This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200636.roa
File: AS200636.roa (raw, json)
Hash identifier: akC74xsYYRU6lA4rD4IhXZoTvMmBAnA1Kel+AwQE9sI=
Subject key identifier: 32:1B:A6:F4:D8:84:F4:40:F7:91:C3:8A:F1:3E:2A:F2:EA:BC:B4:B8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7DFEACB9D8389D18925ACA783E123C68336EC094
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200636.roa
Signing time: Mon 08 Dec 2025 08:31:15 +0000
ROA not before: Mon 08 Dec 2025 08:26:15 +0000
ROA not after: Mon 07 Dec 2026 08:31:15 +0000
asID: 200636
IP address blocks: 82.24.85.0/24 maxlen: 24
82.24.111.0/24 maxlen: 24
82.24.113.0/24 maxlen: 24
2a13:9500:e1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Dec 2025 17:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:fe:ac:b9:d8:38:9d:18:92:5a:ca:78:3e:12:3c:68:33:6e:c0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Dec 8 08:26:15 2025 GMT
Not After : Dec 7 08:31:15 2026 GMT
Subject: CN=321BA6F4D884F440F791C38AF13E2AF2EABCB4B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:70:6f:a4:d6:2c:bf:b9:97:40:22:c2:45:
ce:e1:0b:99:09:e2:d9:57:7d:c5:13:ba:47:65:7a:
93:e7:fd:bc:e0:71:a1:70:73:dc:85:ab:fe:5b:12:
53:08:70:4f:a4:3c:bd:d3:77:73:d4:96:34:ec:38:
c4:d0:c5:9d:b5:20:39:bf:36:86:46:c8:c8:42:c3:
98:a8:25:94:c9:18:ce:0f:19:b5:a6:ee:e6:9a:e7:
9c:31:50:d5:7e:79:2e:11:9d:02:de:f8:05:66:c4:
cf:ca:7a:60:24:a8:99:a2:fd:a4:7e:59:02:fb:87:
0d:cd:c3:72:a5:a1:fc:e6:c9:92:4c:a9:d7:d5:cd:
88:da:e5:5c:e3:bb:ad:1f:2c:b5:1d:eb:c1:67:60:
f1:91:6d:3f:09:1b:9f:8e:21:62:75:50:73:0c:21:
c4:35:f6:c2:88:d3:5e:4a:94:72:64:71:17:30:2e:
5d:90:2b:32:b5:8d:02:2a:f7:ff:8a:39:8a:4a:cb:
70:96:b9:eb:57:ef:7b:93:ff:98:c9:5d:dd:06:67:
27:46:db:8c:8c:e1:32:0f:33:08:aa:66:78:3e:cd:
54:7f:37:48:79:4d:83:54:1f:2e:2f:10:bf:da:50:
1a:73:39:ef:fc:60:87:4c:17:a7:3c:28:34:53:7f:
ca:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1B:A6:F4:D8:84:F4:40:F7:91:C3:8A:F1:3E:2A:F2:EA:BC:B4:B8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS200636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.24.85.0/24
82.24.111.0/24
82.24.113.0/24
IPv6:
2a13:9500:e1::/48
Signature Algorithm: sha256WithRSAEncryption
18:0d:ac:ea:b7:fe:6e:0a:7f:c0:40:2c:dc:e7:5f:45:bf:a1:
09:a3:5a:ec:96:38:cc:a6:e5:19:22:72:9f:a8:d6:c8:90:2c:
de:ea:bd:e3:cb:a5:e7:87:05:5e:3d:52:02:51:03:26:88:ac:
a1:27:86:83:4b:26:42:d6:ca:00:36:2c:48:ff:ea:92:5a:cd:
1b:90:1a:8b:ec:7b:aa:08:1d:e6:1b:83:78:7e:80:89:c9:16:
bc:43:b4:ea:13:9d:ca:5c:44:9d:1f:63:42:1e:ad:1e:94:91:
5e:96:dc:40:74:4c:f7:ea:5b:0e:e6:c9:16:9e:8a:e4:eb:b7:
28:d7:e7:6d:2d:49:59:75:c7:8c:e2:67:be:e0:32:35:de:21:
48:6c:66:64:c0:c2:5b:72:43:c8:97:3a:1a:e8:12:fe:7e:4f:
af:7f:1e:6f:7f:0a:39:b8:b3:c1:68:3d:79:a2:a4:ca:4c:ec:
c0:cc:62:23:d2:36:a6:7f:50:5e:e8:60:f0:7a:cc:5f:de:8f:
db:fd:e3:8c:04:ca:1a:25:26:db:62:d3:05:28:5e:68:c2:3b:
07:35:81:91:36:03:57:dc:9b:da:b4:90:07:a7:a4:49:43:a4:
0f:3c:f8:da:0a:93:e6:79:6a:c6:57:cd:1d:69:67:4c:12:32:
3e:d1:da:a9
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIUff6sudg4nRiSWsp4PhI8aDNuwJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNTEyMDgwODI2MTVaFw0yNjEyMDcwODMxMTVaMDMxMTAvBgNV
BAMTKDMyMUJBNkY0RDg4NEY0NDBGNzkxQzM4QUYxM0UyQUYyRUFCQ0I0QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCthnBvpNYsv7mXQCLCRc7hC5kJ
4tlXfcUTukdlepPn/bzgcaFwc9yFq/5bElMIcE+kPL3Td3PUljTsOMTQxZ21IDm/
NoZGyMhCw5ioJZTJGM4PGbWm7uaa55wxUNV+eS4RnQLe+AVmxM/KemAkqJmi/aR+
WQL7hw3Nw3KlofzmyZJMqdfVzYja5Vzju60fLLUd68FnYPGRbT8JG5+OIWJ1UHMM
IcQ19sKI015KlHJkcRcwLl2QKzK1jQIq9/+KOYpKy3CWuetX73uT/5jJXd0GZydG
24yM4TIPMwiqZng+zVR/N0h5TYNUHy4vEL/aUBpzOe/8YIdMF6c8KDRTf8p9AgMB
AAGjggInMIICIzAdBgNVHQ4EFgQUMhum9NiE9ED3kcOK8T4q8uq8tLgwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAwNjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAUhhV
AwQAUhhvAwQAUhhxMA8EAgACMAkDBwAqE5UAAOEwDQYJKoZIhvcNAQELBQADggEB
ABgNrOq3/m4Kf8BALNznX0W/oQmjWuyWOMym5Rkicp+o1siQLN7qvePLpeeHBV49
UgJRAyaIrKEnhoNLJkLWygA2LEj/6pJazRuQGovse6oIHeYbg3h+gInJFrxDtOoT
ncpcRJ0fY0IerR6UkV6W3EB0TPfqWw7myRaeiuTrtyjX520tSVl1x4ziZ77gMjXe
IUhsZmTAwltyQ8iXOhroEv5+T69/Hm9/Cjm4s8FoPXmipMpM7MDMYiPSNqZ/UF7o
YPB6zF/ej9v944wEyholJtti0wUoXmjCOwc1gZE2A1fcm9q0kAenpElDpA88+NoK
k+Z5asZXzR1pZ0wSMj7R2qk=
-----END CERTIFICATE-----
Generated at Sun Dec 14 00:01:12 2025 by rpki-client