This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203057.roa File: AS203057.roa (raw, json) Hash identifier: 8jQ7v2407bGbXMqWhT1/MjKzk7VN/Omw4vCzvTmkj5s= Subject key identifier: 5C:16:F8:47:01:AF:B9:39:F8:89:04:BE:E3:20:D4:D6:19:4D:37:39 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 0453CA4DD049780E09D1A4FEDBDE63620339B0F4 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203057.roa Signing time: Wed 31 Dec 2025 07:09:51 +0000 ROA not before: Wed 31 Dec 2025 07:04:51 +0000 ROA not after: Wed 30 Dec 2026 07:09:51 +0000 asID: 203057 IP address blocks: 82.22.167.0/24 maxlen: 24 82.26.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:53:ca:4d:d0:49:78:0e:09:d1:a4:fe:db:de:63:62:03:39:b0:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 31 07:04:51 2025 GMT Not After : Dec 30 07:09:51 2026 GMT Subject: CN=5C16F84701AFB939F88904BEE320D4D6194D3739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0f:8e:ce:19:83:d5:f1:a5:b6:80:bb:1d:14: a4:bb:a9:ed:19:16:43:8f:bb:7a:fe:7d:2e:7f:db: 14:0e:d1:6c:fe:7c:fd:07:3c:25:8a:bc:73:92:ec: 38:60:20:a7:2f:9e:b2:20:2b:72:5b:52:5b:1d:55: fe:bb:ec:09:ce:38:cf:f1:43:0f:9b:07:c9:0f:f8: 89:1d:65:13:7b:bc:d7:b0:c8:da:ce:65:c1:de:f0: 04:7c:d6:7e:de:2f:c5:22:3b:60:e3:0c:5e:51:4e: 2c:7d:b5:26:bb:96:4c:ce:c0:fc:88:f8:3d:21:e9: d5:24:c6:ef:4d:4d:cd:c3:c7:d2:25:b1:1c:14:9a: 3d:b1:1f:29:8e:a8:2c:be:00:52:95:ff:6a:1f:4b: 1f:62:b7:2c:bd:21:67:f6:06:2b:25:68:03:6e:bf: ea:b5:9f:d1:46:7d:13:f5:64:85:d4:1b:4a:32:a5: e2:41:6c:84:f4:55:dd:24:46:5f:ac:30:90:8f:e4: 37:d4:6e:88:08:7b:38:7d:06:ce:5b:be:43:a5:df: 6a:77:9d:ed:69:52:9b:80:20:00:20:b0:93:ae:3d: b1:1c:c3:fd:47:f5:d9:59:0a:60:ee:33:61:c0:fc: da:49:54:6b:3a:4c:19:24:25:97:a8:46:02:95:ff: 58:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:16:F8:47:01:AF:B9:39:F8:89:04:BE:E3:20:D4:D6:19:4D:37:39 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203057.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.167.0/24 82.26.136.0/24 Signature Algorithm: sha256WithRSAEncryption 70:c4:90:bc:3e:10:7b:2a:9b:6a:c6:4d:a1:51:90:94:0d:19: 59:30:ab:2f:3f:db:30:84:c7:87:f9:31:17:6a:b9:85:c0:24: d4:54:d5:5a:96:99:8c:b1:8f:d8:45:cb:96:9b:71:20:75:11: 20:87:f3:90:74:8c:13:a1:aa:4a:d8:42:27:a0:a9:55:20:20: ca:07:06:da:11:f0:c8:96:c5:b3:b4:48:6f:ce:4c:2c:eb:53: 85:35:22:a9:c7:01:d3:91:23:26:4b:a3:c6:8d:e9:59:64:c6: 62:ea:15:f6:86:3c:ea:0f:f9:14:42:f1:a4:8a:4b:30:d0:41: 92:83:c1:e8:c8:00:aa:02:5e:92:01:3d:55:9b:e7:43:ee:bd: 7f:45:17:2b:6e:2d:e0:ab:51:85:e0:07:e3:ab:89:88:30:a0: 92:6a:f1:c5:a6:04:76:81:51:d1:c6:6c:d1:07:3d:02:32:36: 99:73:95:2c:9c:64:2f:d5:59:91:bf:f0:08:c9:a4:43:f5:b9: 84:42:32:30:7c:8f:dd:3e:30:9f:46:4a:ff:98:fb:3e:12:c7: ef:c5:4f:88:84:5a:1a:e6:10:cd:4e:a5:71:be:f1:84:ad:77: ff:d8:00:5b:ee:aa:d6:eb:25:aa:5f:36:ba:45:97:13:4e:b9: 30:07:01:9e -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUBFPKTdBJeA4J0aT+295jYgM5sPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMzEwNzA0NTFaFw0yNjEyMzAwNzA5NTFaMDMxMTAvBgNV BAMTKDVDMTZGODQ3MDFBRkI5MzlGODg5MDRCRUUzMjBENEQ2MTk0RDM3MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZD47OGYPV8aW2gLsdFKS7qe0Z FkOPu3r+fS5/2xQO0Wz+fP0HPCWKvHOS7DhgIKcvnrIgK3JbUlsdVf677AnOOM/x Qw+bB8kP+IkdZRN7vNewyNrOZcHe8AR81n7eL8UiO2DjDF5RTix9tSa7lkzOwPyI +D0h6dUkxu9NTc3Dx9IlsRwUmj2xHymOqCy+AFKV/2ofSx9ityy9IWf2BislaANu v+q1n9FGfRP1ZIXUG0oypeJBbIT0Vd0kRl+sMJCP5DfUbogIezh9Bs5bvkOl32p3 ne1pUpuAIAAgsJOuPbEcw/1H9dlZCmDuM2HA/NpJVGs6TBkkJZeoRgKV/1hzAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUXBb4RwGvuTn4iQS+4yDU1hlNNzkwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAzMDU3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUhan AwQAUhqIMA0GCSqGSIb3DQEBCwUAA4IBAQBwxJC8PhB7Kptqxk2hUZCUDRlZMKsv P9swhMeH+TEXarmFwCTUVNValpmMsY/YRcuWm3EgdREgh/OQdIwToapK2EInoKlV ICDKBwbaEfDIlsWztEhvzkws61OFNSKpxwHTkSMmS6PGjelZZMZi6hX2hjzqD/kU QvGkiksw0EGSg8HoyACqAl6SAT1Vm+dD7r1/RRcrbi3gq1GF4Afjq4mIMKCSavHF pgR2gVHRxmzRBz0CMjaZc5UsnGQv1VmRv/AIyaRD9bmEQjIwfI/dPjCfRkr/mPs+ EsfvxU+IhFoa5hDNTqVxvvGErXf/2ABb7qrW6yWqXza6RZcTTrkwBwGe -----END CERTIFICATE-----Generated at Wed Dec 31 09:39:38 2025 by rpki-client