This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212591.roa File: AS212591.roa (raw, json) Hash identifier: tMZcmlgrRMSpVBwLM1oPtv25gmtpDlHPKZlX0QHkMr4= Subject key identifier: E7:A1:A1:28:53:BE:76:73:3B:89:E4:C3:6D:AE:75:1A:8D:A8:3B:54 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 0BA4B52BEFB06AD8FC4FF595D46BCEF04C6DAE57 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212591.roa Signing time: Tue 11 Nov 2025 14:05:39 +0000 ROA not before: Tue 11 Nov 2025 14:00:39 +0000 ROA not after: Tue 10 Nov 2026 14:05:39 +0000 asID: 212591 IP address blocks: 2a13:9500:106::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a4:b5:2b:ef:b0:6a:d8:fc:4f:f5:95:d4:6b:ce:f0:4c:6d:ae:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 11 14:00:39 2025 GMT Not After : Nov 10 14:05:39 2026 GMT Subject: CN=E7A1A12853BE76733B89E4C36DAE751A8DA83B54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:83:22:09:48:ec:42:61:4f:74:7e:c6:1e:bc: 2b:fc:67:81:e3:28:07:11:ce:c1:8c:80:67:bc:15: 02:51:88:18:aa:09:eb:52:65:c1:30:f1:dc:22:d5: 1c:6e:5f:db:f7:e0:11:b7:60:0e:c7:2c:2c:01:1b: 4a:2a:70:7d:13:3b:e2:c1:0b:f8:f7:ef:f1:65:56: 5c:74:3c:f4:92:ca:37:1d:02:fc:a2:7e:6b:7d:0b: 0e:28:31:e9:16:4d:f7:bc:a6:d9:53:57:8c:91:9a: 2a:33:75:a8:91:77:7e:66:e6:df:12:47:49:a4:3d: 96:9f:0d:d2:f5:75:bc:e2:ee:87:38:61:bb:61:c8: 21:f7:6c:55:9b:48:8f:3a:22:e5:59:65:c9:be:7a: 3f:8e:a1:65:40:75:42:9a:bc:a4:5f:2d:9a:15:fb: 29:22:a8:b9:f2:31:79:68:65:62:a6:5c:75:6c:fc: e7:3e:c7:be:9c:e8:62:ee:ac:dd:9c:79:cb:70:89: 3b:38:37:40:78:e9:85:ee:5f:bb:6b:48:fa:27:69: 4c:a0:27:a7:ae:d5:6a:89:f3:18:74:ef:41:00:ce: 48:42:5b:3b:ab:19:ab:66:57:d9:89:f7:4a:47:4a: ea:e5:a8:02:52:15:83:63:78:49:ac:01:e7:dd:5f: 40:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A1:A1:28:53:BE:76:73:3B:89:E4:C3:6D:AE:75:1A:8D:A8:3B:54 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212591.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9500:106::/48 Signature Algorithm: sha256WithRSAEncryption 8f:5e:2e:4a:a0:62:28:af:17:be:9e:6f:b6:18:36:0b:f9:1d: 0d:8d:a0:6c:0e:3f:77:28:66:17:3c:cb:83:1a:b5:ed:ac:6b: 8f:77:5b:f0:4e:9d:ff:b9:ba:06:54:4f:87:a9:62:94:fd:fb: 57:b0:fe:d3:70:cb:33:f1:58:5d:18:33:8a:fd:57:00:24:2f: 9b:82:d7:74:7d:8b:2d:64:97:40:8d:fa:ce:87:63:3d:eb:48: 4d:cf:78:d2:06:4d:10:e0:e3:48:8f:ff:2d:7e:de:46:97:30: d2:7a:bc:a1:63:71:43:fd:94:8d:6e:43:3f:d2:52:73:f3:62: ff:15:3c:a6:65:c3:8b:b9:45:94:f3:2d:05:bf:ad:21:15:7b: 05:73:f4:e5:f2:9a:b9:08:78:1a:e3:90:ad:f8:24:3f:58:81: 99:25:e7:ac:65:d6:c4:26:0d:68:84:ef:0e:56:eb:f0:bc:e0: 90:c6:cf:50:c9:db:63:56:88:fc:91:e5:f5:77:7a:a2:26:54: b8:e9:d5:16:31:8f:5a:3c:17:b4:ec:03:c8:2f:a5:2e:35:7f: 18:41:13:99:d7:f4:95:1f:65:f9:a9:f9:fe:b7:e8:cd:2a:77: d8:d9:8f:9e:9e:21:b4:01:d3:85:6e:5b:84:79:0c:d8:59:3b: a1:19:49:15 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUC6S1K++watj8T/WV1GvO8ExtrlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMTExNDAwMzlaFw0yNjExMTAxNDA1MzlaMDMxMTAvBgNV BAMTKEU3QTFBMTI4NTNCRTc2NzMzQjg5RTRDMzZEQUU3NTFBOERBODNCNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBgyIJSOxCYU90fsYevCv8Z4Hj KAcRzsGMgGe8FQJRiBiqCetSZcEw8dwi1RxuX9v34BG3YA7HLCwBG0oqcH0TO+LB C/j37/FlVlx0PPSSyjcdAvyifmt9Cw4oMekWTfe8ptlTV4yRmiozdaiRd35m5t8S R0mkPZafDdL1dbzi7oc4YbthyCH3bFWbSI86IuVZZcm+ej+OoWVAdUKavKRfLZoV +ykiqLnyMXloZWKmXHVs/Oc+x76c6GLurN2cectwiTs4N0B46YXuX7trSPonaUyg J6eu1WqJ8xh070EAzkhCWzurGatmV9mJ90pHSurlqAJSFYNjeEmsAefdX0DVAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU56GhKFO+dnM7ieTDba51Go2oO1QwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEyNTkxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV AAEGMA0GCSqGSIb3DQEBCwUAA4IBAQCPXi5KoGIorxe+nm+2GDYL+R0NjaBsDj93 KGYXPMuDGrXtrGuPd1vwTp3/uboGVE+HqWKU/ftXsP7TcMsz8VhdGDOK/VcAJC+b gtd0fYstZJdAjfrOh2M960hNz3jSBk0Q4ONIj/8tft5GlzDSeryhY3FD/ZSNbkM/ 0lJz82L/FTymZcOLuUWU8y0Fv60hFXsFc/Tl8pq5CHga45Ct+CQ/WIGZJeesZdbE Jg1ohO8OVuvwvOCQxs9QydtjVoj8keX1d3qiJlS46dUWMY9aPBe07APIL6UuNX8Y QROZ1/SVH2X5qfn+t+jNKnfY2Y+eniG0AdOFbluEeQzYWTuhGUkV -----END CERTIFICATE-----Generated at Thu Dec 4 05:58:58 2025 by rpki-client