This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204603.roa File: AS204603.roa (raw, json) Hash identifier: 2ROW6XG3QDwZsP1ww6Wx3Fs7dHcYwiyCgTnq2v4qKtI= Subject key identifier: 97:25:7E:6D:D5:8C:5E:9D:D5:9F:D9:B9:C7:90:71:E4:58:EC:79:36 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4A3A77FF056EBDA21A5C9FC10ACABB0252D3DFDD Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204603.roa Signing time: Fri 26 Dec 2025 08:17:34 +0000 ROA not before: Fri 26 Dec 2025 08:12:34 +0000 ROA not after: Fri 25 Dec 2026 08:17:34 +0000 asID: 204603 IP address blocks: 82.41.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:3a:77:ff:05:6e:bd:a2:1a:5c:9f:c1:0a:ca:bb:02:52:d3:df:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 26 08:12:34 2025 GMT Not After : Dec 25 08:17:34 2026 GMT Subject: CN=97257E6DD58C5E9DD59FD9B9C79071E458EC7936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4a:30:15:36:9e:9d:60:f8:aa:62:89:33:5a: f4:01:1d:0b:b3:4a:78:2e:dc:76:33:c2:c5:d7:9d: 63:7a:82:8a:92:1c:96:ba:18:f0:10:f5:01:39:36: 60:7b:04:3a:2e:bf:b7:ba:0e:65:9b:7f:85:41:14: 2a:02:7b:e6:9e:c3:7e:cf:c3:ca:12:60:36:cc:7f: 3c:76:f7:29:30:83:92:48:25:13:88:64:a5:82:9d: f6:2a:5e:ab:5b:79:90:8a:8c:ba:72:6f:00:98:a3: 50:94:27:b1:bf:3e:8a:36:7c:6f:5e:8f:65:be:3f: 88:08:ec:85:c3:be:f3:2a:e1:b9:3b:85:96:a0:91: 17:17:57:e4:b4:ac:0f:a3:0f:41:18:b8:b8:57:6d: e6:30:24:cb:41:54:37:07:df:e7:93:28:55:aa:0f: bb:2a:bf:38:e8:e6:2a:cd:f3:cd:e7:e7:ec:13:4f: 70:6b:af:27:0e:4f:76:d7:3f:7a:f2:b4:0a:f8:16: 50:0a:60:bd:8f:d5:d7:8b:c4:8c:dd:f6:2b:91:45: b5:b2:8d:6c:9b:cd:27:51:8e:c9:0d:5b:66:6e:2c: 7b:d1:c6:e9:62:9d:3d:6f:33:b9:8e:0e:96:82:eb: 05:d7:82:5b:5d:96:93:b7:9f:32:e9:61:7a:bd:73: b4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:25:7E:6D:D5:8C:5E:9D:D5:9F:D9:B9:C7:90:71:E4:58:EC:79:36 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS204603.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.41.36.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:2f:8e:fd:d5:0a:b4:1c:9a:38:70:99:10:94:af:92:ee:24: db:cb:6a:50:86:90:74:b1:ef:37:6e:f5:d0:9b:21:5b:a7:5d: 11:aa:27:b5:03:3c:68:23:69:f3:b9:d4:2a:6e:91:49:12:13: 2b:e9:76:91:e0:4d:f1:45:8b:e2:60:88:93:79:18:fc:08:c5: 6d:8c:c4:d2:cb:05:eb:83:23:57:bb:32:f7:08:f7:21:75:d1: 74:95:41:26:21:e4:94:c9:5a:90:c8:93:a5:67:98:28:e5:eb: 06:19:f1:06:0e:af:8d:58:51:ea:15:fe:c6:c5:2e:ca:d7:cf: 8c:8b:62:f3:65:dc:49:e2:69:06:74:30:a3:f3:09:3d:e9:8b: 5f:17:6b:f7:fa:1b:26:f8:2f:db:22:5d:57:91:67:51:ff:22: 4d:b0:93:93:b4:65:99:70:5b:65:92:eb:b5:54:93:c1:f2:3d: f0:c1:a8:b7:03:03:32:b0:b8:e3:af:39:bc:0a:c3:c4:35:f9: 2e:93:b0:0a:5f:65:86:75:51:0b:8b:69:59:62:77:44:90:2b: da:04:4d:80:c2:03:0d:f2:10:f6:03:f6:b7:a6:0d:c4:35:c6: 90:62:84:89:3f:4c:36:84:d3:20:bb:c2:ce:43:db:23:18:24: a8:ec:8d:e6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUSjp3/wVuvaIaXJ/BCsq7AlLT390wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMjYwODEyMzRaFw0yNjEyMjUwODE3MzRaMDMxMTAvBgNV BAMTKDk3MjU3RTZERDU4QzVFOURENTlGRDlCOUM3OTA3MUU0NThFQzc5MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhSjAVNp6dYPiqYokzWvQBHQuz Sngu3HYzwsXXnWN6goqSHJa6GPAQ9QE5NmB7BDouv7e6DmWbf4VBFCoCe+aew37P w8oSYDbMfzx29ykwg5JIJROIZKWCnfYqXqtbeZCKjLpybwCYo1CUJ7G/Poo2fG9e j2W+P4gI7IXDvvMq4bk7hZagkRcXV+S0rA+jD0EYuLhXbeYwJMtBVDcH3+eTKFWq D7sqvzjo5irN883n5+wTT3BrrycOT3bXP3rytAr4FlAKYL2P1deLxIzd9iuRRbWy jWybzSdRjskNW2ZuLHvRxulinT1vM7mODpaC6wXXgltdlpO3nzLpYXq9c7RvAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUlyV+bdWMXp3Vn9m5x5Bx5FjseTYwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA0NjAzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUikk MA0GCSqGSIb3DQEBCwUAA4IBAQAKL4791Qq0HJo4cJkQlK+S7iTby2pQhpB0se83 bvXQmyFbp10Rqie1AzxoI2nzudQqbpFJEhMr6XaR4E3xRYviYIiTeRj8CMVtjMTS ywXrgyNXuzL3CPchddF0lUEmIeSUyVqQyJOlZ5go5esGGfEGDq+NWFHqFf7GxS7K 18+Mi2LzZdxJ4mkGdDCj8wk96YtfF2v3+hsm+C/bIl1XkWdR/yJNsJOTtGWZcFtl kuu1VJPB8j3wwai3AwMysLjjrzm8CsPENfkuk7AKX2WGdVELi2lZYndEkCvaBE2A wgMN8hD2A/a3pg3ENcaQYoSJP0w2hNMgu8LOQ9sjGCSo7I3m -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:17 2026 by rpki-client