This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203771.roa File: AS203771.roa (raw, json) Hash identifier: zlsZVjGjNUx5dSQmjTUA4Jh10h9asvTghk2As5IdcJE= Subject key identifier: 11:42:CB:38:59:7F:AE:ED:E6:08:8C:D9:0B:22:9A:57:BE:EE:7F:45 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 1C0261F673CB8A4FE1BD9D8ACB90CC51D5893491 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203771.roa Signing time: Tue 18 Nov 2025 18:01:53 +0000 ROA not before: Tue 18 Nov 2025 17:56:53 +0000 ROA not after: Tue 17 Nov 2026 18:01:53 +0000 asID: 203771 IP address blocks: 82.21.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Nov 2025 09:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:02:61:f6:73:cb:8a:4f:e1:bd:9d:8a:cb:90:cc:51:d5:89:34:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 18 17:56:53 2025 GMT Not After : Nov 17 18:01:53 2026 GMT Subject: CN=1142CB38597FAEEDE6088CD90B229A57BEEE7F45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:47:8b:1a:a1:76:85:43:d6:54:11:1b:ec: 2d:11:18:49:cf:d2:1e:5d:0b:1c:bf:12:11:af:19: 97:b7:21:22:e5:89:13:b5:34:9f:1c:b5:7e:7b:04: 66:0e:1c:67:0b:aa:9b:c3:47:9b:e7:74:82:b8:e9: ce:45:c4:03:e4:25:2a:f4:5a:fe:ae:aa:19:6d:59: 36:a6:41:36:62:5c:eb:6d:68:1e:a8:d7:17:37:60: a3:50:bb:67:b5:fe:5d:de:8e:8f:87:92:cf:4d:79: 51:01:bf:64:aa:42:4a:b0:53:ab:a9:a6:8a:c7:e4: 42:70:98:e2:3a:47:a2:de:6f:06:d0:b8:fb:33:15: 10:73:61:3b:3d:97:5e:56:cc:1d:c4:fd:56:cd:63: 3e:de:1a:15:6e:6e:e9:4d:b5:4c:2b:b1:42:51:66: 50:ab:a8:07:56:ac:66:27:c9:38:96:91:d7:35:1d: 67:a5:04:25:00:0a:e3:ff:c3:0f:f2:b7:75:a7:34: d3:ef:5b:72:d2:5b:fe:81:76:bf:64:05:4c:0a:46: f0:90:20:c9:e9:24:5b:c7:13:3d:de:12:d0:b8:ba: e7:d7:b1:46:7f:08:4c:10:b5:0c:5f:2c:e6:2c:14: 48:84:ea:47:f4:1c:49:46:78:5b:f6:62:ec:3f:ca: 34:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:42:CB:38:59:7F:AE:ED:E6:08:8C:D9:0B:22:9A:57:BE:EE:7F:45 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS203771.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.149.0/24 Signature Algorithm: sha256WithRSAEncryption 41:a8:e2:b0:b9:ee:4f:93:d1:5d:bc:f5:f7:22:81:f7:87:84: 03:d9:84:bc:2c:66:27:d3:01:37:c9:36:d6:3c:29:59:da:06: b6:63:3a:f4:0d:cf:3c:36:bc:01:f0:68:a8:d7:61:b4:b3:53: 6e:5b:35:3f:e8:68:38:92:05:72:8b:b4:cc:a0:fe:b4:a3:04: 43:6d:44:eb:1e:87:18:5e:ec:f0:50:bb:4c:da:7a:af:7e:a2: 92:de:20:32:bd:01:8f:ce:79:21:3b:ee:e6:9b:9f:dc:b8:98: a6:62:03:55:2b:bb:07:db:d1:5b:c3:26:00:6b:6d:64:67:c8: c2:70:6b:8f:f2:3c:4c:b5:58:a5:2b:11:2b:52:e1:86:7b:77: 32:3d:27:f3:c8:d1:e8:1d:5f:d4:58:0d:c8:19:52:98:40:bc: 53:07:e4:a7:55:99:14:d4:3d:ed:f0:56:63:bd:b7:00:72:f4: a3:77:83:a7:c0:93:1c:48:63:cf:e7:3a:e2:04:9b:35:e3:a8: c5:a1:53:87:14:55:de:4d:78:10:29:cc:cb:e4:63:f4:98:a5: 1b:c5:85:80:41:25:d4:a6:88:ec:44:94:ea:9d:79:3f:5d:88: b4:71:df:c5:7f:14:f4:78:a6:15:9e:0e:6e:e3:0c:06:f2:ca: 20:5a:98:d5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUHAJh9nPLik/hvZ2Ky5DMUdWJNJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMTgxNzU2NTNaFw0yNjExMTcxODAxNTNaMDMxMTAvBgNV BAMTKDExNDJDQjM4NTk3RkFFRURFNjA4OENEOTBCMjI5QTU3QkVFRTdGNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0QEeLGqF2hUPWVBEb7C0RGEnP 0h5dCxy/EhGvGZe3ISLliRO1NJ8ctX57BGYOHGcLqpvDR5vndIK46c5FxAPkJSr0 Wv6uqhltWTamQTZiXOttaB6o1xc3YKNQu2e1/l3ejo+Hks9NeVEBv2SqQkqwU6up porH5EJwmOI6R6LebwbQuPszFRBzYTs9l15WzB3E/VbNYz7eGhVubulNtUwrsUJR ZlCrqAdWrGYnyTiWkdc1HWelBCUACuP/ww/yt3WnNNPvW3LSW/6Bdr9kBUwKRvCQ IMnpJFvHEz3eEtC4uufXsUZ/CEwQtQxfLOYsFEiE6kf0HElGeFv2Yuw/yjSLAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUEULLOFl/ru3mCIzZCyKaV77uf0UwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjAzNzcxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhWV MA0GCSqGSIb3DQEBCwUAA4IBAQBBqOKwue5Pk9FdvPX3IoH3h4QD2YS8LGYn0wE3 yTbWPClZ2ga2Yzr0Dc88NrwB8Gio12G0s1NuWzU/6Gg4kgVyi7TMoP60owRDbUTr HocYXuzwULtM2nqvfqKS3iAyvQGPznkhO+7mm5/cuJimYgNVK7sH29FbwyYAa21k Z8jCcGuP8jxMtVilKxErUuGGe3cyPSfzyNHoHV/UWA3IGVKYQLxTB+SnVZkU1D3t 8FZjvbcAcvSjd4OnwJMcSGPP5zriBJs146jFoVOHFFXeTXgQKczL5GP0mKUbxYWA QSXUpojsRJTqnXk/XYi0cd/FfxT0eKYVng5u4wwG8sogWpjV -----END CERTIFICATE-----Generated at Fri Nov 21 18:21:40 2025 by rpki-client