This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205880.roa File: AS205880.roa (raw, json) Hash identifier: 36IyEPUC90NBHGRijdqzp0G9U4TV0Wt9JbUdH/e2WL4= Subject key identifier: D4:E8:51:8E:95:23:AD:25:A5:1A:CC:63:9D:1B:2A:30:83:68:7C:D5 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 58A8DB46F282C8E0160A35DFF2C8FF512F263545 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205880.roa Signing time: Wed 07 Jan 2026 10:43:25 +0000 ROA not before: Wed 07 Jan 2026 10:38:25 +0000 ROA not after: Wed 06 Jan 2027 10:43:25 +0000 asID: 205880 IP address blocks: 82.25.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a8:db:46:f2:82:c8:e0:16:0a:35:df:f2:c8:ff:51:2f:26:35:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 7 10:38:25 2026 GMT Not After : Jan 6 10:43:25 2027 GMT Subject: CN=D4E8518E9523AD25A51ACC639D1B2A3083687CD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:f7:84:64:63:49:71:0b:d2:52:48:a3:4f: 31:fe:ec:cf:05:69:f0:d5:6d:74:5a:3c:91:95:aa: 9a:84:c8:f4:e9:ee:f2:0e:d5:f0:b2:66:93:53:9b: c3:16:2b:86:4b:fb:a2:41:70:93:94:88:f2:af:6f: a0:d9:0d:46:75:29:b5:80:bb:16:e5:69:bd:35:46: f3:bc:df:4b:95:c6:7a:56:92:78:6f:6f:5c:97:2a: 88:32:0a:26:a2:97:f7:83:d2:16:e6:4d:b5:e7:2c: 2f:9b:a8:da:74:45:ec:63:46:ae:70:3b:a1:8e:c7: 3f:33:34:01:b0:1c:a3:63:5b:ab:98:d3:08:b6:05: fa:cb:4a:8f:76:c4:0a:29:f8:30:b3:98:57:2a:bd: 66:e3:ef:45:f4:f5:f2:3e:b0:e8:e5:28:26:70:34: db:83:df:15:55:72:cd:ce:24:71:df:2f:1f:6a:9e: bd:15:7f:ac:1d:f8:39:1c:c0:b8:cb:0f:42:ee:11: 7e:d0:fd:85:f3:b1:f6:bf:48:07:e4:20:68:71:80: 85:34:f9:12:e9:28:09:17:6e:7a:01:55:83:a9:79: 0c:04:25:e7:1b:c4:6d:6b:6d:ec:b3:52:33:43:f2: 26:2f:4d:15:86:82:9b:dd:e4:62:79:f9:08:3f:79: 64:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E8:51:8E:95:23:AD:25:A5:1A:CC:63:9D:1B:2A:30:83:68:7C:D5 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205880.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.25.145.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:7f:64:94:60:b3:af:4f:16:e0:9b:09:ef:ce:d5:8f:d8:67: 5b:ea:e4:76:92:a5:ac:c2:4e:3c:a7:b3:36:9c:e6:02:a5:15: a6:e9:5f:5d:ba:fa:a3:3c:ff:c8:5d:09:82:3e:5b:47:4b:27: 42:59:eb:1e:09:82:6f:90:f0:e1:b8:f8:51:84:09:68:a3:93: 67:ef:84:d1:cc:c0:23:40:00:6d:96:36:51:89:6d:58:50:ff: a9:1c:bd:af:db:05:8b:46:dd:12:f8:e1:5e:47:33:46:0c:3f: 5e:41:9d:70:8e:cc:04:06:f1:5f:46:91:73:e8:d3:66:ef:27: f9:4e:1b:1d:37:a4:a4:23:49:14:08:6f:90:b5:32:0c:26:8a: 4a:6d:89:ea:6c:71:16:e8:cc:92:e9:36:69:08:3d:c9:50:0b: 80:61:5e:04:41:5c:11:e9:33:18:a0:76:7e:60:57:f3:dd:66: c6:bc:5e:be:a2:ab:14:82:88:69:9e:e1:99:22:02:14:80:48: d6:3d:6b:8b:49:28:40:1f:b0:ff:8b:d8:4a:9f:60:cf:23:42: 04:50:44:6b:be:c9:06:50:80:b4:c3:c7:bc:17:77:9b:7e:4e: 1e:32:e7:42:08:13:24:08:3c:4f:1a:94:ac:2a:96:e8:39:80: 4b:df:76:f2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUWKjbRvKCyOAWCjXf8sj/US8mNUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMDcxMDM4MjVaFw0yNzAxMDYxMDQzMjVaMDMxMTAvBgNV BAMTKEQ0RTg1MThFOTUyM0FEMjVBNTFBQ0M2MzlEMUIyQTMwODM2ODdDRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/kPeEZGNJcQvSUkijTzH+7M8F afDVbXRaPJGVqpqEyPTp7vIO1fCyZpNTm8MWK4ZL+6JBcJOUiPKvb6DZDUZ1KbWA uxblab01RvO830uVxnpWknhvb1yXKogyCiail/eD0hbmTbXnLC+bqNp0RexjRq5w O6GOxz8zNAGwHKNjW6uY0wi2BfrLSo92xAop+DCzmFcqvWbj70X09fI+sOjlKCZw NNuD3xVVcs3OJHHfLx9qnr0Vf6wd+DkcwLjLD0LuEX7Q/YXzsfa/SAfkIGhxgIU0 +RLpKAkXbnoBVYOpeQwEJecbxG1rbeyzUjND8iYvTRWGgpvd5GJ5+Qg/eWQnAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU1OhRjpUjrSWlGsxjnRsqMINofNUwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA1ODgwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhmR MA0GCSqGSIb3DQEBCwUAA4IBAQA7f2SUYLOvTxbgmwnvztWP2Gdb6uR2kqWswk48 p7M2nOYCpRWm6V9duvqjPP/IXQmCPltHSydCWeseCYJvkPDhuPhRhAloo5Nn74TR zMAjQABtljZRiW1YUP+pHL2v2wWLRt0S+OFeRzNGDD9eQZ1wjswEBvFfRpFz6NNm 7yf5ThsdN6SkI0kUCG+QtTIMJopKbYnqbHEW6MyS6TZpCD3JUAuAYV4EQVwR6TMY oHZ+YFfz3WbGvF6+oqsUgohpnuGZIgIUgEjWPWuLSShAH7D/i9hKn2DPI0IEUERr vskGUIC0w8e8F3ebfk4eMudCCBMkCDxPGpSsKpboOYBL33by -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:18 2026 by rpki-client