This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212384.roa File: AS212384.roa (raw, json) Hash identifier: d5EWXem38gl2vGgTMDrFjk2JLx1Fpy81FBBH1CfpIRw= Subject key identifier: 8D:8A:08:D5:73:8B:F1:40:57:15:89:AD:3F:E2:8B:07:FC:73:C9:23 Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Certificate serial: 135F2377094175847E82A7A4F6CDC16CCEB5AF18 Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212384.roa Signing time: Thu 11 Dec 2025 12:16:12 +0000 ROA not before: Thu 11 Dec 2025 12:11:12 +0000 ROA not after: Thu 10 Dec 2026 12:16:12 +0000 asID: 212384 IP address blocks: 95.135.190.0/24 maxlen: 24 95.135.195.0/24 maxlen: 24 95.135.196.0/24 maxlen: 24 95.135.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 15:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5f:23:77:09:41:75:84:7e:82:a7:a4:f6:cd:c1:6c:ce:b5:af:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f Validity Not Before: Dec 11 12:11:12 2025 GMT Not After : Dec 10 12:16:12 2026 GMT Subject: CN=8D8A08D5738BF140571589AD3FE28B07FC73C923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ac:fc:08:f7:87:7e:2f:ed:b2:d6:da:f0:61: 96:33:43:88:87:95:4b:be:60:2c:f6:f6:18:87:7c: fe:08:8a:fc:1a:80:56:7f:9d:d6:c1:26:77:90:bd: 87:3d:2a:d1:9a:17:05:2b:40:eb:d9:44:fa:e4:77: b4:d7:0d:4d:40:d2:d6:5d:a2:c6:77:93:0a:8d:c5: 6c:19:18:ee:79:b5:08:ef:19:75:e3:b6:cc:41:0d: b5:07:25:92:2b:8d:38:4a:8d:f1:90:8f:61:32:aa: 79:80:1a:81:98:59:b3:bc:aa:e9:54:49:46:82:78: fa:21:50:66:d8:b4:c8:fc:b3:c5:dc:e6:a9:e6:5d: 42:93:92:29:d2:36:86:cd:42:19:5a:de:8f:61:e7: 45:3d:6c:e8:eb:35:f8:d6:b4:1c:3b:48:46:e0:0d: b3:64:40:38:de:74:c2:ef:78:25:69:4d:c1:78:8c: e8:fe:b8:ce:d2:be:3d:fa:02:e4:a9:2d:f6:e5:97: 83:9b:6d:5f:24:86:a3:a2:04:c5:22:5d:fa:e5:bd: ab:62:df:d3:12:91:fd:3c:9a:3e:0a:96:ae:d7:3a: 01:ee:c6:aa:e7:50:c7:46:ae:c1:d9:4a:1d:76:17: e7:62:94:7e:d0:a9:c7:7b:d9:15:83:82:70:ab:20: 2c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:8A:08:D5:73:8B:F1:40:57:15:89:AD:3F:E2:8B:07:FC:73:C9:23 X509v3 Authority Key Identifier: keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212384.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.135.190.0/24 95.135.195.0-95.135.196.255 95.135.198.0/24 Signature Algorithm: sha256WithRSAEncryption 07:f5:de:27:e1:b4:84:7a:b5:a6:17:08:09:51:62:2c:8e:aa: 7f:c6:42:e9:97:91:27:00:bf:ca:8c:a3:bf:25:ee:56:54:09: 5c:36:03:e4:e7:fb:76:58:00:d0:9f:c7:f5:30:25:6f:20:72: 31:ba:7a:f4:34:e6:fd:33:d3:3a:e7:84:5d:47:97:2a:2e:53: ab:43:ce:31:68:d7:f3:c3:ef:ea:cb:c4:4b:ff:9e:16:94:46: 1a:fe:ef:3d:ab:f2:de:eb:fe:dd:1d:06:f0:f3:92:7f:25:93: b4:78:c1:77:b4:fb:80:92:94:9b:9e:73:51:de:33:31:d4:c7: ec:e6:00:2b:48:82:0f:eb:6c:c0:f3:a3:9a:24:b5:59:4b:8a: 6e:11:69:22:00:d9:05:46:f9:06:05:03:fd:fe:f1:4e:e6:5e: 85:62:35:93:30:68:c4:40:75:84:fe:13:76:f2:4b:11:05:ea: d0:21:98:39:da:b6:3b:dd:b9:23:d8:6d:f8:88:ca:24:ad:a9: 67:17:14:fb:ea:9e:2c:18:58:42:12:a9:43:a8:8e:7f:31:04: d6:0a:bf:22:3d:f0:e3:a2:c0:45:c2:1d:2f:e5:09:a1:a1:f8: 99:1a:74:49:c6:75:fb:ed:38:2e:d9:f3:87:9f:83:c9:ff:97: 40:b5:6a:05 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIUE18jdwlBdYR+gqek9s3BbM61rxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk NWMxM2I1ZjAeFw0yNTEyMTExMjExMTJaFw0yNjEyMTAxMjE2MTJaMDMxMTAvBgNV BAMTKDhEOEEwOEQ1NzM4QkYxNDA1NzE1ODlBRDNGRTI4QjA3RkM3M0M5MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcrPwI94d+L+2y1trwYZYzQ4iH lUu+YCz29hiHfP4IivwagFZ/ndbBJneQvYc9KtGaFwUrQOvZRPrkd7TXDU1A0tZd osZ3kwqNxWwZGO55tQjvGXXjtsxBDbUHJZIrjThKjfGQj2EyqnmAGoGYWbO8qulU SUaCePohUGbYtMj8s8Xc5qnmXUKTkinSNobNQhla3o9h50U9bOjrNfjWtBw7SEbg DbNkQDjedMLveCVpTcF4jOj+uM7Svj36AuSpLfbll4ObbV8khqOiBMUiXfrlvati 39MSkf08mj4Klq7XOgHuxqrnUMdGrsHZSh12F+dilH7Qqcd72RWDgnCrICybAgMB AAGjggIeMIICGjAdBgNVHQ4EFgQUjYoI1XOL8UBXFYmtP+KLB/xzySMwHwYDVR0j BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjEyMzg0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAX4e+ MAwDBABfh8MDBABfh8QDBABfh8YwDQYJKoZIhvcNAQELBQADggEBAAf13ifhtIR6 taYXCAlRYiyOqn/GQumXkScAv8qMo78l7lZUCVw2A+Tn+3ZYANCfx/UwJW8gcjG6 evQ05v0z0zrnhF1HlyouU6tDzjFo1/PD7+rLxEv/nhaURhr+7z2r8t7r/t0dBvDz kn8lk7R4wXe0+4CSlJuec1HeMzHUx+zmACtIgg/rbMDzo5oktVlLim4RaSIA2QVG +QYFA/3+8U7mXoViNZMwaMRAdYT+E3bySxEF6tAhmDnatjvduSPYbfiIyiStqWcX FPvqniwYWEISqUOojn8xBNYKvyI98OOiwEXCHS/lCaGh+JkadEnGdfvtOC7Z84ef g8n/l0C1agU= -----END CERTIFICATE-----Generated at Thu Jan 15 23:27:23 2026 by rpki-client