This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204261.roa File: AS204261.roa (raw, json) Hash identifier: /8gkGdjKSLNXy+Xr8/+/UPxvhdwRzbUWHZ6HdJbFoDQ= Subject key identifier: 30:8A:B9:F2:EF:1A:74:BF:F2:9F:FB:32:7E:94:48:CA:29:F9:5B:09 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 276949306AEDD3C9543194385AB2EAC1A52BB320 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204261.roa Signing time: Mon 22 Dec 2025 13:49:13 +0000 ROA not before: Mon 22 Dec 2025 13:44:13 +0000 ROA not after: Mon 21 Dec 2026 13:49:13 +0000 asID: 204261 IP address blocks: 82.22.9.0/24 maxlen: 24 82.24.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:69:49:30:6a:ed:d3:c9:54:31:94:38:5a:b2:ea:c1:a5:2b:b3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 22 13:44:13 2025 GMT Not After : Dec 21 13:49:13 2026 GMT Subject: CN=308AB9F2EF1A74BFF29FFB327E9448CA29F95B09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:22:97:33:80:9a:cf:5a:08:4e:b1:b1:86:07: f2:fd:f4:9f:e1:6d:0f:35:f1:07:6b:9e:83:ff:3b: d4:8c:d7:97:34:3a:d4:19:cd:39:88:67:a1:3f:60: 49:95:76:9a:65:fe:d6:7c:08:50:0b:2b:97:cb:b7: 6d:1a:03:31:91:0b:84:af:5b:8a:b3:ca:fe:35:26: 61:2f:84:35:26:b8:4d:b6:06:ee:8c:97:f8:4d:1d: cb:b2:37:96:6d:d4:f2:8a:dd:07:a3:d8:25:51:91: 1d:80:e1:35:a8:87:bf:79:19:0e:8e:9c:12:35:94: 04:ac:5a:7f:66:19:c1:ea:69:d3:ef:72:18:7e:21: 89:70:21:82:7f:07:3d:07:17:c1:d9:60:8c:8f:a0: 81:6b:90:49:41:5b:90:52:98:7d:24:82:97:3e:76: 00:d3:a4:b0:01:88:54:bb:0d:c4:3b:a1:f1:dc:8e: 81:cb:2f:71:e3:f1:a5:0f:43:40:78:c4:3e:35:bb: ed:02:da:88:1c:0f:79:c0:d9:a7:db:62:87:0d:17: 02:de:c9:41:aa:1b:bb:fc:01:b8:8d:f9:8e:77:44: 99:fc:f9:57:b2:2c:0d:7d:51:3a:fe:93:86:07:3b: b5:d7:bd:3e:ce:e7:2d:cf:66:a1:74:f8:a1:8a:fa: 30:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8A:B9:F2:EF:1A:74:BF:F2:9F:FB:32:7E:94:48:CA:29:F9:5B:09 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204261.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.9.0/24 82.24.189.0/24 Signature Algorithm: sha256WithRSAEncryption a7:75:11:3c:96:08:4c:e9:6c:37:a0:ae:f0:0b:84:33:45:d3: 1d:cc:42:d5:16:6b:6a:a7:6d:95:fe:81:76:6c:8a:6d:91:ed: d0:d1:b3:66:21:27:26:10:b5:ee:1c:40:59:c8:62:8c:30:a1: 77:db:2f:b3:02:40:05:57:4a:e3:9c:9f:e1:29:2d:6b:d6:a3: 32:cf:a5:2a:7a:92:e0:4c:53:e1:fa:63:53:f7:f7:87:92:fb: a4:85:fd:44:99:6d:a8:56:c1:d6:1f:00:3e:cb:8d:58:9a:fe: bd:7e:2f:b9:9e:76:05:44:34:8d:15:da:08:24:5e:a3:6c:16: d7:5e:27:83:86:e0:7e:09:6d:54:ed:71:d9:f2:5c:cb:67:7d: ec:9f:dc:0f:2e:44:1a:40:37:97:c7:53:e6:67:b0:e3:ae:b0: fa:54:c8:77:79:13:1f:22:8c:54:44:5b:b5:32:82:33:ef:9f: f0:80:f5:bc:f1:9a:31:27:3a:ac:28:30:9d:b4:df:a1:91:91: bb:6b:d1:68:1b:e4:4e:9e:29:53:92:95:a4:e4:7b:df:e5:e9: 06:28:2d:f9:f3:95:6e:5d:ab:08:bb:34:ca:af:98:59:73:a6: aa:89:f1:ef:bc:af:48:d3:b0:40:1b:88:1e:55:75:2f:1e:d0: 2e:88:aa:05 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUJ2lJMGrt08lUMZQ4WrLqwaUrsyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMjIxMzQ0MTNaFw0yNjEyMjExMzQ5MTNaMDMxMTAvBgNV BAMTKDMwOEFCOUYyRUYxQTc0QkZGMjlGRkIzMjdFOTQ0OENBMjlGOTVCMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoIpczgJrPWghOsbGGB/L99J/h bQ818QdrnoP/O9SM15c0OtQZzTmIZ6E/YEmVdppl/tZ8CFALK5fLt20aAzGRC4Sv W4qzyv41JmEvhDUmuE22Bu6Ml/hNHcuyN5Zt1PKK3Qej2CVRkR2A4TWoh795GQ6O nBI1lASsWn9mGcHqadPvchh+IYlwIYJ/Bz0HF8HZYIyPoIFrkElBW5BSmH0kgpc+ dgDTpLABiFS7DcQ7ofHcjoHLL3Hj8aUPQ0B4xD41u+0C2ogcD3nA2afbYocNFwLe yUGqG7v8AbiN+Y53RJn8+VeyLA19UTr+k4YHO7XXvT7O5y3PZqF0+KGK+jCnAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUMIq58u8adL/yn/syfpRIyin5WwkwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA0MjYxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUhYJ AwQAUhi9MA0GCSqGSIb3DQEBCwUAA4IBAQCndRE8lghM6Ww3oK7wC4QzRdMdzELV Fmtqp22V/oF2bIptke3Q0bNmIScmELXuHEBZyGKMMKF32y+zAkAFV0rjnJ/hKS1r 1qMyz6UqepLgTFPh+mNT9/eHkvukhf1EmW2oVsHWHwA+y41Ymv69fi+5nnYFRDSN FdoIJF6jbBbXXieDhuB+CW1U7XHZ8lzLZ33sn9wPLkQaQDeXx1PmZ7DjrrD6VMh3 eRMfIoxURFu1MoIz75/wgPW88ZoxJzqsKDCdtN+hkZG7a9FoG+ROnilTkpWk5Hvf 5ekGKC3585VuXasIuzTKr5hZc6aqifHvvK9I07BAG4geVXUvHtAuiKoF -----END CERTIFICATE-----Generated at Sun Jan 18 08:56:40 2026 by rpki-client