This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214677.roa File: AS214677.roa (raw, json) Hash identifier: sZYWBDdy4Mer+DqSo/GgdwILABvuFZ6k4Wyp4i5xBF0= Subject key identifier: 0C:DA:5B:7F:8C:5F:8C:B4:57:8C:FF:D1:52:D4:08:0C:40:2C:52:36 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 66D21E3CA70E535024ACA21F536AE981336DCF87 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214677.roa Signing time: Mon 24 Nov 2025 13:58:07 +0000 ROA not before: Mon 24 Nov 2025 13:53:07 +0000 ROA not after: Mon 23 Nov 2026 13:58:07 +0000 asID: 214677 IP address blocks: 82.39.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d2:1e:3c:a7:0e:53:50:24:ac:a2:1f:53:6a:e9:81:33:6d:cf:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 24 13:53:07 2025 GMT Not After : Nov 23 13:58:07 2026 GMT Subject: CN=0CDA5B7F8C5F8CB4578CFFD152D4080C402C5236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e7:d4:f7:8d:6a:8c:fe:3b:53:9d:0c:c7:22: 04:4a:e2:f3:f5:c2:4d:75:b0:64:9f:41:bb:ac:37: db:8a:2f:f1:5a:f7:7f:1a:32:92:fd:12:2b:3c:16: 35:d9:7c:40:ad:d7:95:47:1d:0f:47:fc:61:ee:f2: 11:65:56:0a:a4:1d:12:e9:09:b8:e7:e2:fc:aa:4f: d5:4f:da:90:77:56:66:74:25:be:b0:bc:22:53:74: 86:74:f9:6f:d0:c6:30:cf:0b:c5:c4:82:9f:ec:16: 21:32:63:da:21:81:fa:dc:ef:7b:ee:a8:7a:d7:42: 06:78:3f:aa:30:44:65:e2:9f:d0:18:89:5e:99:7c: 76:cd:e2:b3:33:c6:f4:50:70:6e:48:a2:4b:2c:fc: 9a:8a:18:4d:c6:93:b1:f8:c3:e7:8a:2f:6a:9b:e3: 66:bf:e5:de:d1:ae:c5:b1:c4:17:cd:0c:85:ed:95: ad:20:0e:51:c5:48:63:69:13:d4:6b:f3:b1:fa:37: 9e:7a:34:5c:73:ca:84:8d:27:c0:5e:e6:01:c0:68: 39:85:2c:0f:b8:95:d4:57:2a:34:5b:b8:36:40:93: 03:70:19:f8:0e:1f:32:6f:cd:82:6c:e4:3b:29:cd: ba:7e:f1:78:bf:58:1d:3e:b3:48:e6:76:23:1c:a8: 4e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:DA:5B:7F:8C:5F:8C:B4:57:8C:FF:D1:52:D4:08:0C:40:2C:52:36 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS214677.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.86.0/24 Signature Algorithm: sha256WithRSAEncryption 05:00:d1:b2:1e:f7:b0:92:8a:4c:64:c7:b6:a8:c9:18:9f:f3: 3f:6e:fa:43:88:db:de:b2:76:d2:25:03:f8:91:82:43:93:ea: b2:14:f5:52:70:3b:ce:3b:4e:71:57:a5:cf:ba:dd:eb:32:a8: 53:32:10:13:1c:c0:d6:09:54:33:22:56:20:d1:56:60:85:93: 92:8d:0d:6c:4c:22:d7:93:56:f2:79:f9:67:aa:2c:e9:9c:06: f9:67:8d:ba:22:99:25:65:83:bf:77:63:9c:f3:eb:25:8a:5d: 90:77:af:f3:5a:ce:8b:fa:38:69:85:50:b8:84:fd:35:e5:58: 94:15:c2:f9:af:27:11:92:9c:9a:0b:3d:93:8c:10:1d:b8:16: f0:f7:0d:18:45:97:73:45:09:3d:59:69:0d:73:5a:cb:02:f2: 55:85:50:15:b6:d8:d1:b5:ca:d9:a1:33:34:91:5d:b7:e8:cf: 00:ff:a9:de:12:3b:3f:fe:28:45:00:f4:08:ea:67:b2:b7:1c: 0a:d0:69:23:0b:9b:62:24:d2:55:a4:6a:ab:b9:74:32:5a:37: 63:23:25:07:b3:27:92:c1:17:29:4c:a7:e5:3b:cd:ce:50:f9: 46:ef:9c:91:ad:dc:cb:b8:35:98:98:d6:85:67:e2:08:8d:10: 82:37:57:6a -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUZtIePKcOU1AkrKIfU2rpgTNtz4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjQxMzUzMDdaFw0yNjExMjMxMzU4MDdaMDMxMTAvBgNV BAMTKDBDREE1QjdGOEM1RjhDQjQ1NzhDRkZEMTUyRDQwODBDNDAyQzUyMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo59T3jWqM/jtTnQzHIgRK4vP1 wk11sGSfQbusN9uKL/Fa938aMpL9Eis8FjXZfECt15VHHQ9H/GHu8hFlVgqkHRLp Cbjn4vyqT9VP2pB3VmZ0Jb6wvCJTdIZ0+W/QxjDPC8XEgp/sFiEyY9ohgfrc73vu qHrXQgZ4P6owRGXin9AYiV6ZfHbN4rMzxvRQcG5Iokss/JqKGE3Gk7H4w+eKL2qb 42a/5d7RrsWxxBfNDIXtla0gDlHFSGNpE9Rr87H6N556NFxzyoSNJ8Be5gHAaDmF LA+4ldRXKjRbuDZAkwNwGfgOHzJvzYJs5Dspzbp+8Xi/WB0+s0jmdiMcqE4lAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUDNpbf4xfjLRXjP/RUtQIDEAsUjYwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE0Njc3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUidW MA0GCSqGSIb3DQEBCwUAA4IBAQAFANGyHvewkopMZMe2qMkYn/M/bvpDiNvesnbS JQP4kYJDk+qyFPVScDvOO05xV6XPut3rMqhTMhATHMDWCVQzIlYg0VZghZOSjQ1s TCLXk1byeflnqizpnAb5Z426IpklZYO/d2Oc8+slil2Qd6/zWs6L+jhphVC4hP01 5ViUFcL5rycRkpyaCz2TjBAduBbw9w0YRZdzRQk9WWkNc1rLAvJVhVAVttjRtcrZ oTM0kV236M8A/6neEjs//ihFAPQI6meytxwK0GkjC5tiJNJVpGqruXQyWjdjIyUH syeSwRcpTKflO83OUPlG75yRrdzLuDWYmNaFZ+IIjRCCN1dq -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:18 2025 by rpki-client