This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214036.roa File: AS214036.roa (raw, json) Hash identifier: ZADrjxeMjUZ0oK/SiLx4a1c2rHK+mVnCt1rDXGDxtmA= Subject key identifier: 40:88:30:C6:0D:41:93:E7:6A:FE:CF:3F:09:D4:61:C2:E8:2E:B1:B6 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 75341EA8BB725DF623E320CB52CD4CDC68362B61 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214036.roa Signing time: Wed 03 Dec 2025 22:04:12 +0000 ROA not before: Wed 03 Dec 2025 21:59:12 +0000 ROA not after: Wed 02 Dec 2026 22:04:12 +0000 asID: 214036 IP address blocks: 82.41.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:34:1e:a8:bb:72:5d:f6:23:e3:20:cb:52:cd:4c:dc:68:36:2b:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 3 21:59:12 2025 GMT Not After : Dec 2 22:04:12 2026 GMT Subject: CN=408830C60D4193E76AFECF3F09D461C2E82EB1B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:3d:46:db:52:64:ff:b8:77:49:7a:63:4e: 7a:2e:e0:3f:0b:65:b7:ff:4a:eb:bf:13:38:70:9b: d5:34:c8:14:90:f1:69:df:c7:95:2d:c7:73:97:b9: bb:ad:11:55:ea:b0:96:27:f3:c9:00:c7:09:6a:be: 33:25:8f:2c:b4:8e:57:87:38:23:81:60:6f:5b:29: d0:74:32:0e:9c:21:12:fa:e5:87:7f:33:e3:44:38: 12:7f:92:b7:ec:a5:fb:e5:b7:7c:4b:82:53:e7:cc: 15:ef:6a:93:47:77:54:1c:cc:8f:16:db:77:ff:eb: 49:1b:35:48:8e:bf:84:ac:c8:99:15:70:9e:44:cd: a2:24:c8:a3:49:1f:f5:87:35:bf:34:2d:86:de:61: cd:3f:11:fe:38:e4:55:87:fd:52:f5:92:2d:b1:67: d8:f1:45:91:bb:ef:66:6f:5e:14:c3:0e:77:ae:e7: e8:0b:b8:c5:84:7f:7c:98:01:11:74:91:5a:89:b7: 17:1d:de:cc:30:da:a1:b7:38:47:65:3f:22:5d:a4: 6b:f5:42:91:f2:8c:a8:af:d8:b1:cf:ab:c1:13:e5: 77:4a:c5:67:61:0a:c6:40:bf:fa:d5:12:f7:d9:ce: 19:e5:db:19:46:56:8d:40:96:5d:dd:39:d5:96:9c: 5f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:88:30:C6:0D:41:93:E7:6A:FE:CF:3F:09:D4:61:C2:E8:2E:B1:B6 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.41.181.0/24 Signature Algorithm: sha256WithRSAEncryption 01:38:c7:48:7a:33:ed:14:c3:5f:00:78:29:a0:e4:f9:fc:14: b9:73:96:42:11:e0:80:9b:d6:2b:75:bc:83:d8:a1:e4:04:87: b7:2c:b1:eb:10:c0:a6:7c:e4:d4:8f:95:b2:a6:45:51:b4:f1: d9:a8:8c:4f:13:d4:22:f2:83:fb:46:0a:98:66:75:9e:75:02: 4d:e2:f1:0c:29:9b:e2:16:a0:e2:9d:66:ef:23:84:4e:24:35: 3c:c5:9a:e9:f3:67:ae:e3:53:aa:8c:a0:53:97:65:e2:dc:8a: 40:33:23:3c:dc:22:81:b3:7f:b1:ed:36:c1:2e:5f:40:a8:70: 15:61:73:fa:0e:76:e5:e3:2e:fc:a0:96:98:35:39:cd:7a:4d: 67:29:35:47:89:5e:ae:7a:72:1d:7f:34:1e:5b:50:56:49:12: 49:8e:43:9c:a9:99:69:da:ba:df:3d:10:0a:63:dd:10:5e:ab: fa:f3:27:91:bb:93:3d:90:d8:66:0d:0f:e3:79:2d:ff:15:76: f3:04:b0:9e:de:8d:bb:f8:38:26:8f:0b:ab:19:14:a8:f9:5e: fc:e2:a1:ac:1f:a8:65:8d:b5:cf:26:a6:2c:97:cb:92:5c:fe: ce:d3:ec:07:6e:4b:c8:3d:ef:b7:1a:0f:e4:a5:5d:b1:88:0f: 68:27:6b:00 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUdTQeqLtyXfYj4yDLUs1M3Gg2K2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMDMyMTU5MTJaFw0yNjEyMDIyMjA0MTJaMDMxMTAvBgNV BAMTKDQwODgzMEM2MEQ0MTkzRTc2QUZFQ0YzRjA5RDQ2MUMyRTgyRUIxQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6j1G21Jk/7h3SXpjTnou4D8L Zbf/Suu/Ezhwm9U0yBSQ8Wnfx5Utx3OXubutEVXqsJYn88kAxwlqvjMljyy0jleH OCOBYG9bKdB0Mg6cIRL65Yd/M+NEOBJ/krfspfvlt3xLglPnzBXvapNHd1QczI8W 23f/60kbNUiOv4SsyJkVcJ5EzaIkyKNJH/WHNb80LYbeYc0/Ef445FWH/VL1ki2x Z9jxRZG772ZvXhTDDneu5+gLuMWEf3yYARF0kVqJtxcd3sww2qG3OEdlPyJdpGv1 QpHyjKiv2LHPq8ET5XdKxWdhCsZAv/rVEvfZzhnl2xlGVo1All3dOdWWnF9/AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUQIgwxg1Bk+dq/s8/CdRhwugusbYwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE0MDM2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUim1 MA0GCSqGSIb3DQEBCwUAA4IBAQABOMdIejPtFMNfAHgpoOT5/BS5c5ZCEeCAm9Yr dbyD2KHkBIe3LLHrEMCmfOTUj5WypkVRtPHZqIxPE9Qi8oP7RgqYZnWedQJN4vEM KZviFqDinWbvI4ROJDU8xZrp82eu41OqjKBTl2Xi3IpAMyM83CKBs3+x7TbBLl9A qHAVYXP6Dnbl4y78oJaYNTnNek1nKTVHiV6uenIdfzQeW1BWSRJJjkOcqZlp2rrf PRAKY90QXqv68yeRu5M9kNhmDQ/jeS3/FXbzBLCe3o27+DgmjwurGRSo+V784qGs H6hljbXPJqYsl8uSXP7O0+wHbkvIPe+3Gg/kpV2xiA9oJ2sA -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:43 2025 by rpki-client