This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212683.roa
File: AS212683.roa (raw, json)
Hash identifier: kJIv4OzhZFr5yMaJOsAovuehsPfg1LWBz12L6pJ68ZM=
Subject key identifier: 7E:15:7F:E3:2A:F9:58:EC:A5:AC:F4:DA:2D:5E:4D:E4:4B:CB:79:F5
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 131FBFC5CBD935664512A1CF55C3CF79153578DF
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212683.roa
Signing time: Mon 24 Nov 2025 13:58:46 +0000
ROA not before: Mon 24 Nov 2025 13:53:46 +0000
ROA not after: Mon 23 Nov 2026 13:58:46 +0000
asID: 212683
IP address blocks: 82.39.94.0/23 maxlen: 24
82.39.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Dec 2025 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:1f:bf:c5:cb:d9:35:66:45:12:a1:cf:55:c3:cf:79:15:35:78:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 24 13:53:46 2025 GMT
Not After : Nov 23 13:58:46 2026 GMT
Subject: CN=7E157FE32AF958ECA5ACF4DA2D5E4DE44BCB79F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:e2:3c:54:b1:3d:a6:ad:60:d7:f5:8c:1a:
5e:6d:6c:25:30:5d:77:1a:fa:13:52:a0:b1:72:8f:
81:96:b3:18:8e:bd:e4:0d:59:22:ae:5a:33:cb:a3:
fc:01:a6:24:43:6e:e8:62:e0:cc:ff:3d:dc:49:0e:
12:14:0c:32:f4:3b:7d:c7:8e:72:14:f1:78:d9:5c:
20:22:cb:a0:72:35:ea:66:15:5e:dc:6e:4f:5d:c8:
4d:1e:57:62:eb:5f:9b:0f:6a:27:c0:25:76:f8:40:
0f:88:9d:7c:78:b3:61:d9:55:35:71:5a:72:29:82:
b7:29:70:01:c4:3e:01:e5:37:88:e8:a1:ba:19:83:
f7:fe:c4:24:08:88:73:e9:8d:ff:d5:f3:37:01:9e:
40:65:22:cf:cd:fa:54:c1:6d:50:28:33:85:da:50:
eb:e4:fe:30:fe:df:cd:07:52:45:4d:6d:24:8a:4c:
96:b6:bf:aa:82:98:e7:83:9e:4b:1b:34:20:16:55:
72:b1:e9:6f:64:8c:e2:78:7c:df:d2:96:41:08:7b:
b4:11:4f:fa:bc:ca:0a:da:f3:43:24:ef:29:3d:e9:
a5:12:83:37:26:9e:0a:ff:fb:6d:f9:b8:e6:aa:4a:
f9:78:6f:46:e8:cb:2d:71:65:87:04:f3:97:4f:ca:
2b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:15:7F:E3:2A:F9:58:EC:A5:AC:F4:DA:2D:5E:4D:E4:4B:CB:79:F5
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS212683.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.39.94.0-82.39.97.255
Signature Algorithm: sha256WithRSAEncryption
6d:d9:79:e5:ab:7c:9d:8a:36:29:30:ed:40:a0:fb:8e:5b:47:
24:6c:58:11:b7:97:90:99:c3:0c:c6:bd:09:48:a8:b8:4d:96:
77:60:4a:84:2a:68:3a:c8:47:6d:f9:65:cb:58:5d:74:75:65:
c4:fe:cb:92:26:f3:1c:7f:f8:ee:62:cc:c5:64:40:5e:71:be:
73:c5:d2:c5:43:1f:81:db:9a:4a:02:30:fd:04:76:ee:69:91:
79:06:c5:6b:33:bd:a5:80:50:7f:ba:4b:04:22:e4:b6:59:ed:
4a:05:ec:b2:17:a4:80:d8:46:48:62:ba:dd:42:98:cb:c7:12:
ce:5c:51:a2:17:1f:d1:6b:99:e2:20:32:76:18:af:2e:f7:c7:
fa:af:bb:7b:e2:1f:fa:9e:01:69:d9:dd:4d:cb:c2:9a:51:3b:
5d:03:7f:8f:8a:84:d9:13:ce:d7:54:f6:25:54:bc:f3:34:be:
4d:7a:d5:b4:bc:c2:66:38:c6:c2:50:8e:f2:4c:cb:e9:b5:fd:
4e:31:2f:34:72:93:e6:dd:f8:a6:92:d5:11:1e:72:17:51:7a:
65:55:c5:20:02:8b:3f:33:39:b8:bc:6f:92:51:82:fa:73:76:
93:da:84:d9:b9:cc:16:40:b0:f4:57:15:88:79:e2:26:ee:d2:
37:eb:85:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 06:01:42 2025 by rpki-client