This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204150.roa File: AS204150.roa (raw, json) Hash identifier: +Eg9ZIjGX2VUHBDAS8LRK3yYSwH9fjl7KM5tiLBCLaA= Subject key identifier: C5:52:03:7E:D4:0E:CC:49:A1:59:19:A5:5D:43:A1:94:A0:6E:3B:9C Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 0F1792FD37A377BD3B0AAABFC5BE3F39222903B4 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204150.roa Signing time: Thu 25 Dec 2025 15:25:21 +0000 ROA not before: Thu 25 Dec 2025 15:20:21 +0000 ROA not after: Thu 24 Dec 2026 15:25:21 +0000 asID: 204150 IP address blocks: 82.41.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:17:92:fd:37:a3:77:bd:3b:0a:aa:bf:c5:be:3f:39:22:29:03:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 25 15:20:21 2025 GMT Not After : Dec 24 15:25:21 2026 GMT Subject: CN=C552037ED40ECC49A15919A55D43A194A06E3B9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9e:9e:f2:cd:ba:7e:50:c5:7e:6a:fc:b2:1e: 06:62:e2:3f:53:af:30:37:f9:13:c4:f6:fc:74:fd: cb:b7:85:1b:19:8c:fc:f9:b5:88:01:b1:f2:5e:7e: 9b:8e:b3:52:47:80:40:5a:2f:c3:d1:77:19:d1:32: b8:8a:4c:b5:4b:40:6a:ec:cc:99:0c:e1:77:35:60: da:f4:61:eb:f1:c2:1b:f8:6f:8c:90:07:8f:25:80: ce:86:43:a1:0e:e0:de:18:bf:07:cf:6a:0e:68:0f: c4:f8:3b:07:05:d9:93:07:fa:3e:e2:94:0b:76:e4: 5b:24:56:84:03:ba:5e:4a:bb:ee:26:13:6f:14:42: a9:86:26:c6:e5:54:92:fe:df:be:1f:88:2e:2e:9a: 4b:be:f8:4f:25:00:60:ed:b3:05:0b:d5:21:5e:6f: 0c:48:56:f1:04:17:ff:de:4e:f9:e5:8a:01:15:3d: 69:13:95:69:1a:4c:30:c6:40:4d:5c:2e:34:c1:86: 3c:d6:ad:d1:41:40:66:41:2b:ea:65:0f:37:3e:74: 71:54:cd:48:f0:20:96:cc:e2:b6:58:2c:94:12:4c: b8:44:25:1a:0f:64:12:0c:9e:27:1c:64:6a:19:b4: 56:79:81:51:15:82:d5:bf:80:4b:8a:af:3f:23:a0: c2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:52:03:7E:D4:0E:CC:49:A1:59:19:A5:5D:43:A1:94:A0:6E:3B:9C X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204150.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.41.51.0/24 Signature Algorithm: sha256WithRSAEncryption 71:3a:0c:06:ee:c6:12:3a:7d:f3:d3:72:a8:8d:4e:6e:d2:70: 3d:50:62:82:39:8b:c6:b0:73:e2:12:8e:f7:eb:ef:25:31:11: 70:08:4e:28:fb:b2:27:72:bb:f4:ae:dc:95:0e:07:67:a2:e5: e9:7b:5d:75:f5:3f:a7:4c:65:ad:3b:a4:9d:b6:4c:30:78:87: af:04:3f:c5:d1:c0:5c:6b:44:dc:ff:a1:92:b7:f9:68:e2:80: 7e:62:95:45:fe:1c:a3:24:1b:c7:43:c3:42:ec:a4:7d:e5:81: f5:b0:dd:57:57:67:71:ed:de:04:6b:87:3e:78:49:95:02:62: e5:32:57:08:73:2e:6e:8c:c7:25:9a:c0:92:7a:3f:96:8c:cf: 2f:6b:b5:9d:56:2c:c2:10:93:99:cf:be:e6:81:68:42:38:53: 16:51:f2:49:17:1f:67:70:2f:93:9d:02:e6:6c:58:49:31:60: ba:f8:37:4f:de:83:8e:6b:ae:e2:f0:9b:4d:68:d5:1b:5d:59: 1a:b6:25:48:b1:0e:c1:be:87:d2:5d:68:72:8b:cd:76:21:82: b1:34:4c:7b:cb:ba:73:a8:c6:cc:5b:d6:55:ce:04:9f:4b:3f: ae:b5:46:80:2f:53:09:6f:34:19:7e:6d:64:88:69:a6:0e:c8: d8:ee:8e:3c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUDxeS/Tejd707Cqq/xb4/OSIpA7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMjUxNTIwMjFaFw0yNjEyMjQxNTI1MjFaMDMxMTAvBgNV BAMTKEM1NTIwMzdFRDQwRUNDNDlBMTU5MTlBNTVENDNBMTk0QTA2RTNCOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNnp7yzbp+UMV+avyyHgZi4j9T rzA3+RPE9vx0/cu3hRsZjPz5tYgBsfJefpuOs1JHgEBaL8PRdxnRMriKTLVLQGrs zJkM4Xc1YNr0Yevxwhv4b4yQB48lgM6GQ6EO4N4YvwfPag5oD8T4OwcF2ZMH+j7i lAt25FskVoQDul5Ku+4mE28UQqmGJsblVJL+374fiC4umku++E8lAGDtswUL1SFe bwxIVvEEF//eTvnligEVPWkTlWkaTDDGQE1cLjTBhjzWrdFBQGZBK+plDzc+dHFU zUjwIJbM4rZYLJQSTLhEJRoPZBIMniccZGoZtFZ5gVEVgtW/gEuKrz8joMIXAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUxVIDftQOzEmhWRmlXUOhlKBuO5wwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA0MTUwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUikz MA0GCSqGSIb3DQEBCwUAA4IBAQBxOgwG7sYSOn3z03KojU5u0nA9UGKCOYvGsHPi Eo736+8lMRFwCE4o+7Incrv0rtyVDgdnouXpe1119T+nTGWtO6SdtkwweIevBD/F 0cBca0Tc/6GSt/lo4oB+YpVF/hyjJBvHQ8NC7KR95YH1sN1XV2dx7d4Ea4c+eEmV AmLlMlcIcy5ujMclmsCSej+WjM8va7WdVizCEJOZz77mgWhCOFMWUfJJFx9ncC+T nQLmbFhJMWC6+DdP3oOOa67i8JtNaNUbXVkatiVIsQ7BvofSXWhyi812IYKxNEx7 y7pzqMbMW9ZVzgSfSz+utUaAL1MJbzQZfm1kiGmmDsjY7o48 -----END CERTIFICATE-----Generated at Sun Jan 11 13:06:32 2026 by rpki-client