This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214663.roa File: AS214663.roa (raw, json) Hash identifier: U6vAVI857dTZKnFAiGf9ZQ+UuKRfJC7H+AoXxWYp2yI= Subject key identifier: 64:5A:27:04:EC:74:F3:44:E3:5C:04:5A:18:24:6A:2E:53:0C:F0:E8 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 253E916CE694F281D787535CE27881080265BE61 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214663.roa Signing time: Thu 15 Jan 2026 17:42:32 +0000 ROA not before: Thu 15 Jan 2026 17:37:32 +0000 ROA not after: Thu 14 Jan 2027 17:42:32 +0000 asID: 214663 IP address blocks: 82.38.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:3e:91:6c:e6:94:f2:81:d7:87:53:5c:e2:78:81:08:02:65:be:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 15 17:37:32 2026 GMT Not After : Jan 14 17:42:32 2027 GMT Subject: CN=645A2704EC74F344E35C045A18246A2E530CF0E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:61:52:52:ec:f4:7c:75:10:71:2f:27:c9:1b: d5:d2:e2:6d:d6:6b:41:8a:fb:82:61:81:d0:35:4c: 54:60:71:c8:74:7c:8a:a3:8a:66:3e:20:8c:6e:71: 12:bc:92:d8:bd:71:d4:6b:ac:7f:30:58:67:01:02: 64:1b:f8:ec:de:d9:77:99:1e:f1:a4:dd:9e:69:bf: 95:af:fa:e0:01:32:53:a0:d3:5a:ad:87:cf:90:c2: 40:be:80:ac:c2:f9:93:7c:b0:f3:e9:9a:dd:ab:41: ab:d6:1e:1f:45:08:a8:ce:64:9f:67:b2:f2:6f:ec: 8d:7c:10:d8:d8:c4:f3:a3:c4:2a:76:84:02:02:97: 8a:18:26:65:a4:b0:1a:23:fb:f1:fe:19:c1:e6:01: 53:3e:b9:80:69:21:d8:d9:6c:86:ce:76:19:7a:c5: 4d:c1:93:f1:1d:94:92:ea:4f:b1:32:fd:87:f8:a1: eb:ab:32:66:e7:23:91:a0:e3:d3:08:b4:96:ad:64: 1a:03:23:04:59:51:74:5a:5c:82:da:ad:37:0b:68: 7e:fd:be:d0:cc:76:a0:30:89:fd:b7:53:d8:4a:98: 66:26:c6:55:93:08:7d:31:7d:a2:72:57:31:fb:24: 7e:68:2e:33:48:f3:0d:66:9f:61:1a:fd:04:a4:8f: 26:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5A:27:04:EC:74:F3:44:E3:5C:04:5A:18:24:6A:2E:53:0C:F0:E8 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214663.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.38.134.0/24 Signature Algorithm: sha256WithRSAEncryption 28:75:46:a2:b8:48:ae:4a:13:3a:ac:55:c4:0d:55:04:90:e6: c9:7d:4c:6c:2f:5c:46:4f:c5:fa:a8:86:61:62:c1:b3:36:8d: 1e:f7:ad:bc:24:66:c4:8f:da:16:ff:64:3f:94:31:06:b7:6e: 47:91:78:ac:a2:a3:f9:89:bb:94:d2:d5:ea:db:8a:08:5a:73: 22:7d:d9:11:54:d7:ce:28:05:44:4f:73:7f:9e:05:03:a3:f0: 40:3c:f8:2a:01:d7:2a:0c:50:aa:8b:9c:88:b2:2c:31:f6:7b: 5f:f3:f1:da:b1:7f:dd:98:13:48:f6:9a:2c:f5:6f:0a:b8:90: f1:28:1c:1f:f8:e4:33:5a:d5:e9:8c:1d:bb:10:07:b7:42:60: f9:16:46:a2:a2:e8:3e:61:c7:75:a8:05:ba:24:3f:ad:07:3f: 79:8b:6c:d9:af:fe:b4:f9:1f:aa:63:1e:5a:ca:ae:27:90:bf: 63:d0:64:75:32:cc:7f:99:a7:d6:93:4c:a6:81:a3:cf:27:19: 73:7f:3f:04:d8:cf:22:42:81:dd:42:08:90:b9:a7:2b:37:fd: 1e:b9:05:f0:83:6d:b7:81:bd:33:a2:b7:3c:43:e6:e7:9a:f0: 14:d3:d7:34:11:53:63:3e:d9:e4:82:57:36:c6:6c:6f:11:1f: 66:25:0e:ec -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUJT6RbOaU8oHXh1Nc4niBCAJlvmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMTUxNzM3MzJaFw0yNzAxMTQxNzQyMzJaMDMxMTAvBgNV BAMTKDY0NUEyNzA0RUM3NEYzNDRFMzVDMDQ1QTE4MjQ2QTJFNTMwQ0YwRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPYVJS7PR8dRBxLyfJG9XS4m3W a0GK+4JhgdA1TFRgcch0fIqjimY+IIxucRK8kti9cdRrrH8wWGcBAmQb+Oze2XeZ HvGk3Z5pv5Wv+uABMlOg01qth8+QwkC+gKzC+ZN8sPPpmt2rQavWHh9FCKjOZJ9n svJv7I18ENjYxPOjxCp2hAICl4oYJmWksBoj+/H+GcHmAVM+uYBpIdjZbIbOdhl6 xU3Bk/EdlJLqT7Ey/Yf4oeurMmbnI5Gg49MItJatZBoDIwRZUXRaXILarTcLaH79 vtDMdqAwif23U9hKmGYmxlWTCH0xfaJyVzH7JH5oLjNI8w1mn2Ea/QSkjyY9AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUZFonBOx080TjXARaGCRqLlMM8OgwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE0NjYzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUiaG MA0GCSqGSIb3DQEBCwUAA4IBAQAodUaiuEiuShM6rFXEDVUEkObJfUxsL1xGT8X6 qIZhYsGzNo0e9628JGbEj9oW/2Q/lDEGt25HkXisoqP5ibuU0tXq24oIWnMifdkR VNfOKAVET3N/ngUDo/BAPPgqAdcqDFCqi5yIsiwx9ntf8/HasX/dmBNI9pos9W8K uJDxKBwf+OQzWtXpjB27EAe3QmD5Fkaioug+Ycd1qAW6JD+tBz95i2zZr/60+R+q Yx5ayq4nkL9j0GR1Msx/mafWk0ymgaPPJxlzfz8E2M8iQoHdQgiQuacrN/0euQXw g223gb0zorc8Q+bnmvAU09c0EVNjPtnkglc2xmxvER9mJQ7s -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:24 2026 by rpki-client