This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204580.roa File: AS204580.roa (raw, json) Hash identifier: YDrKpiX830vifw7Dz/dlN8bf48JGeQ8Ee7aJZRcPApU= Subject key identifier: 42:77:B2:58:63:F8:99:68:DD:C4:B7:CD:56:1B:3A:2F:CA:05:4B:CC Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 55F11C2040BEAEE1BAF7E92526B27D03759C0177 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204580.roa Signing time: Thu 25 Dec 2025 09:47:59 +0000 ROA not before: Thu 25 Dec 2025 09:42:59 +0000 ROA not after: Thu 24 Dec 2026 09:47:59 +0000 asID: 204580 IP address blocks: 82.22.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:f1:1c:20:40:be:ae:e1:ba:f7:e9:25:26:b2:7d:03:75:9c:01:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 25 09:42:59 2025 GMT Not After : Dec 24 09:47:59 2026 GMT Subject: CN=4277B25863F89968DDC4B7CD561B3A2FCA054BCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:3b:ac:5e:4c:b4:f3:29:a3:aa:d5:b9:95: df:84:7a:36:ae:43:b2:41:de:8e:9c:85:79:74:81: 89:ac:56:e0:82:82:a9:63:e3:d9:9c:94:51:1d:05: 62:9a:d8:63:99:70:e7:99:09:6d:cd:e5:26:28:86: 2a:aa:2e:77:da:14:69:3d:a9:64:6d:2b:4e:bf:88: 77:80:b4:24:6a:d6:d1:01:85:3d:61:82:df:ed:90: 55:09:dd:36:9e:76:4c:e3:f2:3f:6e:12:de:17:17: c8:79:89:f5:58:ea:8a:a3:e6:65:2f:2c:6a:dc:aa: ae:75:1b:55:c5:06:33:2c:c3:29:fb:1c:0a:6f:88: ed:d2:f7:f0:09:99:b1:e1:66:76:a2:55:dc:d3:ae: 96:c5:69:61:01:1f:b3:47:57:f3:a5:30:b7:8e:fe: ea:26:94:16:e8:0e:5a:0b:63:af:0f:ac:87:c7:85: ad:ba:0b:11:8a:fd:f5:37:f1:ec:27:92:d0:c9:f7: 7c:91:8b:b1:37:d3:f7:6e:cb:59:11:89:7b:3e:4d: 23:7a:72:f6:38:5e:c4:bd:ab:13:0f:ab:75:7c:8e: e0:b5:4e:3c:5b:da:68:70:57:8a:94:a5:58:4b:55: 02:20:23:fa:c6:7d:b9:20:12:1d:a8:18:8c:56:9a: 45:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:77:B2:58:63:F8:99:68:DD:C4:B7:CD:56:1B:3A:2F:CA:05:4B:CC X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204580.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.32.0/24 Signature Algorithm: sha256WithRSAEncryption 52:08:16:ab:e1:74:01:9a:62:47:6e:1c:74:d1:17:57:d0:4e: cd:65:da:d3:54:bf:8b:34:08:cf:5e:d6:29:a9:c8:d8:e0:1b: b3:c2:29:38:e6:48:00:85:19:f8:83:e5:29:e4:5b:7b:d1:73: ea:23:5f:49:7b:31:e1:e1:cb:66:39:07:39:9a:b3:34:f7:be: 19:4b:61:15:35:84:b5:db:76:5e:2c:3c:9c:a1:f2:16:b0:e6: 57:6d:02:fc:63:2e:2b:97:6b:ce:40:85:da:36:41:cb:96:95: 54:f3:5d:50:db:89:7f:82:e1:88:59:97:26:f6:dc:fb:01:a5: 9b:fe:82:d2:05:f7:93:e8:88:5f:65:5f:5b:db:99:65:12:19: 75:69:c8:3b:6b:14:cd:64:92:93:ff:4a:22:47:83:86:bc:32: de:fc:7e:07:77:dc:cb:05:18:6b:57:70:2f:32:eb:3b:a1:e9: 7b:88:7d:0c:fc:0b:06:90:cf:34:6c:52:d4:91:11:04:c2:36: 66:55:ab:ba:94:5b:ba:00:36:e5:6f:6e:00:a6:61:1c:bf:86: 0f:26:73:58:e7:44:a7:59:eb:41:84:9f:62:c9:ef:ab:f5:37: 08:4a:3c:9d:3b:60:bd:14:31:30:d7:a1:37:d4:2e:3f:ff:23: 86:06:9d:44 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUVfEcIEC+ruG69+klJrJ9A3WcAXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMjUwOTQyNTlaFw0yNjEyMjQwOTQ3NTlaMDMxMTAvBgNV BAMTKDQyNzdCMjU4NjNGODk5NjhEREM0QjdDRDU2MUIzQTJGQ0EwNTRCQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pDusXky08ymjqtW5ld+Eejau Q7JB3o6chXl0gYmsVuCCgqlj49mclFEdBWKa2GOZcOeZCW3N5SYohiqqLnfaFGk9 qWRtK06/iHeAtCRq1tEBhT1hgt/tkFUJ3Taedkzj8j9uEt4XF8h5ifVY6oqj5mUv LGrcqq51G1XFBjMswyn7HApviO3S9/AJmbHhZnaiVdzTrpbFaWEBH7NHV/OlMLeO /uomlBboDloLY68PrIfHha26CxGK/fU38ewnktDJ93yRi7E30/duy1kRiXs+TSN6 cvY4XsS9qxMPq3V8juC1Tjxb2mhwV4qUpVhLVQIgI/rGfbkgEh2oGIxWmkXbAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUQneyWGP4mWjdxLfNVhs6L8oFS8wwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA0NTgwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhYg MA0GCSqGSIb3DQEBCwUAA4IBAQBSCBar4XQBmmJHbhx00RdX0E7NZdrTVL+LNAjP XtYpqcjY4Buzwik45kgAhRn4g+Up5Ft70XPqI19JezHh4ctmOQc5mrM0974ZS2EV NYS123ZeLDycofIWsOZXbQL8Yy4rl2vOQIXaNkHLlpVU811Q24l/guGIWZcm9tz7 AaWb/oLSBfeT6IhfZV9b25llEhl1acg7axTNZJKT/0oiR4OGvDLe/H4Hd9zLBRhr V3AvMus7oel7iH0M/AsGkM80bFLUkREEwjZmVau6lFu6ADblb24ApmEcv4YPJnNY 50SnWetBhJ9iye+r9TcISjydO2C9FDEw16E31C4//yOGBp1E -----END CERTIFICATE-----Generated at Sun Jan 18 08:55:10 2026 by rpki-client