This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS207821.roa File: AS207821.roa (raw, json) Hash identifier: duP/7c0JhJ943FShftflbTsUFfvdFJVpDpIIC2INpqY= Subject key identifier: B9:17:DC:86:CD:97:A8:7C:A5:0D:84:4F:FC:35:C8:87:C0:8C:6B:02 Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 63337EDD3E37D578F25C982E61E6F9C4B1F32DA6 Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS207821.roa Signing time: Wed 26 Nov 2025 11:09:47 +0000 ROA not before: Wed 26 Nov 2025 11:04:47 +0000 ROA not after: Wed 25 Nov 2026 11:09:47 +0000 asID: 207821 IP address blocks: 82.139.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:33:7e:dd:3e:37:d5:78:f2:5c:98:2e:61:e6:f9:c4:b1:f3:2d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Nov 26 11:04:47 2025 GMT Not After : Nov 25 11:09:47 2026 GMT Subject: CN=B917DC86CD97A87CA50D844FFC35C887C08C6B02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b7:6d:be:8a:3e:bd:04:c6:30:8c:4f:e3:ac: ae:db:53:99:ec:77:a4:13:a9:b0:ce:15:37:2a:20: 47:a1:f7:54:b3:f2:e4:0f:14:aa:96:b5:5b:67:c4: 90:97:0f:0d:74:a0:c3:1b:62:29:bf:ff:42:04:93: e6:62:14:72:91:cd:4a:1b:37:7a:d5:37:97:70:64: ee:6f:14:12:6b:36:d5:0a:78:84:05:cd:35:6d:91: 77:9e:9b:72:d9:84:97:d1:b1:63:8e:3c:fd:01:1e: 48:5b:88:fb:9f:3f:22:b9:57:0c:1c:0e:f1:70:62: a1:59:1e:25:f2:a5:ff:a7:6d:e0:c4:b5:86:bd:2c: 48:24:fb:ff:6f:9e:3e:c8:af:34:2e:2c:3d:af:41: 48:25:58:5e:76:05:37:59:5a:a1:ce:f4:ea:48:4c: 81:39:ae:8c:42:59:d1:7e:38:dd:13:23:16:7c:e8: d2:48:b2:c3:68:d1:97:61:14:73:47:f4:74:aa:52: b9:43:9f:58:9c:c3:20:eb:b8:74:0a:65:9a:49:38: b9:06:40:07:e7:f1:67:ee:ca:f5:0e:6b:84:61:13: b6:90:48:e3:3e:d5:4d:b7:26:07:5f:f1:62:9e:87: 3f:fe:40:64:43:e1:48:bd:5b:79:53:0f:fd:a3:ce: fb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:17:DC:86:CD:97:A8:7C:A5:0D:84:4F:FC:35:C8:87:C0:8C:6B:02 X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS207821.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.139.214.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:9f:c5:e0:7c:c2:b5:b1:8c:f7:01:d3:86:80:ab:77:83:e1: 96:59:ff:5d:60:f3:dd:68:84:7a:98:14:b8:21:b8:08:4d:d9: ba:4b:82:37:99:06:4a:81:42:49:e2:25:71:af:fa:fa:90:73: 5c:b4:66:e7:e9:5c:19:7e:35:6b:15:60:00:16:86:ae:16:ee: 25:02:0e:16:06:f1:0a:6b:2b:cd:ef:a8:f7:c4:4d:1f:32:28: 30:a5:f4:ce:ce:2e:a0:f1:85:d8:59:b4:7e:d5:67:16:58:69: 04:a2:1d:3a:84:3b:21:64:e9:8c:ae:52:d1:a6:02:82:cd:17: 9a:ec:b2:ab:1e:32:04:18:aa:03:ef:9f:00:5f:79:3c:aa:e5: 15:5d:2e:0b:9f:42:99:84:78:9c:d0:b5:fd:af:5c:68:c3:13: d0:b8:24:93:96:84:77:54:6c:58:b7:52:4e:99:72:02:da:5b: 56:3a:5a:4f:9d:3f:64:cf:55:4e:a5:5c:d6:3f:c2:00:0b:8e: 85:52:cc:5a:dd:57:8f:c6:17:a6:1d:a0:09:c0:12:4f:ff:86: 8f:78:89:de:c7:29:11:2e:ae:66:91:c4:27:c0:26:20:81:73: 61:8f:7e:10:2d:35:71:18:58:00:18:c2:bb:be:9b:43:31:02: 2e:ae:68:d8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUYzN+3T431XjyXJguYeb5xLHzLaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNTExMjYxMTA0NDdaFw0yNjExMjUxMTA5NDdaMDMxMTAvBgNV BAMTKEI5MTdEQzg2Q0Q5N0E4N0NBNTBEODQ0RkZDMzVDODg3QzA4QzZCMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkt22+ij69BMYwjE/jrK7bU5ns d6QTqbDOFTcqIEeh91Sz8uQPFKqWtVtnxJCXDw10oMMbYim//0IEk+ZiFHKRzUob N3rVN5dwZO5vFBJrNtUKeIQFzTVtkXeem3LZhJfRsWOOPP0BHkhbiPufPyK5Vwwc DvFwYqFZHiXypf+nbeDEtYa9LEgk+/9vnj7IrzQuLD2vQUglWF52BTdZWqHO9OpI TIE5roxCWdF+ON0TIxZ86NJIssNo0ZdhFHNH9HSqUrlDn1icwyDruHQKZZpJOLkG QAfn8WfuyvUOa4RhE7aQSOM+1U23Jgdf8WKehz/+QGRD4Ui9W3lTD/2jzvv7AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUuRfchs2XqHylDYRP/DXIh8CMawIwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTMjA3ODIxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUovW MA0GCSqGSIb3DQEBCwUAA4IBAQCfn8XgfMK1sYz3AdOGgKt3g+GWWf9dYPPdaIR6 mBS4IbgITdm6S4I3mQZKgUJJ4iVxr/r6kHNctGbn6VwZfjVrFWAAFoauFu4lAg4W BvEKayvN76j3xE0fMigwpfTOzi6g8YXYWbR+1WcWWGkEoh06hDshZOmMrlLRpgKC zRea7LKrHjIEGKoD758AX3k8quUVXS4Ln0KZhHic0LX9r1xowxPQuCSTloR3VGxY t1JOmXIC2ltWOlpPnT9kz1VOpVzWP8IAC46FUsxa3VePxhemHaAJwBJP/4aPeIne xykRLq5mkcQnwCYggXNhj34QLTVxGFgAGMK7vptDMQIurmjY -----END CERTIFICATE-----Generated at Sat Dec 6 03:35:10 2025 by rpki-client