This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204071.roa File: AS204071.roa (raw, json) Hash identifier: Rgn5gGsq2FJaz8ZVu9fJPq6RHILVwwvwy6R27eu3o2E= Subject key identifier: 4E:1B:C2:77:32:29:85:67:8F:4B:F1:D5:47:0A:46:EB:97:5A:05:71 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 46CEE599E7036156C2D79579598E0925DE193FB3 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204071.roa Signing time: Thu 06 Nov 2025 13:58:08 +0000 ROA not before: Thu 06 Nov 2025 13:53:08 +0000 ROA not after: Thu 05 Nov 2026 13:58:08 +0000 asID: 204071 IP address blocks: 82.27.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ce:e5:99:e7:03:61:56:c2:d7:95:79:59:8e:09:25:de:19:3f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 6 13:53:08 2025 GMT Not After : Nov 5 13:58:08 2026 GMT Subject: CN=4E1BC277322985678F4BF1D5470A46EB975A0571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:55:56:e8:12:63:93:21:80:c0:77:fc:df: 1c:3a:c5:a6:d4:4f:df:93:e6:aa:81:fb:b9:18:60: c0:fd:4a:d1:80:d3:ab:7f:89:10:e7:ad:68:1f:3e: 05:ee:b6:1c:4a:71:06:9d:43:75:cb:9d:a5:fd:e6: 58:d4:02:79:c9:88:de:75:ac:75:ac:d6:0e:f4:7e: ce:9f:2e:95:68:77:58:39:ee:4f:d2:7a:eb:ae:eb: 99:ca:ff:85:20:dc:71:58:77:4a:cb:63:a7:0c:8e: 4b:59:e1:6e:45:b9:01:80:15:2a:fa:4e:c9:2d:e0: b5:01:ff:4e:47:9a:38:8b:0b:c4:0f:c1:b5:b6:a2: 88:d8:fa:0e:14:c1:56:d3:6b:6c:82:4e:0a:60:f0: aa:fb:72:e3:17:bd:1b:ff:f9:32:6e:3d:ef:34:ee: 0f:06:66:2b:47:03:a8:96:fc:a0:15:be:e1:b1:7f: e5:95:16:00:86:f2:86:45:90:3b:e7:34:33:a1:1e: de:67:69:e9:15:3b:0b:86:52:4e:72:45:0d:bd:5c: 11:fc:ae:06:be:c3:d3:f4:d1:71:01:f6:ef:a7:c2: af:cb:1a:c0:e3:70:7e:c8:04:0e:a8:72:2e:11:1e: 24:f0:82:9e:17:28:e4:f2:07:70:b7:2a:ae:f4:e2: 28:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1B:C2:77:32:29:85:67:8F:4B:F1:D5:47:0A:46:EB:97:5A:05:71 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204071.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.27.116.0/24 Signature Algorithm: sha256WithRSAEncryption 67:35:0b:8f:2c:da:f8:9d:df:45:74:9c:e8:84:89:e3:a9:20: 3e:e3:52:91:15:94:60:4e:59:2a:bd:6d:61:70:eb:24:6e:c6: 05:4b:47:0e:c5:9c:b2:ea:2c:b7:d3:a8:a4:e9:b6:26:c4:97: ea:f9:b8:82:9b:f2:65:94:c4:ef:50:b9:8a:61:72:14:45:68: 75:fb:0a:d5:0d:25:68:f9:bb:f0:db:a9:63:f4:95:1f:5f:b2: cb:91:ab:68:4e:a6:ec:62:21:c0:6c:a7:44:86:20:3f:51:cf: 70:05:cb:0b:64:40:e6:2f:41:68:90:f7:5f:b2:cd:96:ad:7d: eb:90:11:a4:9c:f9:2f:eb:99:6d:d2:7c:26:dc:44:88:02:39: b6:a1:46:2b:1c:84:b1:e3:98:c5:df:24:15:87:fc:e5:d9:24: 08:0f:70:5b:3d:87:e1:5b:61:db:ba:ab:b0:84:76:0b:a9:4f: 61:48:5a:70:c2:d6:5a:8f:7f:10:c5:83:6e:78:e6:bf:9e:30: 67:81:83:95:3a:5b:f8:c4:a0:74:21:88:37:f6:d8:8c:43:3f: 90:0b:7c:72:40:19:80:8f:1a:cf:50:28:0e:d2:1b:a9:50:4a: 00:84:06:84:29:5c:37:a8:86:ea:d0:ff:3e:64:ed:1f:4f:5c: 8d:6f:7d:ac -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIURs7lmecDYVbC15V5WY4JJd4ZP7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMDYxMzUzMDhaFw0yNjExMDUxMzU4MDhaMDMxMTAvBgNV BAMTKDRFMUJDMjc3MzIyOTg1Njc4RjRCRjFENTQ3MEE0NkVCOTc1QTA1NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5XlVW6BJjkyGAwHf83xw6xabU T9+T5qqB+7kYYMD9StGA06t/iRDnrWgfPgXuthxKcQadQ3XLnaX95ljUAnnJiN51 rHWs1g70fs6fLpVod1g57k/Seuuu65nK/4Ug3HFYd0rLY6cMjktZ4W5FuQGAFSr6 Tskt4LUB/05HmjiLC8QPwbW2oojY+g4UwVbTa2yCTgpg8Kr7cuMXvRv/+TJuPe80 7g8GZitHA6iW/KAVvuGxf+WVFgCG8oZFkDvnNDOhHt5naekVOwuGUk5yRQ29XBH8 rga+w9P00XEB9u+nwq/LGsDjcH7IBA6oci4RHiTwgp4XKOTyB3C3Kq704ij9AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUThvCdzIphWePS/HVRwpG65daBXEwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA0MDcxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUht0 MA0GCSqGSIb3DQEBCwUAA4IBAQBnNQuPLNr4nd9FdJzohInjqSA+41KRFZRgTlkq vW1hcOskbsYFS0cOxZyy6iy306ik6bYmxJfq+biCm/JllMTvULmKYXIURWh1+wrV DSVo+bvw26lj9JUfX7LLkatoTqbsYiHAbKdEhiA/Uc9wBcsLZEDmL0FokPdfss2W rX3rkBGknPkv65lt0nwm3ESIAjm2oUYrHISx45jF3yQVh/zl2SQID3BbPYfhW2Hb uquwhHYLqU9hSFpwwtZaj38QxYNueOa/njBngYOVOlv4xKB0IYg39tiMQz+QC3xy QBmAjxrPUCgO0hupUEoAhAaEKVw3qIbq0P8+ZO0fT1yNb32s -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:44 2025 by rpki-client