This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS212219.roa File: AS212219.roa (raw, json) Hash identifier: EojdkHupApx838EoF71LOQi2h8u+0v/1FlG9nQ7FBjE= Subject key identifier: 9A:1D:C7:AD:B7:A6:F7:64:5F:27:05:BF:65:32:3E:3F:D1:F7:D3:5C Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 644F338BE3D31ADED394FA3AC9A6367893F13FC7 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS212219.roa Signing time: Wed 04 Feb 2026 12:57:51 +0000 ROA not before: Wed 04 Feb 2026 12:52:51 +0000 ROA not after: Wed 03 Feb 2027 12:57:51 +0000 asID: 212219 IP address blocks: 5.133.102.0/24 maxlen: 24 5.133.103.0/24 maxlen: 24 92.249.61.0/24 maxlen: 24 141.98.51.0/24 maxlen: 24 176.96.131.0/24 maxlen: 24 193.111.77.0/24 maxlen: 24 193.111.78.0/24 maxlen: 24 217.18.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:4f:33:8b:e3:d3:1a:de:d3:94:fa:3a:c9:a6:36:78:93:f1:3f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:51 2026 GMT Not After : Feb 3 12:57:51 2027 GMT Subject: CN=9A1DC7ADB7A6F7645F2705BF65323E3FD1F7D35C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:81:6c:1d:9b:c1:5c:ef:bb:3f:7f:aa:07: 57:a6:d2:f2:16:43:92:6a:e9:d8:cf:39:42:54:a5: 5e:cf:b4:17:43:b4:88:8f:1b:0d:93:94:d3:37:78: 2a:eb:84:64:b1:fa:2b:92:8a:53:2d:4c:0e:13:af: 73:4b:2d:41:a4:c5:6e:59:5c:e2:2b:f9:9b:cd:87: 56:5a:07:30:fc:ad:16:53:e9:cb:dd:63:94:76:d5: a0:2f:03:89:93:5a:49:f7:83:aa:55:ae:a0:c1:f3: 47:97:07:7e:c2:d1:95:db:3d:fc:2c:c1:5c:df:71: 7d:1b:94:0f:00:89:2c:0d:59:00:eb:da:cc:31:81: 99:bf:c6:ec:21:06:86:a7:0f:21:6a:f0:54:8a:3a: 99:c4:a1:5b:70:fd:0a:2f:86:16:cf:85:7a:7d:af: 26:45:45:89:1d:67:5c:01:d7:8b:3f:21:f3:f7:fe: cc:24:7e:e3:11:38:0c:19:25:42:bd:5d:f8:03:b2: a0:e7:99:b2:5a:9a:0e:45:64:db:47:48:3d:58:e4: 21:cf:42:4d:28:7f:bb:54:17:0e:60:ae:7a:e0:d6: c4:82:70:48:27:35:3b:b6:22:1b:58:8f:f2:2a:b4: be:5d:d1:e6:a2:01:1a:d8:f5:e3:a3:1d:4d:d5:a1: 5f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1D:C7:AD:B7:A6:F7:64:5F:27:05:BF:65:32:3E:3F:D1:F7:D3:5C X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS212219.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.102.0/23 92.249.61.0/24 141.98.51.0/24 176.96.131.0/24 193.111.77.0-193.111.78.255 217.18.210.0/24 Signature Algorithm: sha256WithRSAEncryption 14:ac:9d:0a:57:d5:5c:4a:4d:bc:64:3e:f3:e0:cf:be:74:50: e8:8f:ee:67:0d:8f:1a:23:bb:83:0d:57:6e:f3:24:bb:63:29: b7:2b:97:dd:6a:ab:c4:d5:c3:65:76:6f:38:37:bb:a1:8c:43: 03:61:20:52:bd:e8:b1:95:6e:41:02:73:7a:25:da:78:94:40: 9b:ba:9e:38:fe:95:8e:d1:7f:d1:de:f3:67:d1:e8:15:d4:17: bf:22:db:d4:66:fb:53:6f:57:b7:61:5c:ec:09:fe:8c:cf:8e: 99:b3:de:7f:e2:e8:1f:3d:9e:eb:04:65:3a:96:6e:01:a5:30: 54:06:3b:d2:0a:79:45:86:1f:04:b4:02:ee:d3:0c:04:7c:d7: 2c:60:df:3b:2a:95:ae:1e:1b:50:a7:6d:52:99:86:9c:b1:15: 0c:5b:d7:46:18:3b:6a:8e:69:26:1b:19:25:83:d1:f7:c0:54: b4:a1:f1:c0:61:13:e9:df:5a:60:e4:29:a0:4f:b5:6f:1b:5c: 93:c2:d2:6f:af:0a:23:e7:0f:ac:89:ab:ad:63:f2:56:1e:b5: 0e:ca:ff:2e:bf:5a:a4:c7:ca:ef:62:7a:88:c4:5e:65:66:e0: 31:98:9d:66:90:2f:19:f1:a6:44:e5:66:89:ef:27:7b:2b:18: 39:2d:cf:a4 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUZE8zi+PTGt7TlPo6yaY2eJPxP8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNTFaFw0yNzAyMDMxMjU3NTFaMDMxMTAvBgNV BAMTKDlBMURDN0FEQjdBNkY3NjQ1RjI3MDVCRjY1MzIzRTNGRDFGN0QzNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6DoFsHZvBXO+7P3+qB1em0vIW Q5Jq6djPOUJUpV7PtBdDtIiPGw2TlNM3eCrrhGSx+iuSilMtTA4Tr3NLLUGkxW5Z XOIr+ZvNh1ZaBzD8rRZT6cvdY5R21aAvA4mTWkn3g6pVrqDB80eXB37C0ZXbPfws wVzfcX0blA8AiSwNWQDr2swxgZm/xuwhBoanDyFq8FSKOpnEoVtw/QovhhbPhXp9 ryZFRYkdZ1wB14s/IfP3/swkfuMROAwZJUK9XfgDsqDnmbJamg5FZNtHSD1Y5CHP Qk0of7tUFw5grnrg1sSCcEgnNTu2IhtYj/IqtL5d0eaiARrY9eOjHU3VoV+RAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUmh3Hrbem92RfJwW/ZTI+P9H301wwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjEyMjE5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBBYVm AwQAXPk9AwQAjWIzAwQAsGCDMAwDBADBb00DBADBb04DBADZEtIwDQYJKoZIhvcN AQELBQADggEBABSsnQpX1VxKTbxkPvPgz750UOiP7mcNjxoju4MNV27zJLtjKbcr l91qq8TVw2V2bzg3u6GMQwNhIFK96LGVbkECc3ol2niUQJu6njj+lY7Rf9He82fR 6BXUF78i29Rm+1NvV7dhXOwJ/ozPjpmz3n/i6B89nusEZTqWbgGlMFQGO9IKeUWG HwS0Au7TDAR81yxg3zsqla4eG1CnbVKZhpyxFQxb10YYO2qOaSYbGSWD0ffAVLSh 8cBhE+nfWmDkKaBPtW8bXJPC0m+vCiPnD6yJq61j8lYetQ7K/y6/WqTHyu9ieojE XmVm4DGYnWaQLxnxpkTlZonvJ3srGDktz6Q= -----END CERTIFICATE-----Generated at Thu Feb 5 13:53:51 2026 by rpki-client