This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211813.roa File: AS211813.roa (raw, json) Hash identifier: QqaWAVH+AUFoA+VagdOgAVtFRr5YkH0qhrid9+GfZ/s= Subject key identifier: 89:7C:D0:33:82:5D:28:82:7B:6A:0D:AA:85:34:AC:17:8B:AD:8C:A6 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 21E0DA4195AFDD9C799170B412D2851875BEC670 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211813.roa Signing time: Tue 25 Nov 2025 07:52:20 +0000 ROA not before: Tue 25 Nov 2025 07:47:20 +0000 ROA not after: Tue 24 Nov 2026 07:52:20 +0000 asID: 211813 IP address blocks: 82.39.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e0:da:41:95:af:dd:9c:79:91:70:b4:12:d2:85:18:75:be:c6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 25 07:47:20 2025 GMT Not After : Nov 24 07:52:20 2026 GMT Subject: CN=897CD033825D28827B6A0DAA8534AC178BAD8CA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:22:6f:e0:4c:77:5d:74:56:e7:47:62:bb:f5: e3:61:fa:f9:93:d1:03:73:34:c3:5c:bf:37:22:6c: bc:5c:d6:a6:78:7f:ee:bb:a2:e3:17:05:69:7f:1f: d6:b0:54:9c:d3:dc:39:d9:f6:52:d0:ae:59:5b:97: 13:35:eb:e4:b0:b6:5c:6e:63:3c:37:39:fd:b6:2b: fd:7f:30:b6:3b:71:60:c1:b8:27:ae:6d:54:3c:cc: 16:8b:6e:0f:68:e6:ea:b8:c1:79:21:0f:da:25:09: c4:ad:b0:48:26:f4:67:b3:f8:de:d9:05:30:80:11: 2c:f6:8d:67:78:14:53:40:93:13:69:51:d0:96:07: c1:b8:01:43:46:ee:23:5d:06:2d:73:2e:b7:54:6a: 30:1c:59:f0:b8:9d:1a:6e:88:eb:dd:f3:0d:17:a6: 1b:e5:b9:4a:8e:f2:72:f8:e4:3e:02:6c:e4:2c:de: 21:6d:89:e7:1d:97:e4:29:f0:d5:fc:55:ce:9b:2b: c8:eb:81:45:96:62:5e:64:f7:77:26:1c:d6:0a:12: 60:9f:e6:54:0e:98:ae:e4:2d:88:76:ed:78:ab:df: 09:e0:f0:5d:75:b3:72:1d:00:ab:49:72:43:3a:2d: d6:05:b8:83:9d:fc:17:80:56:57:5d:e0:d5:32:a2: fb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7C:D0:33:82:5D:28:82:7B:6A:0D:AA:85:34:AC:17:8B:AD:8C:A6 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS211813.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.185.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:a9:70:88:49:f1:6d:83:c5:8a:70:3a:de:7d:23:6d:d5:18: 23:56:ef:52:d1:8f:1f:93:00:f3:09:b9:43:f5:17:d4:c3:e8: 9f:3e:bf:3e:41:5a:8c:7b:07:4e:b6:ff:e4:e3:45:56:e6:94: 89:5d:58:89:e6:eb:0d:a0:44:c6:3b:f7:2e:55:53:2d:4a:dc: d9:94:73:bb:3d:80:1f:8c:8d:3c:6e:63:62:5a:04:8e:86:c4: 83:64:87:d6:a0:9b:06:d0:1f:aa:e0:d1:d6:8c:5d:86:2b:7d: e9:b5:7c:7c:c4:8a:9b:53:e6:a1:a4:1e:4d:67:30:08:aa:5b: bb:b2:9a:58:ac:15:ed:fc:e6:98:56:90:15:bd:1d:ae:d8:5b: 03:23:32:d3:93:48:e6:8a:f8:18:a3:a3:0f:62:bf:30:a5:d8: 6e:bf:e6:b9:8c:b3:21:4e:13:3c:95:db:b7:ad:b8:d8:a4:a6: 96:d2:4e:63:c8:c4:8e:63:e5:7f:77:43:59:19:dc:de:0f:de: 0a:a7:ed:26:42:83:10:60:6a:24:78:89:e8:35:10:ba:6e:99: 6e:c3:93:62:1d:0d:e7:87:a5:d6:d0:4d:07:c7:b3:9f:77:6b: be:bb:aa:a2:2f:75:81:3a:90:ff:a7:13:dc:66:b8:dc:43:d2: 62:8f:96:e0 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUIeDaQZWv3Zx5kXC0EtKFGHW+xnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjUwNzQ3MjBaFw0yNjExMjQwNzUyMjBaMDMxMTAvBgNV BAMTKDg5N0NEMDMzODI1RDI4ODI3QjZBMERBQTg1MzRBQzE3OEJBRDhDQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIIm/gTHdddFbnR2K79eNh+vmT 0QNzNMNcvzcibLxc1qZ4f+67ouMXBWl/H9awVJzT3DnZ9lLQrllblxM16+Swtlxu Yzw3Of22K/1/MLY7cWDBuCeubVQ8zBaLbg9o5uq4wXkhD9olCcStsEgm9Gez+N7Z BTCAESz2jWd4FFNAkxNpUdCWB8G4AUNG7iNdBi1zLrdUajAcWfC4nRpuiOvd8w0X phvluUqO8nL45D4CbOQs3iFtiecdl+Qp8NX8Vc6bK8jrgUWWYl5k93cmHNYKEmCf 5lQOmK7kLYh27Xir3wng8F11s3IdAKtJckM6LdYFuIOd/BeAVldd4NUyovvhAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUiXzQM4JdKIJ7ag2qhTSsF4utjKYwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjExODEzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUie5 MA0GCSqGSIb3DQEBCwUAA4IBAQAMqXCISfFtg8WKcDrefSNt1RgjVu9S0Y8fkwDz CblD9RfUw+ifPr8+QVqMewdOtv/k40VW5pSJXViJ5usNoETGO/cuVVMtStzZlHO7 PYAfjI08bmNiWgSOhsSDZIfWoJsG0B+q4NHWjF2GK33ptXx8xIqbU+ahpB5NZzAI qlu7sppYrBXt/OaYVpAVvR2u2FsDIzLTk0jmivgYo6MPYr8wpdhuv+a5jLMhThM8 ldu3rbjYpKaW0k5jyMSOY+V/d0NZGdzeD94Kp+0mQoMQYGokeInoNRC6bpluw5Ni HQ3nh6XW0E0Hx7Ofd2u+u6qiL3WBOpD/pxPcZrjcQ9Jij5bg -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:18 2025 by rpki-client