This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21245.roa File: AS21245.roa (raw, json) Hash identifier: A7FmNcQtfGx1XsHhHfR2Y1rIcN/K3PMMFH5mMWn9gKQ= Subject key identifier: CA:AA:44:FE:AA:5A:43:79:A2:A7:9D:BB:6E:CB:2C:50:57:CF:13:90 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 4D2FBD001F30984A236450154EAB0BC8493DF675 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21245.roa Signing time: Wed 24 Dec 2025 13:52:10 +0000 ROA not before: Wed 24 Dec 2025 13:47:10 +0000 ROA not after: Wed 23 Dec 2026 13:52:10 +0000 asID: 21245 IP address blocks: 82.38.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:2f:bd:00:1f:30:98:4a:23:64:50:15:4e:ab:0b:c8:49:3d:f6:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 24 13:47:10 2025 GMT Not After : Dec 23 13:52:10 2026 GMT Subject: CN=CAAA44FEAA5A4379A2A79DBB6ECB2C5057CF1390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:05:25:95:86:b8:46:4d:39:70:22:09:30:66: 34:ad:c1:0e:cd:e6:a7:77:c4:b6:70:13:e8:96:62: 70:33:69:d0:84:7f:de:ac:02:36:0f:77:3f:f6:55: 24:c2:97:f1:16:e8:16:43:d2:e7:34:74:1a:f7:66: b6:30:42:c5:fa:2b:06:30:90:0a:58:0c:81:5b:95: 8c:f6:1a:27:b2:56:1a:36:b3:2e:40:80:b4:28:44: aa:80:ff:25:f7:29:97:84:41:d4:ed:8a:39:06:24: 80:b8:31:1a:e2:f4:7e:77:cc:1f:91:83:af:d0:75: f0:76:17:15:f0:62:61:39:62:5c:c4:e0:47:2b:e3: c3:84:24:01:10:c2:8d:bc:48:2e:59:c6:b7:3b:65: d7:b1:3e:af:19:50:65:3f:40:6c:23:6c:a7:f6:ca: 04:a4:48:b8:f0:c1:98:7d:3e:17:0a:98:72:9b:32: bd:da:af:ac:bc:4f:f3:98:f6:e3:4d:a8:8c:c2:0e: 71:03:b7:3c:8d:6f:42:c8:de:dd:f4:52:6a:b3:8f: 2b:8f:25:fd:e5:4a:60:ae:c7:27:ee:73:12:e5:0b: f3:2f:29:b1:2b:f6:11:46:c5:d9:09:dc:bc:f6:27: 73:9d:6c:68:44:2a:3b:f0:b7:14:8f:25:9b:85:ee: eb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AA:44:FE:AA:5A:43:79:A2:A7:9D:BB:6E:CB:2C:50:57:CF:13:90 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS21245.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.38.196.0/24 Signature Algorithm: sha256WithRSAEncryption 94:cd:bb:39:59:07:27:11:bb:70:89:83:0e:c2:82:34:6b:46: 79:75:0e:0b:b5:13:a1:bd:7e:5a:8d:f9:b6:f5:44:66:4c:a0: 7a:42:72:1a:fa:9e:29:5b:b8:42:59:9a:7a:7a:12:a0:38:c8: ac:02:d5:aa:42:f0:6b:df:18:66:6c:60:d8:8d:00:b9:23:04: d0:09:be:00:65:6c:ea:4a:a6:b5:6a:a9:a6:0b:5d:39:ee:03: 26:ee:55:78:93:c4:6b:67:29:a1:c4:bb:04:4d:80:51:85:54: 1c:8d:71:3c:d0:7e:90:30:75:a0:e9:8c:c6:f5:cb:a0:dc:02: ab:05:78:d0:db:7a:9a:db:97:cb:0b:29:35:28:36:2d:6f:65: 25:46:9b:e4:ce:b0:ef:fe:5b:a8:32:14:c9:d7:ea:60:c1:0b: 3e:58:13:c3:d3:3c:59:c8:68:bf:ee:92:f5:c7:d9:39:58:bb: 13:bc:07:e0:f2:40:83:74:e1:58:b9:82:17:8b:4e:c4:08:32: dd:f2:10:6f:6e:7a:ef:a7:f0:26:34:9e:b3:97:a4:d4:22:05: ce:1e:13:9e:78:27:c3:47:a9:6c:50:da:92:9a:0f:fe:e4:8c: 16:75:9b:4d:de:03:0e:0d:bd:8a:1a:c1:c6:ca:18:25:b4:ac: c3:70:e3:28 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUTS+9AB8wmEojZFAVTqsLyEk99nUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMjQxMzQ3MTBaFw0yNjEyMjMxMzUyMTBaMDMxMTAvBgNV BAMTKENBQUE0NEZFQUE1QTQzNzlBMkE3OURCQjZFQ0IyQzUwNTdDRjEzOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlBSWVhrhGTTlwIgkwZjStwQ7N 5qd3xLZwE+iWYnAzadCEf96sAjYPdz/2VSTCl/EW6BZD0uc0dBr3ZrYwQsX6KwYw kApYDIFblYz2GieyVho2sy5AgLQoRKqA/yX3KZeEQdTtijkGJIC4MRri9H53zB+R g6/QdfB2FxXwYmE5YlzE4Ecr48OEJAEQwo28SC5Zxrc7ZdexPq8ZUGU/QGwjbKf2 ygSkSLjwwZh9PhcKmHKbMr3ar6y8T/OY9uNNqIzCDnEDtzyNb0LI3t30UmqzjyuP Jf3lSmCuxyfucxLlC/MvKbEr9hFGxdkJ3Lz2J3OdbGhEKjvwtxSPJZuF7utxAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUyqpE/qpaQ3mip527bsssUFfPE5AwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEyNDUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSJsQw DQYJKoZIhvcNAQELBQADggEBAJTNuzlZBycRu3CJgw7CgjRrRnl1Dgu1E6G9flqN +bb1RGZMoHpCchr6nilbuEJZmnp6EqA4yKwC1apC8GvfGGZsYNiNALkjBNAJvgBl bOpKprVqqaYLXTnuAybuVXiTxGtnKaHEuwRNgFGFVByNcTzQfpAwdaDpjMb1y6Dc AqsFeNDbeprbl8sLKTUoNi1vZSVGm+TOsO/+W6gyFMnX6mDBCz5YE8PTPFnIaL/u kvXH2TlYuxO8B+DyQIN04Vi5gheLTsQIMt3yEG9ueu+n8CY0nrOXpNQiBc4eE554 J8NHqWxQ2pKaD/7kjBZ1m03eAw4NvYoawcbKGCW0rMNw4yg= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:21 2026 by rpki-client