This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214132.roa File: AS214132.roa (raw, json) Hash identifier: VpbGvGiHB8fU04Dj3kpSzP7yEzGsdzJCwNuelhkEauY= Subject key identifier: 48:86:90:BD:F0:7A:FD:E3:99:97:0A:AD:B1:47:68:BE:54:68:DA:27 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 11868F48C263C76C1135D35578BC3F293DE3719D Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214132.roa Signing time: Tue 25 Nov 2025 11:43:32 +0000 ROA not before: Tue 25 Nov 2025 11:38:32 +0000 ROA not after: Tue 24 Nov 2026 11:43:32 +0000 asID: 214132 IP address blocks: 82.39.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:86:8f:48:c2:63:c7:6c:11:35:d3:55:78:bc:3f:29:3d:e3:71:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 25 11:38:32 2025 GMT Not After : Nov 24 11:43:32 2026 GMT Subject: CN=488690BDF07AFDE399970AADB14768BE5468DA27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:08:1b:e2:03:e2:f7:35:fc:a6:40:74:7a:19: da:f4:90:c7:3d:cf:1b:b2:39:fd:8b:69:f9:9e:bb: 26:ef:c9:d4:60:ea:4a:eb:04:9e:a0:59:61:3d:76: f4:05:33:80:90:44:4e:16:71:9e:ce:70:34:9b:23: f0:d5:f6:dd:a1:92:35:d2:7d:7c:cd:e2:e5:b8:50: 2e:7a:2e:1c:38:52:d2:af:fd:16:f4:88:fa:c1:e3: c8:d0:08:1e:11:86:89:9f:df:02:35:17:dc:59:83: 5a:60:82:67:2b:fe:c7:a6:83:2d:b6:23:53:55:04: 2a:6a:3a:e8:8b:4f:4a:84:6e:d5:48:72:f4:3b:7d: 58:d7:f4:8d:a5:05:cf:05:d2:8f:09:bd:ad:1c:8c: 90:73:60:01:ad:83:a0:aa:9e:d8:55:ad:f6:70:5b: ee:8f:f6:c6:7c:aa:be:5c:d3:5e:57:54:1d:78:21: eb:c1:b4:b7:e6:b7:7f:41:33:6e:f3:44:30:18:09: d6:bf:04:65:bd:84:90:76:c5:d1:fc:e3:ec:7c:68: fb:5a:cb:c0:b1:a7:69:d2:39:40:e1:55:cb:d2:d0: 1d:c2:1f:f8:60:a1:c7:19:a1:ed:7e:27:72:d6:bb: 56:e0:73:01:e3:6e:f0:4b:fe:e8:2c:e8:08:b4:90: 5d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:86:90:BD:F0:7A:FD:E3:99:97:0A:AD:B1:47:68:BE:54:68:DA:27 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.111.0/24 Signature Algorithm: sha256WithRSAEncryption 98:5d:93:2c:11:19:07:0a:cb:82:f5:9e:ec:09:8b:56:db:25: 51:ac:25:ed:bc:02:5b:62:f3:68:05:87:6b:00:5a:83:89:c7: 68:ce:92:f4:22:e4:9e:37:6f:c1:5b:33:de:c1:18:07:7f:1a: ec:8a:ce:df:6d:08:d1:92:44:ec:62:78:e9:e4:63:da:be:f3: 21:51:2e:a5:ef:4f:46:05:40:ae:66:b0:70:f0:8f:2d:64:65: f6:44:2e:ef:ab:ad:0a:81:9c:64:82:db:be:11:4f:c2:94:83: d7:06:77:39:10:25:cd:7b:0c:99:be:62:70:9b:eb:a8:e2:ca: 9c:ca:9d:37:dd:8c:81:fb:31:38:7b:a5:52:70:a9:0c:b5:2d: de:21:84:35:10:35:f7:af:03:b1:d7:4a:20:17:a3:49:11:a3: 82:1d:15:91:3a:c0:4d:89:c3:ec:fb:4a:72:d4:06:66:e9:19: 1f:e0:2c:f5:6e:b6:c1:c0:53:1d:2e:03:58:12:99:ea:a4:b4: 00:ea:e9:1b:5a:07:67:1d:e3:9d:0a:2d:73:25:6c:6e:6c:42: a8:a1:fe:82:04:a9:1b:ca:d9:d8:60:25:39:e3:82:99:41:21: 1d:09:4a:d4:64:f3:4a:1e:42:07:04:c5:03:9a:2a:c2:28:47: 11:62:99:11 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUEYaPSMJjx2wRNdNVeLw/KT3jcZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjUxMTM4MzJaFw0yNjExMjQxMTQzMzJaMDMxMTAvBgNV BAMTKDQ4ODY5MEJERjA3QUZERTM5OTk3MEFBREIxNDc2OEJFNTQ2OERBMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxCBviA+L3NfymQHR6Gdr0kMc9 zxuyOf2LafmeuybvydRg6krrBJ6gWWE9dvQFM4CQRE4WcZ7OcDSbI/DV9t2hkjXS fXzN4uW4UC56Lhw4UtKv/Rb0iPrB48jQCB4Rhomf3wI1F9xZg1pggmcr/semgy22 I1NVBCpqOuiLT0qEbtVIcvQ7fVjX9I2lBc8F0o8Jva0cjJBzYAGtg6CqnthVrfZw W+6P9sZ8qr5c015XVB14IevBtLfmt39BM27zRDAYCda/BGW9hJB2xdH84+x8aPta y8Cxp2nSOUDhVcvS0B3CH/hgoccZoe1+J3LWu1bgcwHjbvBL/ugs6Ai0kF2fAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUSIaQvfB6/eOZlwqtsUdovlRo2icwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE0MTMyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUidv MA0GCSqGSIb3DQEBCwUAA4IBAQCYXZMsERkHCsuC9Z7sCYtW2yVRrCXtvAJbYvNo BYdrAFqDicdozpL0IuSeN2/BWzPewRgHfxrsis7fbQjRkkTsYnjp5GPavvMhUS6l 709GBUCuZrBw8I8tZGX2RC7vq60KgZxkgtu+EU/ClIPXBnc5ECXNewyZvmJwm+uo 4sqcyp033YyB+zE4e6VScKkMtS3eIYQ1EDX3rwOx10ogF6NJEaOCHRWROsBNicPs +0py1AZm6Rkf4Cz1brbBwFMdLgNYEpnqpLQA6ukbWgdnHeOdCi1zJWxubEKoof6C BKkbytnYYCU544KZQSEdCUrUZPNKHkIHBMUDmirCKEcRYpkR -----END CERTIFICATE-----Generated at Thu Dec 4 06:01:45 2025 by rpki-client