This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS212598.roa File: AS212598.roa (raw, json) Hash identifier: OfYUMjbgMRPBaEBAbozlO1gwBEgM2oQUbJ1e1qh4v18= Subject key identifier: 91:F3:43:9B:03:A2:95:B8:DC:D6:96:E0:4F:7F:20:40:88:B9:30:FA Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 18544F4D2E74FAED39BDC5CD5EF433AB05411645 Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS212598.roa Signing time: Wed 04 Feb 2026 12:57:43 +0000 ROA not before: Wed 04 Feb 2026 12:52:43 +0000 ROA not after: Wed 03 Feb 2027 12:57:43 +0000 asID: 212598 IP address blocks: 217.18.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:54:4f:4d:2e:74:fa:ed:39:bd:c5:cd:5e:f4:33:ab:05:41:16:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:43 2026 GMT Not After : Feb 3 12:57:43 2027 GMT Subject: CN=91F3439B03A295B8DCD696E04F7F204088B930FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b5:51:d3:d1:96:5f:36:ec:49:9f:ab:e2:0c: 47:69:7e:cd:61:79:0c:c3:dc:52:fd:54:68:5d:d4: 04:c8:db:b7:10:29:e6:7c:74:f2:be:4b:a2:60:1b: 0b:72:28:23:ac:6e:27:6f:e6:b6:44:43:d3:3d:30: 39:56:36:2a:88:eb:cb:d0:94:4a:76:27:a0:6f:67: 7d:c3:50:1f:56:e0:3b:7d:6d:a6:fb:8b:db:cc:f5: 07:ca:f5:6d:71:3e:38:4c:aa:a7:13:a4:59:03:c0: f4:e6:fa:4a:8c:55:b8:cb:8a:ad:12:41:83:12:81: bb:32:10:f1:9c:30:8a:89:70:e2:82:bd:7c:00:fa: 42:ee:ad:f5:70:86:c2:f4:4c:ba:38:19:82:95:a9: 19:f3:3c:35:64:b3:aa:67:b3:1a:18:e8:02:55:7e: 33:2a:36:68:dc:58:e8:0d:8d:58:cd:f0:b0:af:d6: de:ce:00:e3:b4:d9:56:0f:38:56:5f:bf:44:92:5c: 01:5d:ff:2f:32:d6:f8:dd:80:b8:d1:ab:59:80:58: ae:14:bf:47:1b:a8:73:95:dc:ad:fe:66:ec:8a:fc: 18:3c:ab:e1:4e:8c:af:bf:05:dd:c7:75:f2:37:a1: 05:a1:b6:37:0a:75:ba:e3:8c:c8:bf:23:4c:0d:92: 28:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F3:43:9B:03:A2:95:B8:DC:D6:96:E0:4F:7F:20:40:88:B9:30:FA X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS212598.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.18.211.0/24 Signature Algorithm: sha256WithRSAEncryption 21:25:4b:7c:39:b2:0e:ac:81:83:cd:dd:ac:0a:4a:35:81:2e: a3:bd:9a:0d:2b:23:41:69:c7:6f:c4:2d:0e:33:5d:7e:e3:17: 1e:b4:37:05:9e:72:7e:84:78:ca:40:9c:6a:d6:54:fd:19:5a: 78:22:27:98:fb:d6:02:de:05:6d:7b:b9:13:b1:d2:8b:67:e5: 4f:6c:11:37:7f:35:7e:fc:a3:0f:90:af:17:9b:b0:0a:a5:4c: 5b:0d:3a:a4:6d:4a:8f:16:cc:c2:43:4e:5b:08:4d:6c:e8:61: 97:5c:65:bc:90:d2:8d:69:d6:f0:b8:b8:91:7e:45:53:08:5d: 14:c3:47:05:e5:87:af:1e:eb:48:b4:b1:d0:4e:83:51:50:d5: 4b:68:9e:3c:4d:28:7b:29:52:03:cb:41:10:08:b2:4f:02:8e: 65:f2:be:b4:44:da:b5:9e:d1:3b:f6:93:9c:a2:f7:c3:0b:4f: b3:b4:db:4a:8e:c0:1a:65:7b:67:a2:6f:22:71:1c:f1:19:95: e5:00:ec:29:01:f2:a9:d5:b4:fb:01:95:05:c0:6e:67:2e:4e: 24:65:0f:1f:0f:44:56:1d:c0:59:e8:5d:38:68:d5:0c:ff:6a: 64:0f:23:0c:b7:10:22:4c:1f:34:c7:bc:76:40:7f:f9:36:e0: 72:90:93:88 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUGFRPTS50+u05vcXNXvQzqwVBFkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyNDNaFw0yNzAyMDMxMjU3NDNaMDMxMTAvBgNV BAMTKDkxRjM0MzlCMDNBMjk1QjhEQ0Q2OTZFMDRGN0YyMDQwODhCOTMwRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDStVHT0ZZfNuxJn6viDEdpfs1h eQzD3FL9VGhd1ATI27cQKeZ8dPK+S6JgGwtyKCOsbidv5rZEQ9M9MDlWNiqI68vQ lEp2J6BvZ33DUB9W4Dt9bab7i9vM9QfK9W1xPjhMqqcTpFkDwPTm+kqMVbjLiq0S QYMSgbsyEPGcMIqJcOKCvXwA+kLurfVwhsL0TLo4GYKVqRnzPDVks6pnsxoY6AJV fjMqNmjcWOgNjVjN8LCv1t7OAOO02VYPOFZfv0SSXAFd/y8y1vjdgLjRq1mAWK4U v0cbqHOV3K3+ZuyK/Bg8q+FOjK+/Bd3HdfI3oQWhtjcKdbrjjMi/I0wNkih/AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUkfNDmwOilbjc1pbgT38gQIi5MPowHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjEyNTk4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RLT MA0GCSqGSIb3DQEBCwUAA4IBAQAhJUt8ObIOrIGDzd2sCko1gS6jvZoNKyNBacdv xC0OM11+4xcetDcFnnJ+hHjKQJxq1lT9GVp4IieY+9YC3gVte7kTsdKLZ+VPbBE3 fzV+/KMPkK8Xm7AKpUxbDTqkbUqPFszCQ05bCE1s6GGXXGW8kNKNadbwuLiRfkVT CF0Uw0cF5YevHutItLHQToNRUNVLaJ48TSh7KVIDy0EQCLJPAo5l8r60RNq1ntE7 9pOcovfDC0+ztNtKjsAaZXtnom8icRzxGZXlAOwpAfKp1bT7AZUFwG5nLk4kZQ8f D0RWHcBZ6F04aNUM/2pkDyMMtxAiTB80x7x2QH/5NuBykJOI -----END CERTIFICATE-----Generated at Thu Feb 5 13:54:28 2026 by rpki-client