This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206971.roa File: AS206971.roa (raw, json) Hash identifier: vauYokNVeXdGuj2kDx5SZRR19xyRl09wvnq8XZU/VOA= Subject key identifier: 6A:86:C5:04:EF:E7:A5:E2:FB:B5:9F:E3:A1:85:86:B3:63:D8:A9:2E Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 150F802AF16B0BC2AE515D19AA7C3746BFDB3AE1 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206971.roa Signing time: Mon 24 Nov 2025 22:34:34 +0000 ROA not before: Mon 24 Nov 2025 22:29:34 +0000 ROA not after: Mon 23 Nov 2026 22:34:34 +0000 asID: 206971 IP address blocks: 82.39.107.0/24 maxlen: 24 2a13:9500:d6::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:0f:80:2a:f1:6b:0b:c2:ae:51:5d:19:aa:7c:37:46:bf:db:3a:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 24 22:29:34 2025 GMT Not After : Nov 23 22:34:34 2026 GMT Subject: CN=6A86C504EFE7A5E2FBB59FE3A18586B363D8A92E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2d:e4:2e:1f:f5:cc:1a:50:0a:c2:fe:4e:0c: ce:ef:67:9c:e0:08:4e:c1:ff:ae:4f:b0:7d:21:2e: f8:b4:09:28:0e:ea:c7:20:ed:91:0e:c7:7e:16:1e: 33:c3:50:6e:a1:38:3a:13:ae:dc:77:6e:04:fe:0e: 01:76:ad:8a:b7:ab:a9:f9:75:e8:27:2d:15:9b:09: 7b:10:36:cc:e8:04:a3:9f:03:55:23:30:a8:6f:6c: e0:a2:fc:29:62:9f:4b:d8:ab:b1:35:5d:ab:74:64: a6:30:fb:4f:bb:84:22:4f:92:58:fb:82:7a:7b:29: be:16:0e:ae:3f:49:6b:b5:d3:14:4f:14:8a:89:9e: e5:2a:d1:48:f4:6e:85:e7:ed:77:80:61:52:54:65: cf:7e:70:83:b1:07:be:61:c0:09:a2:88:c8:3e:05: f9:0b:54:25:85:8f:89:27:6a:7e:ca:0c:ec:5e:7a: 42:4f:e3:91:1d:5c:ae:b0:36:69:02:53:19:6f:f8: a5:6e:8e:fe:31:63:fb:34:2e:5c:f7:24:c4:8a:45: 06:4d:f1:9a:92:05:bf:d3:81:d0:c9:4b:94:e2:d8: ed:5e:c9:95:c6:cc:68:88:6b:6a:69:24:3a:76:02: f3:33:8f:10:a4:09:f9:07:ad:79:b0:95:ed:03:b2: d4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:86:C5:04:EF:E7:A5:E2:FB:B5:9F:E3:A1:85:86:B3:63:D8:A9:2E X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS206971.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.107.0/24 IPv6: 2a13:9500:d6::/48 Signature Algorithm: sha256WithRSAEncryption 72:bf:55:6c:9c:43:4b:31:34:04:67:6b:20:e2:23:94:8e:67: 5d:92:f8:4f:3d:1d:c7:14:02:ec:c5:63:ba:63:68:2d:b4:72: bb:f3:cd:a7:92:e4:80:ee:70:e6:c2:68:20:65:bf:23:8f:16: d3:8a:5f:67:46:a4:8e:fe:5c:94:40:3e:5d:21:39:7d:97:8b: 83:d8:3a:f9:2d:ef:1a:7f:58:bb:ea:3b:2b:f6:83:cc:b3:0f: 84:5b:cb:8b:ce:71:20:aa:86:76:83:9e:b5:df:83:8a:0b:5b: 1d:e5:ec:c6:27:9c:70:12:ab:e2:17:bf:69:a9:77:e0:a5:ee: f7:ec:38:09:26:ba:d6:51:cf:4a:4e:76:56:71:98:00:a6:89: e3:df:10:2a:54:be:e0:6a:c9:19:b8:16:b2:9f:f8:13:dc:b1: d0:9b:84:1a:b0:30:74:aa:56:1e:2a:af:63:b8:52:74:28:e3: ef:1e:86:5a:98:0e:cb:88:49:d3:e6:d9:f8:31:89:6c:cd:77: ad:fa:29:5b:57:6f:46:7a:a1:62:37:47:a1:e6:8d:44:ad:03: a6:f5:83:32:25:8c:dd:41:69:a3:79:75:68:5e:ce:5d:f4:e4: de:2e:e9:d8:8d:75:01:3e:21:2d:4f:bc:33:be:d1:e9:bd:3e: a4:62:27:12 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgIUFQ+AKvFrC8KuUV0Zqnw3Rr/bOuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjQyMjI5MzRaFw0yNjExMjMyMjM0MzRaMDMxMTAvBgNV BAMTKDZBODZDNTA0RUZFN0E1RTJGQkI1OUZFM0ExODU4NkIzNjNEOEE5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLeQuH/XMGlAKwv5ODM7vZ5zg CE7B/65PsH0hLvi0CSgO6scg7ZEOx34WHjPDUG6hODoTrtx3bgT+DgF2rYq3q6n5 degnLRWbCXsQNszoBKOfA1UjMKhvbOCi/Clin0vYq7E1Xat0ZKYw+0+7hCJPklj7 gnp7Kb4WDq4/SWu10xRPFIqJnuUq0Uj0boXn7XeAYVJUZc9+cIOxB75hwAmiiMg+ BfkLVCWFj4knan7KDOxeekJP45EdXK6wNmkCUxlv+KVujv4xY/s0Llz3JMSKRQZN 8ZqSBb/TgdDJS5Ti2O1eyZXGzGiIa2ppJDp2AvMzjxCkCfkHrXmwle0DstStAgMB AAGjggIbMIICFzAdBgNVHQ4EFgQUaobFBO/npeL7tZ/joYWGs2PYqS4wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA2OTcxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUidr MA8EAgACMAkDBwAqE5UAANYwDQYJKoZIhvcNAQELBQADggEBAHK/VWycQ0sxNARn ayDiI5SOZ12S+E89HccUAuzFY7pjaC20crvzzaeS5IDucObCaCBlvyOPFtOKX2dG pI7+XJRAPl0hOX2Xi4PYOvkt7xp/WLvqOyv2g8yzD4Rby4vOcSCqhnaDnrXfg4oL Wx3l7MYnnHASq+IXv2mpd+Cl7vfsOAkmutZRz0pOdlZxmACmiePfECpUvuBqyRm4 FrKf+BPcsdCbhBqwMHSqVh4qr2O4UnQo4+8ehlqYDsuISdPm2fgxiWzNd636KVtX b0Z6oWI3R6HmjUStA6b1gzIljN1BaaN5dWhezl305N4u6diNdQE+IS1PvDO+0em9 PqRiJxI= -----END CERTIFICATE-----Generated at Wed Dec 3 11:05:00 2025 by rpki-client