This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212427.roa File: AS212427.roa (raw, json) Hash identifier: 0JkW9tC11mZVnZuHbKRSpdzfR21hRGjBMHBPHWa6CqM= Subject key identifier: 97:D4:28:92:80:DD:14:2B:00:90:DC:3C:A4:29:87:48:BB:DE:E5:67 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 74F2220AF185A7FB699F843DA1FED9FB60EE6079 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212427.roa Signing time: Wed 26 Nov 2025 16:22:57 +0000 ROA not before: Wed 26 Nov 2025 16:17:57 +0000 ROA not after: Wed 25 Nov 2026 16:22:57 +0000 asID: 212427 IP address blocks: 82.39.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f2:22:0a:f1:85:a7:fb:69:9f:84:3d:a1:fe:d9:fb:60:ee:60:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 26 16:17:57 2025 GMT Not After : Nov 25 16:22:57 2026 GMT Subject: CN=97D4289280DD142B0090DC3CA4298748BBDEE567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7f:ab:72:7a:85:2c:24:e6:a3:98:c8:ab:8d: d9:da:78:d0:ba:23:f0:b0:2c:08:8d:d6:c9:c0:e4: 2c:14:e0:58:95:08:01:5d:ed:a2:a3:7f:79:e0:f7: 43:26:3f:f0:1c:70:01:13:ae:ab:62:05:84:6b:f1: 59:d4:f3:65:62:59:ab:f4:71:af:39:c3:5d:05:a6: fd:84:49:4d:74:04:bf:ac:73:e6:25:08:f7:8e:fa: c0:66:27:3a:77:5a:a5:f3:89:2f:f8:06:4e:db:27: 7b:4b:11:ce:86:62:54:0a:02:49:76:f0:e4:28:70: 87:dd:9a:da:a6:12:f5:3b:e3:63:78:e8:57:bc:0c: 86:54:35:37:38:07:95:57:20:df:6d:f0:3b:20:9b: 82:17:a5:23:73:53:6a:49:fb:98:e6:32:63:4b:e0: 68:47:fd:e0:e3:eb:76:e4:f2:19:59:f3:a6:a3:c9: 79:af:f6:44:53:43:33:0f:4c:fe:d4:ec:4a:1f:00: b1:63:90:44:74:e7:36:6d:24:9d:c1:ea:aa:1d:ad: 7c:53:c4:45:da:f2:8c:7c:8e:62:0e:bd:df:08:73: 0e:20:81:0c:55:c7:99:9a:af:e0:26:d6:8e:e3:dc: 0e:91:94:19:55:fe:a6:c6:22:96:39:15:3e:b1:a7: 1b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D4:28:92:80:DD:14:2B:00:90:DC:3C:A4:29:87:48:BB:DE:E5:67 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212427.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.132.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:85:26:62:b2:91:dd:4b:26:ce:e6:a8:86:3e:ee:29:2e:f3: df:27:c3:77:5a:17:4b:1a:1b:ca:57:89:1f:9a:f7:31:0a:41: 8e:5b:40:93:8e:d3:ce:a5:06:6b:29:71:53:46:71:8d:ff:90: 7e:a7:45:c2:6d:6d:f2:78:5d:42:10:08:e4:78:f6:16:db:c6: e2:18:ef:02:aa:0e:e2:ad:1c:25:02:12:6c:cd:35:58:b3:13: ad:cd:af:ac:82:ba:4c:fa:04:2b:f6:f2:ee:13:57:e1:66:17: 1f:f3:88:79:5a:fa:93:92:1e:58:5e:3d:2c:76:fe:0e:1b:c1: 41:9e:42:ec:0c:d1:d4:72:94:fe:cd:75:bf:94:20:fd:d4:b8: be:31:b1:ae:77:83:3d:df:e3:ba:62:7f:93:c7:22:5a:36:96: 24:6b:74:5f:c7:11:88:a1:a6:5a:78:90:5a:03:a5:36:a0:79: 65:fd:fa:11:96:80:39:38:ed:a4:21:6c:67:37:1a:9a:21:58: ac:02:c0:8b:2f:10:99:3c:e7:1a:4e:b6:7e:ca:3b:6c:83:67: f4:c7:bd:b4:91:c0:62:3b:69:6e:45:a2:90:cc:0d:65:56:9d: 6d:fd:8d:0f:58:6a:8f:82:b8:44:2c:ae:42:70:55:13:d0:78: 99:5a:cd:dc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUdPIiCvGFp/tpn4Q9of7Z+2DuYHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjYxNjE3NTdaFw0yNjExMjUxNjIyNTdaMDMxMTAvBgNV BAMTKDk3RDQyODkyODBERDE0MkIwMDkwREMzQ0E0Mjk4NzQ4QkJERUU1NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwf6tyeoUsJOajmMirjdnaeNC6 I/CwLAiN1snA5CwU4FiVCAFd7aKjf3ng90MmP/AccAETrqtiBYRr8VnU82ViWav0 ca85w10Fpv2ESU10BL+sc+YlCPeO+sBmJzp3WqXziS/4Bk7bJ3tLEc6GYlQKAkl2 8OQocIfdmtqmEvU742N46Fe8DIZUNTc4B5VXIN9t8Dsgm4IXpSNzU2pJ+5jmMmNL 4GhH/eDj63bk8hlZ86ajyXmv9kRTQzMPTP7U7EofALFjkER05zZtJJ3B6qodrXxT xEXa8ox8jmIOvd8Icw4ggQxVx5mar+Am1o7j3A6RlBlV/qbGIpY5FT6xpxtRAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUl9QokoDdFCsAkNw8pCmHSLve5WcwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEyNDI3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUieE MA0GCSqGSIb3DQEBCwUAA4IBAQBrhSZispHdSybO5qiGPu4pLvPfJ8N3WhdLGhvK V4kfmvcxCkGOW0CTjtPOpQZrKXFTRnGN/5B+p0XCbW3yeF1CEAjkePYW28biGO8C qg7irRwlAhJszTVYsxOtza+sgrpM+gQr9vLuE1fhZhcf84h5WvqTkh5YXj0sdv4O G8FBnkLsDNHUcpT+zXW/lCD91Li+MbGud4M93+O6Yn+TxyJaNpYka3RfxxGIoaZa eJBaA6U2oHll/foRloA5OO2kIWxnNxqaIVisAsCLLxCZPOcaTrZ+yjtsg2f0x720 kcBiO2luRaKQzA1lVp1t/Y0PWGqPgrhELK5CcFUT0HiZWs3c -----END CERTIFICATE-----Generated at Thu Dec 4 06:00:02 2025 by rpki-client