This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS201233.roa File: AS201233.roa (raw, json) Hash identifier: GbjGCfMSixC3Uxdj/KYuIHI67XS+a7tU3PDz575TR7M= Subject key identifier: 12:42:72:9E:AE:F0:A8:4D:77:5D:70:F0:73:AE:09:D5:E6:EB:E4:4F Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 3B20D89F025346CFFA50B1B6348E4C0BBC2BF58F Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS201233.roa Signing time: Sun 23 Nov 2025 13:42:15 +0000 ROA not before: Sun 23 Nov 2025 13:37:15 +0000 ROA not after: Sun 22 Nov 2026 13:42:15 +0000 asID: 201233 IP address blocks: 212.87.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:20:d8:9f:02:53:46:cf:fa:50:b1:b6:34:8e:4c:0b:bc:2b:f5:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Nov 23 13:37:15 2025 GMT Not After : Nov 22 13:42:15 2026 GMT Subject: CN=1242729EAEF0A84D775D70F073AE09D5E6EBE44F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:b7:1b:2c:08:c5:d8:30:26:0a:64:1b:dd: 38:fd:fc:78:12:90:92:48:e6:07:1c:7f:1a:a9:87: 44:3b:df:2f:dc:93:14:eb:dc:e2:a0:7d:89:16:d7: df:e7:30:69:de:24:94:a1:d4:18:fa:fa:2f:d7:f5: 4a:9b:af:d1:e0:3e:ec:6d:4c:af:a4:69:6b:de:03: 3a:8d:a8:97:b7:91:e8:e0:b3:61:63:bc:71:e6:d9: 81:0a:8b:d9:02:e1:41:51:40:39:f4:d0:2b:8d:90: 24:43:fe:ef:6c:78:02:54:c1:34:9e:7f:f6:3c:86: 9f:a8:b2:3b:ea:97:5e:36:81:67:7b:b8:53:3f:66: 52:3b:bf:5f:b1:e5:d6:0a:f9:7d:78:42:33:86:c2: fe:06:a1:de:c4:ff:1d:bb:be:58:6c:9c:13:fd:bf: f6:22:75:fa:c9:ef:ff:13:fc:aa:5f:a8:80:5a:f1: 3f:90:31:ca:47:be:ef:15:3e:c3:64:78:77:9c:d9: 70:43:c9:34:f6:2f:65:8b:46:7b:0f:20:06:54:5f: 1b:de:26:f2:45:45:5e:50:06:f0:de:04:c7:de:ee: 73:99:4b:68:4d:75:39:69:0c:35:1b:7f:a5:5f:ca: 2b:f1:27:1e:78:29:31:4f:c1:6a:38:d1:52:0c:66: a0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:42:72:9E:AE:F0:A8:4D:77:5D:70:F0:73:AE:09:D5:E6:EB:E4:4F X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS201233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.87.197.0/24 Signature Algorithm: sha256WithRSAEncryption 73:ad:f6:bf:f0:81:d8:45:72:27:40:5a:9f:96:fb:6f:6e:64: b3:e3:e4:5a:8f:56:06:ce:a3:85:74:fa:41:78:91:fb:78:84: cd:3d:09:d9:f3:ec:ff:8d:55:9d:cc:ce:5b:fe:6b:cc:2b:72: 57:bb:72:d8:20:88:ec:12:2c:7c:b9:c7:00:e3:cf:5f:80:d2: 8c:82:2e:93:fa:c2:b0:d2:1e:ca:ce:4f:a4:0f:4f:58:7d:dc: 8f:bc:e2:03:ac:77:3e:ad:be:b6:76:b4:fa:92:2a:b0:a4:8c: 9f:80:c7:5d:00:1f:3f:05:89:e3:8d:c2:8f:e9:4f:8d:99:bf: 9e:d5:d3:fe:e5:b0:44:7c:65:35:fb:91:83:22:e1:42:0b:34: 87:5b:a4:6b:99:18:c5:90:03:6b:94:45:82:53:7b:f1:f6:2b: 67:bf:9a:68:8d:ce:4d:82:2a:32:16:26:64:96:39:12:03:87: 37:af:82:e3:cc:24:fe:d2:2c:f7:01:c9:89:a4:5d:b2:0f:f1: 2d:7b:1a:1b:c4:80:ad:d2:02:a6:9a:31:0e:28:d1:8b:22:f1: ac:6d:30:cb:bd:63:09:ca:cd:68:1d:96:52:f5:9c:9b:f7:59: cb:3c:46:5d:31:71:f8:92:c0:b2:f5:62:dd:2e:e7:75:c5:b0: 66:2f:9b:60 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUOyDYnwJTRs/6ULG2NI5MC7wr9Y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNTExMjMxMzM3MTVaFw0yNjExMjIxMzQyMTVaMDMxMTAvBgNV BAMTKDEyNDI3MjlFQUVGMEE4NEQ3NzVENzBGMDczQUUwOUQ1RTZFQkU0NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxD7cbLAjF2DAmCmQb3Tj9/HgS kJJI5gccfxqph0Q73y/ckxTr3OKgfYkW19/nMGneJJSh1Bj6+i/X9Uqbr9HgPuxt TK+kaWveAzqNqJe3kejgs2FjvHHm2YEKi9kC4UFRQDn00CuNkCRD/u9seAJUwTSe f/Y8hp+osjvql142gWd7uFM/ZlI7v1+x5dYK+X14QjOGwv4God7E/x27vlhsnBP9 v/YidfrJ7/8T/KpfqIBa8T+QMcpHvu8VPsNkeHec2XBDyTT2L2WLRnsPIAZUXxve JvJFRV5QBvDeBMfe7nOZS2hNdTlpDDUbf6VfyivxJx54KTFPwWo40VIMZqDtAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUEkJynq7wqE13XXDwc64J1ebr5E8wHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjAxMjMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FfF MA0GCSqGSIb3DQEBCwUAA4IBAQBzrfa/8IHYRXInQFqflvtvbmSz4+Raj1YGzqOF dPpBeJH7eITNPQnZ8+z/jVWdzM5b/mvMK3JXu3LYIIjsEix8uccA489fgNKMgi6T +sKw0h7Kzk+kD09YfdyPvOIDrHc+rb62drT6kiqwpIyfgMddAB8/BYnjjcKP6U+N mb+e1dP+5bBEfGU1+5GDIuFCCzSHW6RrmRjFkANrlEWCU3vx9itnv5pojc5Ngioy FiZkljkSA4c3r4LjzCT+0iz3AcmJpF2yD/EtexobxICt0gKmmjEOKNGLIvGsbTDL vWMJys1oHZZS9Zyb91nLPEZdMXH4ksCy9WLdLud1xbBmL5tg -----END CERTIFICATE-----Generated at Fri Dec 5 10:44:48 2025 by rpki-client