This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213736.roa
File: AS213736.roa (raw, json)
Hash identifier: blo3+fXPdq96q1VwLgnFKAWdNHPeikiF2ECd0QApI98=
Subject key identifier: AC:F9:52:47:00:99:42:EA:69:23:14:F5:F4:90:63:78:B6:95:B1:45
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 13E5FE0285D6D6DE3B883865C9017C59151B71FC
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213736.roa
Signing time: Fri 16 Jan 2026 07:55:33 +0000
ROA not before: Fri 16 Jan 2026 07:50:33 +0000
ROA not after: Fri 15 Jan 2027 07:55:33 +0000
asID: 213736
IP address blocks: 82.27.184.0/24 maxlen: 24
82.27.185.0/24 maxlen: 24
82.27.186.0/24 maxlen: 24
82.27.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 16:25:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:e5:fe:02:85:d6:d6:de:3b:88:38:65:c9:01:7c:59:15:1b:71:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 16 07:50:33 2026 GMT
Not After : Jan 15 07:55:33 2027 GMT
Subject: CN=ACF95247009942EA692314F5F4906378B695B145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:25:8c:39:ac:83:40:1b:e4:8f:b3:4a:96:3b:
b0:27:fc:1c:9b:53:c8:8c:21:d5:44:62:88:d5:b9:
08:46:4f:77:82:f9:24:78:74:cf:11:35:66:72:9d:
aa:95:0d:ee:0d:ab:48:19:d8:e8:9e:9b:25:6e:7a:
f3:97:f3:9c:93:bc:01:bb:c7:3b:9f:87:34:85:f2:
b4:76:63:0d:59:f4:8f:70:ba:c6:a3:78:6b:3e:15:
46:b7:ea:f6:99:0a:4f:1a:5a:29:39:2f:70:6d:77:
88:32:bf:c6:7e:5b:3d:b9:db:7e:d7:eb:47:a2:42:
6c:4d:0f:f8:46:21:fd:39:b8:e9:04:c8:26:12:41:
c5:1d:5e:7b:5c:9f:dc:d3:88:d0:82:4f:1a:45:7b:
ad:6c:60:0a:11:1f:3f:5c:63:2d:c4:ce:b4:29:6c:
d8:90:04:96:30:a8:1f:8d:6c:47:67:94:c8:a8:1f:
73:d3:1e:11:4b:12:b5:58:74:27:e6:9d:c0:ff:88:
2d:4f:f3:77:56:e7:1c:09:03:35:71:5b:c6:c9:0e:
56:6b:3b:ac:15:db:48:a4:5d:14:c3:06:67:2e:39:
ee:67:2d:62:24:69:ec:18:97:89:e1:f0:55:d3:16:
02:72:6d:2c:75:07:62:3b:1e:0d:8c:08:36:96:12:
22:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F9:52:47:00:99:42:EA:69:23:14:F5:F4:90:63:78:B6:95:B1:45
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS213736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.27.184.0/22
Signature Algorithm: sha256WithRSAEncryption
65:4f:7f:4e:05:9f:85:fd:a9:61:00:e5:e2:a8:2e:c3:a6:5d:
63:95:94:24:6b:6e:2c:34:65:ea:ef:4f:7b:fc:e6:81:a5:e5:
a6:26:9e:30:fe:f4:0b:69:ad:bf:1d:cd:8d:d6:db:cc:ef:4d:
b1:00:5a:8e:44:ca:47:38:c4:1b:65:f1:69:54:74:09:09:0c:
df:88:f6:7b:66:0d:88:53:27:1e:10:09:6e:92:f7:02:b4:95:
00:b4:2c:3d:29:b2:b4:15:da:70:1c:26:9e:4f:5d:e3:3f:18:
32:b0:c5:19:bd:f1:af:0d:9f:f2:ec:13:8a:99:c0:93:0f:7b:
c9:cf:5d:70:cd:65:27:ba:a9:7b:ce:2d:a9:5f:fd:d4:fb:63:
4e:d0:bd:41:01:b3:1d:45:98:ff:7c:fc:1d:ed:7d:f4:c2:5b:
5f:a1:07:3d:c5:e4:ab:ed:5b:31:b6:d8:bf:37:b3:76:53:52:
15:d2:ff:86:1a:22:5c:f9:10:57:4a:f6:60:e7:48:e6:30:21:
e7:ee:ea:bf:72:9a:52:8a:1e:d3:e9:aa:eb:fa:ca:fb:d1:d5:
1e:10:49:49:95:08:67:0e:8f:bb:4b:b5:5a:e4:ef:65:88:84:
4d:62:b6:0b:b5:5e:c1:5e:c8:eb:c8:a9:0d:c0:4a:92:7c:e6:
04:c6:77:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 04:11:49 2026 by rpki-client