This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS12027.roa File: AS12027.roa (raw, json) Hash identifier: jpMhEEZVbOfdPZa0V8De+S2PTR9BnDL78tswfw/gKlk= Subject key identifier: 80:FE:54:28:8C:D0:4F:69:D6:03:B6:16:D5:CE:BE:C2:6C:B4:5F:74 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 092B8B7A53FAF155AFECE36E295A71C3007E0001 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS12027.roa Signing time: Wed 24 Dec 2025 19:57:46 +0000 ROA not before: Wed 24 Dec 2025 19:52:46 +0000 ROA not after: Wed 23 Dec 2026 19:57:46 +0000 asID: 12027 IP address blocks: 82.41.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:2b:8b:7a:53:fa:f1:55:af:ec:e3:6e:29:5a:71:c3:00:7e:00:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 24 19:52:46 2025 GMT Not After : Dec 23 19:57:46 2026 GMT Subject: CN=80FE54288CD04F69D603B616D5CEBEC26CB45F74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a4:ab:ee:5b:ab:22:27:5d:7c:67:40:e8:b5: 9d:63:3c:fb:aa:f1:c5:15:5f:60:05:75:1b:b9:1d: 9c:14:75:03:6f:d7:82:37:85:3b:32:dc:92:64:05: 4a:2d:b4:ff:68:02:f0:f6:82:87:90:c8:a3:24:22: ce:cb:50:75:66:7f:84:35:e0:9e:08:8f:0f:ef:ca: f5:81:92:58:57:34:50:5c:32:6e:7a:e5:92:01:ab: e5:78:ae:98:51:da:fe:e7:9c:38:af:41:19:6c:a3: dd:11:25:34:cd:29:d9:51:e3:52:ab:8b:65:21:8f: 51:57:bc:c1:7c:49:1a:56:38:19:cf:ab:a1:4a:6c: f0:77:82:57:1d:1f:80:ab:78:e6:d4:38:d3:7d:8e: c9:32:1b:76:90:28:75:cb:2a:3e:cd:34:aa:45:38: 8a:2b:a2:a0:04:f6:4c:b1:f3:99:34:7d:e0:c4:da: 71:8c:94:f5:4e:0e:9d:54:b7:10:80:17:21:0a:48: 79:07:4b:0f:f1:17:f3:0b:13:7a:82:5f:fe:86:06: 0a:69:e9:95:a4:2d:81:52:0f:5e:61:18:ea:58:f3: 0a:69:cb:eb:da:b6:5e:9c:1e:6e:97:55:43:10:29: 4f:7e:d5:b5:3c:c3:74:a0:0e:ac:eb:9a:9f:3e:7a: 00:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FE:54:28:8C:D0:4F:69:D6:03:B6:16:D5:CE:BE:C2:6C:B4:5F:74 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS12027.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.41.34.0/23 Signature Algorithm: sha256WithRSAEncryption 12:c1:a3:c7:2c:83:89:14:1c:58:a3:87:d5:0a:20:7f:c8:af: 86:c7:c1:9b:5d:5e:97:b1:9f:9d:97:73:4a:c6:33:4d:26:26: ad:71:ed:a4:f9:ae:e4:46:31:63:85:2c:1b:30:4a:1c:7d:42: 02:0e:36:c9:88:05:56:c3:66:5e:e3:4a:57:32:d1:b7:dd:5d: 45:99:72:3b:9e:9c:9b:bd:14:70:6f:66:75:99:a1:c0:dd:d8: 30:71:96:f6:0d:ba:52:ab:cf:bf:88:37:37:9d:75:c9:fa:db: 84:19:a6:97:a7:77:23:e9:de:36:a6:52:75:3e:63:21:49:00: 08:52:e7:62:86:66:e1:d9:b0:d9:90:7a:a1:76:ff:fd:d8:fc: ab:c9:4f:24:c2:79:f0:bb:bf:bb:6f:9f:ff:f0:99:fd:33:a3: 0d:c6:ff:08:ce:16:e0:da:2e:15:85:23:58:46:6c:df:70:10: 09:52:5d:3f:c8:64:75:fb:20:7e:c7:13:67:e3:e8:c6:28:56: 7b:5c:c3:1a:bf:e9:65:51:52:0c:05:99:3b:63:54:cf:0e:8f: 7f:bf:9b:44:64:c9:6e:3d:d5:e8:16:ba:86:d9:0b:da:66:4e: fe:e4:a6:9e:34:47:fe:85:d0:7e:10:80:4e:58:c4:56:d6:f8: e3:f9:b2:85 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUCSuLelP68VWv7ONuKVpxwwB+AAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMjQxOTUyNDZaFw0yNjEyMjMxOTU3NDZaMDMxMTAvBgNV BAMTKDgwRkU1NDI4OENEMDRGNjlENjAzQjYxNkQ1Q0VCRUMyNkNCNDVGNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9pKvuW6siJ118Z0DotZ1jPPuq 8cUVX2AFdRu5HZwUdQNv14I3hTsy3JJkBUottP9oAvD2goeQyKMkIs7LUHVmf4Q1 4J4Ijw/vyvWBklhXNFBcMm565ZIBq+V4rphR2v7nnDivQRlso90RJTTNKdlR41Kr i2Uhj1FXvMF8SRpWOBnPq6FKbPB3glcdH4CreObUONN9jskyG3aQKHXLKj7NNKpF OIoroqAE9kyx85k0feDE2nGMlPVODp1UtxCAFyEKSHkHSw/xF/MLE3qCX/6GBgpp 6ZWkLYFSD15hGOpY8wppy+vatl6cHm6XVUMQKU9+1bU8w3SgDqzrmp8+egDpAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUgP5UKIzQT2nWA7YW1c6+wmy0X3QwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTIwMjcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFSKSIw DQYJKoZIhvcNAQELBQADggEBABLBo8csg4kUHFijh9UKIH/Ir4bHwZtdXpexn52X c0rGM00mJq1x7aT5ruRGMWOFLBswShx9QgIONsmIBVbDZl7jSlcy0bfdXUWZcjue nJu9FHBvZnWZocDd2DBxlvYNulKrz7+INzeddcn624QZppendyPp3jamUnU+YyFJ AAhS52KGZuHZsNmQeqF2//3Y/KvJTyTCefC7v7tvn//wmf0zow3G/wjOFuDaLhWF I1hGbN9wEAlSXT/IZHX7IH7HE2fj6MYoVntcwxq/6WVRUgwFmTtjVM8Oj3+/m0Rk yW491egWuobZC9pmTv7kpp40R/6F0H4QgE5YxFbW+OP5soU= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:16 2026 by rpki-client