This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212027.roa File: AS212027.roa (raw, json) Hash identifier: ACnzKBBTqnBKJsN720nzlyssnQlfRZLfZH1ydwWF7Q0= Subject key identifier: 57:0A:8E:56:E7:8D:C6:BE:C5:FA:37:F2:D6:F5:9D:1B:A7:F4:E7:09 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 6CF970B2AD7A85DB9CB0895B4BF67B3E9CFBC5F5 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212027.roa Signing time: Fri 28 Nov 2025 16:09:38 +0000 ROA not before: Fri 28 Nov 2025 16:04:38 +0000 ROA not after: Fri 27 Nov 2026 16:09:38 +0000 asID: 212027 IP address blocks: 82.39.133.0/24 maxlen: 24 2a13:9500:10e::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f9:70:b2:ad:7a:85:db:9c:b0:89:5b:4b:f6:7b:3e:9c:fb:c5:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 28 16:04:38 2025 GMT Not After : Nov 27 16:09:38 2026 GMT Subject: CN=570A8E56E78DC6BEC5FA37F2D6F59D1BA7F4E709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2c:b4:62:de:2c:7c:da:1e:b6:0e:97:30:1f: 24:a8:85:75:44:63:e9:c0:b4:cb:11:56:7b:3a:9b: 0f:6f:c7:d4:07:ed:35:43:fc:5c:09:1f:93:25:c0: 3d:01:94:6e:39:26:34:e1:eb:42:6b:cf:2a:d8:24: 75:94:7b:7f:08:69:5d:69:36:10:58:ad:5d:88:3f: f2:b8:a0:fb:49:59:18:ed:5f:08:dc:4a:85:c1:ae: 1a:e1:a9:74:48:46:4a:7e:75:0a:76:5c:a0:ae:01: 34:7c:1d:09:b2:9c:89:c4:0b:8c:d0:0c:c4:c5:a6: 1a:df:c0:ec:3d:0a:33:5c:9b:34:01:9d:c5:4a:ca: 4d:03:88:e1:4d:1b:18:78:3a:46:b8:7a:ea:73:17: bf:ab:67:3f:b5:de:7e:e6:0b:44:78:cc:46:7e:e9: 9e:88:d5:69:6f:55:08:0d:62:98:ec:b0:9b:38:91: 63:e4:8b:12:44:19:ae:72:20:95:18:b3:52:1a:17: e1:89:de:3c:05:e6:0c:ef:65:e5:5a:f4:da:a8:0a: aa:fb:20:6f:81:c3:1c:5f:ae:f0:9f:08:6a:68:f1: 4e:34:9b:0f:2a:cf:81:1c:c2:a7:04:fa:5c:f1:54: 53:fd:53:e4:b8:77:a0:43:0f:23:97:cd:64:8e:3f: a9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0A:8E:56:E7:8D:C6:BE:C5:FA:37:F2:D6:F5:9D:1B:A7:F4:E7:09 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212027.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.133.0/24 IPv6: 2a13:9500:10e::/48 Signature Algorithm: sha256WithRSAEncryption 3c:5c:41:69:fb:fc:43:b8:c4:3c:5a:64:3a:c9:fd:5e:cf:2e: 09:5e:5f:1a:9e:93:65:01:37:35:b5:0c:3d:fd:3b:23:3a:ac: 55:ae:e5:57:0d:7d:85:66:79:1e:ed:d2:e2:68:dc:3b:7f:a1: 76:20:e5:f3:21:d9:0d:6c:e4:94:2f:d0:1a:c7:6e:d5:29:76: cc:c5:4f:f3:e5:9a:82:9e:92:85:7c:11:c1:c3:0c:5b:ae:d5: 78:03:4a:30:27:5e:19:74:b6:c6:c9:f2:13:d1:3b:9f:65:8b: 3b:3f:db:ae:a0:a4:60:fb:d2:eb:09:a0:21:3f:bc:85:3b:28: 34:1f:05:79:94:ac:f5:45:f7:80:88:3a:74:b0:2b:d0:1d:6f: a1:24:a6:a2:03:24:f7:7d:17:6a:12:d3:b9:84:24:29:ac:10: a1:b8:0b:a5:8b:a3:15:ed:09:b1:45:c0:c4:85:2e:92:86:23: f0:3c:f2:4d:02:37:e2:fe:bb:12:45:cf:2a:2e:ab:08:43:18: c5:d8:ff:74:c8:5c:af:43:45:af:e9:0c:ff:cc:e9:e5:c8:40: 07:9f:a0:5e:c6:1b:80:a3:e7:ec:e5:cd:26:63:a8:22:f1:be: b2:55:9c:ae:b6:78:f7:35:e3:de:18:7b:2f:60:22:56:c8:e4: 70:89:15:8e -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgIUbPlwsq16hducsIlbS/Z7Ppz7xfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjgxNjA0MzhaFw0yNjExMjcxNjA5MzhaMDMxMTAvBgNV BAMTKDU3MEE4RTU2RTc4REM2QkVDNUZBMzdGMkQ2RjU5RDFCQTdGNEU3MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjLLRi3ix82h62DpcwHySohXVE Y+nAtMsRVns6mw9vx9QH7TVD/FwJH5MlwD0BlG45JjTh60JrzyrYJHWUe38IaV1p NhBYrV2IP/K4oPtJWRjtXwjcSoXBrhrhqXRIRkp+dQp2XKCuATR8HQmynInEC4zQ DMTFphrfwOw9CjNcmzQBncVKyk0DiOFNGxh4Oka4eupzF7+rZz+13n7mC0R4zEZ+ 6Z6I1WlvVQgNYpjssJs4kWPkixJEGa5yIJUYs1IaF+GJ3jwF5gzvZeVa9NqoCqr7 IG+BwxxfrvCfCGpo8U40mw8qz4EcwqcE+lzxVFP9U+S4d6BDDyOXzWSOP6lfAgMB AAGjggIbMIICFzAdBgNVHQ4EFgQUVwqOVueNxr7F+jfy1vWdG6f05wkwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEyMDI3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUieF MA8EAgACMAkDBwAqE5UAAQ4wDQYJKoZIhvcNAQELBQADggEBADxcQWn7/EO4xDxa ZDrJ/V7PLgleXxqek2UBNzW1DD39OyM6rFWu5VcNfYVmeR7t0uJo3Dt/oXYg5fMh 2Q1s5JQv0BrHbtUpdszFT/PlmoKekoV8EcHDDFuu1XgDSjAnXhl0tsbJ8hPRO59l izs/266gpGD70usJoCE/vIU7KDQfBXmUrPVF94CIOnSwK9Adb6EkpqIDJPd9F2oS 07mEJCmsEKG4C6WLoxXtCbFFwMSFLpKGI/A88k0CN+L+uxJFzyouqwhDGMXY/3TI XK9DRa/pDP/M6eXIQAefoF7GG4Cj5+zlzSZjqCLxvrJVnK62ePc1494Yey9gIlbI 5HCJFY4= -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:59 2025 by rpki-client