This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211484.roa File: AS211484.roa (raw, json) Hash identifier: oKQRDLq/hLfqlBzGp9nYY+N7XLR3lJZ0bHceFMLEG1c= Subject key identifier: 84:7E:63:C5:E5:A5:F8:BB:D5:24:65:70:7C:30:E1:65:37:BE:9B:5E Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 50EA15867E4FE36CA62DB9C6D16E28146891CF9C Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211484.roa Signing time: Wed 05 Nov 2025 21:33:13 +0000 ROA not before: Wed 05 Nov 2025 21:28:13 +0000 ROA not after: Wed 04 Nov 2026 21:33:13 +0000 asID: 211484 IP address blocks: 95.134.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ea:15:86:7e:4f:e3:6c:a6:2d:b9:c6:d1:6e:28:14:68:91:cf:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Nov 5 21:28:13 2025 GMT Not After : Nov 4 21:33:13 2026 GMT Subject: CN=847E63C5E5A5F8BBD52465707C30E16537BE9B5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8a:c3:fb:8e:79:6c:66:81:64:3c:e4:9c:24: 7a:3e:d5:78:4a:16:51:a4:cd:f6:c3:da:bc:39:21: c0:7b:46:f3:bc:70:fe:50:4c:d7:ba:bb:97:fe:53: 6d:29:47:0d:e0:5d:81:52:a5:2e:90:2d:a7:fa:95: 8f:52:b7:3a:0d:bc:0f:3d:0f:b7:2a:4c:9c:7d:15: 1c:92:bb:95:54:08:ab:8c:92:d8:62:e3:74:61:26: e6:e8:e8:05:33:25:24:e4:65:17:44:02:ac:95:e4: b1:8d:c3:78:fd:3a:8f:b7:25:bf:8d:ee:2a:d8:f8: 17:15:6e:d3:c4:74:64:f6:6c:6e:a2:77:79:4e:be: 15:70:ef:17:03:e6:d8:22:9b:6c:51:4a:4c:22:75: 92:87:0d:b5:39:28:20:57:87:47:6e:9f:e5:af:80: ea:4a:00:b8:86:67:9b:04:d4:cb:f1:42:45:8d:79: b2:e2:4a:a2:60:06:67:be:f6:a2:69:9f:5c:45:2d: 53:9d:bf:ff:f1:ba:01:a4:5d:2b:5e:58:e0:7c:e9: 22:1d:fd:7b:4a:e5:1d:63:1d:2f:b0:81:64:0c:e6: 32:cf:dd:5c:5b:0a:f2:ef:ed:93:26:ec:af:b0:5e: e8:df:ba:84:59:e3:fa:a3:55:2e:67:90:b2:ee:f6: 07:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7E:63:C5:E5:A5:F8:BB:D5:24:65:70:7C:30:E1:65:37:BE:9B:5E X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211484.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.134.201.0/24 Signature Algorithm: sha256WithRSAEncryption 72:01:0f:1e:24:da:68:0d:9e:ba:3d:44:25:1e:b2:32:9f:65: bd:3a:52:3e:38:2d:dd:f2:23:09:5c:45:3e:d2:31:6f:a2:9c: 8d:9d:7a:6f:b7:8b:02:50:fa:ca:c9:ef:f5:0e:c6:54:81:4c: 78:ad:48:4e:03:0c:61:01:ad:f0:49:47:84:da:a1:d5:6b:00: 8f:d3:42:2c:a3:65:06:cb:e2:ad:4e:bd:c2:f3:82:d3:9f:da: 33:a3:ec:b8:d7:2e:31:bc:d8:97:9e:5a:47:6c:6c:30:5d:8e: 3d:f4:4d:0e:e2:50:b0:28:f0:b0:67:e6:99:31:9d:f8:77:2b: 8c:7e:a9:68:8a:f8:a0:f1:bd:15:18:ff:b3:b4:82:24:9c:25: 5a:8f:4f:7c:9c:cc:4d:3c:34:7f:e8:33:c8:6b:a1:c8:ce:78: e9:04:13:21:39:46:04:88:2c:89:e6:b5:24:c1:03:9b:cc:c5: cc:d3:86:f6:d2:7a:15:ad:93:1e:1c:25:f6:04:34:6b:96:2c: 39:a8:3f:dd:fc:58:d1:64:06:8e:8e:32:09:3c:0e:32:f0:3a: ff:45:74:67:f7:02:b0:58:49:91:89:c1:98:60:ea:04:93:2b: 20:45:65:92:d6:e7:28:7f:5d:76:3c:8a:03:f3:f7:96:1e:f8: c4:a4:1b:55 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUUOoVhn5P42ymLbnG0W4oFGiRz5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTExMDUyMTI4MTNaFw0yNjExMDQyMTMzMTNaMDMxMTAvBgNV BAMTKDg0N0U2M0M1RTVBNUY4QkJENTI0NjU3MDdDMzBFMTY1MzdCRTlCNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoisP7jnlsZoFkPOScJHo+1XhK FlGkzfbD2rw5IcB7RvO8cP5QTNe6u5f+U20pRw3gXYFSpS6QLaf6lY9StzoNvA89 D7cqTJx9FRySu5VUCKuMkthi43RhJubo6AUzJSTkZRdEAqyV5LGNw3j9Oo+3Jb+N 7irY+BcVbtPEdGT2bG6id3lOvhVw7xcD5tgim2xRSkwidZKHDbU5KCBXh0dun+Wv gOpKALiGZ5sE1MvxQkWNebLiSqJgBme+9qJpn1xFLVOdv//xugGkXSteWOB86SId /XtK5R1jHS+wgWQM5jLP3VxbCvLv7ZMm7K+wXujfuoRZ4/qjVS5nkLLu9gfpAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUhH5jxeWl+LvVJGVwfDDhZTe+m14wHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjExNDg0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4bJ MA0GCSqGSIb3DQEBCwUAA4IBAQByAQ8eJNpoDZ66PUQlHrIyn2W9OlI+OC3d8iMJ XEU+0jFvopyNnXpvt4sCUPrKye/1DsZUgUx4rUhOAwxhAa3wSUeE2qHVawCP00Is o2UGy+KtTr3C84LTn9ozo+y41y4xvNiXnlpHbGwwXY499E0O4lCwKPCwZ+aZMZ34 dyuMfqloivig8b0VGP+ztIIknCVaj098nMxNPDR/6DPIa6HIznjpBBMhOUYEiCyJ 5rUkwQObzMXM04b20noVrZMeHCX2BDRrliw5qD/d/FjRZAaOjjIJPA4y8Dr/RXRn 9wKwWEmRicGYYOoEkysgRWWS1ucof112PIoD8/eWHvjEpBtV -----END CERTIFICATE-----Generated at Fri Dec 5 18:23:08 2025 by rpki-client