This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213407.roa File: AS213407.roa (raw, json) Hash identifier: ZMJJlp3JP4KD/L9J695miNoDaFWSiwbnkRZPv7fEFPQ= Subject key identifier: 16:32:52:DD:F6:F7:E5:22:61:4D:AD:23:0A:B5:C0:03:1F:76:BE:8F Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 583E9539221286930E8E7F06592B38E258D6B591 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213407.roa Signing time: Tue 25 Nov 2025 12:57:58 +0000 ROA not before: Tue 25 Nov 2025 12:52:58 +0000 ROA not after: Tue 24 Nov 2026 12:57:58 +0000 asID: 213407 IP address blocks: 82.39.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:3e:95:39:22:12:86:93:0e:8e:7f:06:59:2b:38:e2:58:d6:b5:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 25 12:52:58 2025 GMT Not After : Nov 24 12:57:58 2026 GMT Subject: CN=163252DDF6F7E522614DAD230AB5C0031F76BE8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:19:aa:16:9a:d4:fa:43:40:4c:9f:93:c4:34: 1e:af:0f:5e:ae:61:ae:20:ed:74:9d:12:96:d2:f0: 7a:48:83:1f:fd:0c:a6:48:7d:08:1a:52:71:ff:c1: 35:7b:ab:60:e4:04:45:2a:96:48:17:0a:28:41:05: 5f:ab:34:72:d0:5d:bb:02:2e:cb:61:24:d9:cc:5e: 41:f3:8a:e3:54:20:77:6d:fb:1e:ef:e9:b0:b8:75: 9d:4d:4c:4d:c3:b9:f4:d7:27:6e:6a:94:ae:a0:45: 3b:e7:f7:6e:e0:64:fc:93:88:e0:57:1a:d5:dd:85: d3:f2:c1:59:cf:38:7c:d4:34:a8:5c:11:f8:bd:b0: b5:2e:2a:1d:d5:73:0a:9f:37:7a:c8:d0:ce:21:f8: 31:96:3f:d4:32:27:c5:f5:6a:be:5d:7e:22:6f:da: cf:05:00:62:2c:b1:89:8b:51:30:64:c7:bb:8b:42: 92:f5:1c:91:79:02:f2:31:0b:0a:16:2b:a9:3e:82: ab:67:4d:95:5d:3b:de:8f:1c:d6:38:58:82:7a:c9: 14:10:dc:08:84:70:12:a8:2f:42:9f:5b:ee:2c:08: 1a:2d:84:54:d3:a8:eb:a1:9c:55:a2:dc:bf:68:3b: 0c:17:67:90:52:ca:ca:c4:c4:39:c1:89:3b:d4:73: 33:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:32:52:DD:F6:F7:E5:22:61:4D:AD:23:0A:B5:C0:03:1F:76:BE:8F X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213407.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.119.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:23:42:fb:89:aa:27:8c:e1:b0:71:8a:7f:67:ed:27:50:38: fe:df:e5:a6:d7:c7:98:29:f9:4c:2b:54:7a:a9:48:a1:89:88: 19:72:e5:b5:c6:0e:6b:74:d8:df:71:ad:bb:e4:2d:6c:85:7d: 11:12:d9:43:c0:49:d4:23:d6:89:fa:c3:a3:3c:a2:84:b5:5c: 4a:09:39:d7:35:4b:cb:ee:a8:0a:38:c1:8c:81:ca:34:fa:a6: 0c:58:d5:78:aa:d3:79:6b:a3:70:15:c8:a2:4b:f4:4e:cf:ea: 3b:90:a4:60:16:af:92:27:52:a9:f6:22:59:c4:56:71:9a:03: 02:68:e2:82:1b:b4:49:3a:27:53:5b:22:43:36:20:65:96:a5: 8e:59:c0:d4:cc:d5:3d:2b:e9:cf:0c:6a:0e:ac:2c:8a:4c:50: 15:ce:59:56:2b:3b:dc:21:7b:8b:2b:9d:c3:a1:9b:dc:c2:f4: 82:70:b1:74:ca:01:a9:ba:4c:d1:78:9d:4f:e7:83:d2:40:54: e0:d3:76:9e:a1:15:76:5b:02:17:cd:49:21:2d:bd:42:da:92: ed:b0:ee:af:82:ad:1d:8c:02:1c:c1:cc:56:70:d3:ed:ca:5f: c0:be:34:a5:59:4f:eb:40:13:c6:65:58:7a:03:57:a7:33:f1: de:30:2b:78 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUWD6VOSIShpMOjn8GWSs44ljWtZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjUxMjUyNThaFw0yNjExMjQxMjU3NThaMDMxMTAvBgNV BAMTKDE2MzI1MkRERjZGN0U1MjI2MTREQUQyMzBBQjVDMDAzMUY3NkJFOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiGaoWmtT6Q0BMn5PENB6vD16u Ya4g7XSdEpbS8HpIgx/9DKZIfQgaUnH/wTV7q2DkBEUqlkgXCihBBV+rNHLQXbsC LsthJNnMXkHziuNUIHdt+x7v6bC4dZ1NTE3DufTXJ25qlK6gRTvn927gZPyTiOBX GtXdhdPywVnPOHzUNKhcEfi9sLUuKh3VcwqfN3rI0M4h+DGWP9QyJ8X1ar5dfiJv 2s8FAGIssYmLUTBkx7uLQpL1HJF5AvIxCwoWK6k+gqtnTZVdO96PHNY4WIJ6yRQQ 3AiEcBKoL0KfW+4sCBothFTTqOuhnFWi3L9oOwwXZ5BSysrExDnBiTvUczNjAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUFjJS3fb35SJhTa0jCrXAAx92vo8wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEzNDA3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUid3 MA0GCSqGSIb3DQEBCwUAA4IBAQAeI0L7iaonjOGwcYp/Z+0nUDj+3+Wm18eYKflM K1R6qUihiYgZcuW1xg5rdNjfca275C1shX0REtlDwEnUI9aJ+sOjPKKEtVxKCTnX NUvL7qgKOMGMgco0+qYMWNV4qtN5a6NwFciiS/ROz+o7kKRgFq+SJ1Kp9iJZxFZx mgMCaOKCG7RJOidTWyJDNiBllqWOWcDUzNU9K+nPDGoOrCyKTFAVzllWKzvcIXuL K53DoZvcwvSCcLF0ygGpukzReJ1P54PSQFTg03aeoRV2WwIXzUkhLb1C2pLtsO6v gq0djAIcwcxWcNPtyl/AvjSlWU/rQBPGZVh6A1enM/HeMCt4 -----END CERTIFICATE-----Generated at Thu Dec 4 05:58:58 2025 by rpki-client