This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS8820.roa File: AS8820.roa (raw, json) Hash identifier: 37NLowiuT9jy/dagftAxkW62Xv5potfYYsy61mpYIOM= Subject key identifier: 33:22:06:D8:29:E7:E9:9F:1F:50:AB:C1:EA:39:DD:03:CE:8C:32:F2 Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 3D4E268C037BBEE9625FF3BA42EF47B963CAC85B Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS8820.roa Signing time: Mon 17 Nov 2025 15:01:43 +0000 ROA not before: Mon 17 Nov 2025 14:56:43 +0000 ROA not after: Mon 16 Nov 2026 15:01:43 +0000 asID: 8820 IP address blocks: 81.92.0.0/20 maxlen: 24 82.139.196.0/22 maxlen: 24 82.139.200.0/22 maxlen: 24 82.139.222.0/23 maxlen: 24 82.139.252.0/22 maxlen: 24 195.8.224.0/19 maxlen: 24 195.8.253.0/24 maxlen: 24 195.8.254.2/31 maxlen: 32 212.17.224.0/19 maxlen: 24 212.60.128.0/20 maxlen: 24 213.240.128.0/18 maxlen: 24 2a01:170::/29 maxlen: 29 2a01:170::/32 maxlen: 32 2a01:170::/32 maxlen: 64 2a01:170:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:4e:26:8c:03:7b:be:e9:62:5f:f3:ba:42:ef:47:b9:63:ca:c8:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Nov 17 14:56:43 2025 GMT Not After : Nov 16 15:01:43 2026 GMT Subject: CN=332206D829E7E99F1F50ABC1EA39DD03CE8C32F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:10:d7:4a:a6:48:8b:8a:6d:15:c7:a6:bb: 9d:2d:60:68:a4:1c:73:2a:99:98:1c:81:29:66:b4: 62:57:48:10:48:57:56:6a:c7:de:da:88:fb:75:d8: 8b:06:22:c0:eb:a3:2c:ef:1f:12:39:e5:8b:db:b0: 88:54:42:53:a3:cd:00:ce:62:33:f3:75:04:c9:cc: ee:9e:76:75:5f:2f:77:98:ec:3d:89:80:e5:2c:28: 2a:89:09:d5:05:f7:31:e7:97:ae:06:32:c4:fd:30: c8:b9:b0:bb:1c:f6:1d:9b:60:48:b9:d1:88:bc:4e: 73:61:75:ac:1e:56:ff:2e:6d:26:71:3a:67:a4:35: d5:21:de:43:ed:39:46:ab:ad:91:d5:94:7a:e4:fc: bb:d5:c9:a1:00:7f:56:3a:e0:5b:1c:2f:e4:8c:bc: b2:c1:25:4d:02:16:ad:0d:b1:b6:6a:cb:9b:97:f8: 22:12:69:bd:c8:77:32:52:1a:78:6c:71:ac:60:25: b0:51:e2:17:12:19:fc:9d:ba:d9:2c:0a:aa:81:09: 5d:1c:38:17:04:0e:78:9e:74:63:23:d8:71:92:fd: 85:9b:7f:fb:c0:db:da:23:a6:52:f5:e6:3e:4a:5c: dc:cb:cf:e8:15:f6:f8:10:1b:ee:63:55:b7:fe:70: 15:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:22:06:D8:29:E7:E9:9F:1F:50:AB:C1:EA:39:DD:03:CE:8C:32:F2 X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/AS8820.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.92.0.0/20 82.139.196.0-82.139.203.255 82.139.222.0/23 82.139.252.0/22 195.8.224.0/19 212.17.224.0/19 212.60.128.0/20 213.240.128.0/18 IPv6: 2a01:170::/29 Signature Algorithm: sha256WithRSAEncryption 9d:b4:ba:76:da:2c:99:fb:a5:b0:e2:20:8f:cc:96:21:e9:00: ac:d6:df:7a:bc:76:a4:d3:f9:5e:4d:3d:91:95:4d:e1:d7:f1: 54:85:e4:f5:67:e0:da:b3:18:ee:88:1b:07:50:e1:81:20:85: fa:f6:fd:e2:e0:bc:06:f8:8b:1f:c1:06:48:74:d3:45:4e:5d: 7d:b3:1f:8e:0c:fa:62:06:51:b9:2b:dd:34:61:9a:e0:53:ed: c6:09:40:98:b1:1f:8b:10:d4:39:57:69:8d:d2:84:14:ba:f6: 41:38:10:07:af:cb:9a:e1:8f:c9:0f:f5:69:5a:d8:9b:fb:ed: 71:a8:5c:47:2b:22:03:d7:76:cd:09:34:69:5f:de:5e:be:ce: 02:71:0f:05:f9:7e:fd:11:ad:2f:96:f2:9b:b0:e8:18:fd:64: 3e:df:1a:ef:08:a6:e3:d3:26:ef:b1:f4:ba:5d:d3:12:99:85: 9c:dc:07:c4:f9:39:f7:04:28:90:44:f2:e6:38:e9:05:71:8e: 8f:82:5d:ff:e8:6f:8e:8b:a8:d6:76:b4:88:8b:c0:2e:03:7d: 0d:1b:0f:32:4f:03:e9:14:e3:92:c3:86:87:2a:1f:69:f4:11: 71:3a:14:0e:42:0d:db:e7:82:1c:1f:d2:b1:1c:4c:57:85:91: 8b:fd:30:26 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIUPU4mjAN7vuliX/O6Qu9HuWPKyFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNTExMTcxNDU2NDNaFw0yNjExMTYxNTAxNDNaMDMxMTAvBgNV BAMTKDMzMjIwNkQ4MjlFN0U5OUYxRjUwQUJDMUVBMzlERDAzQ0U4QzMyRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rRDXSqZIi4ptFcemu50tYGik HHMqmZgcgSlmtGJXSBBIV1Zqx97aiPt12IsGIsDroyzvHxI55YvbsIhUQlOjzQDO YjPzdQTJzO6ednVfL3eY7D2JgOUsKCqJCdUF9zHnl64GMsT9MMi5sLsc9h2bYEi5 0Yi8TnNhdaweVv8ubSZxOmekNdUh3kPtOUarrZHVlHrk/LvVyaEAf1Y64FscL+SM vLLBJU0CFq0NsbZqy5uX+CISab3IdzJSGnhscaxgJbBR4hcSGfydutksCqqBCV0c OBcEDniedGMj2HGS/YWbf/vA29ojplL15j5KXNzLz+gV9vgQG+5jVbf+cBW3AgMB AAGjggJJMIICRTAdBgNVHQ4EFgQUMyIG2Cnn6Z8fUKvB6jndA86MMvIwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyZGI3NTU1LTlhYTQt NDk4My05MzE2LTczODA5ZGQzNTRiYy8wL0FTODgyMC5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBgBggrBgEFBQcBBwEB/wRRME8wPgQCAAEwOAMEBFFcADAM AwQCUovEAwQCUovIAwQBUoveAwQCUov8AwQFwwjgAwQF1BHgAwQE1DyAAwQG1fCA MA0EAgACMAcDBQMqAQFwMA0GCSqGSIb3DQEBCwUAA4IBAQCdtLp22iyZ+6Ww4iCP zJYh6QCs1t96vHak0/leTT2RlU3h1/FUheT1Z+DasxjuiBsHUOGBIIX69v3i4LwG +IsfwQZIdNNFTl19sx+ODPpiBlG5K900YZrgU+3GCUCYsR+LENQ5V2mN0oQUuvZB OBAHr8ua4Y/JD/VpWtib++1xqFxHKyID13bNCTRpX95evs4CcQ8F+X79Ea0vlvKb sOgY/WQ+3xrvCKbj0ybvsfS6XdMSmYWc3AfE+Tn3BCiQRPLmOOkFcY6Pgl3/6G+O i6jWdrSIi8AuA30NGw8yTwPpFOOSw4aHKh9p9BFxOhQOQg3b54IcH9KxHExXhZGL /TAm -----END CERTIFICATE-----Generated at Sat Dec 6 04:35:26 2025 by rpki-client