This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS210574.roa File: AS210574.roa (raw, json) Hash identifier: q1g3RyBdFzlwRdciHwCvlUbL8kimbkeH2lnzdfy37zU= Subject key identifier: AC:71:C5:DD:F6:A3:A2:94:59:1B:1B:46:81:B6:E1:3B:E0:6A:B3:C5 Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 1B424F039810066B43608671BD99B2057EB97DF3 Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS210574.roa Signing time: Wed 17 Dec 2025 16:55:32 +0000 ROA not before: Wed 17 Dec 2025 16:50:32 +0000 ROA not after: Wed 16 Dec 2026 16:55:32 +0000 asID: 210574 IP address blocks: 141.98.112.0/24 maxlen: 24 141.98.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:42:4f:03:98:10:06:6b:43:60:86:71:bd:99:b2:05:7e:b9:7d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Dec 17 16:50:32 2025 GMT Not After : Dec 16 16:55:32 2026 GMT Subject: CN=AC71C5DDF6A3A294591B1B4681B6E13BE06AB3C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:03:ab:e6:c9:e7:30:51:48:f2:1a:28:d7:04: 1b:8b:fe:6b:b2:c7:3e:b9:0b:0e:32:4f:80:0a:65: 22:20:13:47:bd:bd:44:be:a5:90:b4:dd:55:7f:5e: 2a:0c:e2:f4:0d:12:43:e8:23:e3:81:f3:f6:fe:af: a3:9a:38:ef:61:23:7a:7c:33:7f:fc:89:2b:aa:2b: 77:f3:dc:fc:0e:f4:c9:9c:8f:c5:3f:43:23:52:33: 25:5c:c3:c7:32:ef:f2:26:b0:e6:86:34:ca:c5:df: 23:63:eb:f7:a7:e1:fd:87:95:83:8a:d9:8e:46:bb: b6:c0:93:9c:d8:fd:a1:2e:6c:1e:f9:54:89:ba:e5: 26:1d:bc:8c:0b:9f:95:2e:ac:7b:d8:ed:fd:f7:4e: bc:06:79:e4:d1:42:e8:b0:d5:db:10:cb:89:24:7f: be:d4:dc:ff:7d:45:a3:47:eb:83:f9:90:3b:bd:ac: 8c:c5:4c:01:6c:f8:86:e3:a0:83:ae:2e:38:07:2b: e4:c5:1e:45:ab:2b:6f:aa:37:db:a3:b4:5e:b0:8c: 40:d0:e2:28:c0:ac:0d:41:e1:6d:1a:04:20:6b:cc: aa:5b:54:cf:e1:4f:0b:0d:00:4f:6f:70:de:ec:d3: 94:db:7a:22:cb:0e:c9:f6:0b:32:83:ab:33:e4:18: d6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:71:C5:DD:F6:A3:A2:94:59:1B:1B:46:81:B6:E1:3B:E0:6A:B3:C5 X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS210574.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.112.0/24 141.98.115.0/24 Signature Algorithm: sha256WithRSAEncryption b4:89:28:17:b1:b1:11:99:c3:ff:8b:6c:d7:85:ac:77:cc:0d: 93:11:39:73:c6:be:43:3c:3a:d3:56:4a:ed:4c:15:10:db:80: bf:7b:88:ce:f2:37:82:e6:ce:fb:0a:7f:40:98:62:ef:70:37: f1:a0:e3:a1:a1:45:16:c4:2c:b2:dd:37:23:a5:34:ad:a8:04: 60:cb:2b:76:e2:b0:0e:19:f1:fc:1d:a7:06:24:71:b0:08:a5: 2a:1b:17:fe:3f:b2:26:90:2f:84:36:0b:d5:22:3f:fe:4e:f9: c4:84:db:ed:18:29:10:2c:25:f6:1c:76:75:84:ed:64:1c:b8: 77:68:b3:8d:62:ee:b0:e6:2f:03:94:98:1f:6e:18:e2:e6:ae: d0:31:c9:dc:3f:c9:32:ab:2e:92:03:e2:99:3e:98:00:d3:c0: bc:3b:1d:6d:54:a2:97:fb:7d:d7:08:01:48:b4:e9:a7:9a:c8: 34:6e:df:5b:12:9e:62:e9:fd:1e:3a:b4:4c:3c:00:d2:63:58: 62:c4:ec:2c:7c:9f:08:77:a0:6a:63:b7:52:32:90:aa:18:46: b0:5c:38:c9:5d:89:7f:92:d4:60:fc:70:13:0a:aa:f2:86:78: c3:7c:b0:00:ea:ec:67:07:2e:68:86:c2:78:87:a4:ef:44:24: 7d:5e:36:06 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUG0JPA5gQBmtDYIZxvZmyBX65ffMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNTEyMTcxNjUwMzJaFw0yNjEyMTYxNjU1MzJaMDMxMTAvBgNV BAMTKEFDNzFDNURERjZBM0EyOTQ1OTFCMUI0NjgxQjZFMTNCRTA2QUIzQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0A6vmyecwUUjyGijXBBuL/muy xz65Cw4yT4AKZSIgE0e9vUS+pZC03VV/XioM4vQNEkPoI+OB8/b+r6OaOO9hI3p8 M3/8iSuqK3fz3PwO9Mmcj8U/QyNSMyVcw8cy7/ImsOaGNMrF3yNj6/en4f2HlYOK 2Y5Gu7bAk5zY/aEubB75VIm65SYdvIwLn5UurHvY7f33TrwGeeTRQuiw1dsQy4kk f77U3P99RaNH64P5kDu9rIzFTAFs+IbjoIOuLjgHK+TFHkWrK2+qN9ujtF6wjEDQ 4ijArA1B4W0aBCBrzKpbVM/hTwsNAE9vcN7s05TbeiLLDsn2CzKDqzPkGNYDAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUrHHF3fajopRZGxtGgbbhO+Bqs8UwHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjEwNTc0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjWJw AwQAjWJzMA0GCSqGSIb3DQEBCwUAA4IBAQC0iSgXsbERmcP/i2zXhax3zA2TETlz xr5DPDrTVkrtTBUQ24C/e4jO8jeC5s77Cn9AmGLvcDfxoOOhoUUWxCyy3TcjpTSt qARgyyt24rAOGfH8HacGJHGwCKUqGxf+P7ImkC+ENgvVIj/+TvnEhNvtGCkQLCX2 HHZ1hO1kHLh3aLONYu6w5i8DlJgfbhji5q7QMcncP8kyqy6SA+KZPpgA08C8Ox1t VKKX+33XCAFItOmnmsg0bt9bEp5i6f0eOrRMPADSY1hixOwsfJ8Id6BqY7dSMpCq GEawXDjJXYl/ktRg/HATCqryhnjDfLAA6uxnBy5ohsJ4h6TvRCR9XjYG -----END CERTIFICATE-----Generated at Sat Dec 20 08:06:02 2025 by rpki-client