This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214347.roa File: AS214347.roa (raw, json) Hash identifier: AIjfCEamzJUko2Jnb3uLdE+shaWkFL0ZcGxpSt6x12c= Subject key identifier: 1B:AB:D2:DB:2E:D6:DC:3F:11:7F:D9:A8:A6:65:8A:BA:0E:F0:C9:D3 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 40CA71B257821FE7AE2E80D979F2B06BE3A6738C Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214347.roa Signing time: Wed 26 Nov 2025 12:04:35 +0000 ROA not before: Wed 26 Nov 2025 11:59:35 +0000 ROA not after: Wed 25 Nov 2026 12:04:35 +0000 asID: 214347 IP address blocks: 82.38.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ca:71:b2:57:82:1f:e7:ae:2e:80:d9:79:f2:b0:6b:e3:a6:73:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 26 11:59:35 2025 GMT Not After : Nov 25 12:04:35 2026 GMT Subject: CN=1BABD2DB2ED6DC3F117FD9A8A6658ABA0EF0C9D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d0:97:64:c2:7b:38:ae:a4:f6:28:a7:b9:84: 15:80:9e:2a:9a:03:8b:55:ee:7f:5a:17:28:a4:a9: 86:8e:bd:3a:46:33:29:f0:30:a8:95:64:25:a5:46: 95:38:47:43:00:f0:84:80:bd:c2:87:b5:62:f9:c8: 9f:de:ef:5a:3d:cf:b2:c1:2f:40:03:64:87:92:2e: 66:6a:94:6e:a4:bc:b8:66:27:d4:d7:fd:0f:a2:db: 23:57:cd:45:ec:1a:fd:42:6e:f8:7d:f7:21:77:aa: a9:b2:09:30:97:5e:6c:b3:ab:d3:12:ca:fc:38:45: 93:e8:40:cd:cb:a0:0f:13:46:85:2b:f7:16:98:22: d9:a3:2b:cd:0a:65:73:3f:e8:67:73:44:68:b8:2e: 23:4d:3a:52:a4:99:20:4e:9e:08:87:8d:72:cd:b9: eb:d3:39:da:96:c8:f0:9c:99:b1:53:80:0a:b9:3e: 6b:98:2a:74:4b:fe:c7:bd:88:41:a9:ed:78:dd:ea: d9:9e:3d:97:3a:d6:38:f8:b7:eb:99:31:6c:8b:00: 4a:e1:23:6e:3e:d3:3b:9b:f1:1b:5e:b5:c3:ac:52: c3:51:4f:16:ab:57:89:f7:ab:a9:e3:d1:04:0f:12: 8f:d7:4a:49:be:a1:12:68:33:fd:2e:83:52:d2:7e: ba:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AB:D2:DB:2E:D6:DC:3F:11:7F:D9:A8:A6:65:8A:BA:0E:F0:C9:D3 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214347.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.38.128.0/24 Signature Algorithm: sha256WithRSAEncryption 88:8f:bb:23:0f:a1:d2:ab:4d:9e:69:82:d0:a0:38:02:37:69: 08:a6:04:b6:27:9e:7a:bc:a7:8c:0a:19:a4:5b:9a:54:d7:18: fb:84:20:0b:90:71:d5:cf:a4:80:a7:2f:2c:76:5d:7f:ec:a3: a8:44:d5:a2:51:d6:ac:71:2f:41:b1:70:77:ff:2e:40:25:52: e7:1c:50:9b:ea:3d:f8:82:f2:9a:71:c0:82:f9:a5:24:27:c1: 44:7c:1a:77:99:ef:61:2c:83:74:af:2a:bc:bc:84:7b:e7:cb: 6b:cf:3b:51:5f:3c:0c:40:36:18:64:ac:85:09:99:7f:dd:90: 38:b5:92:8b:85:b4:57:95:7e:db:55:d8:55:7a:80:9b:dc:8a: 52:dd:c0:9c:f9:61:a2:99:60:86:3f:86:2f:55:26:04:d2:d6: 0c:b0:16:97:f0:ee:b3:3c:c8:b9:1c:d0:85:29:cf:d6:d5:c0: 76:da:0d:38:b4:ee:29:35:26:a5:91:2e:38:e5:ee:0b:a4:20: 44:d9:b4:d6:a7:d0:f1:49:1a:e1:bf:ba:f4:c1:b7:07:d1:9e: b9:64:8b:ae:32:ae:8f:90:6f:be:eb:a3:d1:45:17:d5:12:30: ff:7e:2b:ea:5b:79:28:04:87:ce:93:12:c0:f6:53:c4:b6:9d: 4d:d8:21:be -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUQMpxsleCH+euLoDZefKwa+Omc4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjYxMTU5MzVaFw0yNjExMjUxMjA0MzVaMDMxMTAvBgNV BAMTKDFCQUJEMkRCMkVENkRDM0YxMTdGRDlBOEE2NjU4QUJBMEVGMEM5RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM0Jdkwns4rqT2KKe5hBWAniqa A4tV7n9aFyikqYaOvTpGMynwMKiVZCWlRpU4R0MA8ISAvcKHtWL5yJ/e71o9z7LB L0ADZIeSLmZqlG6kvLhmJ9TX/Q+i2yNXzUXsGv1Cbvh99yF3qqmyCTCXXmyzq9MS yvw4RZPoQM3LoA8TRoUr9xaYItmjK80KZXM/6GdzRGi4LiNNOlKkmSBOngiHjXLN uevTOdqWyPCcmbFTgAq5PmuYKnRL/se9iEGp7Xjd6tmePZc61jj4t+uZMWyLAErh I24+0zub8RtetcOsUsNRTxarV4n3q6nj0QQPEo/XSkm+oRJoM/0ug1LSfrrhAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUG6vS2y7W3D8Rf9mopmWKug7wydMwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE0MzQ3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUiaA MA0GCSqGSIb3DQEBCwUAA4IBAQCIj7sjD6HSq02eaYLQoDgCN2kIpgS2J556vKeM ChmkW5pU1xj7hCALkHHVz6SApy8sdl1/7KOoRNWiUdascS9BsXB3/y5AJVLnHFCb 6j34gvKaccCC+aUkJ8FEfBp3me9hLIN0ryq8vIR758trzztRXzwMQDYYZKyFCZl/ 3ZA4tZKLhbRXlX7bVdhVeoCb3IpS3cCc+WGimWCGP4YvVSYE0tYMsBaX8O6zPMi5 HNCFKc/W1cB22g04tO4pNSalkS445e4LpCBE2bTWp9DxSRrhv7r0wbcH0Z65ZIuu Mq6PkG++66PRRRfVEjD/fivqW3koBIfOkxLA9lPEtp1N2CG+ -----END CERTIFICATE-----Generated at Thu Dec 4 05:58:58 2025 by rpki-client