This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212085.roa File: AS212085.roa (raw, json) Hash identifier: /Ta7Re0q+L6rpj0WorT0/xF9mKwUTxE159KTwRKWdoc= Subject key identifier: D6:ED:02:23:10:AE:42:95:54:BA:0E:9D:07:E8:C4:66:24:B5:92:8A Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 08B6BEB7C85360FE1215AFBC28CD1F831187E120 Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212085.roa Signing time: Tue 06 Jan 2026 01:00:48 +0000 ROA not before: Tue 06 Jan 2026 00:55:48 +0000 ROA not after: Tue 05 Jan 2027 01:00:48 +0000 asID: 212085 IP address blocks: 2a14:7581:500::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b6:be:b7:c8:53:60:fe:12:15:af:bc:28:cd:1f:83:11:87:e1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 6 00:55:48 2026 GMT Not After : Jan 5 01:00:48 2027 GMT Subject: CN=D6ED022310AE429554BA0E9D07E8C46624B5928A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:51:31:34:ad:8c:6f:c2:0c:fe:0c:70:23:cd: b4:f3:1f:78:77:25:8e:e0:5e:33:fa:66:12:a0:36: 10:48:5a:23:b8:97:fe:5d:c4:e5:d1:10:ac:57:bf: 15:6a:06:88:e7:8d:b2:ca:da:cc:93:19:f7:e5:a1: aa:ab:c8:0b:79:87:ee:92:86:1e:70:09:ef:1d:6b: ba:35:68:04:0e:ed:7b:d8:39:c0:53:33:51:fe:ee: 51:be:f8:0b:dc:6a:60:ad:f6:9c:b7:27:00:51:87: 50:3a:66:55:78:62:68:3e:c8:44:1c:db:e8:80:99: 15:aa:dd:da:1a:7d:d3:7c:59:b5:2d:72:78:3a:55: af:7d:89:51:b6:1c:19:c9:57:12:d2:16:ae:1c:9d: c3:0a:90:e7:12:53:fd:e6:3d:d8:7f:15:15:ac:be: 15:7e:c1:3d:99:58:88:26:3e:32:7e:cf:e6:d8:46: 1b:24:4c:8f:df:83:90:41:8f:ec:b2:52:5c:f9:f7: 54:46:40:ba:f4:87:2d:39:27:e3:5a:2e:51:13:50: ea:99:1f:e3:85:4d:ba:6c:43:30:45:40:c2:8f:4a: 31:b3:f3:2a:e7:d9:52:53:fd:7f:04:f5:85:e9:47: 08:f0:b6:ec:f7:df:15:66:67:e5:04:0d:17:19:23: 56:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:ED:02:23:10:AE:42:95:54:BA:0E:9D:07:E8:C4:66:24:B5:92:8A X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212085.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7581:500::/40 Signature Algorithm: sha256WithRSAEncryption 62:9f:f4:95:93:1b:ff:f0:e0:f8:c9:a4:fc:4d:83:e7:ba:1b: ab:a2:bd:b7:d0:67:ae:9d:df:6a:09:68:00:b2:ed:ba:a6:74: 9a:67:ab:c3:77:5a:f9:e9:bc:5b:1c:31:56:bd:b1:8c:c6:f9: ff:a5:13:03:91:cb:96:c3:cb:61:17:25:a6:9c:fd:59:dd:24: 67:a9:77:c2:a5:f3:6a:6d:b8:c1:68:44:3b:ff:38:ec:92:c9: f8:c6:7b:b8:3b:23:e5:ac:31:7e:8d:11:55:51:2b:f5:b8:97: ea:7b:dd:d2:8d:a9:22:fb:d3:44:ec:cc:d6:02:02:6d:62:c4: 1f:24:0f:fd:c5:c2:28:7e:b0:78:bd:d8:1a:e1:6f:fd:55:35: a6:6c:26:1a:31:0d:c4:7c:61:9b:6c:57:4f:dd:65:f9:d7:52: 8d:fe:1a:5f:92:5d:02:53:6a:ca:a1:fb:4d:48:53:85:43:8f: 7f:d5:51:dd:7f:a0:4a:bd:2b:92:4d:55:09:ed:60:8c:dc:c7: 99:07:8e:78:74:be:46:1a:fc:9a:cb:a9:52:20:dd:7f:82:8a: 57:1b:e6:99:67:fc:78:61:96:c2:b9:88:0e:d3:10:4f:cb:d1: b2:bc:6f:b5:a9:06:5c:ef:28:08:7a:62:8f:49:38:e2:c2:07: 7d:24:30:a3 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUCLa+t8hTYP4SFa+8KM0fgxGH4SAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMDYwMDU1NDhaFw0yNzAxMDUwMTAwNDhaMDMxMTAvBgNV BAMTKEQ2RUQwMjIzMTBBRTQyOTU1NEJBMEU5RDA3RThDNDY2MjRCNTkyOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9UTE0rYxvwgz+DHAjzbTzH3h3 JY7gXjP6ZhKgNhBIWiO4l/5dxOXREKxXvxVqBojnjbLK2syTGffloaqryAt5h+6S hh5wCe8da7o1aAQO7XvYOcBTM1H+7lG++AvcamCt9py3JwBRh1A6ZlV4Ymg+yEQc 2+iAmRWq3doafdN8WbUtcng6Va99iVG2HBnJVxLSFq4cncMKkOcSU/3mPdh/FRWs vhV+wT2ZWIgmPjJ+z+bYRhskTI/fg5BBj+yyUlz591RGQLr0hy05J+NaLlETUOqZ H+OFTbpsQzBFQMKPSjGz8yrn2VJT/X8E9YXpRwjwtuz33xVmZ+UEDRcZI1aTAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQU1u0CIxCuQpVUug6dB+jEZiS1koowHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjEyMDg1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1 gQUwDQYJKoZIhvcNAQELBQADggEBAGKf9JWTG//w4PjJpPxNg+e6G6uivbfQZ66d 32oJaACy7bqmdJpnq8N3WvnpvFscMVa9sYzG+f+lEwORy5bDy2EXJaac/VndJGep d8Kl82ptuMFoRDv/OOySyfjGe7g7I+WsMX6NEVVRK/W4l+p73dKNqSL700TszNYC Am1ixB8kD/3Fwih+sHi92Brhb/1VNaZsJhoxDcR8YZtsV0/dZfnXUo3+Gl+SXQJT asqh+01IU4VDj3/VUd1/oEq9K5JNVQntYIzcx5kHjnh0vkYa/JrLqVIg3X+Cilcb 5pln/HhhlsK5iA7TEE/L0bK8b7WpBlzvKAh6Yo9JOOLCB30kMKM= -----END CERTIFICATE-----Generated at Thu Jan 29 03:59:48 2026 by rpki-client