This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205886.roa File: AS205886.roa (raw, json) Hash identifier: bpG9TooCziloVvAGt/3M4aizDLPW9JoDSJQcHt0tin8= Subject key identifier: CB:5B:31:E2:44:EB:86:57:64:A6:CC:80:46:E2:94:2A:89:9D:A5:F1 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 44841668E26A1FC9EC45B19818C65F4BAAF006E6 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205886.roa Signing time: Sun 30 Nov 2025 08:05:29 +0000 ROA not before: Sun 30 Nov 2025 08:00:29 +0000 ROA not after: Sun 29 Nov 2026 08:05:29 +0000 asID: 205886 IP address blocks: 82.22.205.0/24 maxlen: 24 82.23.171.0/24 maxlen: 24 82.23.249.0/24 maxlen: 24 82.24.24.0/24 maxlen: 24 82.24.110.0/24 maxlen: 24 82.24.144.0/24 maxlen: 24 82.25.200.0/24 maxlen: 24 82.26.196.0/24 maxlen: 24 82.27.3.0/24 maxlen: 24 82.27.118.0/24 maxlen: 24 82.27.132.0/24 maxlen: 24 82.29.48.0/24 maxlen: 24 82.38.9.0/24 maxlen: 24 82.38.17.0/24 maxlen: 24 82.38.19.0/24 maxlen: 24 82.38.40.0/24 maxlen: 24 82.38.121.0/24 maxlen: 24 82.39.154.0/24 maxlen: 24 82.39.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:84:16:68:e2:6a:1f:c9:ec:45:b1:98:18:c6:5f:4b:aa:f0:06:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 30 08:00:29 2025 GMT Not After : Nov 29 08:05:29 2026 GMT Subject: CN=CB5B31E244EB865764A6CC8046E2942A899DA5F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7d:6b:e0:bf:21:c3:eb:87:08:45:e9:9f:b9: be:c2:6b:ec:dd:14:c1:e9:4d:b5:6f:58:b3:6e:ef: d8:36:93:76:f7:15:f6:2b:8d:03:58:11:03:69:cc: 72:59:69:25:e4:e6:f2:0c:c9:de:29:42:6a:7c:5d: ea:e0:7a:7f:47:fa:1d:99:8f:0a:85:9e:04:3b:29: ef:43:a9:39:21:a9:5c:42:f9:2b:81:af:5a:cb:f0: 0e:f0:ac:b9:b0:06:89:0b:03:75:3c:90:17:ca:dd: e7:36:32:00:79:db:4c:aa:8d:30:bf:79:f3:c1:ac: 14:7e:f1:ce:f8:8a:63:91:17:4f:87:93:c9:23:99: 37:88:8b:d7:62:64:ec:82:0c:9b:9c:43:8c:ef:2c: 01:21:3e:92:00:a9:1d:15:69:ef:6f:dd:fb:01:b8: d0:78:63:73:a5:a7:66:1b:16:ff:d8:9b:8f:1e:e6: ab:32:44:8a:82:43:05:45:8f:2c:cb:35:ea:68:e6: e5:e9:06:10:81:34:43:8d:28:38:6b:ce:70:f7:4f: 94:8b:ce:9c:11:58:05:c5:3c:c7:2f:60:22:85:05: 51:e4:a3:9d:42:2a:a1:0a:8e:cf:d8:9f:3f:81:e5: 03:0c:1c:4c:a3:50:15:9c:3b:87:47:d9:94:6c:e9: f9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5B:31:E2:44:EB:86:57:64:A6:CC:80:46:E2:94:2A:89:9D:A5:F1 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS205886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.205.0/24 82.23.171.0/24 82.23.249.0/24 82.24.24.0/24 82.24.110.0/24 82.24.144.0/24 82.25.200.0/24 82.26.196.0/24 82.27.3.0/24 82.27.118.0/24 82.27.132.0/24 82.29.48.0/24 82.38.9.0/24 82.38.17.0/24 82.38.19.0/24 82.38.40.0/24 82.38.121.0/24 82.39.154.0/24 82.39.205.0/24 Signature Algorithm: sha256WithRSAEncryption 80:5e:9b:0c:69:a9:c6:57:31:cc:34:22:75:d3:5b:b1:f9:6f: dd:31:88:77:47:63:dc:52:e9:3b:09:5c:cf:72:75:13:cf:25: b4:5a:ea:8a:7f:ae:65:5d:e8:87:5c:85:a5:ce:f4:32:05:e3: 4e:b6:af:d1:76:c5:8c:c5:a9:72:8a:4b:f3:c4:fd:49:c7:6d: 33:7b:2f:2c:3a:1c:16:de:18:4e:4a:8b:62:24:f6:6d:ef:a3: 13:f5:b9:9a:7a:4d:5e:05:be:b8:b0:64:a8:18:68:71:67:e7: 1c:ef:a0:67:97:39:4a:f2:38:95:57:4f:12:8a:09:f3:cf:3c: 5c:51:f2:6b:fd:78:42:02:c4:3a:41:66:8c:34:22:2b:b9:ed: 7c:f9:b1:98:6d:6c:f6:7b:7c:a1:65:ed:f7:b4:a6:8a:4b:cb: 18:e4:00:26:9c:42:23:05:cc:54:96:12:2c:9f:3f:ea:03:35: 11:dc:63:77:66:29:de:7f:11:db:aa:21:5f:8d:9e:a6:56:eb: 08:7b:2c:f0:96:bb:ef:28:0e:eb:a9:63:bb:25:55:96:34:7d: 3f:99:94:51:2b:dc:ca:f4:46:bc:c8:6b:72:a7:5e:f9:ec:2c: e5:85:bb:05:bc:6b:55:fd:f8:e5:d1:e5:f9:d8:62:9c:27:05: 97:9b:ee:55 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIURIQWaOJqH8nsRbGYGMZfS6rwBuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMzAwODAwMjlaFw0yNjExMjkwODA1MjlaMDMxMTAvBgNV BAMTKENCNUIzMUUyNDRFQjg2NTc2NEE2Q0M4MDQ2RTI5NDJBODk5REE1RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3fWvgvyHD64cIRemfub7Ca+zd FMHpTbVvWLNu79g2k3b3FfYrjQNYEQNpzHJZaSXk5vIMyd4pQmp8Xergen9H+h2Z jwqFngQ7Ke9DqTkhqVxC+SuBr1rL8A7wrLmwBokLA3U8kBfK3ec2MgB520yqjTC/ efPBrBR+8c74imORF0+Hk8kjmTeIi9diZOyCDJucQ4zvLAEhPpIAqR0Vae9v3fsB uNB4Y3Olp2YbFv/Ym48e5qsyRIqCQwVFjyzLNepo5uXpBhCBNEONKDhrznD3T5SL zpwRWAXFPMcvYCKFBVHko51CKqEKjs/Ynz+B5QMMHEyjUBWcO4dH2ZRs6fkTAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUy1sx4kTrhldkpsyARuKUKomdpfEwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA1ODg2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAFIW zQMEAFIXqwMEAFIX+QMEAFIYGAMEAFIYbgMEAFIYkAMEAFIZyAMEAFIaxAMEAFIb AwMEAFIbdgMEAFIbhAMEAFIdMAMEAFImCQMEAFImEQMEAFImEwMEAFImKAMEAFIm eQMEAFInmgMEAFInzTANBgkqhkiG9w0BAQsFAAOCAQEAgF6bDGmpxlcxzDQiddNb sflv3TGId0dj3FLpOwlcz3J1E88ltFrqin+uZV3oh1yFpc70MgXjTrav0XbFjMWp copL88T9ScdtM3svLDocFt4YTkqLYiT2be+jE/W5mnpNXgW+uLBkqBhocWfnHO+g Z5c5SvI4lVdPEooJ8888XFHya/14QgLEOkFmjDQiK7ntfPmxmG1s9nt8oWXt97Sm ikvLGOQAJpxCIwXMVJYSLJ8/6gM1Edxjd2Yp3n8R26ohX42eplbrCHss8Ja77ygO 66ljuyVVljR9P5mUUSvcyvRGvMhrcqde+ews5YW7BbxrVf345dHl+dhinCcFl5vu VQ== -----END CERTIFICATE-----Generated at Thu Dec 4 06:00:37 2025 by rpki-client