This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213257.roa File: AS213257.roa (raw, json) Hash identifier: 1r5ZeRPbROOJdv8qGdzZx7lKLQ8I1QYtOc+IB8p8FtQ= Subject key identifier: 70:D5:EA:13:91:C4:44:DE:F0:44:84:1E:CA:AB:63:8D:1C:3D:23:4C Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Certificate serial: 05712E39347B39BF2F11C15715950A85A864F6E1 Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213257.roa Signing time: Fri 26 Dec 2025 13:55:08 +0000 ROA not before: Fri 26 Dec 2025 13:50:08 +0000 ROA not after: Fri 25 Dec 2026 13:55:08 +0000 asID: 213257 IP address blocks: 85.235.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 09:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:71:2e:39:34:7b:39:bf:2f:11:c1:57:15:95:0a:85:a8:64:f6:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b Validity Not Before: Dec 26 13:50:08 2025 GMT Not After : Dec 25 13:55:08 2026 GMT Subject: CN=70D5EA1391C444DEF044841ECAAB638D1C3D234C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:98:20:f0:7d:cd:88:2e:99:48:f1:a3:91:2f: ff:fa:33:53:a5:48:93:a7:00:27:9a:47:18:d0:bf: 63:eb:1e:a8:6a:c6:be:00:63:d6:27:0f:ba:f7:98: 5e:06:db:8d:ad:1e:91:fa:ed:6b:22:75:2f:20:db: 1d:71:b4:87:d3:a0:b7:e1:67:2f:04:fa:7a:9d:02: a4:d3:d0:18:a3:a5:17:54:fa:12:eb:1e:b5:c0:6e: cf:dc:51:b8:66:a2:38:17:6c:9c:de:82:65:bd:d2: 8e:56:9c:9a:69:62:99:72:0a:5a:ad:2b:ac:5d:74: ca:d2:ff:8b:35:44:b8:92:c9:22:a3:45:25:00:84: c8:9e:48:b5:2e:55:86:64:ed:45:28:26:24:ee:20: 03:bf:20:12:eb:f7:28:56:a6:9f:e4:43:27:08:d4: 51:98:a3:7e:85:60:24:9b:63:3d:b4:31:80:c9:c5: 92:fd:db:e9:be:67:1b:21:12:27:35:11:ea:d1:7f: 89:54:72:66:94:62:98:a5:f3:27:32:b2:82:1d:14: fc:0f:ef:2a:56:45:d8:e6:ed:00:b4:4e:13:50:17: 2a:04:10:78:02:0e:2a:45:f3:d4:59:ad:5e:6f:5e: 7a:09:92:eb:8b:ae:9a:72:44:15:17:03:e3:6f:cc: 0c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D5:EA:13:91:C4:44:DE:F0:44:84:1E:CA:AB:63:8D:1C:3D:23:4C X509v3 Authority Key Identifier: keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS213257.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.235.73.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:75:b1:e0:9a:0d:af:61:db:f7:95:e6:54:2a:3f:67:1f:cf: 2c:fd:db:98:8a:8d:7e:6f:69:c7:c6:58:f5:f4:12:74:04:33: 0a:db:bc:52:22:41:7d:f8:8b:f8:36:52:61:ce:66:f8:4e:0a: c1:a4:4c:86:99:ac:1e:6b:38:5b:e6:ce:dc:b3:c0:fe:d6:80: 0f:a7:e9:93:bb:b9:87:d8:2f:17:c2:cc:5a:ae:3f:0e:56:25: 5d:f7:e8:f1:1f:b9:14:e0:0a:db:2c:90:cf:2e:50:94:92:72: dc:d3:d4:75:04:36:5a:f4:2c:bc:06:37:db:d8:f5:2b:9b:45: fc:f3:54:5b:a3:24:38:cd:9d:fb:d6:9e:86:0d:3f:29:b6:00: cb:89:f8:5c:40:e0:f0:f5:03:94:e0:60:36:20:ba:99:86:ff: 55:0d:45:7f:58:ff:43:e9:92:da:56:ff:b7:82:5d:5d:a0:6f: e7:12:f5:e5:93:a0:ac:c7:10:d5:3e:b4:0d:c3:4f:be:7d:e0: 3e:1c:01:a3:a4:3c:2a:1c:a5:a3:01:c2:1d:1b:96:f7:cf:e9: 9d:c6:1f:a0:37:40:8b:ac:36:be:de:26:59:9b:8b:8d:85:28: ad:32:19:4b:62:1d:0b:3c:69:a4:fd:00:ff:85:7a:89:1f:f9: b9:73:3d:b1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUBXEuOTR7Ob8vEcFXFZUKhahk9uEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy ZjJmNDE1YjAeFw0yNTEyMjYxMzUwMDhaFw0yNjEyMjUxMzU1MDhaMDMxMTAvBgNV BAMTKDcwRDVFQTEzOTFDNDQ0REVGMDQ0ODQxRUNBQUI2MzhEMUMzRDIzNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQComCDwfc2ILplI8aORL//6M1Ol SJOnACeaRxjQv2PrHqhqxr4AY9YnD7r3mF4G242tHpH67WsidS8g2x1xtIfToLfh Zy8E+nqdAqTT0BijpRdU+hLrHrXAbs/cUbhmojgXbJzegmW90o5WnJppYplyClqt K6xddMrS/4s1RLiSySKjRSUAhMieSLUuVYZk7UUoJiTuIAO/IBLr9yhWpp/kQycI 1FGYo36FYCSbYz20MYDJxZL92+m+ZxshEic1EerRf4lUcmaUYpil8ycysoIdFPwP 7ypWRdjm7QC0ThNQFyoEEHgCDipF89RZrV5vXnoJkuuLrppyRBUXA+NvzAy7AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUcNXqE5HERN7wRIQeyqtjjRw9I0wwHwYDVR0j BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0 ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4 dlFWcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTMjEzMjU3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVetJ MA0GCSqGSIb3DQEBCwUAA4IBAQAddbHgmg2vYdv3leZUKj9nH88s/duYio1+b2nH xlj19BJ0BDMK27xSIkF9+Iv4NlJhzmb4TgrBpEyGmaweazhb5s7cs8D+1oAPp+mT u7mH2C8Xwsxarj8OViVd9+jxH7kU4ArbLJDPLlCUknLc09R1BDZa9Cy8Bjfb2PUr m0X881RboyQ4zZ371p6GDT8ptgDLifhcQODw9QOU4GA2ILqZhv9VDUV/WP9D6ZLa Vv+3gl1doG/nEvXlk6CsxxDVPrQNw0++feA+HAGjpDwqHKWjAcIdG5b3z+mdxh+g N0CLrDa+3iZZm4uNhSitMhlLYh0LPGmk/QD/hXqJH/m5cz2x -----END CERTIFICATE-----Generated at Mon Dec 29 00:44:51 2025 by rpki-client