This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212219.roa File: AS212219.roa (raw, json) Hash identifier: A2lLXT3H6A5wiuAZOfrHsUDB1MbtX6o+xVLXy6wpqWI= Subject key identifier: D3:96:93:42:CC:33:E3:39:71:FC:B5:4B:88:2D:57:B0:1C:55:78:FD Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 1D0F99F3B4A93463A89225D81D475A50AB805D56 Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212219.roa Signing time: Fri 26 Dec 2025 13:55:27 +0000 ROA not before: Fri 26 Dec 2025 13:50:27 +0000 ROA not after: Fri 25 Dec 2026 13:55:27 +0000 asID: 212219 IP address blocks: 5.133.102.0/24 maxlen: 24 5.133.103.0/24 maxlen: 24 92.249.61.0/24 maxlen: 24 141.98.51.0/24 maxlen: 24 176.96.131.0/24 maxlen: 24 193.111.77.0/24 maxlen: 24 193.111.78.0/24 maxlen: 24 217.18.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0f:99:f3:b4:a9:34:63:a8:92:25:d8:1d:47:5a:50:ab:80:5d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Dec 26 13:50:27 2025 GMT Not After : Dec 25 13:55:27 2026 GMT Subject: CN=D3969342CC33E33971FCB54B882D57B01C5578FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b8:c2:7c:87:52:09:56:6a:5f:7f:9a:c5:e0: 9c:c1:56:e3:34:f3:ac:1f:ed:31:35:91:e6:18:5e: 2a:1b:a1:75:78:ad:25:2a:a0:25:6e:bc:54:08:8c: 15:36:2f:11:eb:e1:e3:5d:26:45:46:78:d4:a9:a0: 58:24:85:2a:09:6a:6b:90:9e:fd:78:2a:e6:00:9f: 10:02:12:15:1e:d2:0c:7e:06:18:87:91:bd:eb:02: 60:d5:bd:8a:df:40:e5:28:0a:c9:29:90:0e:08:30: 15:4a:5e:05:e4:32:a5:2d:0e:c8:8c:23:31:eb:dc: 35:fd:de:07:df:c7:f1:ba:52:d5:ab:91:9c:a5:25: 04:2a:0d:8e:6e:25:ab:d9:c0:41:e6:a6:37:5c:77: ab:8f:3d:d1:5c:38:3d:41:64:65:b9:d5:d7:20:b7: 93:02:d3:bd:9e:c5:e0:0d:fa:e0:86:f9:27:31:88: 8d:03:41:1b:cb:e2:30:36:11:3f:fe:f0:1e:1c:2a: 58:98:fa:a5:cb:ec:37:b5:26:f7:69:d3:7a:b2:f1: 8d:4d:2c:59:9d:a5:bc:ae:87:5c:2a:d4:50:6a:ce: 8d:37:c6:ff:bc:9b:09:0d:07:8e:10:49:9f:3a:87: e0:09:98:5e:61:5f:10:59:b7:29:dd:85:82:1a:27: 11:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:96:93:42:CC:33:E3:39:71:FC:B5:4B:88:2D:57:B0:1C:55:78:FD X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS212219.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.102.0/23 92.249.61.0/24 141.98.51.0/24 176.96.131.0/24 193.111.77.0-193.111.78.255 217.18.210.0/24 Signature Algorithm: sha256WithRSAEncryption 83:8a:c7:03:3d:d3:34:2a:4e:ce:33:ac:54:7a:74:4c:46:09: 53:64:46:7f:b7:27:a0:6f:71:f2:1d:af:f8:f8:78:6c:c7:a2: a7:db:b0:8d:e7:ed:48:0b:00:3e:82:e4:07:99:8a:a5:ba:99: 63:05:f7:1c:d5:96:79:93:a7:1f:3d:29:42:13:6c:39:5e:d7: ac:49:06:2d:97:d3:32:2a:90:6d:7d:ed:7a:52:35:f6:19:06: 76:0f:64:0c:93:c1:a3:2c:1c:14:71:8c:60:ef:65:01:48:22: b0:5d:d3:d3:ca:7e:1e:fb:2b:50:f6:5e:8a:56:b0:51:17:f8: 32:78:e2:56:9c:fb:f8:cd:a6:8c:b0:bd:2c:28:e9:13:c2:f6: 5a:8d:22:c0:c9:b4:15:68:4f:d2:c5:5a:ee:8d:96:84:e0:ff: a5:31:8a:8c:c6:1f:77:60:76:75:e6:bf:3a:b5:f6:f6:a0:df: aa:e1:6a:51:f5:39:a7:70:9c:dd:aa:fb:ff:d0:da:c3:12:4c: f9:d2:cb:1c:6d:67:a5:c7:b7:5e:1b:f5:41:31:03:c9:e8:d3: 0a:71:8b:25:16:12:08:98:de:07:e0:3e:17:41:5e:70:d8:3c: 9f:93:1e:63:6f:6c:7d:f6:eb:32:1e:bc:85:6f:21:66:c0:99: cd:d8:c6:4f -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUHQ+Z87SpNGOokiXYHUdaUKuAXVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNTEyMjYxMzUwMjdaFw0yNjEyMjUxMzU1MjdaMDMxMTAvBgNV BAMTKEQzOTY5MzQyQ0MzM0UzMzk3MUZDQjU0Qjg4MkQ1N0IwMUM1NTc4RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxuMJ8h1IJVmpff5rF4JzBVuM0 86wf7TE1keYYXioboXV4rSUqoCVuvFQIjBU2LxHr4eNdJkVGeNSpoFgkhSoJamuQ nv14KuYAnxACEhUe0gx+BhiHkb3rAmDVvYrfQOUoCskpkA4IMBVKXgXkMqUtDsiM IzHr3DX93gffx/G6UtWrkZylJQQqDY5uJavZwEHmpjdcd6uPPdFcOD1BZGW51dcg t5MC072exeAN+uCG+ScxiI0DQRvL4jA2ET/+8B4cKliY+qXL7De1Jvdp03qy8Y1N LFmdpbyuh1wq1FBqzo03xv+8mwkNB44QSZ86h+AJmF5hXxBZtyndhYIaJxFPAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU05aTQswz4zlx/LVLiC1XsBxVeP0wHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjEyMjE5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBBYVm AwQAXPk9AwQAjWIzAwQAsGCDMAwDBADBb00DBADBb04DBADZEtIwDQYJKoZIhvcN AQELBQADggEBAIOKxwM90zQqTs4zrFR6dExGCVNkRn+3J6BvcfIdr/j4eGzHoqfb sI3n7UgLAD6C5AeZiqW6mWMF9xzVlnmTpx89KUITbDle16xJBi2X0zIqkG197XpS NfYZBnYPZAyTwaMsHBRxjGDvZQFIIrBd09PKfh77K1D2XopWsFEX+DJ44lac+/jN poywvSwo6RPC9lqNIsDJtBVoT9LFWu6NloTg/6UxiozGH3dgdnXmvzq19vag36rh alH1OadwnN2q+//Q2sMSTPnSyxxtZ6XHt14b9UExA8no0wpxiyUWEgiY3gfgPhdB XnDYPJ+THmNvbH326zIevIVvIWbAmc3Yxk8= -----END CERTIFICATE-----Generated at Wed Jan 21 16:16:56 2026 by rpki-client