:ec:0a:ce:9a: ef:ce:6f:3c:55:40:9f:30:0f:ef:b1:75:14:85:26:87:7a:17: 95:e6:b3:5e:44:eb:15:33:fb:7c:ed:0b:f3:c2:ad:19:09:0f: a5:bc:55:fe:29:28:5f:f2:73:cc:e5:ea:ed:12:63:5e:b4:ca: 15:0b:0b:54:43:27:0f:90:f8:ba:0b:7b:f8:ca:66:1a:38:59: dd:9d:4b:d6:01:49:bc:74:1c:88:13:31:80:96:71:1b:aa:e9: 59:9c:98:2d:9f:34:ef:2a:58:0a:2c:81:e9:1c:4b:f7:b7:2a: df:c5:09:53:f7:83:66:1f:4f:8a:55:97:0a:3c:8a:b9:0a:7c: 4d:65:1e:05:55:86:34:0c:0e:49:a7:94:98:1b:bd:13:a7:a9: 95:58:49:5b:7c:d1:69:fe:65:13:e6:0d:4b:34:01:f1:1b:7b: c7:e7:4a:10:2c:38:66:6c:f9:d1:87:e2:61:5e:fe:4d:86:15: 5c:aa:a6:3f:8e:c4:81:c2:1b:6f:53:0d:fc:c9:d6:f4:36:7f: de:d2:db:a7:d1:ac:30:7c:3f:20:8a:0d:87:9a:02:49:2a:29: 8e:9f:df:20 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUcsgYHR4vnby2wdGS7K6pgnxxe/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNTExMTIyMzI0MjlaFw0yNjExMTEyMzI5MjlaMDMxMTAvBgNV BAMTKEFDOEY2MEM3QjdEQTc4MDEyNDRBMjBGODA3ODY4OUVEMkZFMTlGMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8u4JFAKgKeexCzFRf6qcBsBNg 3P1gh+r+oLpOb0mA/hgSh4oKbmTrWOUn3HHOiyB/pGQvDFBubbiIN73WQk4LwZ1W m825hf/oyefpLReT0cQ4EGKPjZwv01uzWPHbzM3CVAT0Nz3p/k/kreBxiSRGUhTe 2fgt+uwIPS5cGtZ+PDee7b8n631w1l8ECJ3THLyIRax3Os+TWNz14jZ1Me/SofJt DvPU1BizVLm3O6cZXbP6Z2PqtCarfH6sLi6Ez6/SlmO8UyViUPAMMgmJqS29Kz+z wzwBRmGEiyYY5VhicGmGOSghWgBG+Fc9sExked+BqymbFqZjxn3GVZ+qS4F3AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUrI9gx7faeAEkSiD4B4aJ7S/hnwYwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMjEyMjM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuze MA0GCSqGSIb3DQEBCwUAA4IBAQBFUSwghcD0dzRqjU6gW3bGe1fe5Ljb4J2C89ph Hv40R+wKzprvzm88VUCfMA/vsXUUhSaHeheV5rNeROsVM/t87Qvzwq0ZCQ+lvFX+ KShf8nPM5ertEmNetMoVCwtUQycPkPi6C3v4ymYaOFndnUvWAUm8dByIEzGAlnEb qulZnJgtnzTvKlgKLIHpHEv3tyrfxQlT94NmH0+KVZcKPIq5CnxNZR4FVYY0DA5J p5SYG70Tp6mVWElbfNFp/mUT5g1LNAHxG3vH50oQLDhmbPnRh+JhXv5NhhVcqqY/ jsSBwhtvUw38ydb0Nn/e0tun0awwfD8gig2HmgJJKimOn98g -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:00 2025 by rpki-client