This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS212238.roa File: AS212238.roa (raw, json) Hash identifier: nXB+3lPJ3X1dLIuYVdEEwkGNoDlU2CUh18Je9wX/9/0= Subject key identifier: 00:75:2E:9A:E5:FF:2B:36:C4:5B:E4:B7:06:0B:A2:92:CE:C1:6D:BC Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 14DE69954A45330E1A5082B240FE92C54EC7AA72 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS212238.roa Signing time: Wed 04 Feb 2026 12:57:52 +0000 ROA not before: Wed 04 Feb 2026 12:52:52 +0000 ROA not after: Wed 03 Feb 2027 12:57:52 +0000 asID: 212238 IP address blocks: 193.187.108.0/24 maxlen: 24 193.187.109.0/24 maxlen: 24 193.187.132.0/24 maxlen: 24 212.115.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:de:69:95:4a:45:33:0e:1a:50:82:b2:40:fe:92:c5:4e:c7:aa:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:52 2026 GMT Not After : Feb 3 12:57:52 2027 GMT Subject: CN=00752E9AE5FF2B36C45BE4B7060BA292CEC16DBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bd:2f:ee:75:1e:32:57:dc:7e:ab:13:32:1a: f5:ec:38:be:4e:00:4e:09:5b:b3:b7:8c:77:a5:33: 88:8a:c0:39:a8:d0:fd:05:b2:63:4a:9f:13:7c:dc: 83:d4:97:f2:db:8b:a1:26:cf:39:dc:f2:66:23:14: 73:26:60:07:25:df:30:60:40:04:ef:72:ff:81:95: b0:69:e2:43:2c:d9:c3:90:2f:b4:97:37:fe:d9:89: b9:21:61:de:08:77:fd:e2:66:63:2d:d3:9b:47:9b: 06:7d:30:13:ad:79:43:db:4d:27:d3:b8:9b:24:54: 91:42:81:44:47:51:1c:02:29:1f:14:78:ec:bc:6a: cb:dc:fa:ec:53:87:d6:3a:85:c8:75:b2:45:c8:86: b2:a6:44:54:ee:0b:dc:46:96:75:50:b2:ac:99:53: 42:47:cd:77:50:f5:bd:a1:28:f6:49:dd:81:56:2a: 7c:09:86:7e:63:1c:d2:ad:2a:43:31:f3:9e:68:2a: ac:1c:db:ed:b3:fc:47:cb:7f:e2:d8:dc:fa:0e:8f: f9:a1:75:5f:7c:f4:68:0c:ef:1a:d6:31:01:2e:5a: 9f:32:48:5e:e0:e3:ca:83:90:d1:6f:3f:b8:29:ac: 9f:e2:49:e7:0f:e3:42:05:f7:e9:98:12:ed:0c:3f: 1c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:75:2E:9A:E5:FF:2B:36:C4:5B:E4:B7:06:0B:A2:92:CE:C1:6D:BC X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS212238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.187.108.0/23 193.187.132.0/24 212.115.103.0/24 Signature Algorithm: sha256WithRSAEncryption 81:3f:ce:90:fd:80:94:67:ce:a7:3b:ea:c2:53:5c:91:0d:36: a6:16:bd:e3:3f:d7:4b:9b:19:4f:03:f9:c1:c7:b6:6f:dc:09: 21:a8:7e:44:24:d0:12:05:fe:33:b8:34:80:0f:57:c8:2c:c7: 6b:53:c8:0d:49:14:0f:3a:b5:a5:f2:b7:27:c2:6e:1f:d8:ba: c1:73:9f:d5:68:e4:d3:45:58:13:58:b9:87:51:66:d1:cb:4f: 23:c9:88:14:0d:26:ca:bf:5a:37:6a:f8:d3:98:4a:b5:5b:ae: ad:7a:64:57:83:a9:75:38:96:2a:87:a8:39:8a:cb:df:58:a0: c7:7b:a9:6b:48:e4:85:3b:99:ae:10:1d:0c:0c:01:0a:dd:12: 8b:95:75:b3:7a:e1:9b:b5:9e:57:93:55:c5:0a:86:0e:96:39: 93:06:dc:3b:e6:44:6c:b9:ba:08:ec:87:c1:3d:43:ef:df:e7: dd:37:ef:dc:dd:95:e6:9a:ff:22:25:b2:f3:3c:7d:bd:bd:65: 73:11:80:ab:36:57:64:42:6d:03:17:41:c2:2e:a1:5a:70:f5: 80:93:5a:d0:b4:34:44:a0:af:20:f7:b7:23:a5:84:62:94:1a: 12:2e:0e:39:02:39:00:98:0c:b4:38:22:11:bf:fb:5b:11:bf: bc:cf:e3:23 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUFN5plUpFMw4aUIKyQP6SxU7HqnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNTJaFw0yNzAyMDMxMjU3NTJaMDMxMTAvBgNV BAMTKDAwNzUyRTlBRTVGRjJCMzZDNDVCRTRCNzA2MEJBMjkyQ0VDMTZEQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrvS/udR4yV9x+qxMyGvXsOL5O AE4JW7O3jHelM4iKwDmo0P0FsmNKnxN83IPUl/Lbi6Emzznc8mYjFHMmYAcl3zBg QATvcv+BlbBp4kMs2cOQL7SXN/7ZibkhYd4Id/3iZmMt05tHmwZ9MBOteUPbTSfT uJskVJFCgURHURwCKR8UeOy8asvc+uxTh9Y6hch1skXIhrKmRFTuC9xGlnVQsqyZ U0JHzXdQ9b2hKPZJ3YFWKnwJhn5jHNKtKkMx855oKqwc2+2z/EfLf+LY3PoOj/mh dV989GgM7xrWMQEuWp8ySF7g48qDkNFvP7gprJ/iSecP40IF9+mYEu0MPxzTAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUAHUumuX/KzbEW+S3Bguiks7BbbwwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjEyMjM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwbts AwQAwbuEAwQA1HNnMA0GCSqGSIb3DQEBCwUAA4IBAQCBP86Q/YCUZ86nO+rCU1yR DTamFr3jP9dLmxlPA/nBx7Zv3AkhqH5EJNASBf4zuDSAD1fILMdrU8gNSRQPOrWl 8rcnwm4f2LrBc5/VaOTTRVgTWLmHUWbRy08jyYgUDSbKv1o3avjTmEq1W66temRX g6l1OJYqh6g5isvfWKDHe6lrSOSFO5muEB0MDAEK3RKLlXWzeuGbtZ5Xk1XFCoYO ljmTBtw75kRsuboI7IfBPUPv3+fdN+/c3ZXmmv8iJbLzPH29vWVzEYCrNldkQm0D F0HCLqFacPWAk1rQtDREoK8g97cjpYRilBoSLg45AjkAmAy0OCIRv/tbEb+8z+Mj -----END CERTIFICATE-----Generated at Thu Feb 5 13:59:05 2026 by rpki-client