This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212306.roa File: AS212306.roa (raw, json) Hash identifier: egMsTW61T/WEYwKi5JyfCx+i9CxHjA87PXr+9AimFJI= Subject key identifier: 29:F1:CA:20:E1:72:18:F6:5B:1A:25:13:86:FD:E4:47:18:1E:39:AD Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 538E20A77405DBE667E02D33BD4BBFD1A918FBE3 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212306.roa Signing time: Thu 06 Nov 2025 14:28:25 +0000 ROA not before: Thu 06 Nov 2025 14:23:25 +0000 ROA not after: Thu 05 Nov 2026 14:28:25 +0000 asID: 212306 IP address blocks: 2a0f:85c1:d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 14:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:8e:20:a7:74:05:db:e6:67:e0:2d:33:bd:4b:bf:d1:a9:18:fb:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Nov 6 14:23:25 2025 GMT Not After : Nov 5 14:28:25 2026 GMT Subject: CN=29F1CA20E17218F65B1A251386FDE447181E39AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:16:46:3e:8a:b8:84:9a:6f:20:6f:b9:7e:7a: 4e:1a:41:94:a7:ae:82:9a:46:e9:34:9f:31:75:80: 56:32:ba:7c:a7:3d:34:77:41:6c:83:c3:4f:e2:0f: 89:9a:c2:ff:48:36:77:88:e9:b0:f7:55:03:6e:a8: fd:f9:63:a5:0f:de:ad:ea:20:5d:d9:ee:9e:dd:40: 38:20:cb:49:d9:7e:18:66:71:54:15:17:f1:97:1e: 50:26:91:9d:5e:46:ce:7d:2e:6c:5f:30:6e:96:a9: 5b:b7:a0:94:10:bf:65:12:68:6c:76:c1:ac:e9:c8: d9:34:aa:c1:44:23:bd:46:c6:b5:9d:75:3a:ea:41: 5f:10:59:47:9a:9b:5a:0e:42:9f:c9:2e:ad:d2:6c: 10:87:b8:2c:2a:fa:47:6b:af:3a:54:b7:1f:35:cd: 31:dc:3b:fd:c3:01:2e:88:35:95:da:40:55:17:9b: 4a:4c:28:bb:00:60:fd:bd:17:e3:1c:01:55:7d:3a: 11:29:15:ae:cb:26:9a:b3:5b:11:90:a7:37:d6:95: 65:74:32:e2:95:c0:40:b1:ad:b0:f0:81:b0:c7:a9: 62:e8:c8:68:04:51:28:1f:be:6d:ec:bc:fb:a4:86: 48:15:9c:e6:c7:2a:02:46:10:17:d7:4c:44:97:58: b0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F1:CA:20:E1:72:18:F6:5B:1A:25:13:86:FD:E4:47:18:1E:39:AD X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212306.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:d40::/48 Signature Algorithm: sha256WithRSAEncryption 2a:65:d2:51:04:0f:0b:48:e3:38:e6:7d:83:7a:12:1d:ca:ea: c2:8a:54:a0:1f:97:4a:30:97:17:ee:99:c4:5c:c6:56:cb:1e: b5:cf:94:57:26:0c:de:fb:ef:03:e1:c9:78:f5:a9:25:af:24: 01:d3:10:2f:15:52:a0:eb:bf:9d:2c:7f:84:65:ee:45:58:c2: 7a:c7:77:59:76:5e:15:11:c4:03:d2:4f:6d:1e:df:74:2e:5a: 4b:8d:bb:5c:a5:63:a6:48:e5:53:f5:2a:be:5d:49:31:26:be: 92:c6:ba:7d:11:73:a9:9c:3a:ce:b1:0a:2e:54:c3:c9:a2:46: 55:9f:eb:ee:56:f0:ae:e6:ae:7b:89:f9:57:df:1e:59:c7:8e: 4e:bc:45:f5:de:95:c7:9f:cb:0c:dc:66:4d:a5:81:eb:f2:34: 12:3b:7d:47:89:1e:d7:13:ed:4a:a9:b1:d8:2c:55:53:51:12: 63:27:e6:64:cd:e2:a4:0e:96:94:df:2e:e6:66:fd:a0:a2:cf: 79:6b:62:a1:81:45:14:d8:52:59:fc:31:78:27:d6:96:0e:32: 98:19:0a:d1:78:93:91:57:e6:ac:49:52:93:b4:8b:00:5a:e3: d6:e6:e7:b2:7f:29:33:a2:55:d1:70:83:68:43:f6:8f:b6:d6: 8c:7b:57:1e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUU44gp3QF2+Zn4C0zvUu/0akY++MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNTExMDYxNDIzMjVaFw0yNjExMDUxNDI4MjVaMDMxMTAvBgNV BAMTKDI5RjFDQTIwRTE3MjE4RjY1QjFBMjUxMzg2RkRFNDQ3MTgxRTM5QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FkY+iriEmm8gb7l+ek4aQZSn roKaRuk0nzF1gFYyunynPTR3QWyDw0/iD4mawv9INneI6bD3VQNuqP35Y6UP3q3q IF3Z7p7dQDggy0nZfhhmcVQVF/GXHlAmkZ1eRs59LmxfMG6WqVu3oJQQv2USaGx2 wazpyNk0qsFEI71GxrWddTrqQV8QWUeam1oOQp/JLq3SbBCHuCwq+kdrrzpUtx81 zTHcO/3DAS6INZXaQFUXm0pMKLsAYP29F+McAVV9OhEpFa7LJpqzWxGQpzfWlWV0 MuKVwECxrbDwgbDHqWLoyGgEUSgfvm3svPukhkgVnObHKgJGEBfXTESXWLBPAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUKfHKIOFyGPZbGiUThv3kRxgeOa0wHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEyMzA2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQ1AMA0GCSqGSIb3DQEBCwUAA4IBAQAqZdJRBA8LSOM45n2DehIdyurCilSgH5dK MJcX7pnEXMZWyx61z5RXJgze++8D4cl49aklryQB0xAvFVKg67+dLH+EZe5FWMJ6 x3dZdl4VEcQD0k9tHt90LlpLjbtcpWOmSOVT9Sq+XUkxJr6Sxrp9EXOpnDrOsQou VMPJokZVn+vuVvCu5q57iflX3x5Zx45OvEX13pXHn8sM3GZNpYHr8jQSO31HiR7X E+1KqbHYLFVTURJjJ+ZkzeKkDpaU3y7mZv2gos95a2KhgUUU2FJZ/DF4J9aWDjKY GQrReJORV+asSVKTtIsAWuPW5ueyfykzolXRcINoQ/aPttaMe1ce -----END CERTIFICATE-----Generated at Tue Nov 25 19:29:07 2025 by rpki-client