This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211373.roa File: AS211373.roa (raw, json) Hash identifier: dtqZ3b8i/HJMLctvLNRq4I+YzyJ/Ijk12esVeNf8Vso= Subject key identifier: 83:FE:B5:5B:F2:47:B9:1B:AD:54:9C:CA:2A:8D:A3:82:A2:B7:D3:8F Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Certificate serial: 7EC7A54CCC3E571F608711ED1AA7B8985DEA42DD Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211373.roa Signing time: Tue 16 Dec 2025 08:55:32 +0000 ROA not before: Tue 16 Dec 2025 08:50:32 +0000 ROA not after: Tue 15 Dec 2026 08:55:32 +0000 asID: 211373 IP address blocks: 45.149.100.0/24 maxlen: 24 45.149.102.0/24 maxlen: 24 176.105.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c7:a5:4c:cc:3e:57:1f:60:87:11:ed:1a:a7:b8:98:5d:ea:42:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d Validity Not Before: Dec 16 08:50:32 2025 GMT Not After : Dec 15 08:55:32 2026 GMT Subject: CN=83FEB55BF247B91BAD549CCA2A8DA382A2B7D38F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6f:ea:ec:5b:b3:02:fe:58:22:5a:2d:f5:d3: 6e:b1:0c:ce:3d:58:8d:7b:ed:98:34:c3:99:59:89: 2e:44:f6:75:c3:7e:a2:86:22:43:50:0d:e9:7e:e6: 5f:c0:1d:c3:18:a5:18:4b:91:a9:1c:8e:12:75:47: d3:8b:04:75:e1:68:66:eb:8a:59:61:a6:4f:ff:2f: 04:15:bd:bb:85:b9:39:10:27:37:9d:45:07:0d:44: 06:93:19:33:da:47:03:fa:97:01:7e:d2:13:b0:de: 98:49:6d:d0:56:12:20:35:1a:93:35:eb:ee:3d:73: 2d:6b:31:75:ea:1b:06:28:97:52:cd:be:78:f2:ff: 72:5f:be:6f:f7:2e:8b:69:e1:5f:c3:5d:e3:29:5a: ac:a1:99:99:43:85:db:36:5b:c5:ed:da:83:9f:ea: 37:92:10:f3:38:3d:86:8b:b1:66:cc:f5:e6:22:23: 5a:6f:99:bf:de:22:f0:40:9b:70:77:8f:80:ea:ff: b0:9c:0a:36:42:4d:a9:35:c5:83:a4:70:fe:27:f1: 31:73:b4:29:ec:13:fd:11:cf:4b:8e:e4:59:2d:af: 2e:9c:c9:24:bc:70:ce:91:2f:1e:60:4b:02:5c:cd: 0f:d3:4c:2b:9a:90:9a:d4:84:91:8f:ec:9c:e7:e5: a1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FE:B5:5B:F2:47:B9:1B:AD:54:9C:CA:2A:8D:A3:82:A2:B7:D3:8F X509v3 Authority Key Identifier: keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211373.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.100.0/24 45.149.102.0/24 176.105.227.0/24 Signature Algorithm: sha256WithRSAEncryption c1:7e:f4:a5:88:55:6b:e8:0a:0e:87:7b:05:9f:58:37:39:ec: 76:0d:be:2b:13:4c:81:43:a3:ad:d5:c8:5f:84:8f:ed:44:bf: 28:ef:37:88:56:64:64:4e:95:b5:c5:2a:a4:de:f3:73:70:ac: 5b:6b:de:ea:e7:9d:7b:36:85:bf:39:1a:28:b4:9d:2d:55:cd: 2f:59:fe:75:27:3d:c0:36:8b:df:a7:af:b9:f7:0a:c4:15:30: c2:55:69:c3:4f:f6:74:ed:4f:2b:9e:81:b1:a0:23:74:52:dd: 5d:19:76:d4:68:e4:09:f5:77:0a:c5:2f:e1:e1:8e:d4:f1:fe: a8:4a:e7:70:ce:f6:fa:55:18:8b:1c:e6:b3:d7:84:83:5e:21: c1:13:40:9d:c4:26:ea:67:cf:39:19:1d:a3:ab:3d:39:3e:09: 52:0d:5b:88:7c:3a:f4:29:ce:94:9f:0a:64:ff:f0:0b:51:29: 0c:ca:e5:de:c6:ca:b1:b4:e3:21:6b:2d:73:d6:db:43:72:f8: b2:0d:d0:57:71:00:f5:1f:0d:a5:35:87:06:93:57:f2:05:82: c9:05:a0:c6:11:6e:e1:00:0b:ce:fd:ce:0b:f8:3c:c5:b9:bd: ff:b2:af:d7:e2:6e:ab:83:fb:bf:92:f6:37:a0:f9:3b:84:8c: 3e:ff:89:6a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUfselTMw+Vx9ghxHtGqe4mF3qQt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi MmQ2ZWQ5ZDAeFw0yNTEyMTYwODUwMzJaFw0yNjEyMTUwODU1MzJaMDMxMTAvBgNV BAMTKDgzRkVCNTVCRjI0N0I5MUJBRDU0OUNDQTJBOERBMzgyQTJCN0QzOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLb+rsW7MC/lgiWi31026xDM49 WI177Zg0w5lZiS5E9nXDfqKGIkNQDel+5l/AHcMYpRhLkakcjhJ1R9OLBHXhaGbr illhpk//LwQVvbuFuTkQJzedRQcNRAaTGTPaRwP6lwF+0hOw3phJbdBWEiA1GpM1 6+49cy1rMXXqGwYol1LNvnjy/3Jfvm/3Lotp4V/DXeMpWqyhmZlDhds2W8Xt2oOf 6jeSEPM4PYaLsWbM9eYiI1pvmb/eIvBAm3B3j4Dq/7CcCjZCTak1xYOkcP4n8TFz tCnsE/0Rz0uO5Fktry6cySS8cM6RLx5gSwJczQ/TTCuakJrUhJGP7Jzn5aF1AgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUg/61W/JHuRutVJzKKo2jgqK3048wHwYDVR0j BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjExMzczLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZVk AwQALZVmAwQAsGnjMA0GCSqGSIb3DQEBCwUAA4IBAQDBfvSliFVr6AoOh3sFn1g3 Oex2Db4rE0yBQ6Ot1chfhI/tRL8o7zeIVmRkTpW1xSqk3vNzcKxba97q5517NoW/ ORootJ0tVc0vWf51Jz3ANovfp6+59wrEFTDCVWnDT/Z07U8rnoGxoCN0Ut1dGXbU aOQJ9XcKxS/h4Y7U8f6oSudwzvb6VRiLHOaz14SDXiHBE0CdxCbqZ885GR2jqz05 PglSDVuIfDr0Kc6Unwpk//ALUSkMyuXexsqxtOMhay1z1ttDcviyDdBXcQD1Hw2l NYcGk1fyBYLJBaDGEW7hAAvO/c4L+DzFub3/sq/X4m6rg/u/kvY3oPk7hIw+/4lq -----END CERTIFICATE-----Generated at Tue Dec 16 22:31:16 2025 by rpki-client