This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202705.roa File: AS202705.roa (raw, json) Hash identifier: QrJxGgD0TFOJXnsfv/uVSgA86isEQjijy+CgWFgVJcA= Subject key identifier: 04:91:DD:FE:37:20:B0:FF:EB:F3:DE:DB:4A:81:4A:36:AF:8D:B6:0D Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 3A947510B1BC686686EDE80DE82889579D17E1FE Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202705.roa Signing time: Fri 26 Dec 2025 21:10:07 +0000 ROA not before: Fri 26 Dec 2025 21:05:07 +0000 ROA not after: Fri 25 Dec 2026 21:10:07 +0000 asID: 202705 IP address blocks: 82.38.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:94:75:10:b1:bc:68:66:86:ed:e8:0d:e8:28:89:57:9d:17:e1:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 26 21:05:07 2025 GMT Not After : Dec 25 21:10:07 2026 GMT Subject: CN=0491DDFE3720B0FFEBF3DEDB4A814A36AF8DB60D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:06:25:ae:4f:41:0f:52:60:7e:87:82:15:ce: ce:ee:43:89:8f:1f:12:4a:1a:e1:e6:38:ff:8a:7a: 98:2d:ec:9b:96:76:82:16:7a:63:85:d2:16:08:42: f6:cd:21:ff:39:32:8c:61:78:2e:5b:f4:19:e0:f0: 5a:c8:fe:42:67:cb:65:cc:c5:7b:b9:e7:a8:b6:90: ee:30:30:1f:66:1b:89:62:d7:05:e4:30:54:33:f9: b3:29:fd:51:57:09:1b:5d:a2:b9:ae:2e:c7:44:4b: ae:29:9d:fd:a2:12:70:4a:87:05:37:e7:f9:9f:8d: ca:25:35:4d:91:f4:cd:7f:aa:1c:6f:83:56:84:13: f1:72:fd:31:f0:7c:a1:71:bb:02:49:ff:a6:4a:05: c1:6e:d8:d8:ce:45:79:86:f8:c6:16:9a:3c:63:88: fc:b5:7f:4c:e7:e2:9d:6b:d9:62:43:25:78:c5:35: b4:20:89:51:0d:3e:85:93:e9:65:ee:e7:1b:ab:11: 5a:2f:bc:1b:d1:d8:fc:b2:6e:ac:f7:1f:2f:ed:b8: ad:ff:8f:de:cf:37:45:47:83:72:4e:d1:65:aa:76: 59:11:f1:b6:fd:ae:c8:8d:7e:33:d1:d3:8a:b2:6e: a5:5a:cf:83:46:ac:00:19:61:70:a6:85:ca:5c:bf: e2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:91:DD:FE:37:20:B0:FF:EB:F3:DE:DB:4A:81:4A:36:AF:8D:B6:0D X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202705.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.38.35.0/24 Signature Algorithm: sha256WithRSAEncryption 00:d7:d8:cb:b1:0b:00:f9:47:04:00:b5:2f:58:7a:49:a9:19: 65:0d:16:cc:27:53:a5:62:3b:a2:15:a9:9d:69:8e:23:d6:da: 16:5b:44:a8:ea:5b:fb:4a:19:16:54:6a:46:65:0d:c4:59:39: 30:30:a9:7d:2f:d8:cd:78:1f:84:84:ae:08:42:8a:83:1c:2f: c1:8e:d4:2f:a1:de:37:fc:95:a0:c3:02:2f:2c:b5:07:f7:3d: af:c7:92:e3:76:2b:8f:63:52:c4:e4:c9:63:71:19:b1:03:3b: 04:05:30:a0:81:4f:24:38:ed:e5:a8:83:af:01:ce:54:38:4e: 0c:18:f9:cd:a2:5d:68:f2:16:13:91:48:cf:f9:e9:e1:8b:93: c1:eb:74:81:c2:c3:74:b6:41:87:cc:53:e7:ac:bc:33:a4:5c: ec:e3:f9:94:42:d2:bb:d2:f0:e1:12:b1:5f:9d:5a:73:dd:7d: 9a:e8:60:40:f3:0c:70:d0:4a:ee:e4:50:fd:03:6d:1a:33:45: dc:28:58:58:b9:07:fc:cb:dc:22:33:78:b3:c4:85:bc:8b:b5: a5:49:07:61:d9:11:47:09:57:a3:bf:51:da:eb:21:77:06:27: e2:e2:55:0b:fb:65:35:32:76:81:a6:d6:47:de:5f:83:2e:70: 42:87:da:b4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUOpR1ELG8aGaG7egN6CiJV50X4f4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMjYyMTA1MDdaFw0yNjEyMjUyMTEwMDdaMDMxMTAvBgNV BAMTKDA0OTFEREZFMzcyMEIwRkZFQkYzREVEQjRBODE0QTM2QUY4REI2MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdBiWuT0EPUmB+h4IVzs7uQ4mP HxJKGuHmOP+Kepgt7JuWdoIWemOF0hYIQvbNIf85MoxheC5b9Bng8FrI/kJny2XM xXu556i2kO4wMB9mG4li1wXkMFQz+bMp/VFXCRtdormuLsdES64pnf2iEnBKhwU3 5/mfjcolNU2R9M1/qhxvg1aEE/Fy/THwfKFxuwJJ/6ZKBcFu2NjORXmG+MYWmjxj iPy1f0zn4p1r2WJDJXjFNbQgiVENPoWT6WXu5xurEVovvBvR2Pyybqz3Hy/tuK3/ j97PN0VHg3JO0WWqdlkR8bb9rsiNfjPR04qybqVaz4NGrAAZYXCmhcpcv+LpAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUBJHd/jcgsP/r897bSoFKNq+Ntg0wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAyNzA1LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUiYj MA0GCSqGSIb3DQEBCwUAA4IBAQAA19jLsQsA+UcEALUvWHpJqRllDRbMJ1OlYjui FamdaY4j1toWW0So6lv7ShkWVGpGZQ3EWTkwMKl9L9jNeB+EhK4IQoqDHC/BjtQv od43/JWgwwIvLLUH9z2vx5LjdiuPY1LE5MljcRmxAzsEBTCggU8kOO3lqIOvAc5U OE4MGPnNol1o8hYTkUjP+enhi5PB63SBwsN0tkGHzFPnrLwzpFzs4/mUQtK70vDh ErFfnVpz3X2a6GBA8wxw0Eru5FD9A20aM0XcKFhYuQf8y9wiM3izxIW8i7WlSQdh 2RFHCVejv1Ha6yF3Bifi4lUL+2U1MnaBptZH3l+DLnBCh9q0 -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:13 2026 by rpki-client