This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197537.roa
File: AS197537.roa (raw, json)
Hash identifier: 9eAlo08aCf6D4KL0xzLIXE9xx40B5h2GiAPmqvdhw1s=
Subject key identifier: DF:8F:EE:A7:51:6D:63:60:91:D6:59:19:02:B6:CB:EE:B3:54:1C:0A
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 46AF77E297F59A0211CBBE9CC1D74FA7335C7FBF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197537.roa
Signing time: Sat 10 Jan 2026 05:30:32 +0000
ROA not before: Sat 10 Jan 2026 05:25:32 +0000
ROA not after: Sat 09 Jan 2027 05:30:32 +0000
asID: 197537
IP address blocks: 82.21.77.0/24 maxlen: 24
82.22.176.0/24 maxlen: 24
82.23.148.0/24 maxlen: 24
82.24.84.0/24 maxlen: 24
82.26.194.0/24 maxlen: 24
82.39.154.0/24 maxlen: 24
82.39.196.0/22 maxlen: 24
82.39.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 04:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:af:77:e2:97:f5:9a:02:11:cb:be:9c:c1:d7:4f:a7:33:5c:7f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 10 05:25:32 2026 GMT
Not After : Jan 9 05:30:32 2027 GMT
Subject: CN=DF8FEEA7516D636091D6591902B6CBEEB3541C0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c3:50:e9:ba:92:03:e7:63:8e:78:29:3f:ec:
ba:8f:3a:1c:9c:e8:98:9c:2a:6d:be:55:74:4b:ec:
03:33:72:65:9f:c4:48:79:7f:4a:35:cf:58:78:3d:
8e:6d:82:77:06:0a:1f:c0:c9:0c:63:03:c9:a9:ca:
86:b2:75:b5:9b:ab:a2:a9:a8:8a:a6:34:8c:56:95:
f7:47:b7:dd:a4:4c:ad:e4:b2:af:37:05:13:14:21:
0d:ec:99:ba:6e:f7:c9:5e:8a:80:91:6d:9d:6b:e9:
df:68:23:3f:e0:95:6e:f8:7c:35:b8:2b:44:5e:10:
85:e2:8b:32:95:2b:34:63:29:a3:d6:e6:67:16:b6:
c7:5d:14:30:f9:8e:90:da:d6:be:99:ca:ca:1c:84:
72:79:d5:fe:49:33:25:c4:39:0e:f0:f8:44:71:3b:
2c:0c:88:7a:59:ae:b8:87:09:24:f9:b0:d2:1f:e1:
a1:22:90:2d:83:4e:23:af:4c:a7:34:98:c0:bb:ab:
1a:69:b1:75:b1:2c:0c:62:33:8a:d6:53:2e:6a:ff:
d7:0f:7b:d7:55:9a:a9:32:3e:cf:c5:25:23:89:12:
e0:66:a3:53:ab:12:bb:da:e9:f4:aa:ef:ef:f8:85:
20:b3:b4:83:89:72:c6:ba:5f:15:0c:b8:6a:74:92:
c6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8F:EE:A7:51:6D:63:60:91:D6:59:19:02:B6:CB:EE:B3:54:1C:0A
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS197537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.77.0/24
82.22.176.0/24
82.23.148.0/24
82.24.84.0/24
82.26.194.0/24
82.39.154.0/24
82.39.196.0/22
82.39.248.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:74:46:12:cf:61:a8:f2:41:51:2a:f8:70:98:51:53:10:12:
73:9d:d3:b8:cf:e7:a9:5b:21:4c:91:13:11:d3:f6:7e:53:ed:
07:8c:0d:e0:92:10:5b:f1:0d:bc:8f:ab:89:a8:f0:4e:4a:b3:
cb:23:20:fd:2e:1a:74:7d:e1:95:4f:47:70:34:b5:26:60:4d:
c4:61:6e:02:f4:ce:d6:0c:c3:43:a4:58:9d:6a:be:5b:31:f3:
c1:d5:07:63:48:4e:d3:d4:88:1d:8a:ae:a2:4e:58:20:84:32:
eb:78:a5:9e:de:bf:cd:77:fb:2d:2c:95:d7:71:25:d6:de:cc:
40:cf:ab:ea:bd:4a:44:97:01:98:e2:60:a4:a5:a7:50:b5:6e:
6c:43:d9:3a:59:94:e5:d7:b2:f8:9c:c4:f6:a2:5d:a3:ef:1e:
34:b3:71:55:15:47:e9:59:30:25:91:08:99:8b:6f:10:0d:c4:
e6:2e:76:c3:b0:5d:e0:39:86:23:70:92:51:18:0c:82:29:e9:
2f:f8:46:f5:17:14:15:f1:fb:25:17:8a:ad:1d:4e:50:09:18:
84:17:e5:03:2e:9d:01:25:62:21:07:3b:ab:9a:e2:65:1b:2c:
01:24:af:4e:ba:4e:d7:de:f8:93:b9:41:c3:15:36:f5:ca:93:
ab:d9:ed:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:57:01 2026 by rpki-client