This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199415.roa File: AS199415.roa (raw, json) Hash identifier: qUrPX2KivYhizPnxhrKw5GWXrr3CUnsA5kcknRgDZoY= Subject key identifier: 12:B9:71:32:33:57:B0:44:F3:C6:FF:DC:FD:D5:B7:46:9C:A9:BA:E7 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4300B4487B7D04AE8D8ADFA51362942FB84DF23B Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199415.roa Signing time: Wed 31 Dec 2025 08:38:29 +0000 ROA not before: Wed 31 Dec 2025 08:33:29 +0000 ROA not after: Wed 30 Dec 2026 08:38:29 +0000 asID: 199415 IP address blocks: 82.41.119.0/24 maxlen: 24 2a13:9500:11f::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:00:b4:48:7b:7d:04:ae:8d:8a:df:a5:13:62:94:2f:b8:4d:f2:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 31 08:33:29 2025 GMT Not After : Dec 30 08:38:29 2026 GMT Subject: CN=12B971323357B044F3C6FFDCFDD5B7469CA9BAE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bc:89:ec:ca:7a:6d:0d:7a:5d:ae:b5:4f:de: 18:23:20:08:7f:00:44:34:02:86:0e:56:e8:b0:e5: e0:e8:d9:eb:00:de:9a:2a:e4:0c:ee:9d:3d:d6:f8: 88:75:ce:29:84:52:d6:82:5c:b3:9d:3e:5c:7c:e6: 0c:9d:73:f3:1b:25:0e:67:9f:e9:33:ef:d5:c9:6c: da:e8:90:73:78:88:5d:6f:a0:f9:1b:43:45:05:0c: 40:b1:fb:ac:6f:c7:c1:79:3c:11:9e:aa:9a:cd:15: e3:94:82:32:1a:63:93:07:7d:c4:f4:8c:18:af:dd: 9a:eb:b9:a1:e3:b0:a8:20:49:0a:01:40:d1:51:43: 98:3b:e0:d7:59:0c:20:9d:58:17:79:30:6a:64:86: 2d:cb:a0:56:85:eb:14:6f:ed:a5:b9:0c:89:e1:80: 2d:65:58:db:8e:7f:6f:28:2e:55:4f:39:94:e7:d6: 2e:0a:fa:ba:2a:66:6d:1c:12:63:64:aa:f3:f1:50: 50:9c:e9:48:96:1d:4d:86:83:02:42:f2:e7:af:5c: 78:42:40:97:9b:f6:a3:25:16:ec:70:15:0d:5e:dd: a0:d2:d8:dc:6c:a1:17:4d:e4:a8:31:1e:6b:08:f0: c7:51:e0:09:a7:5d:74:1b:de:39:6e:15:58:65:3a: fc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B9:71:32:33:57:B0:44:F3:C6:FF:DC:FD:D5:B7:46:9C:A9:BA:E7 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199415.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.41.119.0/24 IPv6: 2a13:9500:11f::/48 Signature Algorithm: sha256WithRSAEncryption 51:3e:f2:7a:6a:8e:bb:41:5f:1b:73:09:bb:b3:43:e6:93:d7: a4:09:ec:aa:0a:3b:70:94:1e:55:97:f0:d2:96:96:d5:e9:53: cb:c4:91:a8:7a:ba:b2:20:fd:62:e4:cb:69:e3:9b:76:70:6b: 99:67:c2:26:b9:ab:d6:d9:27:fe:dd:f3:77:c9:18:1b:e7:f4: 88:c0:db:32:b0:70:05:d1:a9:60:ad:3f:46:1d:79:cb:de:2d: 57:ed:0f:8d:a5:71:f3:9c:75:88:a8:11:16:97:4f:36:cb:2c: ce:30:a0:db:50:f8:9e:2b:89:c9:ba:fe:0e:05:74:a6:c3:95: e3:0d:f2:40:ea:42:45:6e:5c:1f:49:fa:1d:9a:ef:0c:a4:0c: 99:01:cc:3e:47:8c:9f:7e:6f:7e:28:0b:0b:e0:b4:45:fa:24: 1c:57:6f:12:d6:7b:a9:78:81:20:55:13:0c:b7:64:42:e3:54: 13:d8:61:8a:ee:2b:9a:a1:72:15:6f:b5:7b:bf:94:bc:1d:66: 77:5a:7c:2c:a5:67:13:16:b3:f9:4f:ce:2e:24:66:24:3d:d5: 65:44:7b:80:b8:17:40:66:4e:9b:a4:a4:23:95:85:e1:fa:cc: 69:04:35:33:fc:e6:55:b2:bf:40:18:70:d2:ce:4d:5f:d5:e2: 99:6e:ea:95 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgIUQwC0SHt9BK6Nit+lE2KUL7hN8jswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMzEwODMzMjlaFw0yNjEyMzAwODM4MjlaMDMxMTAvBgNV BAMTKDEyQjk3MTMyMzM1N0IwNDRGM0M2RkZEQ0ZERDVCNzQ2OUNBOUJBRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQvInsynptDXpdrrVP3hgjIAh/ AEQ0AoYOVuiw5eDo2esA3poq5AzunT3W+Ih1zimEUtaCXLOdPlx85gydc/MbJQ5n n+kz79XJbNrokHN4iF1voPkbQ0UFDECx+6xvx8F5PBGeqprNFeOUgjIaY5MHfcT0 jBiv3ZrruaHjsKggSQoBQNFRQ5g74NdZDCCdWBd5MGpkhi3LoFaF6xRv7aW5DInh gC1lWNuOf28oLlVPOZTn1i4K+roqZm0cEmNkqvPxUFCc6UiWHU2GgwJC8uevXHhC QJeb9qMlFuxwFQ1e3aDS2NxsoRdN5KgxHmsI8MdR4AmnXXQb3jluFVhlOvyPAgMB AAGjggIbMIICFzAdBgNVHQ4EFgQUErlxMjNXsETzxv/c/dW3RpypuucwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTk5NDE1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUil3 MA8EAgACMAkDBwAqE5UAAR8wDQYJKoZIhvcNAQELBQADggEBAFE+8npqjrtBXxtz CbuzQ+aT16QJ7KoKO3CUHlWX8NKWltXpU8vEkah6urIg/WLky2njm3Zwa5lnwia5 q9bZJ/7d83fJGBvn9IjA2zKwcAXRqWCtP0YdecveLVftD42lcfOcdYioERaXTzbL LM4woNtQ+J4ricm6/g4FdKbDleMN8kDqQkVuXB9J+h2a7wykDJkBzD5HjJ9+b34o CwvgtEX6JBxXbxLWe6l4gSBVEwy3ZELjVBPYYYruK5qhchVvtXu/lLwdZndafCyl ZxMWs/lPzi4kZiQ91WVEe4C4F0BmTpukpCOVheH6zGkENTP85lWyv0AYcNLOTV/V 4plu6pU= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:16 2026 by rpki-client