This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206650.roa File: AS206650.roa (raw, json) Hash identifier: gAj+1QfnhJWjK91i8P9OhDtQsW7jxogqORx4kbidWu0= Subject key identifier: FC:E7:3E:76:2D:20:69:FA:9B:A5:5C:6A:D7:FA:98:66:21:3B:D1:69 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 3D0257E71BE5965DDAAA85E5EA04BE32AA2E8A64 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206650.roa Signing time: Wed 31 Dec 2025 08:26:54 +0000 ROA not before: Wed 31 Dec 2025 08:21:54 +0000 ROA not after: Wed 30 Dec 2026 08:26:54 +0000 asID: 206650 IP address blocks: 82.22.46.0/24 maxlen: 24 82.22.52.0/24 maxlen: 24 82.41.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:02:57:e7:1b:e5:96:5d:da:aa:85:e5:ea:04:be:32:aa:2e:8a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 31 08:21:54 2025 GMT Not After : Dec 30 08:26:54 2026 GMT Subject: CN=FCE73E762D2069FA9BA55C6AD7FA9866213BD169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f6:8d:3a:a6:16:90:b7:45:85:2c:da:a9:1d: 61:3c:6b:21:de:f2:9d:9e:1d:af:aa:e4:fa:d6:aa: c6:f9:33:10:d9:df:f5:72:95:2c:02:34:9d:e2:88: f0:19:dd:83:63:42:a0:f1:14:4e:fe:f9:dd:a6:b0: 1e:19:bd:b8:31:ee:d2:24:c0:c9:40:3a:50:71:e3: 2c:53:db:67:69:41:bb:98:3a:33:ac:36:dc:89:b8: 65:55:14:95:f9:47:65:9b:eb:c0:d4:ec:50:39:15: 7d:56:e4:2b:f7:7e:e4:5c:16:f0:93:c9:8d:78:b3: 82:8d:a6:eb:45:89:7c:ca:0b:2e:75:12:db:54:10: ce:6a:9a:84:18:67:e1:2a:b3:cc:e1:3c:c4:2e:3b: 5a:8c:95:93:0e:6b:50:04:86:84:14:d6:7b:4d:50: 0c:45:30:64:55:4a:d3:dd:83:7f:98:68:45:7d:cd: 45:73:ae:69:70:89:cd:27:ec:9d:ce:2e:20:4b:a2: 60:4f:8a:aa:3f:d8:99:f2:d2:e0:20:7e:70:ce:23: 9d:a7:00:0d:81:4a:01:40:23:5f:b7:33:0a:9b:53: 3d:79:a0:c8:79:00:c0:c7:78:25:e2:ea:b9:1b:73: 07:c8:70:1d:92:60:35:b3:b9:c7:1c:4f:97:6d:32: 0d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E7:3E:76:2D:20:69:FA:9B:A5:5C:6A:D7:FA:98:66:21:3B:D1:69 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206650.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.46.0/24 82.22.52.0/24 82.41.171.0/24 Signature Algorithm: sha256WithRSAEncryption 48:64:4d:66:5c:8f:4d:da:cc:26:48:4a:2b:67:65:d0:7a:7e: a5:ab:cf:3b:7e:15:a8:de:21:b2:4d:96:1b:20:ea:4b:28:fd: f7:e0:b8:ee:d8:a6:ac:41:79:07:90:38:a3:a6:80:5c:5b:b3: 6d:d7:00:42:47:80:07:25:b4:3c:35:5f:ce:47:a0:a9:0c:ca: ba:f4:8d:28:0e:af:f2:5e:03:ba:d5:26:e2:4d:31:5c:92:2d: 46:0b:f3:88:1f:53:e0:22:65:a2:1a:80:64:58:c8:e2:0f:d4: ea:17:95:c6:69:e9:03:0c:4b:e9:9f:19:1a:a1:56:d5:1f:0b: c6:c0:50:02:be:69:c3:5c:e3:6d:32:4e:94:0b:0b:3a:84:cc: 51:7c:b8:a2:21:72:17:dd:0c:3e:54:07:b1:0f:48:42:7b:4c: 11:8a:27:98:7e:f2:bc:5a:bb:19:43:a0:33:df:fd:93:88:ae: 27:8e:9f:36:85:60:5d:7c:47:db:17:aa:6e:60:87:46:67:b8: 1c:14:73:f8:50:f7:f2:48:b4:b7:4e:36:54:4f:5c:8e:b0:59: 92:8e:86:db:9a:8b:25:51:1c:ee:44:93:3c:02:16:4c:93:6f: 4b:2d:95:ee:2d:63:38:50:66:e5:bb:9e:e4:a9:2a:a9:be:d5: 63:d2:3e:b8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUPQJX5xvlll3aqoXl6gS+MqouimQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMzEwODIxNTRaFw0yNjEyMzAwODI2NTRaMDMxMTAvBgNV BAMTKEZDRTczRTc2MkQyMDY5RkE5QkE1NUM2QUQ3RkE5ODY2MjEzQkQxNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK9o06phaQt0WFLNqpHWE8ayHe 8p2eHa+q5PrWqsb5MxDZ3/VylSwCNJ3iiPAZ3YNjQqDxFE7++d2msB4Zvbgx7tIk wMlAOlBx4yxT22dpQbuYOjOsNtyJuGVVFJX5R2Wb68DU7FA5FX1W5Cv3fuRcFvCT yY14s4KNputFiXzKCy51EttUEM5qmoQYZ+Eqs8zhPMQuO1qMlZMOa1AEhoQU1ntN UAxFMGRVStPdg3+YaEV9zUVzrmlwic0n7J3OLiBLomBPiqo/2Jny0uAgfnDOI52n AA2BSgFAI1+3MwqbUz15oMh5AMDHeCXi6rkbcwfIcB2SYDWzucccT5dtMg1jAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQU/Oc+di0gafqbpVxq1/qYZiE70WkwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA2NjUwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUhYu AwQAUhY0AwQAUimrMA0GCSqGSIb3DQEBCwUAA4IBAQBIZE1mXI9N2swmSEorZ2XQ en6lq887fhWo3iGyTZYbIOpLKP334Lju2KasQXkHkDijpoBcW7Nt1wBCR4AHJbQ8 NV/OR6CpDMq69I0oDq/yXgO61SbiTTFcki1GC/OIH1PgImWiGoBkWMjiD9TqF5XG aekDDEvpnxkaoVbVHwvGwFACvmnDXONtMk6UCws6hMxRfLiiIXIX3Qw+VAexD0hC e0wRiieYfvK8WrsZQ6Az3/2TiK4njp82hWBdfEfbF6puYIdGZ7gcFHP4UPfySLS3 TjZUT1yOsFmSjobbmoslURzuRJM8AhZMk29LLZXuLWM4UGblu57kqSqpvtVj0j64 -----END CERTIFICATE-----Generated at Sun Jan 18 08:56:41 2026 by rpki-client