This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205838.roa File: AS205838.roa (raw, json) Hash identifier: NUx/hoKUMmZgWyNiZDW0y3MphhJnZdcyisu0ScwCIgo= Subject key identifier: 2E:FF:D8:62:F4:1A:D3:5D:85:F6:C8:38:27:3E:89:60:B1:74:02:33 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: EC330709139ACCEEF96417C9F5D23CA8738EB9 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205838.roa Signing time: Mon 05 Jan 2026 00:00:37 +0000 ROA not before: Sun 04 Jan 2026 23:55:37 +0000 ROA not after: Mon 04 Jan 2027 00:00:37 +0000 asID: 205838 IP address blocks: 82.24.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ec:33:07:09:13:9a:cc:ee:f9:64:17:c9:f5:d2:3c:a8:73:8e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 4 23:55:37 2026 GMT Not After : Jan 4 00:00:37 2027 GMT Subject: CN=2EFFD862F41AD35D85F6C838273E8960B1740233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:3c:52:d7:75:85:58:2f:da:fd:d3:72:48: 89:da:96:8a:1d:a0:4b:9f:54:17:71:f2:e7:e1:3c: d8:f7:28:47:df:15:26:74:4b:1b:4d:3d:3d:af:96: a3:3e:0a:6b:40:ea:15:3f:d8:2e:af:5e:70:ef:cb: c4:4d:d9:d3:e2:61:ab:9c:cf:31:f9:e9:9e:1a:cf: 94:40:34:65:18:8b:8c:b5:38:4d:c2:7f:b2:d3:f6: c4:e4:f7:db:be:9b:40:04:82:cc:03:0b:6d:76:69: 6a:6a:34:00:23:0a:45:2c:a5:a4:28:7e:a4:11:07: cb:13:04:e1:87:3e:4b:f6:a0:bc:97:07:dd:18:1c: c0:6e:2f:c0:52:ef:f0:e1:d6:dc:bf:6b:fa:1a:4a: ca:8d:0c:84:48:16:7f:3a:74:3b:aa:ef:df:30:c8: f5:64:a5:88:40:62:8e:91:5f:40:03:f8:98:3c:f9: 8e:16:e8:d6:6f:88:f5:a1:d2:2b:36:0e:cf:c8:11: a1:e0:6b:7f:20:86:87:dd:83:27:60:1a:a1:96:15: c6:39:3a:e0:0c:f4:c4:3e:4a:12:0e:be:bf:e9:7c: 38:f3:e7:f1:72:04:2d:4b:62:08:ac:eb:38:b7:7c: 80:16:23:8e:31:44:5c:20:d9:65:00:03:0b:c0:47: ed:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FF:D8:62:F4:1A:D3:5D:85:F6:C8:38:27:3E:89:60:B1:74:02:33 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.24.91.0/24 Signature Algorithm: sha256WithRSAEncryption 85:46:0a:9a:2a:87:f4:7d:b0:ef:16:c4:30:d1:0c:c3:38:97: 2b:a7:7c:72:73:aa:ec:ac:ac:dc:00:3e:e8:37:30:71:01:ee: 95:c0:19:75:d7:bf:2c:b4:52:d9:d3:16:6c:99:5d:3d:dc:e3: f3:9a:32:d0:d5:1e:03:73:a2:bb:28:48:a1:5b:88:5e:aa:7c: fb:b8:ab:d0:3b:4e:9d:be:a8:23:52:34:2a:85:e6:1d:db:af: 72:33:cb:d5:de:6c:5b:f1:60:25:4b:ec:df:18:49:61:fd:0e: ae:46:57:0f:95:39:ca:e5:2e:0d:ef:f8:e7:05:95:5d:17:b8: c3:25:10:6e:21:3a:50:06:ee:e6:ba:f1:b3:c5:58:68:8b:39: aa:05:e5:7b:31:af:e8:f5:d1:72:ed:8e:8c:6b:92:70:1a:cd: 6c:8d:42:e4:24:38:8b:aa:1f:e2:ff:c7:83:35:bb:10:f8:97: 9a:3d:77:7d:97:e9:4e:53:ad:af:ea:ec:75:c1:7b:46:df:02: 63:cf:7e:b5:2b:34:ce:d1:00:74:fb:98:c5:cc:64:7b:0c:4a: fd:0e:a6:ec:b5:d7:76:18:d6:4c:a4:ad:7d:f4:c5:40:c5:05: bc:92:57:98:20:dd:c5:82:c3:e6:aa:47:f5:4f:cc:8b:57:74: a6:01:5a:c6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUAOwzBwkTmszu+WQXyfXSPKhzjrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMDQyMzU1MzdaFw0yNzAxMDQwMDAwMzdaMDMxMTAvBgNV BAMTKDJFRkZEODYyRjQxQUQzNUQ4NUY2QzgzODI3M0U4OTYwQjE3NDAyMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/tzxS13WFWC/a/dNySInalood oEufVBdx8ufhPNj3KEffFSZ0SxtNPT2vlqM+CmtA6hU/2C6vXnDvy8RN2dPiYauc zzH56Z4az5RANGUYi4y1OE3Cf7LT9sTk99u+m0AEgswDC212aWpqNAAjCkUspaQo fqQRB8sTBOGHPkv2oLyXB90YHMBuL8BS7/Dh1ty/a/oaSsqNDIRIFn86dDuq798w yPVkpYhAYo6RX0AD+Jg8+Y4W6NZviPWh0is2Ds/IEaHga38ghofdgydgGqGWFcY5 OuAM9MQ+ShIOvr/pfDjz5/FyBC1LYgis6zi3fIAWI44xRFwg2WUAAwvAR+3pAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQULv/YYvQa012F9sg4Jz6JYLF0AjMwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA1ODM4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhhb MA0GCSqGSIb3DQEBCwUAA4IBAQCFRgqaKof0fbDvFsQw0QzDOJcrp3xyc6rsrKzc AD7oNzBxAe6VwBl1178stFLZ0xZsmV093OPzmjLQ1R4Dc6K7KEihW4heqnz7uKvQ O06dvqgjUjQqheYd269yM8vV3mxb8WAlS+zfGElh/Q6uRlcPlTnK5S4N7/jnBZVd F7jDJRBuITpQBu7muvGzxVhoizmqBeV7Ma/o9dFy7Y6Ma5JwGs1sjULkJDiLqh/i /8eDNbsQ+JeaPXd9l+lOU62v6ux1wXtG3wJjz361KzTO0QB0+5jFzGR7DEr9Dqbs tdd2GNZMpK199MVAxQW8kleYIN3FgsPmqkf1T8yLV3SmAVrG -----END CERTIFICATE-----Generated at Sun Jan 18 08:57:01 2026 by rpki-client