This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213608.roa File: AS213608.roa (raw, json) Hash identifier: 31+LKzbTJSGkt8zCEg2Vp1RNUhl2+LeRjArniEwPZlI= Subject key identifier: 83:60:B4:B9:7C:C4:E3:85:7D:C0:C9:DE:74:29:18:51:7F:DF:0F:AB Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 1EDE11617D521F5FD453E73E9F52F729279891CB Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213608.roa Signing time: Mon 10 Nov 2025 21:36:30 +0000 ROA not before: Mon 10 Nov 2025 21:31:30 +0000 ROA not after: Mon 09 Nov 2026 21:36:30 +0000 asID: 213608 IP address blocks: 82.38.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:de:11:61:7d:52:1f:5f:d4:53:e7:3e:9f:52:f7:29:27:98:91:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 10 21:31:30 2025 GMT Not After : Nov 9 21:36:30 2026 GMT Subject: CN=8360B4B97CC4E3857DC0C9DE742918517FDF0FAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f4:cd:ff:3f:27:37:a4:73:1c:03:79:a7:0c: 1d:42:61:bf:99:f1:ce:54:33:cb:18:99:f6:2e:eb: f6:c4:d2:fa:d8:87:cc:34:68:82:dd:55:c0:08:d3: 14:2e:c3:d3:29:3b:f4:76:6a:29:3d:2a:67:ed:b6: e8:23:6f:7a:d4:2e:00:f0:80:52:46:17:45:0f:fb: 01:d4:29:15:73:f3:d9:1e:65:0a:fa:e4:7a:92:f6: 5a:88:f1:06:2a:6c:b4:e1:3c:74:60:44:50:02:0b: d6:a3:42:b9:84:6b:97:3a:78:01:e5:f3:20:ae:60: ab:06:47:f0:b4:8e:a8:1f:08:4a:d1:13:75:66:29: bf:0f:cc:ca:a3:47:4d:7c:8c:aa:5e:c7:75:02:82: 53:08:b5:67:1e:42:60:67:d6:e0:c9:ab:08:d3:52: dd:8f:9b:45:b5:c5:82:0a:bf:11:60:01:cd:c5:0b: 0b:ab:fa:30:eb:a1:35:53:2e:87:0a:45:80:9e:90: ea:f8:66:9f:5b:17:7c:92:6d:04:13:2d:ab:aa:65: 31:ed:58:0a:0d:38:87:56:b3:f0:86:ee:0e:46:93: 81:2c:f8:c2:fa:b1:60:f6:30:3b:ea:db:1c:2d:9f: 1d:e6:16:2b:75:ee:95:f8:4f:22:44:dc:70:83:de: 09:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:60:B4:B9:7C:C4:E3:85:7D:C0:C9:DE:74:29:18:51:7F:DF:0F:AB X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213608.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.38.2.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:fd:06:0b:e7:d2:19:79:81:38:c8:62:e3:7c:2e:ee:40:c5: f6:3e:80:5d:37:9a:b9:51:b0:ef:33:60:5b:a6:2c:48:3f:d3: 0f:2e:d7:dd:06:5c:17:9e:40:31:bb:57:24:d7:3e:1e:a4:b6: c4:00:5c:d9:dc:26:5f:60:f8:d2:9f:5c:bf:5c:a0:a8:7e:d3: 45:75:49:1d:b4:1d:b1:5e:53:5f:69:c0:13:b3:9c:a6:fb:17: de:7b:98:03:11:7e:b0:fb:54:3d:d8:da:a2:de:9b:19:95:95: c7:73:95:a7:3a:8c:f9:3f:7f:79:94:b5:32:31:d8:c0:4d:d1: ba:75:3c:00:dc:cc:10:8f:12:0e:ac:0c:a4:78:84:89:b1:02: 41:15:4a:15:69:18:99:5b:1c:5b:a1:92:5f:e4:52:42:8b:41: 8d:f2:46:d3:50:2f:e1:1b:9b:10:73:05:03:0f:05:9f:f0:7d: 97:d0:a0:88:ff:49:7e:ff:18:87:ba:8a:d6:93:86:bf:15:2b: 62:ff:da:e3:6d:b8:7b:cb:c1:f7:3f:0d:66:72:00:98:1e:39: e6:9e:5a:54:43:a9:24:64:cc:80:b0:64:e9:08:96:2f:f9:0c: b1:43:be:5a:70:d2:67:0e:98:81:39:82:99:a1:5e:f6:4f:11: 73:ef:42:f2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUHt4RYX1SH1/UU+c+n1L3KSeYkcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMTAyMTMxMzBaFw0yNjExMDkyMTM2MzBaMDMxMTAvBgNV BAMTKDgzNjBCNEI5N0NDNEUzODU3REMwQzlERTc0MjkxODUxN0ZERjBGQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs9M3/Pyc3pHMcA3mnDB1CYb+Z 8c5UM8sYmfYu6/bE0vrYh8w0aILdVcAI0xQuw9MpO/R2aik9Kmfttugjb3rULgDw gFJGF0UP+wHUKRVz89keZQr65HqS9lqI8QYqbLThPHRgRFACC9ajQrmEa5c6eAHl 8yCuYKsGR/C0jqgfCErRE3VmKb8PzMqjR018jKpex3UCglMItWceQmBn1uDJqwjT Ut2Pm0W1xYIKvxFgAc3FCwur+jDroTVTLocKRYCekOr4Zp9bF3ySbQQTLauqZTHt WAoNOIdWs/CG7g5Gk4Es+ML6sWD2MDvq2xwtnx3mFit17pX4TyJE3HCD3gn9AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUg2C0uXzE44V9wMnedCkYUX/fD6swHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjEzNjA4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUiYC MA0GCSqGSIb3DQEBCwUAA4IBAQA8/QYL59IZeYE4yGLjfC7uQMX2PoBdN5q5UbDv M2BbpixIP9MPLtfdBlwXnkAxu1ck1z4epLbEAFzZ3CZfYPjSn1y/XKCoftNFdUkd tB2xXlNfacATs5ym+xfee5gDEX6w+1Q92Nqi3psZlZXHc5WnOoz5P395lLUyMdjA TdG6dTwA3MwQjxIOrAykeISJsQJBFUoVaRiZWxxboZJf5FJCi0GN8kbTUC/hG5sQ cwUDDwWf8H2X0KCI/0l+/xiHuorWk4a/FSti/9rjbbh7y8H3Pw1mcgCYHjnmnlpU Q6kkZMyAsGTpCJYv+QyxQ75acNJnDpiBOYKZoV72TxFz70Ly -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:01 2025 by rpki-client