This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215181.roa File: AS215181.roa (raw, json) Hash identifier: ESptlrubCu0EQTh67XzJEDWeFp0pi4GYY97Inx24KVo= Subject key identifier: 73:D2:30:32:39:7D:D1:1C:7C:CF:25:C0:54:84:26:DA:D6:1D:3E:86 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 0B5D6627B128DF630FD38841E229E53A3CAE6BCD Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215181.roa Signing time: Thu 13 Nov 2025 15:07:15 +0000 ROA not before: Thu 13 Nov 2025 15:02:15 +0000 ROA not after: Thu 12 Nov 2026 15:07:15 +0000 asID: 215181 IP address blocks: 82.38.10.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:5d:66:27:b1:28:df:63:0f:d3:88:41:e2:29:e5:3a:3c:ae:6b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 13 15:02:15 2025 GMT Not After : Nov 12 15:07:15 2026 GMT Subject: CN=73D23032397DD11C7CCF25C0548426DAD61D3E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:f3:b9:ab:34:13:49:e5:c8:27:d5:16:65: 8e:ee:e1:a6:64:4f:3d:05:35:a4:42:03:56:f0:98: 1b:ee:24:7a:fb:89:dc:ca:94:dd:7b:8e:1f:cd:a5: 10:e0:5b:07:3e:1b:67:13:bf:f5:02:8b:21:c9:ee: 18:fd:b9:48:db:e0:74:16:29:b0:c6:13:97:da:cb: b5:ae:90:db:c9:a7:51:64:c7:8e:3f:d6:1e:91:07: 84:4f:46:43:3e:d8:15:ae:6d:26:a4:cc:4c:49:2b: 56:1f:8c:13:91:c3:30:ee:f8:7a:b2:2e:d1:e0:e0: a1:8d:13:ec:5b:2a:1c:21:10:47:7a:71:9c:52:cc: 5a:91:53:9f:32:54:28:51:70:73:a3:02:2d:e8:c8: 71:07:93:d7:6e:4e:8a:e5:fd:e3:36:9a:8b:69:3e: e5:a7:59:f4:ec:b2:81:bc:e8:f2:d8:4a:fd:77:2a: 18:0c:fa:90:32:a7:89:65:3f:09:7c:b4:2e:14:2e: dd:4b:a0:14:e6:8f:a6:95:24:f7:35:ba:33:52:ce: 38:20:54:2f:8a:9b:dd:c9:16:b4:1d:c5:ef:46:a1: f6:58:8d:cd:a2:46:84:e5:a7:f0:db:7b:f7:48:19: 47:a0:50:d3:08:b4:15:b4:60:05:07:50:72:c9:87: 9e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D2:30:32:39:7D:D1:1C:7C:CF:25:C0:54:84:26:DA:D6:1D:3E:86 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215181.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.38.10.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:8b:fa:6b:1c:03:39:5a:f9:57:aa:48:24:ac:31:dc:91:c6: 84:06:2c:c1:e1:79:6f:dd:1c:fd:57:7c:3a:ff:55:00:ca:c7: 9e:7f:20:ef:46:c4:45:2d:51:d5:38:1e:02:13:5b:78:38:b2: 2b:af:bd:2a:5d:ca:1d:7a:a6:2a:9d:ab:f5:8d:88:da:c1:8b: 04:f9:ac:f2:2f:de:68:b5:1d:a4:0c:e2:23:04:65:da:e2:bb: 53:d9:00:6e:d8:88:00:f6:2b:f1:fc:0b:c4:bb:c2:ef:5d:f1: 13:a2:1c:7e:29:6b:33:af:ed:1a:f7:e5:a5:db:ae:11:7c:b3: 28:9e:25:60:cc:50:c5:e2:cf:bc:96:80:e0:29:29:13:22:1b: c8:4e:aa:3b:0e:3f:c9:d2:77:ab:b5:cd:71:5a:b2:80:e6:11: f0:fb:c4:12:2e:82:5d:18:bf:7b:65:68:4a:14:bf:3c:4d:8c: 50:03:9d:95:e9:0d:b9:93:f2:35:2f:4c:95:99:91:a3:a8:74: 8b:72:a6:63:77:bb:bb:ca:26:56:20:68:41:0a:21:33:e8:fc: c9:46:9a:ab:95:1a:7a:fb:a4:59:42:ea:ba:38:35:5e:e5:f3: a7:e1:11:ea:74:27:55:7d:29:8c:51:b1:ab:f5:29:c2:b6:f9: a5:d8:09:eb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUC11mJ7Eo32MP04hB4inlOjyua80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMTMxNTAyMTVaFw0yNjExMTIxNTA3MTVaMDMxMTAvBgNV BAMTKDczRDIzMDMyMzk3REQxMUM3Q0NGMjVDMDU0ODQyNkRBRDYxRDNFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB6/O5qzQTSeXIJ9UWZY7u4aZk Tz0FNaRCA1bwmBvuJHr7idzKlN17jh/NpRDgWwc+G2cTv/UCiyHJ7hj9uUjb4HQW KbDGE5fay7WukNvJp1Fkx44/1h6RB4RPRkM+2BWubSakzExJK1YfjBORwzDu+Hqy LtHg4KGNE+xbKhwhEEd6cZxSzFqRU58yVChRcHOjAi3oyHEHk9duTorl/eM2motp PuWnWfTssoG86PLYSv13KhgM+pAyp4llPwl8tC4ULt1LoBTmj6aVJPc1ujNSzjgg VC+Km93JFrQdxe9GofZYjc2iRoTlp/Dbe/dIGUegUNMItBW0YAUHUHLJh54hAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUc9IwMjl90Rx8zyXAVIQm2tYdPoYwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE1MTgxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUiYK MA0GCSqGSIb3DQEBCwUAA4IBAQBci/prHAM5WvlXqkgkrDHckcaEBizB4Xlv3Rz9 V3w6/1UAyseefyDvRsRFLVHVOB4CE1t4OLIrr70qXcodeqYqnav1jYjawYsE+azy L95otR2kDOIjBGXa4rtT2QBu2IgA9ivx/AvEu8LvXfETohx+KWszr+0a9+Wl264R fLMoniVgzFDF4s+8loDgKSkTIhvITqo7Dj/J0nertc1xWrKA5hHw+8QSLoJdGL97 ZWhKFL88TYxQA52V6Q25k/I1L0yVmZGjqHSLcqZjd7u7yiZWIGhBCiEz6PzJRpqr lRp6+6RZQuq6ODVe5fOn4RHqdCdVfSmMUbGr9SnCtvml2Anr -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:01 2025 by rpki-client