This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213622.roa File: AS213622.roa (raw, json) Hash identifier: sUryU6qg9GOy/7GyCeaC5PRNRnwN1ktiYv1tYrixJxk= Subject key identifier: 40:C9:9B:19:92:CB:45:3A:8D:75:14:CA:02:D4:78:AA:A5:40:BE:EC Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 30E1CA4A6EDB1285E19141A45C38BC3881D28F Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213622.roa Signing time: Mon 24 Nov 2025 20:47:42 +0000 ROA not before: Mon 24 Nov 2025 20:42:42 +0000 ROA not after: Mon 23 Nov 2026 20:47:42 +0000 asID: 213622 IP address blocks: 82.39.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e1:ca:4a:6e:db:12:85:e1:91:41:a4:5c:38:bc:38:81:d2:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 24 20:42:42 2025 GMT Not After : Nov 23 20:47:42 2026 GMT Subject: CN=40C99B1992CB453A8D7514CA02D478AAA540BEEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c7:fd:46:72:5d:52:b1:e1:9c:e0:4a:c2:87: 93:51:24:76:82:18:4f:25:3e:c3:48:4c:83:67:3b: e2:a0:b9:72:89:3b:30:49:5d:db:ed:3d:09:de:c3: b1:d5:da:cd:ce:07:92:c2:62:97:3f:4d:65:29:d1: 13:04:53:44:9a:c8:9b:61:6b:30:f9:2d:14:db:80: 01:21:85:23:96:e3:43:4c:cc:b3:49:e5:96:76:b2: 9b:b1:a9:06:b9:91:24:6c:b9:1a:12:98:73:d1:fa: e5:1b:bb:90:ee:18:12:d2:fb:bd:21:2e:54:e7:6e: f9:af:44:c0:5c:6b:36:16:4d:05:14:0d:da:55:4a: b9:8b:9e:02:c4:21:70:d7:cc:98:83:19:f0:11:ee: 1e:cc:af:64:77:39:d4:ae:02:d4:99:b0:e0:d3:a1: cd:40:93:5a:92:a8:63:47:b0:82:45:f4:95:76:6f: 06:3f:a9:80:c6:23:fc:ea:52:6c:ce:cb:8a:e5:9c: 6d:e4:34:c4:da:21:b5:33:23:30:55:20:13:c0:0a: 52:17:f3:84:13:88:a9:b9:b3:2a:6a:98:27:db:01: 5d:ee:32:28:de:bd:cc:18:d8:ae:20:85:35:55:bb: 3d:a8:ca:e7:1e:5d:0b:23:be:1e:f9:0f:ac:3f:89: 21:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C9:9B:19:92:CB:45:3A:8D:75:14:CA:02:D4:78:AA:A5:40:BE:EC X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213622.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.105.0/24 Signature Algorithm: sha256WithRSAEncryption 62:08:9f:bb:8a:ce:af:ea:4e:2f:cc:20:c2:27:eb:f6:d4:5d: 5d:f3:8d:5f:cb:40:de:6f:ca:44:e4:e1:ea:89:79:bd:2c:d0: cb:15:c5:c9:80:27:82:1d:22:e1:16:b2:d8:85:7c:06:6e:c2: 3e:16:59:7d:05:d2:bb:97:40:13:58:db:77:7f:90:2a:61:34: 75:e8:47:94:45:9e:95:24:0a:d1:91:dd:ee:63:09:84:04:0b: 70:ec:53:8c:0a:3c:c7:6b:ab:5f:3e:69:75:28:11:52:c1:c4: fe:f5:82:e7:6b:ba:bb:dd:71:34:ef:04:44:e2:d0:dd:02:37: 6c:d7:57:0d:c7:92:14:39:63:3c:54:07:e8:23:02:da:35:87: cf:f3:eb:1f:c0:b9:6c:de:74:5f:c6:0a:e1:bc:9c:15:1a:4f: aa:02:6f:e7:dd:05:08:8e:53:f6:2d:d5:0c:5d:40:fb:03:05: b2:31:b5:15:a8:42:0d:9e:c4:45:d2:c9:46:d9:bc:16:15:89: 94:18:c3:69:82:c0:8c:68:e8:17:23:f7:82:e6:00:eb:d8:55: 5e:ad:d7:39:31:8a:ca:8f:75:bd:76:c0:83:a1:44:ba:ad:cf: 03:54:bd:49:60:4b:bb:6a:a4:37:d1:b7:bf:ea:b7:cc:19:d8: 16:cf:9b:c5 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgITMOHKSm7bEoXhkUGkXDi8OIHSjzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygyMThjYzZlMjQxMDVkZTZjNWM5MDAzZDY1MjQzODkzY2Iz Y2ZkZDAxMB4XDTI1MTEyNDIwNDI0MloXDTI2MTEyMzIwNDc0MlowMzExMC8GA1UE AxMoNDBDOTlCMTk5MkNCNDUzQThENzUxNENBMDJENDc4QUFBNTQwQkVFQzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALjH/UZyXVKx4ZzgSsKHk1EkdoIY TyU+w0hMg2c74qC5cok7MEld2+09Cd7DsdXazc4HksJilz9NZSnREwRTRJrIm2Fr MPktFNuAASGFI5bjQ0zMs0nllnaym7GpBrmRJGy5GhKYc9H65Ru7kO4YEtL7vSEu VOdu+a9EwFxrNhZNBRQN2lVKuYueAsQhcNfMmIMZ8BHuHsyvZHc51K4C1Jmw4NOh zUCTWpKoY0ewgkX0lXZvBj+pgMYj/OpSbM7LiuWcbeQ0xNohtTMjMFUgE8AKUhfz hBOIqbmzKmqYJ9sBXe4yKN69zBjYriCFNVW7PajK5x5dCyO+HvkPrD+JIckCAwEA AaOCAgowggIGMB0GA1UdDgQWBBRAyZsZkstFOo11FMoC1HiqpUC+7DAfBgNVHSME GDAWgBQhjMbiQQXebFyQA9ZSQ4k8s8/dATAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS83MThhMWI0Zi1iNjRjLTQwMmMtYmUxNS1kZDgyYTQxYTFh ZjYvMC8yMThDQzZFMjQxMDVERTZDNUM5MDAzRDY1MjQzODkzQ0IzQ0ZERDAxLmNy bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvSVl6RzRrRUYzbXhja0FQV1VrT0pQTFBQ M1FFLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5jOi8vcnN5 bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00 MDJjLWJlMTUtZGQ4MmE0MWExYWY2LzAvQVMyMTM2MjIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSJ2kw DQYJKoZIhvcNAQELBQADggEBAGIIn7uKzq/qTi/MIMIn6/bUXV3zjV/LQN5vykTk 4eqJeb0s0MsVxcmAJ4IdIuEWstiFfAZuwj4WWX0F0ruXQBNY23d/kCphNHXoR5RF npUkCtGR3e5jCYQEC3DsU4wKPMdrq18+aXUoEVLBxP71gudrurvdcTTvBETi0N0C N2zXVw3HkhQ5YzxUB+gjAto1h8/z6x/AuWzedF/GCuG8nBUaT6oCb+fdBQiOU/Yt 1QxdQPsDBbIxtRWoQg2exEXSyUbZvBYViZQYw2mCwIxo6Bcj94LmAOvYVV6t1zkx isqPdb12wIOhRLqtzwNUvUlgS7tqpDfRt7/qt8wZ2BbPm8U= -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:00 2025 by rpki-client