This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214024.roa File: AS214024.roa (raw, json) Hash identifier: ntzYnmfRDpM0wRAAfql6ri1ctzmHZMtraeJKpgQSTYs= Subject key identifier: ED:21:92:DB:17:BB:38:DA:77:B8:55:E6:99:40:A3:85:AA:B8:48:F3 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 75299A0937D1777E359C3998C0363F645623AF38 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214024.roa Signing time: Mon 01 Dec 2025 00:15:22 +0000 ROA not before: Mon 01 Dec 2025 00:10:22 +0000 ROA not after: Mon 30 Nov 2026 00:15:22 +0000 asID: 214024 IP address blocks: 82.21.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:29:9a:09:37:d1:77:7e:35:9c:39:98:c0:36:3f:64:56:23:af:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 1 00:10:22 2025 GMT Not After : Nov 30 00:15:22 2026 GMT Subject: CN=ED2192DB17BB38DA77B855E69940A385AAB848F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7f:bf:7b:28:a9:f5:e7:e2:6c:80:95:8b:9b: 05:99:6e:01:5f:72:9f:39:76:12:b1:f6:0a:e9:3c: 0b:93:c2:e6:58:af:8b:42:fa:b7:36:60:d1:cd:61: 3c:d3:c2:b3:d3:64:cc:3d:89:fb:f8:a4:5e:b2:dd: 97:ee:c3:f5:c5:45:04:e3:c0:9d:8d:1d:ab:64:08: ef:db:5e:96:56:37:29:eb:3d:31:0b:1a:11:49:d0: 27:4b:8e:29:ad:25:07:f8:92:1e:38:e9:07:b0:c5: b0:89:a3:11:a9:e4:a3:2c:4d:36:ee:96:f2:3d:db: 88:63:ec:5f:f6:cf:76:bf:7b:b5:41:d4:ab:14:ad: cb:7f:f6:36:f4:1d:6e:70:e8:60:d3:f9:24:30:71: 84:e4:5d:cd:b6:98:b3:cd:5b:6e:ee:e7:f5:ef:bd: 37:de:2f:c9:0c:2c:20:9b:db:33:fb:29:bc:ea:0f: 4a:30:1a:06:14:a9:f4:a5:ba:5a:08:ff:cc:2d:b0: 4e:2f:e2:ca:10:b4:a4:c7:35:19:81:1b:ed:9e:45: b5:07:a7:15:22:a5:0b:eb:39:df:e1:3a:59:5d:0f: d3:5d:3d:7d:0b:7f:22:77:86:3d:4e:bf:ae:5f:f1: 09:37:50:bc:62:96:c9:eb:8f:ab:84:57:f2:bf:99: 66:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:21:92:DB:17:BB:38:DA:77:B8:55:E6:99:40:A3:85:AA:B8:48:F3 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214024.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.200.0/23 Signature Algorithm: sha256WithRSAEncryption 75:f5:60:c1:d0:61:1d:08:27:2f:b8:57:fa:bc:a3:7a:ef:ac: 0b:06:67:62:84:9f:00:ca:84:fd:e8:5c:f1:19:91:8c:99:7f: 5b:0b:ac:4d:7a:21:fc:9b:69:cd:e4:30:d8:e2:b1:c3:ee:a8: 96:47:07:3a:d9:70:aa:e6:b2:d5:fb:8a:4f:f1:97:18:b1:1b: 01:07:e5:c8:2a:e9:40:82:8b:9d:d0:7c:3f:0c:93:01:92:fc: 95:fc:eb:64:18:98:54:70:19:d8:a9:67:ff:e9:f5:1f:23:9d: cd:03:64:b6:16:f4:2a:e7:b3:2e:ea:3e:da:e2:74:60:6e:fc: 5b:f9:33:f2:fc:bd:53:09:e5:48:10:69:dd:96:6f:97:5e:ec: dc:cd:ba:c4:e8:d9:8f:6c:1b:fb:6b:38:31:27:47:8f:37:86: ff:0a:c4:56:fe:38:d1:0b:7c:73:fa:97:cb:ab:85:f7:e7:18: 93:49:0c:d8:c2:1b:0f:cd:46:1d:fb:e5:0e:99:dc:66:ba:84: 9f:1f:ae:6d:02:70:26:13:10:a9:c0:f6:8f:f9:a5:70:c0:26: 21:fd:87:3e:77:0e:9f:53:a5:fe:d6:95:0a:42:8e:d6:42:15: 36:ac:7d:1a:29:4c:fe:ea:61:a2:0e:a9:e4:18:6f:05:94:4f: 13:32:c0:36 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUdSmaCTfRd341nDmYwDY/ZFYjrzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDEwMDEwMjJaFw0yNjExMzAwMDE1MjJaMDMxMTAvBgNV BAMTKEVEMjE5MkRCMTdCQjM4REE3N0I4NTVFNjk5NDBBMzg1QUFCODQ4RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWf797KKn15+JsgJWLmwWZbgFf cp85dhKx9grpPAuTwuZYr4tC+rc2YNHNYTzTwrPTZMw9ifv4pF6y3Zfuw/XFRQTj wJ2NHatkCO/bXpZWNynrPTELGhFJ0CdLjimtJQf4kh446QewxbCJoxGp5KMsTTbu lvI924hj7F/2z3a/e7VB1KsUrct/9jb0HW5w6GDT+SQwcYTkXc22mLPNW27u5/Xv vTfeL8kMLCCb2zP7KbzqD0owGgYUqfSluloI/8wtsE4v4soQtKTHNRmBG+2eRbUH pxUipQvrOd/hOlldD9NdPX0LfyJ3hj1Ov65f8Qk3ULxilsnrj6uEV/K/mWa1AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU7SGS2xe7ONp3uFXmmUCjhaq4SPMwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE0MDI0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUhXI MA0GCSqGSIb3DQEBCwUAA4IBAQB19WDB0GEdCCcvuFf6vKN676wLBmdihJ8AyoT9 6FzxGZGMmX9bC6xNeiH8m2nN5DDY4rHD7qiWRwc62XCq5rLV+4pP8ZcYsRsBB+XI KulAgoud0Hw/DJMBkvyV/OtkGJhUcBnYqWf/6fUfI53NA2S2FvQq57Mu6j7a4nRg bvxb+TPy/L1TCeVIEGndlm+XXuzczbrE6NmPbBv7azgxJ0ePN4b/CsRW/jjRC3xz +pfLq4X35xiTSQzYwhsPzUYd++UOmdxmuoSfH65tAnAmExCpwPaP+aVwwCYh/Yc+ dw6fU6X+1pUKQo7WQhU2rH0aKUz+6mGiDqnkGG8FlE8TMsA2 -----END CERTIFICATE-----Generated at Thu Dec 4 06:00:41 2025 by rpki-client