This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212400.roa File: AS212400.roa (raw, json) Hash identifier: VuhiWaR9pzDczisZd7Nmnu7s/Tsk7Jpuq3m6HjoFLmI= Subject key identifier: AF:D9:C3:A0:D0:D4:4C:4D:F2:4F:A6:DC:F7:10:92:DC:E7:77:14:3C Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 2D7010A6482C362D8D00EA6ADF1827B75C0A9870 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212400.roa Signing time: Mon 29 Dec 2025 10:34:38 +0000 ROA not before: Mon 29 Dec 2025 10:29:38 +0000 ROA not after: Mon 28 Dec 2026 10:34:38 +0000 asID: 212400 IP address blocks: 82.25.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:70:10:a6:48:2c:36:2d:8d:00:ea:6a:df:18:27:b7:5c:0a:98:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 29 10:29:38 2025 GMT Not After : Dec 28 10:34:38 2026 GMT Subject: CN=AFD9C3A0D0D44C4DF24FA6DCF71092DCE777143C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:02:2d:c0:17:0f:82:ef:8c:94:c9:b7:56:98: b1:bf:11:64:bd:b3:55:0c:8a:d1:08:46:a0:e8:32: 79:2c:7b:72:26:51:96:b9:c3:b2:30:68:22:88:eb: 40:65:20:8d:1e:26:f6:17:d0:dc:79:cc:59:45:80: aa:8c:9c:7f:bf:8c:53:90:54:98:40:4b:11:d6:ee: 5e:5d:2d:27:4e:22:c3:8d:45:12:8b:a5:95:27:96: 24:6b:e9:51:74:ac:26:b3:df:4b:33:55:d1:7d:20: 77:c1:2e:a1:db:f6:e0:cf:00:33:93:f2:e5:54:28: 91:ea:97:93:32:a6:98:1c:dc:9b:54:1c:5f:bf:c3: 9d:ec:1a:97:97:8a:4f:61:f4:5c:3e:db:de:86:b3: 70:d5:db:7d:d8:a2:45:ae:a3:18:c7:fd:d2:e8:fb: 72:42:1b:a4:6b:39:6c:57:1b:a9:e2:97:9a:5a:87: 4b:72:2e:4a:16:49:1b:54:ab:eb:50:4b:fc:35:e5: 92:4c:ea:a1:31:a4:7e:ab:5a:90:45:ce:55:7e:75: 41:f8:cb:27:d3:23:78:cb:a2:af:e5:4a:dd:27:29: 94:7a:0c:d8:e4:38:5b:a0:08:b4:19:9b:af:7d:2e: 19:0e:1f:bf:23:f4:94:60:a6:12:d9:9d:18:9f:cc: 6f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D9:C3:A0:D0:D4:4C:4D:F2:4F:A6:DC:F7:10:92:DC:E7:77:14:3C X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212400.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.25.43.0/24 Signature Algorithm: sha256WithRSAEncryption 96:e4:cd:b1:61:72:4c:db:3f:6c:f8:93:68:c9:20:c5:a4:32: ae:d5:08:be:13:40:6c:1c:ef:2d:65:72:a8:93:6d:2d:74:68: ab:36:b6:0a:85:03:bd:1b:51:04:c9:bb:cf:f6:e8:a6:e1:d4: 6c:3c:b1:2a:bf:8b:86:f0:a4:2e:d3:e5:4f:85:c4:f8:96:95: f3:61:de:a3:6c:5e:4f:11:5a:97:03:67:b4:6c:1b:cc:f3:d6: 07:40:68:78:46:f4:92:a7:85:de:ab:0b:c0:fe:d1:b9:9d:1c: 74:9c:e7:d5:2d:75:69:bd:d4:bd:94:c3:ed:d7:6f:96:e3:80: d8:08:23:67:9d:94:18:b5:82:25:94:bc:27:3c:85:20:18:95: 97:fd:e2:c9:21:cc:32:2c:37:b1:f6:f6:db:a8:ca:86:7b:23: 6b:c0:f6:24:ca:a8:a7:7c:57:43:0a:c1:fc:dc:d2:19:dd:47: 0d:36:5f:32:b2:b6:22:55:a5:77:43:7b:ce:6f:49:c4:4b:b5: 32:fc:43:08:8a:0e:0e:75:4a:4a:a6:90:44:4a:8a:aa:60:33: f9:78:ab:29:cf:05:f1:75:08:3b:1a:69:e6:08:63:00:eb:90: 83:0c:a8:e2:96:a4:11:3c:cf:70:51:a3:06:d4:d2:24:2d:a1: 15:0b:28:46 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIULXAQpkgsNi2NAOpq3xgnt1wKmHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMjkxMDI5MzhaFw0yNjEyMjgxMDM0MzhaMDMxMTAvBgNV BAMTKEFGRDlDM0EwRDBENDRDNERGMjRGQTZEQ0Y3MTA5MkRDRTc3NzE0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnAi3AFw+C74yUybdWmLG/EWS9 s1UMitEIRqDoMnkse3ImUZa5w7IwaCKI60BlII0eJvYX0Nx5zFlFgKqMnH+/jFOQ VJhASxHW7l5dLSdOIsONRRKLpZUnliRr6VF0rCaz30szVdF9IHfBLqHb9uDPADOT 8uVUKJHql5Myppgc3JtUHF+/w53sGpeXik9h9Fw+296Gs3DV233YokWuoxjH/dLo +3JCG6RrOWxXG6nil5pah0tyLkoWSRtUq+tQS/w15ZJM6qExpH6rWpBFzlV+dUH4 yyfTI3jLoq/lSt0nKZR6DNjkOFugCLQZm699LhkOH78j9JRgphLZnRifzG/NAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUr9nDoNDUTE3yT6bc9xCS3Od3FDwwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEyNDAwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhkr MA0GCSqGSIb3DQEBCwUAA4IBAQCW5M2xYXJM2z9s+JNoySDFpDKu1Qi+E0BsHO8t ZXKok20tdGirNrYKhQO9G1EEybvP9uim4dRsPLEqv4uG8KQu0+VPhcT4lpXzYd6j bF5PEVqXA2e0bBvM89YHQGh4RvSSp4XeqwvA/tG5nRx0nOfVLXVpvdS9lMPt12+W 44DYCCNnnZQYtYIllLwnPIUgGJWX/eLJIcwyLDex9vbbqMqGeyNrwPYkyqinfFdD CsH83NIZ3UcNNl8ysrYiVaV3Q3vOb0nES7Uy/EMIig4OdUpKppBESoqqYDP5eKsp zwXxdQg7GmnmCGMA65CDDKjilqQRPM9wUaMG1NIkLaEVCyhG -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:18 2026 by rpki-client