This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211826.roa File: AS211826.roa (raw, json) Hash identifier: vU3gSuTNNVZ0eZIk1i6QA03/s/5LsG9AmZ4SsDM1/wQ= Subject key identifier: 54:BA:CC:CF:5F:E5:49:79:C9:DB:81:DB:96:CD:C9:50:C0:EC:03:3F Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 100D7ECCBF982269B3A8AEC4B504D3143F721737 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211826.roa Signing time: Mon 01 Dec 2025 00:17:35 +0000 ROA not before: Mon 01 Dec 2025 00:12:35 +0000 ROA not after: Mon 30 Nov 2026 00:17:35 +0000 asID: 211826 IP address blocks: 46.202.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 02 Dec 2025 00:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0d:7e:cc:bf:98:22:69:b3:a8:ae:c4:b5:04:d3:14:3f:72:17:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 1 00:12:35 2025 GMT Not After : Nov 30 00:17:35 2026 GMT Subject: CN=54BACCCF5FE54979C9DB81DB96CDC950C0EC033F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:88:ec:43:7d:29:69:65:a7:f7:b0:d4:21:bf: a0:8e:f8:c6:0e:de:a6:ea:28:5a:5c:af:0d:aa:c3: 48:70:d0:2d:70:ef:14:2b:96:65:b6:da:78:44:97: 85:e9:ca:6b:7e:7e:08:b2:60:55:14:19:41:d0:7a: 07:c1:0a:91:af:b3:2c:f1:58:d1:f6:a9:f2:19:3c: 0a:8c:d3:92:18:ee:27:fa:eb:4b:95:90:73:d5:c4: fc:06:91:55:f9:a1:eb:6e:9c:2f:0f:09:d2:16:03: 86:e4:68:31:ca:db:6b:89:6c:f3:53:41:b4:06:e8: ce:d9:c3:38:f2:b2:ab:9b:7c:01:1f:8c:55:79:43: 0d:75:03:8c:86:fb:08:1a:f8:6b:cd:76:5b:43:2a: 32:9b:18:ed:db:6e:86:c0:d2:23:1f:ac:db:ce:86: 34:81:4a:a8:a2:56:46:2e:65:bf:33:02:9c:f4:f9: a4:3d:71:7f:ea:b2:e5:0c:f6:0f:f5:2a:37:f2:d4: 67:82:d9:13:1b:32:ec:a7:a1:71:0f:58:5c:0c:16: fb:e6:cf:58:60:59:05:75:d8:46:d7:db:36:73:cc: 12:3e:ae:aa:b2:de:60:7f:58:40:3f:57:38:7a:a5: 9c:95:7c:05:df:93:a8:25:84:f6:dd:41:22:d6:79: 0f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BA:CC:CF:5F:E5:49:79:C9:DB:81:DB:96:CD:C9:50:C0:EC:03:3F X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS211826.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.202.33.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:2d:b9:40:07:5d:a7:a6:7b:7c:86:e5:31:3a:82:e7:0a:5f: b2:9d:74:92:6f:0d:9f:04:1d:e8:9b:09:d5:58:92:1d:5a:c5: 89:9c:7a:70:6e:74:02:5d:4a:68:a0:dc:1e:5c:6d:4c:c2:bb: 9a:1b:9f:eb:b6:c1:cc:f0:31:e5:66:4c:f3:ed:85:70:66:0b: 7d:17:3f:95:96:88:e0:e0:c1:63:aa:da:34:af:48:1e:25:f2: fa:32:bb:86:45:99:4f:ce:18:b6:e9:0f:54:0f:18:69:5e:e7: 1f:be:87:23:84:b6:43:0a:4b:2b:62:cc:1b:8e:1d:26:2f:1d: 52:42:5d:e4:84:81:61:b9:88:aa:59:99:bc:8c:67:87:82:84: ab:61:28:2c:c4:d2:8e:6f:0b:f8:50:ff:fc:45:19:1b:c5:c8: 80:98:ac:11:3d:3f:67:11:8f:b7:c2:84:fa:28:89:76:6c:3b: 4d:42:c6:bf:1c:63:da:6a:46:cb:80:48:cd:d1:a8:47:cf:25: f1:15:17:05:13:09:55:37:6a:38:68:58:27:38:9f:b5:87:71: 2c:5a:3c:73:d3:5c:10:ec:7d:8e:4e:50:60:cb:db:1d:02:77: 41:66:9e:04:0f:0b:e0:88:77:84:4f:0d:a8:01:51:99:66:a7: 77:0c:f5:c6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUEA1+zL+YImmzqK7EtQTTFD9yFzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMDEwMDEyMzVaFw0yNjExMzAwMDE3MzVaMDMxMTAvBgNV BAMTKDU0QkFDQ0NGNUZFNTQ5NzlDOURCODFEQjk2Q0RDOTUwQzBFQzAzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCniOxDfSlpZaf3sNQhv6CO+MYO 3qbqKFpcrw2qw0hw0C1w7xQrlmW22nhEl4Xpymt+fgiyYFUUGUHQegfBCpGvsyzx WNH2qfIZPAqM05IY7if660uVkHPVxPwGkVX5oetunC8PCdIWA4bkaDHK22uJbPNT QbQG6M7ZwzjysqubfAEfjFV5Qw11A4yG+wga+GvNdltDKjKbGO3bbobA0iMfrNvO hjSBSqiiVkYuZb8zApz0+aQ9cX/qsuUM9g/1Kjfy1GeC2RMbMuynoXEPWFwMFvvm z1hgWQV12EbX2zZzzBI+rqqy3mB/WEA/Vzh6pZyVfAXfk6glhPbdQSLWeQ8dAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUVLrMz1/lSXnJ24Hbls3JUMDsAz8wHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjExODI2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALsoh MA0GCSqGSIb3DQEBCwUAA4IBAQBtLblAB12npnt8huUxOoLnCl+ynXSSbw2fBB3o mwnVWJIdWsWJnHpwbnQCXUpooNweXG1MwruaG5/rtsHM8DHlZkzz7YVwZgt9Fz+V lojg4MFjqto0r0geJfL6MruGRZlPzhi26Q9UDxhpXucfvocjhLZDCksrYswbjh0m Lx1SQl3khIFhuYiqWZm8jGeHgoSrYSgsxNKObwv4UP/8RRkbxciAmKwRPT9nEY+3 woT6KIl2bDtNQsa/HGPaakbLgEjN0ahHzyXxFRcFEwlVN2o4aFgnOJ+1h3EsWjxz 01wQ7H2OTlBgy9sdAndBZp4EDwvgiHeETw2oAVGZZqd3DPXG -----END CERTIFICATE-----Generated at Mon Dec 1 07:52:56 2025 by rpki-client