This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212429.roa File: AS212429.roa (raw, json) Hash identifier: 1dbsYZN4lTZH7Gn5QoScL5Pcqi1a5JGxytA0Y/eUD0Q= Subject key identifier: 61:E0:CD:E6:2E:1A:B6:9C:87:98:75:5E:EB:A7:E8:8A:A6:2C:E3:61 Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 0DBC432AF978AF53CA39D0E677A6C7D193C8B759 Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212429.roa Signing time: Tue 27 Jan 2026 16:09:01 +0000 ROA not before: Tue 27 Jan 2026 16:04:01 +0000 ROA not after: Tue 26 Jan 2027 16:09:01 +0000 asID: 212429 IP address blocks: 2a0f:85c1:d46::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:bc:43:2a:f9:78:af:53:ca:39:d0:e6:77:a6:c7:d1:93:c8:b7:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Jan 27 16:04:01 2026 GMT Not After : Jan 26 16:09:01 2027 GMT Subject: CN=61E0CDE62E1AB69C8798755EEBA7E88AA62CE361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f8:8f:28:c4:3a:2f:86:da:87:73:05:e9:65: 48:1c:6d:8f:31:1d:57:a8:16:0d:0c:d3:56:58:f0: 7a:85:85:9d:50:17:92:a2:a5:a5:ca:17:e3:d6:62: e6:9e:26:4a:5f:c0:09:e4:07:31:47:e8:9a:d8:ce: 49:a5:d8:4b:1f:e8:90:17:7f:b6:04:79:68:cb:5f: 9e:11:7b:8b:de:00:45:d0:41:13:69:80:80:3c:47: 54:bc:ee:8b:1e:c5:6d:ef:81:b4:00:4a:c9:e4:61: 13:89:61:ed:a0:d9:85:6b:5a:72:82:78:4d:6e:36: f9:23:6e:58:26:77:09:c6:f5:f8:8c:a0:9c:99:1d: dc:70:3d:30:39:7e:a6:5a:dc:d8:97:8b:cd:34:75: ee:93:13:ac:9d:71:29:6c:4d:13:2b:ad:3c:00:dd: 11:44:fe:03:de:ac:23:5e:cb:f6:6d:a3:bd:a5:e4: 97:12:68:20:d5:ce:cc:ed:8c:8d:c5:8f:99:4e:93: f5:d9:6f:83:63:fa:ed:ec:76:75:0e:8b:cf:c2:b4: e8:9e:d7:03:50:bc:42:52:83:f7:31:0b:62:ce:28: 3b:fe:b1:24:67:23:b8:47:fb:b0:62:36:21:8d:68: a6:b5:e4:ed:39:fe:b6:a0:50:87:68:c6:b4:11:d5: a7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E0:CD:E6:2E:1A:B6:9C:87:98:75:5E:EB:A7:E8:8A:A6:2C:E3:61 X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS212429.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:d46::/48 Signature Algorithm: sha256WithRSAEncryption b6:87:37:98:38:b0:7e:3a:aa:bb:05:43:0f:e2:75:92:4f:6d: a7:99:22:b6:51:0d:8a:fa:d1:08:9f:c3:ff:6c:9b:12:38:93: a6:20:63:c1:29:d5:6f:05:03:df:27:ad:c2:19:94:a9:6d:de: 72:19:4f:d4:e8:81:19:0e:3a:df:f4:82:88:8e:2a:fa:2e:19: 6a:20:63:b4:71:eb:f2:bd:da:f1:e9:3c:39:ce:33:ba:0f:2e: 6e:f1:d2:99:52:17:4b:c6:c5:8e:5a:3c:e7:72:4b:6f:ed:3d: 67:f4:7c:bc:25:af:00:cd:d2:a0:b6:26:92:ef:76:4e:cd:87: 4b:b8:94:39:b5:73:ce:4c:1c:22:73:32:f9:fb:fa:94:55:0a: e4:4e:fa:2e:ae:76:d4:bd:eb:0c:2d:45:88:39:8e:f0:00:4b: 1c:04:72:b9:c5:e6:4b:06:71:89:0b:ee:f9:f1:db:96:4d:0b: bb:c8:d3:0c:26:85:b7:18:e5:50:2b:70:62:55:32:61:0f:34: d6:f2:80:44:c5:2f:0c:42:76:89:fd:9e:40:81:b4:3c:25:74: a4:21:8f:9e:18:ac:c9:f3:d2:24:e4:37:63:f0:fe:fe:c4:09: c2:60:2a:92:b1:65:64:0a:31:ca:29:d2:87:62:71:b0:9d:7d: 94:df:c3:40 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUDbxDKvl4r1PKOdDmd6bH0ZPIt1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNjAxMjcxNjA0MDFaFw0yNzAxMjYxNjA5MDFaMDMxMTAvBgNV BAMTKDYxRTBDREU2MkUxQUI2OUM4Nzk4NzU1RUVCQTdFODhBQTYyQ0UzNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX+I8oxDovhtqHcwXpZUgcbY8x HVeoFg0M01ZY8HqFhZ1QF5KipaXKF+PWYuaeJkpfwAnkBzFH6JrYzkml2Esf6JAX f7YEeWjLX54Re4veAEXQQRNpgIA8R1S87osexW3vgbQASsnkYROJYe2g2YVrWnKC eE1uNvkjblgmdwnG9fiMoJyZHdxwPTA5fqZa3NiXi800de6TE6ydcSlsTRMrrTwA 3RFE/gPerCNey/Zto72l5JcSaCDVzsztjI3Fj5lOk/XZb4Nj+u3sdnUOi8/CtOie 1wNQvEJSg/cxC2LOKDv+sSRnI7hH+7BiNiGNaKa15O05/ragUIdoxrQR1acZAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUYeDN5i4atpyHmHVe66foiqYs42EwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjEyNDI5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F wQ1GMA0GCSqGSIb3DQEBCwUAA4IBAQC2hzeYOLB+Oqq7BUMP4nWST22nmSK2UQ2K +tEIn8P/bJsSOJOmIGPBKdVvBQPfJ63CGZSpbd5yGU/U6IEZDjrf9IKIjir6Lhlq IGO0cevyvdrx6Tw5zjO6Dy5u8dKZUhdLxsWOWjzncktv7T1n9Hy8Ja8AzdKgtiaS 73ZOzYdLuJQ5tXPOTBwiczL5+/qUVQrkTvournbUvesMLUWIOY7wAEscBHK5xeZL BnGJC+758duWTQu7yNMMJoW3GOVQK3BiVTJhDzTW8oBExS8MQnaJ/Z5AgbQ8JXSk IY+eGKzJ89Ik5Ddj8P7+xAnCYCqSsWVkCjHKKdKHYnGwnX2U38NA -----END CERTIFICATE-----Generated at Wed Jan 28 17:03:32 2026 by rpki-client