This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199414.roa File: AS199414.roa (raw, json) Hash identifier: 2lw8KF9K+hEwaipHy6YOF9OCwtkB2+VXwnB2JTd1yaw= Subject key identifier: 05:17:69:3C:18:77:02:01:D2:E7:A1:84:35:7D:A3:72:3B:AA:86:31 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 425A1B9B76AD217366A3E139406FD2813D8A0D2B Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199414.roa Signing time: Sun 11 Jan 2026 17:57:32 +0000 ROA not before: Sun 11 Jan 2026 17:52:32 +0000 ROA not after: Sun 10 Jan 2027 17:57:32 +0000 asID: 199414 IP address blocks: 82.22.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:5a:1b:9b:76:ad:21:73:66:a3:e1:39:40:6f:d2:81:3d:8a:0d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 11 17:52:32 2026 GMT Not After : Jan 10 17:57:32 2027 GMT Subject: CN=0517693C18770201D2E7A184357DA3723BAA8631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:70:05:06:8b:df:3e:02:03:36:cb:47:09:89: 3f:53:2b:af:33:ed:3d:a9:c9:52:67:03:33:a6:93: 5a:d2:f5:c2:e2:1f:88:8a:2e:f9:74:26:0e:d3:12: 80:b7:f0:8c:99:79:84:b0:4a:ad:d1:dd:f5:17:6a: f0:3b:61:78:93:65:66:1c:98:f8:b9:a8:29:6d:f5: 9c:bf:ed:24:73:5d:82:2f:36:12:72:60:b2:84:cc: 97:16:9a:b9:f4:4d:2a:5e:33:ec:e2:44:fb:95:84: 8c:81:56:1d:89:3e:43:14:15:28:24:3c:ac:26:62: f6:f0:90:3c:a7:84:b0:b1:50:6c:d3:e6:29:f8:61: a4:70:25:9f:9f:54:50:dc:92:74:ba:c4:0f:e7:79: db:f6:b4:aa:31:a8:59:d4:28:23:5f:74:1c:e6:4a: 05:3c:28:7f:3a:4b:66:67:64:e5:ae:7c:b7:a6:1e: d2:28:3d:7c:e4:27:e9:a4:0c:6b:59:a8:f0:58:75: 9a:1b:ad:ca:df:0f:02:d7:26:ec:c6:95:98:d1:84: fd:ff:54:97:56:bc:8a:47:dc:c1:4c:2b:70:ba:69: 39:f4:7e:ca:68:12:b3:b1:1d:70:22:13:02:a4:c5: b2:be:c7:62:12:3b:de:c8:90:82:b3:88:ed:4d:1a: 58:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:17:69:3C:18:77:02:01:D2:E7:A1:84:35:7D:A3:72:3B:AA:86:31 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199414.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.5.0/24 Signature Algorithm: sha256WithRSAEncryption 59:65:cf:e7:b4:93:13:17:ad:94:0c:03:43:7f:f7:c5:c9:bc: 0e:b6:04:f9:e0:c5:21:63:16:18:9a:91:e0:bb:89:09:38:82: 79:66:be:c9:5f:cb:58:fd:93:94:60:6d:ca:e2:80:97:9c:eb: fb:2c:99:70:c0:68:a9:29:1a:68:1a:5c:71:ff:c1:6c:4e:ed: a2:fe:8e:4e:81:12:d3:ae:5b:73:f8:40:ce:ad:15:8d:e3:da: 8d:e0:2a:fc:6f:d0:31:d9:9f:d7:c7:26:1c:db:71:b2:cb:4e: d2:48:f7:f7:f6:0a:0e:02:71:e3:dd:15:1c:4b:34:7b:4b:53: 41:c8:cf:04:2d:ca:0f:62:90:43:c8:8e:55:88:28:68:c4:f1: 2c:c1:15:84:67:ec:9c:2f:ef:48:75:ac:7e:c3:de:65:e2:0a: 5d:69:a4:27:a1:c1:68:64:16:e3:d4:d7:f2:38:60:cb:22:ab: ff:a9:ca:0c:ca:03:ea:77:ff:cf:c4:42:55:c5:a3:ac:30:c4: 0b:c2:ee:b8:11:ab:54:87:35:2e:eb:67:51:2b:d1:f3:73:17: 49:9a:69:5a:99:5b:b0:a7:f0:6a:cc:56:3c:b5:38:cd:41:14: 25:66:95:9b:15:db:28:7e:5a:82:a8:23:07:d3:0b:16:f2:00: 0a:72:9d:3c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUQlobm3atIXNmo+E5QG/SgT2KDSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMTExNzUyMzJaFw0yNzAxMTAxNzU3MzJaMDMxMTAvBgNV BAMTKDA1MTc2OTNDMTg3NzAyMDFEMkU3QTE4NDM1N0RBMzcyM0JBQTg2MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCccAUGi98+AgM2y0cJiT9TK68z 7T2pyVJnAzOmk1rS9cLiH4iKLvl0Jg7TEoC38IyZeYSwSq3R3fUXavA7YXiTZWYc mPi5qClt9Zy/7SRzXYIvNhJyYLKEzJcWmrn0TSpeM+ziRPuVhIyBVh2JPkMUFSgk PKwmYvbwkDynhLCxUGzT5in4YaRwJZ+fVFDcknS6xA/nedv2tKoxqFnUKCNfdBzm SgU8KH86S2ZnZOWufLemHtIoPXzkJ+mkDGtZqPBYdZobrcrfDwLXJuzGlZjRhP3/ VJdWvIpH3MFMK3C6aTn0fspoErOxHXAiEwKkxbK+x2ISO97IkIKziO1NGlgNAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUBRdpPBh3AgHS56GENX2jcjuqhjEwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTk5NDE0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhYF MA0GCSqGSIb3DQEBCwUAA4IBAQBZZc/ntJMTF62UDANDf/fFybwOtgT54MUhYxYY mpHgu4kJOIJ5Zr7JX8tY/ZOUYG3K4oCXnOv7LJlwwGipKRpoGlxx/8FsTu2i/o5O gRLTrltz+EDOrRWN49qN4Cr8b9Ax2Z/XxyYc23Gyy07SSPf39goOAnHj3RUcSzR7 S1NByM8ELcoPYpBDyI5ViChoxPEswRWEZ+ycL+9Idax+w95l4gpdaaQnocFoZBbj 1NfyOGDLIqv/qcoMygPqd//PxEJVxaOsMMQLwu64EatUhzUu62dRK9HzcxdJmmla mVuwp/BqzFY8tTjNQRQlZpWbFdsoflqCqCMH0wsW8gAKcp08 -----END CERTIFICATE-----Generated at Sun Jan 18 08:56:38 2026 by rpki-client