This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213451.roa File: AS213451.roa (raw, json) Hash identifier: SpZI3jSxDs2cAX6OLLjxuaZFVhu+Y6gL9gk1nZq2RCM= Subject key identifier: 77:CE:9F:1A:39:93:28:EF:89:C1:1D:7B:C6:86:14:DC:3A:11:84:11 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 011E0157777FCE4E68AD135FF27067EC8E22C464 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213451.roa Signing time: Sun 23 Nov 2025 14:29:39 +0000 ROA not before: Sun 23 Nov 2025 14:24:39 +0000 ROA not after: Sun 22 Nov 2026 14:29:39 +0000 asID: 213451 IP address blocks: 82.39.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1e:01:57:77:7f:ce:4e:68:ad:13:5f:f2:70:67:ec:8e:22:c4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 23 14:24:39 2025 GMT Not After : Nov 22 14:29:39 2026 GMT Subject: CN=77CE9F1A399328EF89C11D7BC68614DC3A118411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:db:5c:c2:bd:72:45:2d:b2:20:af:57:2d:cd: 63:25:9e:42:9c:ac:30:b7:96:13:05:65:77:7c:57: 60:23:c1:a5:a9:8c:2a:c5:54:7a:8a:bc:19:ed:5d: c6:dd:a4:d3:93:a7:8d:92:35:f0:99:69:50:c2:ab: 3b:cc:bf:ef:dd:26:96:d9:13:b7:52:d1:fe:77:04: 2e:e7:69:b0:95:2d:eb:f4:b0:d4:a6:06:00:8b:22: 3c:71:51:98:cb:1c:ce:b2:f1:18:19:28:a7:3e:9a: be:f9:fe:ea:55:69:55:22:93:98:a7:ae:c3:45:37: d4:e1:29:4d:c9:d0:62:b3:22:82:4f:81:ed:82:e2: 83:79:ce:a9:f1:5b:0d:a3:f5:04:a4:ae:9a:1d:8b: f3:0f:d5:e8:e3:0c:f9:c3:c7:ac:c3:fe:a5:cd:25: c5:5f:d7:47:5d:10:e2:38:f3:b2:86:6a:f4:3f:6b: 24:37:c6:5e:fc:a5:c8:e9:82:fe:7c:4a:8f:c7:57: 26:6e:42:41:b1:55:30:af:35:da:f8:4b:8f:11:8f: b8:c6:7a:29:09:ba:26:0d:f0:ad:16:cc:fc:af:63: 9b:b4:71:a9:69:4d:0f:13:f3:15:af:c0:41:8f:e0: b2:35:fd:34:83:13:bf:e5:17:2d:f7:a9:31:a3:72: b8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:CE:9F:1A:39:93:28:EF:89:C1:1D:7B:C6:86:14:DC:3A:11:84:11 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213451.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.98.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:f8:f0:2c:49:52:21:75:50:1c:93:02:a7:b7:4d:8a:b1:61: 26:42:6f:5f:63:0e:20:c8:4d:73:c9:c9:59:0b:2b:54:02:6f: 04:46:e3:d0:fd:18:8b:9b:ab:41:c1:90:c1:a5:43:22:75:de: ec:4c:51:24:5a:5f:87:11:ba:3e:d1:d9:bb:ef:79:3a:c0:73: 81:5e:89:84:4e:04:c5:37:6e:a3:72:a2:36:01:7e:bc:8f:30: cf:8c:1e:47:16:37:00:e0:42:91:89:a2:e4:73:93:f4:fd:50: 0b:4d:3f:6b:25:8a:e8:92:33:3f:04:75:10:d6:c0:09:81:13: d0:03:1a:2e:73:4d:f0:a0:2e:b3:1f:ab:8f:04:9a:76:26:c1: 97:22:77:d3:16:5c:59:06:1d:27:21:b8:0a:cf:12:80:69:bc: 0f:6b:2a:87:9c:7d:4d:fa:fc:6d:b2:87:28:58:f1:85:59:27: c4:8f:b8:a1:1f:c9:95:19:b8:07:d3:d4:48:6f:a3:9d:29:86: 67:98:13:71:28:a4:6f:be:eb:46:be:43:fe:23:ba:ed:e7:fc: 5d:21:a5:28:d0:0a:c4:8c:00:a4:68:6b:d2:cc:0b:f1:05:34: 06:41:1d:80:e6:b2:23:65:20:8f:3c:d2:bf:54:ce:ec:fa:b3: b2:17:35:fb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUAR4BV3d/zk5orRNf8nBn7I4ixGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjMxNDI0MzlaFw0yNjExMjIxNDI5MzlaMDMxMTAvBgNV BAMTKDc3Q0U5RjFBMzk5MzI4RUY4OUMxMUQ3QkM2ODYxNERDM0ExMTg0MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy21zCvXJFLbIgr1ctzWMlnkKc rDC3lhMFZXd8V2AjwaWpjCrFVHqKvBntXcbdpNOTp42SNfCZaVDCqzvMv+/dJpbZ E7dS0f53BC7nabCVLev0sNSmBgCLIjxxUZjLHM6y8RgZKKc+mr75/upVaVUik5in rsNFN9ThKU3J0GKzIoJPge2C4oN5zqnxWw2j9QSkrpodi/MP1ejjDPnDx6zD/qXN JcVf10ddEOI487KGavQ/ayQ3xl78pcjpgv58So/HVyZuQkGxVTCvNdr4S48Rj7jG eikJuiYN8K0WzPyvY5u0calpTQ8T8xWvwEGP4LI1/TSDE7/lFy33qTGjcrgjAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUd86fGjmTKO+JwR17xoYU3DoRhBEwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEzNDUxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUidi MA0GCSqGSIb3DQEBCwUAA4IBAQAP+PAsSVIhdVAckwKnt02KsWEmQm9fYw4gyE1z yclZCytUAm8ERuPQ/RiLm6tBwZDBpUMidd7sTFEkWl+HEbo+0dm773k6wHOBXomE TgTFN26jcqI2AX68jzDPjB5HFjcA4EKRiaLkc5P0/VALTT9rJYrokjM/BHUQ1sAJ gRPQAxouc03woC6zH6uPBJp2JsGXInfTFlxZBh0nIbgKzxKAabwPayqHnH1N+vxt socoWPGFWSfEj7ihH8mVGbgH09RIb6OdKYZnmBNxKKRvvutGvkP+I7rt5/xdIaUo 0ArEjACkaGvSzAvxBTQGQR2A5rIjZSCPPNK/VM7s+rOyFzX7 -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:18 2025 by rpki-client