This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS212249.roa File: AS212249.roa (raw, json) Hash identifier: bDMcz+2vrS2C9J4nuysEoNSHROI3Vbjz9AQ0xqx6jsU= Subject key identifier: 4C:E4:83:59:6A:26:C3:22:2C:B9:39:85:10:80:86:0A:13:51:BB:4C Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 13D5CD417E719EE45783BC2B9544BE7DC4FEEAF1 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS212249.roa Signing time: Wed 04 Feb 2026 12:57:49 +0000 ROA not before: Wed 04 Feb 2026 12:52:49 +0000 ROA not after: Wed 03 Feb 2027 12:57:49 +0000 asID: 212249 IP address blocks: 141.98.113.0/24 maxlen: 24 141.98.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:d5:cd:41:7e:71:9e:e4:57:83:bc:2b:95:44:be:7d:c4:fe:ea:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:49 2026 GMT Not After : Feb 3 12:57:49 2027 GMT Subject: CN=4CE483596A26C3222CB939851080860A1351BB4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:51:29:6a:a5:3c:a5:e0:14:6f:70:84:24:b7: e3:77:58:ea:d3:da:b3:20:fc:f7:d7:0c:30:00:8f: fe:10:aa:dc:13:83:e1:32:e7:5d:a0:24:7a:25:16: a5:67:a1:05:0f:20:58:ba:0f:15:65:b2:ec:04:57: 4c:27:3a:90:2e:97:3a:03:22:f1:81:38:77:3c:3b: e8:cc:3e:0d:8c:43:38:44:fd:58:57:a3:81:f8:d2: 92:1e:19:1f:38:ab:a8:c5:6e:cf:a8:3a:38:aa:5a: a9:79:bc:2b:d0:61:77:77:32:75:81:af:31:34:a0: 0b:b3:d8:dd:d0:10:19:c4:d1:34:8e:2b:e5:b8:3b: 7d:37:9d:5a:01:d5:8a:91:a3:db:12:23:53:5b:65: a2:c2:0e:fd:69:38:9e:d8:7d:4d:2b:5e:14:f1:e2: be:2e:fe:05:4d:95:58:14:c7:e7:93:e9:12:32:47: e0:b3:73:2f:15:72:2b:1b:49:74:78:57:77:6b:34: c8:1d:2b:eb:cf:5e:13:f6:f8:57:f2:4e:08:de:21: 37:69:aa:45:1b:27:f8:79:57:86:e5:0e:39:b4:f5: 08:3f:a2:c5:98:e2:f8:91:1a:a7:15:9a:0e:24:d1: 26:68:84:18:4e:e5:12:15:90:c2:85:b8:a5:ff:6b: 22:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E4:83:59:6A:26:C3:22:2C:B9:39:85:10:80:86:0A:13:51:BB:4C X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS212249.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.113.0-141.98.114.255 Signature Algorithm: sha256WithRSAEncryption d0:b1:a0:6d:df:f2:98:3d:18:22:55:9e:0f:cb:9d:c8:95:56: 9c:05:b3:2c:e8:da:94:b8:c7:01:71:3d:5b:d2:ed:84:d2:9a: dc:56:6d:22:9f:02:98:7b:29:e7:7d:0d:20:eb:61:3b:b1:66: 17:c3:dd:b5:79:48:3e:ef:bb:3b:9e:ed:d7:55:65:fa:44:f1: 94:ca:ad:bf:79:fa:e2:dc:f8:df:35:3e:ff:0d:87:f5:7a:b9: 77:ff:df:97:9c:a9:d4:c8:02:52:ad:0f:d9:3f:d9:81:a3:39: c9:39:a0:88:19:5f:ec:89:03:8f:dd:a9:63:69:99:04:6f:c4: 8e:8a:72:41:38:20:12:c7:6f:3e:34:c6:c7:fd:d8:28:90:b2: e5:dc:37:64:90:52:9e:9d:87:76:88:ef:ee:7d:6b:d0:21:65: 29:12:58:27:57:cb:3a:06:e5:30:ca:79:ca:8a:fd:09:4e:a5: d1:eb:73:b3:99:68:25:9c:6d:77:1d:3a:d5:58:06:39:74:a2: 0a:91:b3:f4:67:6f:4d:ce:6a:0b:82:d0:df:2b:99:d0:6b:a9: e4:e9:c0:57:e8:28:83:f7:be:37:f5:d7:e2:60:b0:fb:07:b6: d9:b6:c7:a7:f9:03:1a:91:b9:d6:99:a1:2f:4a:84:1b:02:56: 97:1a:bf:1e -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUE9XNQX5xnuRXg7wrlUS+fcT+6vEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNDlaFw0yNzAyMDMxMjU3NDlaMDMxMTAvBgNV BAMTKDRDRTQ4MzU5NkEyNkMzMjIyQ0I5Mzk4NTEwODA4NjBBMTM1MUJCNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaUSlqpTyl4BRvcIQkt+N3WOrT 2rMg/PfXDDAAj/4QqtwTg+Ey512gJHolFqVnoQUPIFi6DxVlsuwEV0wnOpAulzoD IvGBOHc8O+jMPg2MQzhE/VhXo4H40pIeGR84q6jFbs+oOjiqWql5vCvQYXd3MnWB rzE0oAuz2N3QEBnE0TSOK+W4O303nVoB1YqRo9sSI1NbZaLCDv1pOJ7YfU0rXhTx 4r4u/gVNlVgUx+eT6RIyR+Czcy8VcisbSXR4V3drNMgdK+vPXhP2+FfyTgjeITdp qkUbJ/h5V4blDjm09Qg/osWY4viRGqcVmg4k0SZohBhO5RIVkMKFuKX/ayJZAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUTOSDWWomwyIsuTmFEICGChNRu0wwHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjEyMjQ5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACN YnEDBACNYnIwDQYJKoZIhvcNAQELBQADggEBANCxoG3f8pg9GCJVng/LnciVVpwF syzo2pS4xwFxPVvS7YTSmtxWbSKfAph7Ked9DSDrYTuxZhfD3bV5SD7vuzue7ddV ZfpE8ZTKrb95+uLc+N81Pv8Nh/V6uXf/35ecqdTIAlKtD9k/2YGjOck5oIgZX+yJ A4/dqWNpmQRvxI6KckE4IBLHbz40xsf92CiQsuXcN2SQUp6dh3aI7+59a9AhZSkS WCdXyzoG5TDKecqK/QlOpdHrc7OZaCWcbXcdOtVYBjl0ogqRs/Rnb03OaguC0N8r mdBrqeTpwFfoKIP3vjf11+JgsPsHttm2x6f5AxqRudaZoS9KhBsCVpcavx4= -----END CERTIFICATE-----Generated at Thu Feb 5 13:54:26 2026 by rpki-client