This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211407.roa File: AS211407.roa (raw, json) Hash identifier: NBmvuCbVNNypGOAQbLyNs7UoZ5wJgpFhous47XAUGMU= Subject key identifier: 39:1F:15:AF:96:EA:13:F2:CB:EB:56:E0:AA:DB:85:DD:F7:E4:F5:80 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 0438D5E4E66941755CD1CA7C9CF5D7B283682304 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211407.roa Signing time: Wed 03 Dec 2025 16:24:48 +0000 ROA not before: Wed 03 Dec 2025 16:19:48 +0000 ROA not after: Wed 02 Dec 2026 16:24:48 +0000 asID: 211407 IP address blocks: 82.41.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:38:d5:e4:e6:69:41:75:5c:d1:ca:7c:9c:f5:d7:b2:83:68:23:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 3 16:19:48 2025 GMT Not After : Dec 2 16:24:48 2026 GMT Subject: CN=391F15AF96EA13F2CBEB56E0AADB85DDF7E4F580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b1:0a:f4:3d:4a:73:d0:83:5b:aa:e4:67:86: ff:c8:40:6c:d5:2c:70:f8:ed:e3:04:0b:aa:c7:5f: 2e:7a:62:a5:d1:6f:53:b8:f8:a6:2e:b5:f2:a7:04: 2d:3a:e5:6a:a0:ef:e7:6d:34:cb:e9:4c:8d:24:da: 0b:3c:ac:ed:d9:7c:4e:51:bb:6a:6e:ce:aa:c0:f1: b0:a8:2a:84:51:11:43:db:2e:c0:83:82:e5:db:7b: 4b:c8:de:96:b7:21:3e:b3:d5:b3:00:6a:b4:38:11: c3:f7:40:57:4a:e0:57:3c:00:f6:95:1a:63:cb:b3: 39:a2:15:e1:d1:56:dc:b5:c0:1d:93:ec:08:c2:f7: 18:dd:e3:07:ca:1a:9b:da:c6:60:ab:58:97:78:b1: 01:c5:d2:a6:50:22:8b:07:1a:49:ad:15:60:4a:a3: 56:76:f3:4d:09:ff:81:12:f2:46:0c:c9:a1:3f:25: 71:92:27:4d:1f:b7:57:0e:e0:91:2c:db:b7:5d:4f: 05:75:69:7f:f4:9e:3c:34:42:4a:1b:e0:d3:9f:dd: 57:71:3d:17:80:d2:8d:b0:d4:61:0b:93:85:a5:87: d5:0a:0f:eb:af:88:6c:e5:a7:e6:fb:b2:5d:b8:a2: bb:71:8e:d3:3b:bb:5e:58:02:f9:b4:f3:b8:91:cb: ea:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1F:15:AF:96:EA:13:F2:CB:EB:56:E0:AA:DB:85:DD:F7:E4:F5:80 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211407.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.41.42.0/24 Signature Algorithm: sha256WithRSAEncryption 49:ab:26:c9:40:d1:c2:1c:67:b8:cf:7f:40:82:33:6c:1e:92: aa:25:1f:23:1e:10:e0:61:3a:14:9a:84:c4:54:b7:30:0c:9a: 1d:13:5f:59:16:ba:6d:93:4a:c7:88:a9:c8:28:f1:36:b1:9a: d9:25:6b:2c:db:ac:52:83:e1:d8:e6:5f:00:00:9f:50:cc:48: 73:9d:aa:0d:a9:e9:dd:d4:e7:36:6f:9b:7a:49:28:5e:6a:1e: 12:17:39:2f:75:3e:15:66:73:d8:1e:81:52:a8:a3:73:27:16: 23:f3:3b:96:92:63:0e:d9:99:f2:ad:d2:9a:c8:16:cd:a2:74: 50:02:8d:f5:3d:b0:32:b2:3b:d0:34:6a:c5:8a:b6:a8:a9:30: e2:4a:98:de:4b:54:e2:64:9c:db:e6:5e:ed:04:87:92:ab:5e: bd:a1:f2:f3:10:42:2f:35:56:cd:a6:1c:d2:12:51:c1:f4:46: 06:53:18:f9:8e:67:52:33:c3:af:d0:80:4f:b6:dd:ff:60:22: c2:cf:e5:2b:bf:01:30:09:f5:ed:60:0b:67:e7:d8:63:61:ef: fe:e0:28:70:fb:e5:78:10:2b:ce:67:1a:33:05:17:2e:eb:58: 03:e6:23:ba:e5:95:8d:03:6f:9d:b0:de:81:20:12:b0:74:f5: 68:03:8a:6c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUBDjV5OZpQXVc0cp8nPXXsoNoIwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDMxNjE5NDhaFw0yNjEyMDIxNjI0NDhaMDMxMTAvBgNV BAMTKDM5MUYxNUFGOTZFQTEzRjJDQkVCNTZFMEFBREI4NURERjdFNEY1ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmsQr0PUpz0INbquRnhv/IQGzV LHD47eMEC6rHXy56YqXRb1O4+KYutfKnBC065Wqg7+dtNMvpTI0k2gs8rO3ZfE5R u2puzqrA8bCoKoRREUPbLsCDguXbe0vI3pa3IT6z1bMAarQ4EcP3QFdK4Fc8APaV GmPLszmiFeHRVty1wB2T7AjC9xjd4wfKGpvaxmCrWJd4sQHF0qZQIosHGkmtFWBK o1Z2800J/4ES8kYMyaE/JXGSJ00ft1cO4JEs27ddTwV1aX/0njw0Qkob4NOf3Vdx PReA0o2w1GELk4Wlh9UKD+uviGzlp+b7sl24ortxjtM7u15YAvm087iRy+rPAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUOR8Vr5bqE/LL61bgqtuF3ffk9YAwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjExNDA3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUikq MA0GCSqGSIb3DQEBCwUAA4IBAQBJqybJQNHCHGe4z39AgjNsHpKqJR8jHhDgYToU moTEVLcwDJodE19ZFrptk0rHiKnIKPE2sZrZJWss26xSg+HY5l8AAJ9QzEhznaoN qend1Oc2b5t6SSheah4SFzkvdT4VZnPYHoFSqKNzJxYj8zuWkmMO2ZnyrdKayBbN onRQAo31PbAysjvQNGrFiraoqTDiSpjeS1TiZJzb5l7tBIeSq169ofLzEEIvNVbN phzSElHB9EYGUxj5jmdSM8Ov0IBPtt3/YCLCz+UrvwEwCfXtYAtn59hjYe/+4Chw ++V4ECvOZxozBRcu61gD5iO65ZWNA2+dsN6BIBKwdPVoA4ps -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:00 2025 by rpki-client