This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS18966.roa File: AS18966.roa (raw, json) Hash identifier: +YwykEqppL+pm+wPdAOAjzKIYyHGnZOcUj8wMTWGp/M= Subject key identifier: 58:66:99:0D:DE:86:84:CC:A9:E2:6F:65:6F:26:99:CD:BC:EF:F3:FB Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 47F4FA15E2D561FB1557FCA9A4ECE0989637A3F5 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS18966.roa Signing time: Wed 31 Dec 2025 15:55:33 +0000 ROA not before: Wed 31 Dec 2025 15:50:33 +0000 ROA not after: Wed 30 Dec 2026 15:55:33 +0000 asID: 18966 IP address blocks: 82.22.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f4:fa:15:e2:d5:61:fb:15:57:fc:a9:a4:ec:e0:98:96:37:a3:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 31 15:50:33 2025 GMT Not After : Dec 30 15:55:33 2026 GMT Subject: CN=5866990DDE8684CCA9E26F656F2699CDBCEFF3FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f0:f3:83:69:c7:d2:43:23:ea:5e:d1:c6:73: 97:01:a3:6e:f9:98:ad:f9:61:d7:90:90:19:8d:1f: 7b:be:fd:ea:07:7b:1d:2e:b4:d5:06:dd:27:aa:28: 2b:f8:3c:7a:a5:84:86:6d:cc:2c:a6:1d:86:44:b4: 12:99:3e:5a:7e:0c:0a:84:fb:ac:f1:ec:78:07:5c: 01:8d:7c:38:e3:f0:43:42:cc:4b:d0:11:38:e5:15: 4a:16:69:98:ab:a5:52:9c:b2:4c:fd:68:b3:93:a3: cd:54:32:85:a4:82:88:8d:35:96:22:f0:0b:d6:49: fc:99:7c:eb:f8:b9:21:30:fb:2e:be:b7:dd:a2:d0: 4c:49:40:a1:d2:27:14:ec:41:b4:fe:9a:26:98:e6: 76:a2:b2:a5:c1:50:c3:5a:47:35:f4:9f:9c:a8:06: 7d:36:7a:db:75:1b:e1:85:59:2d:ed:27:7c:a9:d5: 65:9c:02:dc:fc:d9:a5:bf:aa:2e:88:47:7d:14:df: 62:d3:7c:52:e6:60:5a:5e:91:b2:14:1f:50:38:6f: 08:15:d0:52:69:be:9f:a6:f6:c9:88:91:96:bb:fb: bf:54:8d:ec:cd:00:0c:f3:d4:d0:54:b3:53:9d:b5: ae:90:48:74:31:3b:c9:e2:e7:7c:1d:98:98:0a:db: 90:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:66:99:0D:DE:86:84:CC:A9:E2:6F:65:6F:26:99:CD:BC:EF:F3:FB X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS18966.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.166.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:1f:20:cf:d3:6a:f5:e1:d9:cd:96:73:69:37:fa:0e:e1:93: bc:27:c5:dc:17:b4:a1:4b:e2:8b:b9:f5:4b:00:3b:ed:97:e4: 86:d3:6a:bf:04:2d:3b:05:1e:2d:e2:2e:1f:4c:f0:cd:a8:05: 29:29:af:18:04:30:31:87:77:86:36:e9:b6:14:76:11:af:e1: f0:09:5e:d5:81:e0:27:db:b1:33:10:7b:e6:49:f3:ae:a4:e6: 86:aa:97:a6:e1:bf:88:2a:3c:2d:0e:61:4e:b2:5c:bf:ce:8f: ad:95:4c:57:87:e9:7b:f8:90:3a:cb:c0:86:4d:72:a7:15:f2: 33:76:78:8e:a0:47:01:c3:05:4a:73:a5:77:b7:0b:45:81:18: b1:ab:b1:8d:39:db:68:d3:89:96:82:cc:c6:47:94:9e:7a:54: ed:a1:ec:70:51:5a:61:ac:7b:16:36:c4:65:81:73:3a:11:c2: 0e:7e:b4:17:f7:ba:08:8f:ee:fe:4e:57:f0:58:db:db:bd:11: 44:c4:35:0e:d2:72:15:06:47:22:ef:91:94:82:65:15:c1:56: e9:0d:72:c9:70:4c:a4:e1:6a:3b:3e:41:f4:d8:3b:de:39:c0: 90:54:b7:fc:72:c1:79:0e:2f:68:c1:61:4c:c3:9b:25:2f:c6: 6b:33:0d:8e -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUR/T6FeLVYfsVV/yppOzgmJY3o/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMzExNTUwMzNaFw0yNjEyMzAxNTU1MzNaMDMxMTAvBgNV BAMTKDU4NjY5OTBEREU4Njg0Q0NBOUUyNkY2NTZGMjY5OUNEQkNFRkYzRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV8PODacfSQyPqXtHGc5cBo275 mK35YdeQkBmNH3u+/eoHex0utNUG3SeqKCv4PHqlhIZtzCymHYZEtBKZPlp+DAqE +6zx7HgHXAGNfDjj8ENCzEvQETjlFUoWaZirpVKcskz9aLOTo81UMoWkgoiNNZYi 8AvWSfyZfOv4uSEw+y6+t92i0ExJQKHSJxTsQbT+miaY5naisqXBUMNaRzX0n5yo Bn02ett1G+GFWS3tJ3yp1WWcAtz82aW/qi6IR30U32LTfFLmYFpekbIUH1A4bwgV 0FJpvp+m9smIkZa7+79UjezNAAzz1NBUs1Odta6QSHQxO8ni53wdmJgK25CJAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUWGaZDd6GhMyp4m9lbyaZzbzv8/swHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTg5NjYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSFqYw DQYJKoZIhvcNAQELBQADggEBAHsfIM/TavXh2c2Wc2k3+g7hk7wnxdwXtKFL4ou5 9UsAO+2X5IbTar8ELTsFHi3iLh9M8M2oBSkprxgEMDGHd4Y26bYUdhGv4fAJXtWB 4CfbsTMQe+ZJ866k5oaql6bhv4gqPC0OYU6yXL/Oj62VTFeH6Xv4kDrLwIZNcqcV 8jN2eI6gRwHDBUpzpXe3C0WBGLGrsY0522jTiZaCzMZHlJ56VO2h7HBRWmGsexY2 xGWBczoRwg5+tBf3ugiP7v5OV/BY29u9EUTENQ7SchUGRyLvkZSCZRXBVukNcslw TKThajs+QfTYO945wJBUt/xywXkOL2jBYUzDmyUvxmszDY4= -----END CERTIFICATE-----Generated at Sun Jan 18 08:56:40 2026 by rpki-client