This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142036.roa
File: AS142036.roa (raw, json)
Hash identifier: 29/N2nJGMNbYvv4/3RKKuW998K+DhsogxPs0X8UCpaA=
Subject key identifier: B2:D2:07:3D:DA:CA:84:B0:0E:B4:E6:F0:C6:01:08:75:12:E2:A3:F8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 6C9D6870F0FBBEC722C3A2A0F81320C24B3C93BE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142036.roa
Signing time: Fri 19 Dec 2025 12:55:32 +0000
ROA not before: Fri 19 Dec 2025 12:50:32 +0000
ROA not after: Fri 18 Dec 2026 12:55:32 +0000
asID: 142036
IP address blocks: 82.29.53.0/24 maxlen: 24
82.29.54.0/24 maxlen: 24
82.29.67.0/24 maxlen: 24
82.29.71.0/24 maxlen: 24
82.29.72.0/24 maxlen: 24
82.29.128.0/24 maxlen: 24
82.29.129.0/24 maxlen: 24
82.29.130.0/24 maxlen: 24
82.29.131.0/24 maxlen: 24
82.29.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 04:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:9d:68:70:f0:fb:be:c7:22:c3:a2:a0:f8:13:20:c2:4b:3c:93:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 19 12:50:32 2025 GMT
Not After : Dec 18 12:55:32 2026 GMT
Subject: CN=B2D2073DDACA84B00EB4E6F0C601087512E2A3F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:44:f0:6d:3d:e7:b6:f1:49:5c:46:f1:ce:3e:
3c:ea:b3:81:6b:cf:79:61:35:c3:52:e6:b4:47:76:
74:65:1c:e0:3d:b6:67:8d:8e:bf:f6:8f:ca:ab:65:
a5:9e:b3:3a:f6:21:27:55:1c:a8:d9:82:63:39:34:
19:44:dd:8e:43:43:1d:cb:76:d2:79:a4:93:ef:98:
76:01:f6:97:ed:79:ea:5a:cc:35:f8:35:ca:82:21:
23:fe:58:d8:1d:bc:0f:20:d4:3f:ee:39:ac:0b:7b:
02:45:56:a6:73:fe:01:bd:26:cf:f1:12:55:2c:d6:
da:72:2c:12:fe:3e:16:83:8c:99:98:78:38:e5:60:
eb:3b:68:6e:02:74:a2:b9:ed:8e:eb:11:cf:32:3a:
30:4e:6c:b6:65:30:77:4c:a7:d6:82:f9:52:28:7f:
99:08:3f:dd:63:f2:8a:d7:8e:fe:33:3f:df:ac:07:
4c:0a:48:f6:3c:ea:be:81:53:02:55:b2:b5:52:bc:
40:fb:0a:bf:e9:fa:75:02:60:fb:a1:21:41:d5:37:
80:63:52:64:be:ce:a1:03:18:1e:1b:96:a2:ee:31:
cf:4a:6a:a7:3d:7e:6b:ea:da:ea:a0:3c:99:ba:3e:
82:b8:06:56:5a:8e:4d:7a:ed:59:57:1a:84:74:37:
53:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D2:07:3D:DA:CA:84:B0:0E:B4:E6:F0:C6:01:08:75:12:E2:A3:F8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS142036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.53.0-82.29.54.255
82.29.67.0/24
82.29.71.0-82.29.72.255
82.29.128.0-82.29.132.255
Signature Algorithm: sha256WithRSAEncryption
8b:61:48:8d:60:21:f2:da:a4:34:77:6c:1d:ea:17:13:35:ee:
5a:f9:6b:50:d5:50:f3:e8:4c:df:58:42:d0:3b:73:4a:fb:40:
eb:8d:68:d1:be:16:84:a1:1b:45:07:e6:62:1e:98:c2:74:98:
a9:e9:e9:c1:0d:4d:01:b9:57:ce:04:4e:ce:57:8b:70:52:8a:
87:68:91:e6:5f:e4:23:8d:60:15:a6:45:4d:16:20:e2:37:d0:
fb:54:32:84:d7:7d:8a:b0:ba:55:06:4c:df:52:39:72:3d:95:
53:0c:ba:67:0c:4f:8c:92:12:c7:5d:4f:8a:ea:88:ca:c9:f6:
19:84:8e:cb:48:a7:3a:db:7e:91:12:5c:e3:7e:44:25:c3:06:
32:69:f3:64:b6:e6:60:f6:f3:ad:47:bd:4b:24:ec:b4:9f:8e:
c4:65:81:08:25:66:99:93:4e:ab:80:6a:4f:f0:da:38:dd:ae:
2b:fd:0a:98:5b:f2:1e:61:bf:c0:08:86:5e:3c:c2:df:e8:cd:
92:de:8d:9c:c4:84:c6:ed:57:db:64:fd:41:5f:b9:61:e4:ff:
f6:c8:6b:90:84:5b:42:98:ad:5e:7a:77:e8:39:36:a9:c5:e6:
50:66:04:af:c5:85:1b:36:1c:a6:db:80:ae:f7:1e:9c:87:94:
d5:56:42:a3
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUbJ1ocPD7vsciw6Kg+BMgwks8k74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTEyMTkxMjUwMzJaFw0yNjEyMTgxMjU1MzJaMDMxMTAvBgNV
BAMTKEIyRDIwNzNEREFDQTg0QjAwRUI0RTZGMEM2MDEwODc1MTJFMkEzRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnRPBtPee28UlcRvHOPjzqs4Fr
z3lhNcNS5rRHdnRlHOA9tmeNjr/2j8qrZaWeszr2ISdVHKjZgmM5NBlE3Y5DQx3L
dtJ5pJPvmHYB9pfteepazDX4NcqCISP+WNgdvA8g1D/uOawLewJFVqZz/gG9Js/x
ElUs1tpyLBL+PhaDjJmYeDjlYOs7aG4CdKK57Y7rEc8yOjBObLZlMHdMp9aC+VIo
f5kIP91j8orXjv4zP9+sB0wKSPY86r6BUwJVsrVSvED7Cr/p+nUCYPuhIUHVN4Bj
UmS+zqEDGB4blqLuMc9Kaqc9fmvq2uqgPJm6PoK4BlZajk167VlXGoR0N1PPAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUstIHPdrKhLAOtObwxgEIdRLio/gwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTQyMDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBABS
HTUDBABSHTYDBABSHUMwDAMEAFIdRwMEAFIdSDAMAwQHUh2AAwQAUh2EMA0GCSqG
SIb3DQEBCwUAA4IBAQCLYUiNYCHy2qQ0d2wd6hcTNe5a+WtQ1VDz6EzfWELQO3NK
+0DrjWjRvhaEoRtFB+ZiHpjCdJip6enBDU0BuVfOBE7OV4twUoqHaJHmX+QjjWAV
pkVNFiDiN9D7VDKE132KsLpVBkzfUjlyPZVTDLpnDE+MkhLHXU+K6ojKyfYZhI7L
SKc6236RElzjfkQlwwYyafNktuZg9vOtR71LJOy0n47EZYEIJWaZk06rgGpP8No4
3a4r/QqYW/IeYb/ACIZePMLf6M2S3o2cxITG7VfbZP1BX7lh5P/2yGuQhFtCmK1e
enfoOTapxeZQZgSvxYUbNhym24Cu9x6ch5TVVkKj
-----END CERTIFICATE-----
Generated at Sun Jan 18 08:57:02 2026 by rpki-client