This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211693.roa File: AS211693.roa (raw, json) Hash identifier: 6dDNX7hh1MwHj8NJ34TZlnrDrSBHWAvzYp2L1cpIxCQ= Subject key identifier: 99:C8:72:80:F1:13:34:7D:D0:BB:ED:91:8D:3A:BD:EF:D7:2A:72:E5 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 09EDAE3B82F4F9F05D6BA15409D0CF3ABFF41F93 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211693.roa Signing time: Wed 07 Jan 2026 23:27:36 +0000 ROA not before: Wed 07 Jan 2026 23:22:36 +0000 ROA not after: Wed 06 Jan 2027 23:27:36 +0000 asID: 211693 IP address blocks: 82.39.171.0/24 maxlen: 24 82.39.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ed:ae:3b:82:f4:f9:f0:5d:6b:a1:54:09:d0:cf:3a:bf:f4:1f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 7 23:22:36 2026 GMT Not After : Jan 6 23:27:36 2027 GMT Subject: CN=99C87280F113347DD0BBED918D3ABDEFD72A72E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:24:23:86:8f:2c:d0:10:84:c0:46:ba:a4: df:ba:82:8f:af:b6:f1:f8:2d:d1:e4:fb:d8:e4:64: f6:fc:4a:a1:cb:2c:6b:77:45:a6:5b:e2:5c:49:56: ca:48:c8:3c:e7:dc:87:e6:52:6e:72:93:68:e3:f8: 7f:93:75:3d:03:d4:53:62:73:71:0b:63:e6:25:02: ca:04:ff:2e:6a:ee:d0:d1:54:2f:c7:ce:c1:60:d1: 78:75:96:28:8a:4b:0b:d9:58:b0:0a:c9:c6:82:88: 9b:e4:3f:18:2f:37:4f:a3:86:6d:d4:6a:9d:52:0c: 57:a0:82:e8:3e:f7:d2:86:8c:5c:3c:f0:1e:62:7b: 1d:07:45:7d:97:5f:1b:7c:59:ee:87:df:f4:ff:43: b8:26:bb:64:4d:08:eb:9b:1f:ed:51:60:14:9b:d6: 3e:f6:84:72:4d:08:d0:50:d1:7d:3f:c1:dc:2e:71: 18:19:ac:74:91:7c:72:1e:11:2c:ae:29:2d:b0:92: 7c:94:75:b6:32:de:29:c9:c1:7f:ac:e9:24:24:50: 10:f7:d8:e0:df:37:42:ea:6b:c0:5f:92:f7:b0:c9: 15:10:9e:01:09:6c:3d:7f:7a:5f:d5:85:93:05:d4: 0c:f0:34:4c:04:5f:63:64:1c:fa:f2:56:0b:76:dd: d1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C8:72:80:F1:13:34:7D:D0:BB:ED:91:8D:3A:BD:EF:D7:2A:72:E5 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211693.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.171.0/24 82.39.212.0/24 Signature Algorithm: sha256WithRSAEncryption a7:78:fd:12:d4:b1:4e:2b:6d:3e:30:0e:b9:51:e8:2a:4e:25: bc:fc:47:af:35:db:e3:74:7c:89:b1:29:6f:7c:bf:da:fb:ff: ca:69:f3:eb:4e:60:4c:4c:3c:d9:50:59:c2:12:40:86:39:cc: 20:1b:35:24:df:99:3f:f6:2c:fd:a2:cb:e5:b8:da:4b:fe:fb: e7:55:a8:74:94:f6:65:b7:e5:fe:90:52:f5:7c:b0:83:9c:f3: 03:96:30:4a:13:c2:77:c5:1f:62:9c:80:cd:85:4e:d0:1f:d4: b3:46:87:b3:74:e4:0f:b3:f7:65:58:53:90:8d:8d:d8:c1:1a: ef:b2:58:b3:d4:20:56:47:db:a3:1b:25:a7:2b:ff:40:94:dc: 8d:cd:86:69:18:fc:56:c9:42:79:a2:49:81:07:d7:cb:0d:68: d1:92:af:c0:24:96:49:d3:6f:db:cf:59:24:27:21:4d:ef:82: 08:4d:55:59:93:e8:63:27:28:2b:f1:57:9c:5e:9b:12:5f:ab: 54:18:b5:5d:ee:73:2d:67:d4:39:7f:35:71:ab:a0:ed:f2:22: 11:28:1c:ed:ed:d3:37:d5:99:c5:27:6b:a2:c8:1d:ef:6b:17: 8d:20:35:85:65:a3:78:b6:7c:a0:eb:b9:a6:a9:c0:91:9c:9b: d0:cf:4a:b7 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUCe2uO4L0+fBda6FUCdDPOr/0H5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMDcyMzIyMzZaFw0yNzAxMDYyMzI3MzZaMDMxMTAvBgNV BAMTKDk5Qzg3MjgwRjExMzM0N0REMEJCRUQ5MThEM0FCREVGRDcyQTcyRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+WCQjho8s0BCEwEa6pN+6go+v tvH4LdHk+9jkZPb8SqHLLGt3RaZb4lxJVspIyDzn3IfmUm5yk2jj+H+TdT0D1FNi c3ELY+YlAsoE/y5q7tDRVC/HzsFg0Xh1liiKSwvZWLAKycaCiJvkPxgvN0+jhm3U ap1SDFeggug+99KGjFw88B5iex0HRX2XXxt8We6H3/T/Q7gmu2RNCOubH+1RYBSb 1j72hHJNCNBQ0X0/wdwucRgZrHSRfHIeESyuKS2wknyUdbYy3inJwX+s6SQkUBD3 2ODfN0Lqa8BfkvewyRUQngEJbD1/el/VhZMF1AzwNEwEX2NkHPryVgt23dE7AgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUmchygPETNH3Qu+2RjTq979cqcuUwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjExNjkzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUier AwQAUifUMA0GCSqGSIb3DQEBCwUAA4IBAQCneP0S1LFOK20+MA65UegqTiW8/Eev NdvjdHyJsSlvfL/a+//KafPrTmBMTDzZUFnCEkCGOcwgGzUk35k/9iz9osvluNpL /vvnVah0lPZlt+X+kFL1fLCDnPMDljBKE8J3xR9inIDNhU7QH9SzRoezdOQPs/dl WFOQjY3YwRrvsliz1CBWR9ujGyWnK/9AlNyNzYZpGPxWyUJ5okmBB9fLDWjRkq/A JJZJ02/bz1kkJyFN74IITVVZk+hjJygr8VecXpsSX6tUGLVd7nMtZ9Q5fzVxq6Dt 8iIRKBzt7dM31ZnFJ2uiyB3vaxeNIDWFZaN4tnyg67mmqcCRnJvQz0q3 -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:23 2026 by rpki-client