This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211577.roa File: AS211577.roa (raw, json) Hash identifier: PTP4z+rbG8mns2r5KlUctBwJi8cR+qwfwIgYvcT+Sr0= Subject key identifier: 9B:80:8F:3B:75:B4:2A:E9:2A:22:A6:8D:66:36:64:8B:3A:96:5C:34 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4192E566021B7B0787064C9EE8B47ABC84B61747 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211577.roa Signing time: Sun 04 Jan 2026 21:29:31 +0000 ROA not before: Sun 04 Jan 2026 21:24:31 +0000 ROA not after: Sun 03 Jan 2027 21:29:31 +0000 asID: 211577 IP address blocks: 82.22.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:92:e5:66:02:1b:7b:07:87:06:4c:9e:e8:b4:7a:bc:84:b6:17:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 4 21:24:31 2026 GMT Not After : Jan 3 21:29:31 2027 GMT Subject: CN=9B808F3B75B42AE92A22A68D6636648B3A965C34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4d:29:fb:1e:0d:1f:70:60:d1:19:56:30:39: 7e:9d:4a:20:7b:75:13:2a:ea:9f:3f:6c:a7:33:03: b2:cf:a4:0f:2a:52:ff:43:7b:2b:23:ea:bd:31:92: 01:7e:f9:b0:32:a6:d4:f1:77:e4:14:b9:20:db:12: 52:94:f1:9d:3f:48:6e:b8:f3:85:a5:98:fb:6c:3c: d1:88:2b:d7:df:f9:5d:7e:66:ac:86:16:91:dc:91: d6:60:99:7b:0a:40:78:99:22:02:43:dc:c6:48:5c: 62:cc:21:a0:ed:52:7e:9b:80:67:81:dd:5b:46:2b: 97:26:b9:38:9c:76:ae:3c:06:35:40:e1:d1:c6:39: 4c:6a:bc:b8:6b:88:47:6c:e9:09:d1:01:63:9e:42: f4:7b:5c:9c:4b:83:f5:0b:41:e0:8e:31:d1:09:3d: 16:11:00:01:0a:74:10:f5:a8:02:ae:15:5e:67:69: 56:fa:18:0b:69:55:b9:b6:6f:b8:e4:2a:78:74:c6: 7d:1f:13:8d:d4:24:dc:07:25:98:34:37:b7:79:b6: 7f:f1:21:37:ab:e7:d0:33:45:35:23:ae:ea:ce:ed: 39:90:63:41:29:10:ac:1b:5c:0f:d2:67:c3:35:a4: 08:58:34:50:86:bd:fa:5a:e3:43:32:fc:9f:d4:19: 83:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:80:8F:3B:75:B4:2A:E9:2A:22:A6:8D:66:36:64:8B:3A:96:5C:34 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211577.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.22.6.0/24 Signature Algorithm: sha256WithRSAEncryption a0:14:1c:ef:8b:18:54:a7:5c:9e:e5:d8:16:c5:98:28:74:47: 6f:ee:c4:4b:9d:4a:1e:7e:06:9f:40:df:1c:48:d7:f5:6d:25: 3d:06:29:38:ed:d4:bc:da:2c:1f:ae:36:fb:3e:7a:df:fc:0f: 85:10:ba:ad:94:37:d8:14:10:8a:24:e8:d9:ce:0e:ba:2c:7c: 3f:d2:94:22:75:5c:de:fb:d1:f3:b3:9d:13:c8:40:2a:54:97: 26:3f:19:b6:00:ec:9f:46:ce:f5:1c:8c:78:0d:46:ef:1a:ee: 94:9f:49:bd:9a:6f:26:5f:e7:dc:b3:b1:c3:ce:09:56:76:c0: 05:15:c6:65:ee:1f:f0:2a:c6:22:fa:17:70:69:57:d3:c4:5a: 92:37:ec:2d:83:f8:5a:30:d3:a8:25:a2:a6:68:cf:82:f2:e6: b9:96:23:f3:b1:a1:6a:0e:06:35:2e:82:c3:d1:30:47:9b:84: b9:2f:23:39:5f:58:be:b6:24:ca:79:24:05:7f:2d:f2:d7:41: 61:bd:c9:a3:f3:71:9e:b3:12:7a:65:1e:38:fc:aa:0a:d3:e1: 31:9e:51:62:c2:56:ba:21:9e:9a:81:e7:91:7f:08:4a:0d:8b: a7:23:bb:50:14:90:c0:11:e1:b5:53:fc:5b:5f:f8:c8:02:4e: 6e:03:59:7c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUQZLlZgIbeweHBkye6LR6vIS2F0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMDQyMTI0MzFaFw0yNzAxMDMyMTI5MzFaMDMxMTAvBgNV BAMTKDlCODA4RjNCNzVCNDJBRTkyQTIyQTY4RDY2MzY2NDhCM0E5NjVDMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1TSn7Hg0fcGDRGVYwOX6dSiB7 dRMq6p8/bKczA7LPpA8qUv9Deysj6r0xkgF++bAyptTxd+QUuSDbElKU8Z0/SG64 84WlmPtsPNGIK9ff+V1+ZqyGFpHckdZgmXsKQHiZIgJD3MZIXGLMIaDtUn6bgGeB 3VtGK5cmuTicdq48BjVA4dHGOUxqvLhriEds6QnRAWOeQvR7XJxLg/ULQeCOMdEJ PRYRAAEKdBD1qAKuFV5naVb6GAtpVbm2b7jkKnh0xn0fE43UJNwHJZg0N7d5tn/x ITer59AzRTUjrurO7TmQY0EpEKwbXA/SZ8M1pAhYNFCGvfpa40My/J/UGYMVAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUm4CPO3W0KukqIqaNZjZkizqWXDQwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjExNTc3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhYG MA0GCSqGSIb3DQEBCwUAA4IBAQCgFBzvixhUp1ye5dgWxZgodEdv7sRLnUoefgaf QN8cSNf1bSU9Bik47dS82iwfrjb7Pnrf/A+FELqtlDfYFBCKJOjZzg66LHw/0pQi dVze+9Hzs50TyEAqVJcmPxm2AOyfRs71HIx4DUbvGu6Un0m9mm8mX+fcs7HDzglW dsAFFcZl7h/wKsYi+hdwaVfTxFqSN+wtg/haMNOoJaKmaM+C8ua5liPzsaFqDgY1 LoLD0TBHm4S5LyM5X1i+tiTKeSQFfy3y10Fhvcmj83GesxJ6ZR44/KoK0+ExnlFi wla6IZ6ageeRfwhKDYunI7tQFJDAEeG1U/xbX/jIAk5uA1l8 -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:26 2026 by rpki-client