This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213502.roa File: AS213502.roa (raw, json) Hash identifier: XwmGC5Q/qmOKsAqB2IhUGRy0365WNfQlPj6lffLMX4M= Subject key identifier: 1F:A7:39:99:91:86:61:08:FE:F5:9F:D1:FF:9A:F6:DF:0B:41:0E:E3 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 32346F718B0E19BB86ABE77A9B9B3977118603BB Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213502.roa Signing time: Mon 12 Jan 2026 15:14:24 +0000 ROA not before: Mon 12 Jan 2026 15:09:24 +0000 ROA not after: Mon 11 Jan 2027 15:14:24 +0000 asID: 213502 IP address blocks: 82.27.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:34:6f:71:8b:0e:19:bb:86:ab:e7:7a:9b:9b:39:77:11:86:03:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 12 15:09:24 2026 GMT Not After : Jan 11 15:14:24 2027 GMT Subject: CN=1FA7399991866108FEF59FD1FF9AF6DF0B410EE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6a:6c:0d:fa:97:bc:2b:8a:ab:3d:66:c5:b0: 09:a6:1d:58:c3:fb:bd:08:30:b4:37:14:f4:41:a7: 45:33:4e:cd:56:e3:bd:65:25:0b:e1:a8:6b:37:3b: 40:d7:43:c1:2e:bb:b1:98:3a:f2:87:b5:64:87:16: 91:73:df:dc:0e:34:dd:89:fe:e8:c6:2b:44:b2:c6: 0d:f4:8b:31:d5:a6:45:69:47:18:c0:c2:99:36:c7: 13:f8:6e:5e:13:01:80:31:8e:db:42:cb:89:86:be: 80:d3:c5:d0:f9:98:94:15:b3:e7:96:46:e5:cb:3f: c2:6e:b0:6e:d2:08:e1:b6:eb:04:e3:50:06:b4:b4: a0:dc:4d:ca:83:f0:25:89:66:48:59:fa:8d:30:03: da:31:1c:f6:87:4c:97:b7:fb:db:b2:49:41:6e:e8: 0a:e3:e9:ef:53:0e:a7:ac:67:84:61:1c:e0:ff:66: 32:25:5c:ab:c4:fd:7d:3a:d2:a1:c3:64:18:0c:8e: cf:f8:22:42:ad:75:a6:8a:46:c9:7f:1d:cf:e4:68: 8f:e3:5e:14:b7:48:fc:80:f8:d4:c0:79:2f:a1:cc: d7:62:67:67:53:2c:31:d6:d3:6d:aa:c7:75:75:2b: 4f:9b:a0:ad:88:66:f8:2f:9a:89:a2:76:0c:36:7e: 97:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A7:39:99:91:86:61:08:FE:F5:9F:D1:FF:9A:F6:DF:0B:41:0E:E3 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213502.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.27.106.0/24 Signature Algorithm: sha256WithRSAEncryption 10:d5:c1:5c:80:fe:a6:34:ef:05:02:fd:88:76:d5:43:be:be: 78:11:a3:a0:08:44:1c:4e:5c:da:11:f6:79:d9:0e:b4:1b:5e: bb:46:87:55:e4:73:23:19:89:8f:ca:16:ba:84:0b:c7:a7:8e: 2c:ba:d2:16:6d:3f:69:2c:a1:c7:78:e6:84:98:09:92:85:8f: 94:be:b6:81:6f:f6:5e:aa:58:87:21:f1:bc:75:2c:d4:aa:f5: d9:6e:81:cb:4e:51:d4:9e:cd:c8:10:59:52:0d:48:9b:e9:f4: f9:b0:3a:0a:5c:ad:e1:43:d0:2c:7d:a8:22:ac:83:da:01:a3: fb:b8:23:12:2f:63:7d:86:f9:a4:78:65:d2:c6:4f:8b:ea:92: d4:74:57:51:ff:ba:ec:56:bc:ac:6c:f4:aa:60:d5:30:32:d1: 82:40:33:67:b1:79:a2:fc:9f:4f:b1:24:57:9c:87:83:f0:bd: 52:b4:92:99:12:b4:63:35:c7:ce:40:be:ff:ac:f2:77:68:7b: 00:f4:18:d4:2d:6a:c5:d2:22:22:8d:a6:06:00:bb:21:35:ff: 2a:bb:cf:d7:18:81:1b:ba:10:48:15:46:54:7b:1e:7e:61:e6: df:c5:7f:e2:2b:86:34:b9:88:23:c0:3b:7d:e2:b5:64:3c:72: d0:67:25:cd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUMjRvcYsOGbuGq+d6m5s5dxGGA7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMTIxNTA5MjRaFw0yNzAxMTExNTE0MjRaMDMxMTAvBgNV BAMTKDFGQTczOTk5OTE4NjYxMDhGRUY1OUZEMUZGOUFGNkRGMEI0MTBFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCamwN+pe8K4qrPWbFsAmmHVjD +70IMLQ3FPRBp0UzTs1W471lJQvhqGs3O0DXQ8Euu7GYOvKHtWSHFpFz39wONN2J /ujGK0Syxg30izHVpkVpRxjAwpk2xxP4bl4TAYAxjttCy4mGvoDTxdD5mJQVs+eW RuXLP8JusG7SCOG26wTjUAa0tKDcTcqD8CWJZkhZ+o0wA9oxHPaHTJe3+9uySUFu 6Arj6e9TDqesZ4RhHOD/ZjIlXKvE/X060qHDZBgMjs/4IkKtdaaKRsl/Hc/kaI/j XhS3SPyA+NTAeS+hzNdiZ2dTLDHW022qx3V1K0+boK2IZvgvmomidgw2fpd5AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUH6c5mZGGYQj+9Z/R/5r23wtBDuMwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEzNTAyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUhtq MA0GCSqGSIb3DQEBCwUAA4IBAQAQ1cFcgP6mNO8FAv2IdtVDvr54EaOgCEQcTlza EfZ52Q60G167RodV5HMjGYmPyha6hAvHp44sutIWbT9pLKHHeOaEmAmShY+UvraB b/ZeqliHIfG8dSzUqvXZboHLTlHUns3IEFlSDUib6fT5sDoKXK3hQ9AsfagirIPa AaP7uCMSL2N9hvmkeGXSxk+L6pLUdFdR/7rsVrysbPSqYNUwMtGCQDNnsXmi/J9P sSRXnIeD8L1StJKZErRjNcfOQL7/rPJ3aHsA9BjULWrF0iIijaYGALshNf8qu8/X GIEbuhBIFUZUex5+YebfxX/iK4Y0uYgjwDt94rVkPHLQZyXN -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:28 2026 by rpki-client