This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202828.roa File: AS202828.roa (raw, json) Hash identifier: t7QbAPjtJHC4qzGTjqYtPe+PtHaPHR0Eb9VEaBxzt3w= Subject key identifier: CC:F3:0F:6F:ED:B8:F4:42:A6:47:7D:9B:D3:66:06:E6:41:9B:E0:E9 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4A71D5D01748021A2066ECD48604801BFAEB57CE Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202828.roa Signing time: Wed 31 Dec 2025 08:13:15 +0000 ROA not before: Wed 31 Dec 2025 08:08:15 +0000 ROA not after: Wed 30 Dec 2026 08:13:15 +0000 asID: 202828 IP address blocks: 2a13:9500:11e::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:71:d5:d0:17:48:02:1a:20:66:ec:d4:86:04:80:1b:fa:eb:57:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 31 08:08:15 2025 GMT Not After : Dec 30 08:13:15 2026 GMT Subject: CN=CCF30F6FEDB8F442A6477D9BD36606E6419BE0E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:44:b7:22:02:07:22:e3:0b:14:12:29:f8:e4: 34:d6:61:39:d5:f0:ad:66:2c:79:12:74:04:ed:eb: a2:2f:ae:67:74:25:0e:ca:1c:97:d5:c4:85:0c:11: 55:66:a0:b6:ef:d8:9f:02:5b:50:55:06:7e:92:41: 23:85:df:9c:49:bc:bf:05:c4:c3:47:7d:8d:13:7b: 7d:8e:14:ef:0d:fa:e8:65:4b:8e:a2:34:c4:cf:5f: e3:0b:6a:dc:c9:59:19:80:8d:ef:f1:59:e3:7f:25: 39:57:3f:b7:dc:e0:47:ed:f2:15:52:1f:d3:e4:27: df:32:1f:59:d7:b1:70:53:00:88:49:e2:d5:81:07: 13:02:2f:17:af:11:2d:7d:60:cf:d9:8a:67:38:dd: be:9d:36:68:a6:b0:09:38:f6:21:f7:f3:30:ad:57: 82:ad:71:63:19:ef:d0:1e:7f:75:5f:3e:3d:3e:93: d8:c4:b7:de:9c:eb:18:ef:f2:7d:05:4a:be:17:ad: 54:97:52:28:0c:40:7b:14:c4:c2:35:a8:29:a1:76: 65:de:22:0c:7b:44:3e:e8:c7:3c:f3:ca:ab:11:69: f1:0a:ce:c8:67:99:7c:1f:54:ab:f1:f2:a2:49:a3: 36:b8:ae:2d:7c:83:8f:37:ef:7c:50:5b:81:84:b8: 6c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F3:0F:6F:ED:B8:F4:42:A6:47:7D:9B:D3:66:06:E6:41:9B:E0:E9 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS202828.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:9500:11e::/48 Signature Algorithm: sha256WithRSAEncryption 03:17:f4:ed:50:1a:8f:2b:27:c7:37:42:4d:e6:28:c0:ec:56: 2d:d4:8f:88:39:f6:30:07:1d:82:b9:f1:19:92:86:a9:83:6f: 2a:b1:df:ce:92:13:4c:e5:39:8d:81:e4:8e:b1:1e:f8:2d:cd: d4:aa:ac:13:d8:7e:7f:3b:dc:d5:8d:d6:ff:7b:6f:a1:af:18: 30:50:14:b0:22:13:b1:ac:cb:eb:b4:d9:11:8a:05:8d:71:dd: f5:cb:ce:b7:43:f4:6f:3a:58:d6:71:f2:23:6d:a8:e3:7a:77: 87:26:b8:a2:42:a4:a7:49:11:7c:4d:9a:58:24:5d:7a:7b:28: 47:1b:5c:12:ce:fb:27:59:72:f9:2d:a7:37:79:f3:24:9c:26: 4d:a1:12:d1:19:bd:26:6f:27:c4:8e:22:d5:62:74:84:dc:8f: d7:ca:ae:ea:70:5f:7c:7a:22:5e:c2:7b:65:b5:65:71:77:50: fd:65:54:48:e9:c6:31:fa:1d:86:aa:b5:0a:42:bf:f8:48:f4: c0:2a:b3:ee:08:88:e6:05:10:b5:b5:b8:1f:18:25:c7:28:15: cb:7e:f4:a0:fa:da:8c:fb:47:57:e8:e6:17:76:72:2f:da:ca: d5:b8:a9:a8:d2:c5:c2:87:fa:61:a8:32:ea:7a:a9:84:a0:b8: 05:da:88:a2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUSnHV0BdIAhogZuzUhgSAG/rrV84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMzEwODA4MTVaFw0yNjEyMzAwODEzMTVaMDMxMTAvBgNV BAMTKENDRjMwRjZGRURCOEY0NDJBNjQ3N0Q5QkQzNjYwNkU2NDE5QkUwRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYRLciAgci4wsUEin45DTWYTnV 8K1mLHkSdATt66Ivrmd0JQ7KHJfVxIUMEVVmoLbv2J8CW1BVBn6SQSOF35xJvL8F xMNHfY0Te32OFO8N+uhlS46iNMTPX+MLatzJWRmAje/xWeN/JTlXP7fc4Eft8hVS H9PkJ98yH1nXsXBTAIhJ4tWBBxMCLxevES19YM/Zimc43b6dNmimsAk49iH38zCt V4KtcWMZ79Aef3VfPj0+k9jEt96c6xjv8n0FSr4XrVSXUigMQHsUxMI1qCmhdmXe Igx7RD7oxzzzyqsRafEKzshnmXwfVKvx8qJJoza4ri18g48373xQW4GEuGw1AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUzPMPb+249EKmR32b02YG5kGb4OkwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAyODI4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhOV AAEeMA0GCSqGSIb3DQEBCwUAA4IBAQADF/TtUBqPKyfHN0JN5ijA7FYt1I+IOfYw Bx2CufEZkoapg28qsd/OkhNM5TmNgeSOsR74Lc3UqqwT2H5/O9zVjdb/e2+hrxgw UBSwIhOxrMvrtNkRigWNcd31y863Q/RvOljWcfIjbajjeneHJriiQqSnSRF8TZpY JF16eyhHG1wSzvsnWXL5Lac3efMknCZNoRLRGb0mbyfEjiLVYnSE3I/Xyq7qcF98 eiJewntltWVxd1D9ZVRI6cYx+h2GqrUKQr/4SPTAKrPuCIjmBRC1tbgfGCXHKBXL fvSg+tqM+0dX6OYXdnIv2srVuKmo0sXCh/phqDLqeqmEoLgF2oii -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:18 2026 by rpki-client