This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197071.roa File: AS197071.roa (raw, json) Hash identifier: 17c/6omnwQpEbnR/OWMKg1FiXc2a8J9SHuHhDZShWXo= Subject key identifier: AF:B0:11:85:A2:FB:C6:DD:04:31:06:4F:3A:57:16:11:6C:B7:D9:31 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 2F97D3822EE0DA334E2635B80CA314D2830E7C50 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197071.roa Signing time: Fri 02 Jan 2026 13:55:33 +0000 ROA not before: Fri 02 Jan 2026 13:50:33 +0000 ROA not after: Fri 01 Jan 2027 13:55:33 +0000 asID: 197071 IP address blocks: 82.29.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:97:d3:82:2e:e0:da:33:4e:26:35:b8:0c:a3:14:d2:83:0e:7c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 2 13:50:33 2026 GMT Not After : Jan 1 13:55:33 2027 GMT Subject: CN=AFB01185A2FBC6DD0431064F3A5716116CB7D931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:29:e4:97:9c:48:ae:73:81:e0:69:40:0e:34: 11:f1:1c:fb:bf:61:7e:1d:8e:94:de:68:9a:ce:80: c0:9d:40:3f:62:ab:a4:28:44:10:52:36:ff:0e:5d: 20:46:ed:55:0e:95:b0:f9:8b:ad:fe:58:fa:45:81: 91:88:33:a2:0a:f6:8c:b2:42:f5:8a:cc:e3:65:9e: a1:f4:6e:77:a8:27:4e:b3:35:3e:8e:40:a1:cb:3f: 96:e8:69:41:92:d7:be:14:9a:a9:66:8e:3e:a0:af: a4:9e:a4:8d:d4:79:0f:68:79:48:78:d8:ba:de:85: f3:d2:f0:10:49:7a:54:f9:91:5f:fc:4a:5b:a0:3b: 40:f0:e9:e8:93:63:99:3d:db:d7:41:58:f2:96:1f: ed:79:32:8c:9c:5a:02:f6:8f:0c:b9:b2:cf:78:48: 59:3c:09:7b:b0:ce:1a:06:e8:8f:01:f0:01:42:cc: ee:2f:96:64:de:84:9e:63:f3:16:21:48:db:17:65: 74:0e:24:aa:64:f9:8e:62:7a:49:78:f1:72:b1:dd: a3:4a:38:65:70:79:20:9d:e5:9f:d8:4a:6e:ef:eb: f0:10:0d:93:9a:b4:06:aa:e8:e9:9a:3e:a5:ab:1c: c5:af:09:a6:28:5a:b7:d2:5f:cb:8b:94:be:d6:c2: 9c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B0:11:85:A2:FB:C6:DD:04:31:06:4F:3A:57:16:11:6C:B7:D9:31 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197071.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.29.5.0/24 Signature Algorithm: sha256WithRSAEncryption 58:6e:0d:49:84:f4:07:04:19:e0:0c:6b:40:01:fe:7a:50:b1: 57:59:73:2b:15:82:22:4d:80:1b:b3:45:3e:f1:8a:cd:52:38: 24:dd:24:0f:3c:e9:69:a9:7b:a1:a2:8d:e4:8b:32:d5:a3:4a: d9:58:f2:a1:a8:71:28:a1:c1:6b:fa:67:06:5a:99:e3:5c:f7: cb:6c:a8:5b:07:28:73:fe:ea:de:d7:d3:d1:62:c4:f7:6a:f0: 07:28:17:08:86:fb:88:c8:ae:d5:52:14:b7:3b:61:3b:a0:4f: fe:84:a6:c7:3c:ec:a9:0b:64:74:d6:66:45:c5:de:2f:47:c9: f7:d8:4c:b8:d7:87:86:6e:40:14:f2:ef:65:26:97:e5:10:f1: 64:c5:a4:70:eb:f5:4c:43:84:9d:9c:40:67:6b:3e:eb:14:90: df:e1:38:d6:bf:ae:10:f4:30:db:e6:04:b5:e9:ca:2d:2b:32: 35:6a:d5:e0:3a:fc:fc:5a:13:5b:cc:2e:9c:3f:fa:2b:7e:e5: b3:e4:8b:d4:0e:44:97:0f:12:e5:dd:03:f3:6e:d9:74:22:a3: dc:e9:17:4f:cd:3e:b4:9b:14:30:66:04:36:58:8b:e5:06:ee: c2:16:95:2d:ad:55:13:71:34:b5:7d:3d:66:55:6d:66:85:6d: 99:58:ad:80 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUL5fTgi7g2jNOJjW4DKMU0oMOfFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMDIxMzUwMzNaFw0yNzAxMDExMzU1MzNaMDMxMTAvBgNV BAMTKEFGQjAxMTg1QTJGQkM2REQwNDMxMDY0RjNBNTcxNjExNkNCN0Q5MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTKeSXnEiuc4HgaUAONBHxHPu/ YX4djpTeaJrOgMCdQD9iq6QoRBBSNv8OXSBG7VUOlbD5i63+WPpFgZGIM6IK9oyy QvWKzONlnqH0bneoJ06zNT6OQKHLP5boaUGS174Umqlmjj6gr6SepI3UeQ9oeUh4 2LrehfPS8BBJelT5kV/8SlugO0Dw6eiTY5k929dBWPKWH+15MoycWgL2jwy5ss94 SFk8CXuwzhoG6I8B8AFCzO4vlmTehJ5j8xYhSNsXZXQOJKpk+Y5iekl48XKx3aNK OGVweSCd5Z/YSm7v6/AQDZOatAaq6OmaPqWrHMWvCaYoWrfSX8uLlL7WwpwfAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUr7ARhaL7xt0EMQZPOlcWEWy32TEwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTk3MDcxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUh0F MA0GCSqGSIb3DQEBCwUAA4IBAQBYbg1JhPQHBBngDGtAAf56ULFXWXMrFYIiTYAb s0U+8YrNUjgk3SQPPOlpqXuhoo3kizLVo0rZWPKhqHEoocFr+mcGWpnjXPfLbKhb Byhz/ure19PRYsT3avAHKBcIhvuIyK7VUhS3O2E7oE/+hKbHPOypC2R01mZFxd4v R8n32Ey414eGbkAU8u9lJpflEPFkxaRw6/VMQ4SdnEBnaz7rFJDf4TjWv64Q9DDb 5gS16cotKzI1atXgOvz8WhNbzC6cP/orfuWz5IvUDkSXDxLl3QPzbtl0IqPc6RdP zT60mxQwZgQ2WIvlBu7CFpUtrVUTcTS1fT1mVW1mhW2ZWK2A -----END CERTIFICATE-----Generated at Sun Jan 18 08:56:59 2026 by rpki-client