This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207449.roa File: AS207449.roa (raw, json) Hash identifier: M6LJUJdZqGBHdZugmbksiRP0cZApFF+NLcO39tQs8YU= Subject key identifier: F9:BD:24:DC:03:39:CC:AD:C6:D3:F0:AA:EF:50:8E:E8:54:8A:9F:12 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 6B1817CC11BC96C1AFD13E405DCAF5A94FE32815 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207449.roa Signing time: Wed 07 Jan 2026 12:06:49 +0000 ROA not before: Wed 07 Jan 2026 12:01:49 +0000 ROA not after: Wed 06 Jan 2027 12:06:49 +0000 asID: 207449 IP address blocks: 82.25.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:18:17:cc:11:bc:96:c1:af:d1:3e:40:5d:ca:f5:a9:4f:e3:28:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 7 12:01:49 2026 GMT Not After : Jan 6 12:06:49 2027 GMT Subject: CN=F9BD24DC0339CCADC6D3F0AAEF508EE8548A9F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1f:fe:98:09:db:6a:22:85:a6:a2:54:34:32: 0d:9a:bf:be:b1:0a:24:f0:b8:0e:e7:39:91:43:46: ba:78:fd:fa:0b:df:f8:27:80:89:d2:d0:e3:38:67: 4f:97:a5:5b:69:7b:74:96:a8:4f:bb:20:1a:27:a8: 60:60:b7:93:97:85:8c:d1:8f:16:f3:0d:d0:cf:96: d5:b1:f3:a4:11:99:46:de:a2:a4:7b:b8:a4:e3:87: f2:de:d3:6c:fd:f3:3b:75:fa:bb:67:47:76:9c:51: 42:e9:d1:f6:da:43:bb:e7:d2:9e:0f:4b:1c:11:8c: 98:7e:0e:91:44:2c:e8:f2:f1:38:56:1f:e1:53:c2: b8:c0:29:9f:d8:11:b7:1b:dc:25:b4:ab:f7:82:0e: 9c:61:a5:f1:48:0e:ec:01:db:b0:ee:9a:5f:32:47: d1:15:b3:9b:b7:fb:b4:f8:e5:f9:a7:e8:f2:29:40: 5b:e6:a1:1f:a7:22:95:72:33:b9:50:c0:a4:c2:42: c4:48:d8:de:4d:b0:80:95:f0:54:a9:84:29:95:be: b4:69:65:66:70:fd:60:3f:02:3c:92:ed:e7:4e:bf: 8a:35:1d:0f:8e:77:21:f7:11:be:30:f0:49:4a:c5: 6e:0d:13:0d:f6:b8:f3:da:12:a5:31:ac:6a:5c:03: 1d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BD:24:DC:03:39:CC:AD:C6:D3:F0:AA:EF:50:8E:E8:54:8A:9F:12 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS207449.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.25.200.0/24 Signature Algorithm: sha256WithRSAEncryption 72:45:50:ba:43:63:6d:08:bd:42:58:21:20:79:88:45:af:ef: 58:77:47:03:f4:00:65:c1:4b:75:df:d5:9e:99:80:39:37:f8: 58:5c:18:74:4f:6c:89:21:75:52:be:d9:93:d2:d0:81:e9:c3: 12:2f:be:d7:67:84:f2:48:31:6b:b0:04:97:21:b3:a4:d8:7f: cc:de:1b:de:31:78:ad:3c:08:98:62:21:ea:4a:0c:39:f5:f9: de:5d:5e:3e:4a:4e:51:fc:67:ea:c0:02:89:b8:b6:c8:99:21: dd:ea:14:04:8e:dd:e0:ed:b3:ac:05:e3:e3:71:5e:c8:86:d7: 34:b0:d0:fd:84:fe:51:3c:7d:05:d4:ab:f5:76:a8:a5:2d:9d: 35:d7:3d:c8:9d:3e:aa:48:31:04:3d:3a:27:d2:bc:e6:f3:37: 0d:b7:3b:21:c0:87:69:13:64:8c:0f:7b:11:73:36:59:29:67: 08:f6:aa:02:65:77:76:28:2b:95:84:81:98:93:2e:8f:6d:fa: 28:fb:c7:65:74:f4:8a:c0:91:f7:ff:6e:dd:3f:04:04:e2:5c: 94:52:57:c4:92:af:cb:68:64:ac:1b:d7:f4:7d:cc:55:03:37: f2:d3:c9:5d:ef:07:8d:63:69:57:36:26:da:90:eb:c4:c2:54: 28:e7:2c:71 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUaxgXzBG8lsGv0T5AXcr1qU/jKBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMDcxMjAxNDlaFw0yNzAxMDYxMjA2NDlaMDMxMTAvBgNV BAMTKEY5QkQyNERDMDMzOUNDQURDNkQzRjBBQUVGNTA4RUU4NTQ4QTlGMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHH/6YCdtqIoWmolQ0Mg2av76x CiTwuA7nOZFDRrp4/foL3/gngInS0OM4Z0+XpVtpe3SWqE+7IBonqGBgt5OXhYzR jxbzDdDPltWx86QRmUbeoqR7uKTjh/Le02z98zt1+rtnR3acUULp0fbaQ7vn0p4P SxwRjJh+DpFELOjy8ThWH+FTwrjAKZ/YEbcb3CW0q/eCDpxhpfFIDuwB27Duml8y R9EVs5u3+7T45fmn6PIpQFvmoR+nIpVyM7lQwKTCQsRI2N5NsICV8FSphCmVvrRp ZWZw/WA/AjyS7edOv4o1HQ+OdyH3Eb4w8ElKxW4NEw32uPPaEqUxrGpcAx3fAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU+b0k3AM5zK3G0/Cq71CO6FSKnxIwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjA3NDQ5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhnI MA0GCSqGSIb3DQEBCwUAA4IBAQByRVC6Q2NtCL1CWCEgeYhFr+9Yd0cD9ABlwUt1 39WemYA5N/hYXBh0T2yJIXVSvtmT0tCB6cMSL77XZ4TySDFrsASXIbOk2H/M3hve MXitPAiYYiHqSgw59fneXV4+Sk5R/GfqwAKJuLbImSHd6hQEjt3g7bOsBePjcV7I htc0sND9hP5RPH0F1Kv1dqilLZ011z3InT6qSDEEPTon0rzm8zcNtzshwIdpE2SM D3sRczZZKWcI9qoCZXd2KCuVhIGYky6Pbfoo+8dldPSKwJH3/27dPwQE4lyUUlfE kq/LaGSsG9f0fcxVAzfy08ld7weNY2lXNibakOvEwlQo5yxx -----END CERTIFICATE-----Generated at Sun Jan 18 08:55:48 2026 by rpki-client