This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212995.roa File: AS212995.roa (raw, json) Hash identifier: 7qSdxQ7TypX+H/ndm5Lx2qmntmmIr9ShlapeGijGz90= Subject key identifier: 40:D3:04:A5:E4:F1:BB:3D:67:14:A2:68:72:33:D8:29:47:52:4B:08 Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Certificate serial: 1ADA1509382E47726DE97917E56E8BA0D83E761A Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212995.roa Signing time: Fri 23 Jan 2026 06:27:51 +0000 ROA not before: Fri 23 Jan 2026 06:22:51 +0000 ROA not after: Fri 22 Jan 2027 06:27:51 +0000 asID: 212995 IP address blocks: 2a14:7580:f00::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 20:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:da:15:09:38:2e:47:72:6d:e9:79:17:e5:6e:8b:a0:d8:3e:76:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772 Validity Not Before: Jan 23 06:22:51 2026 GMT Not After : Jan 22 06:27:51 2027 GMT Subject: CN=40D304A5E4F1BB3D6714A2687233D82947524B08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b9:ce:a6:81:26:d4:01:d6:65:a1:20:60:a6: b2:b9:20:ba:b3:90:e4:f4:ba:40:e2:f3:7f:6c:2f: ad:b2:d2:fc:45:28:85:dc:95:f0:2b:44:b0:f9:73: 93:36:be:41:31:9b:f9:08:24:a2:a2:d6:c1:bf:70: 56:ce:50:d5:02:e0:52:06:3c:34:3c:e9:05:e0:6e: 6f:42:b0:18:85:b3:4b:33:13:4a:49:33:72:c8:50: 38:af:0f:e9:85:90:36:9c:4e:25:6a:9a:f7:e6:59: 1a:e8:f3:2b:a4:c3:9a:28:42:51:3c:dc:79:0d:95: f9:9c:68:d4:62:a9:b3:49:5a:39:dd:cd:7c:8c:f6: 16:32:c5:61:d9:bb:50:f8:2f:82:b4:94:51:9a:e1: 4a:a5:e4:84:99:10:9d:a4:dd:78:0e:f3:ae:c1:fd: 2d:64:28:b7:51:4a:3b:80:cd:1a:85:43:74:cb:5a: 8d:cb:fa:77:3a:8e:0c:33:8a:d0:ef:84:b9:c0:47: 24:93:fb:98:69:92:b2:60:14:1a:9a:17:b7:8a:d6: 5f:cc:c8:e1:83:1c:9e:91:6a:3d:b5:69:33:a0:fc: 28:6b:91:cf:0f:85:22:8e:a9:a5:5c:ee:2e:b4:a6: 3e:3b:57:7d:40:35:14:79:e4:d9:d5:09:96:d7:79: be:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D3:04:A5:E4:F1:BB:3D:67:14:A2:68:72:33:D8:29:47:52:4B:08 X509v3 Authority Key Identifier: keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS212995.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7580:f00::/40 Signature Algorithm: sha256WithRSAEncryption 58:bc:d3:ba:45:5f:8e:9a:04:16:16:7e:41:e7:50:56:e9:47: 0c:3d:42:dd:30:ba:d4:03:3d:d2:e3:f7:62:3f:09:24:ed:ed: 30:e4:0c:4d:60:a7:06:48:83:7f:69:65:9c:63:bc:78:c2:e8: 2c:e0:28:08:07:47:d3:6c:c0:dd:e2:e2:d6:51:d1:a6:34:eb: 35:34:dc:4a:2d:63:f1:de:53:0f:ac:8d:4a:47:73:0b:1c:6a: af:da:60:f3:01:da:58:8e:05:98:87:c1:8d:e7:0c:4c:30:fa: f5:9c:3f:e7:a2:3c:c5:b3:39:7b:c6:d7:62:e3:8c:5b:de:41: cd:ee:9a:97:74:01:a5:2e:d5:ec:20:60:94:3a:f6:4b:20:d4: f0:0c:8f:72:66:2c:7d:d8:b0:bd:a1:71:3b:88:f9:bb:d6:d3: 9f:f0:c9:0b:2a:af:e3:ef:45:a5:ab:8d:e3:e4:8b:63:5c:cc: ee:7a:48:ba:f1:3c:e5:58:47:01:c8:46:98:0a:4e:a8:80:fb: f0:c4:cd:8e:d5:f8:87:2d:39:61:27:c1:1b:07:e6:cf:de:0f: 3e:df:43:5f:8c:1f:36:90:1b:e1:ea:81:3d:12:6e:fb:16:d1: 3a:f8:97:5e:09:53:26:96:42:98:04:c0:0f:c0:0c:05:69:08: d1:f3:08:03 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUGtoVCTguR3Jt6XkX5W6LoNg+dhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj Y2ZkMzc3MjAeFw0yNjAxMjMwNjIyNTFaFw0yNzAxMjIwNjI3NTFaMDMxMTAvBgNV BAMTKDQwRDMwNEE1RTRGMUJCM0Q2NzE0QTI2ODcyMzNEODI5NDc1MjRCMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWuc6mgSbUAdZloSBgprK5ILqz kOT0ukDi839sL62y0vxFKIXclfArRLD5c5M2vkExm/kIJKKi1sG/cFbOUNUC4FIG PDQ86QXgbm9CsBiFs0szE0pJM3LIUDivD+mFkDacTiVqmvfmWRro8yukw5ooQlE8 3HkNlfmcaNRiqbNJWjndzXyM9hYyxWHZu1D4L4K0lFGa4Uql5ISZEJ2k3XgO867B /S1kKLdRSjuAzRqFQ3TLWo3L+nc6jgwzitDvhLnARyST+5hpkrJgFBqaF7eK1l/M yOGDHJ6Raj21aTOg/Chrkc8PhSKOqaVc7i60pj47V31ANRR55NnVCZbXeb7/AgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUQNMEpeTxuz1nFKJocjPYKUdSSwgwHwYDVR0j BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16 OU4zSS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUt NDI5OS1iMDc5LTMwOWVkOTdmMzgyNC8wL0FTMjEyOTk1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhR1 gA8wDQYJKoZIhvcNAQELBQADggEBAFi807pFX46aBBYWfkHnUFbpRww9Qt0wutQD PdLj92I/CSTt7TDkDE1gpwZIg39pZZxjvHjC6CzgKAgHR9NswN3i4tZR0aY06zU0 3EotY/HeUw+sjUpHcwscaq/aYPMB2liOBZiHwY3nDEww+vWcP+eiPMWzOXvG12Lj jFveQc3umpd0AaUu1ewgYJQ69ksg1PAMj3JmLH3YsL2hcTuI+bvW05/wyQsqr+Pv RaWrjePki2NczO56SLrxPOVYRwHIRpgKTqiA+/DEzY7V+IctOWEnwRsH5s/eDz7f Q1+MHzaQG+HqgT0SbvsW0Tr4l14JUyaWQpgEwA/ADAVpCNHzCAM= -----END CERTIFICATE-----Generated at Thu Feb 5 10:00:39 2026 by rpki-client