This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215727.roa
File: AS215727.roa (raw, json)
Hash identifier: EDMeJ6QTuJKDk4xQoMWN7NiF3EjqXHRc384UiWUacUo=
Subject key identifier: 50:0B:B6:E6:05:B3:FB:A3:96:9B:FB:20:EF:B6:92:93:EC:3A:69:FE
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4AFB3B63AAECCD9F2671A8B2A8CC4F4329905AB0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215727.roa
Signing time: Sun 11 Jan 2026 00:00:23 +0000
ROA not before: Sat 10 Jan 2026 23:55:23 +0000
ROA not after: Sun 10 Jan 2027 00:00:23 +0000
asID: 215727
IP address blocks: 82.21.169.0/24 maxlen: 24
82.22.175.0/24 maxlen: 24
82.23.134.0/24 maxlen: 24
82.24.8.0/24 maxlen: 24
82.24.105.0/24 maxlen: 24
82.24.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 04:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:fb:3b:63:aa:ec:cd:9f:26:71:a8:b2:a8:cc:4f:43:29:90:5a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 10 23:55:23 2026 GMT
Not After : Jan 10 00:00:23 2027 GMT
Subject: CN=500BB6E605B3FBA3969BFB20EFB69293EC3A69FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:71:3d:79:bd:da:38:fb:8d:5d:10:31:7e:2f:
ca:c4:41:36:10:a2:06:42:cc:7c:c3:d2:0e:a0:ea:
16:26:ff:57:73:6f:b4:39:53:fa:10:7c:6b:e6:1a:
62:8b:c8:99:e1:4c:2b:13:92:8f:2e:dc:46:3d:9d:
6e:da:9b:68:b3:8f:18:ad:92:e7:42:fa:c0:ad:81:
aa:41:b9:8a:80:53:5e:cf:bd:4e:ff:df:8c:f6:79:
c5:9b:ac:da:21:4a:69:34:1a:ed:f1:f7:c6:24:27:
b4:43:05:5c:c7:7c:bd:5c:c2:97:48:85:e1:f1:fe:
86:cb:46:bf:40:7a:b9:39:2f:2c:94:0a:5d:13:3d:
a8:b0:33:41:b8:85:29:96:20:11:8c:fa:5a:aa:4f:
07:e1:f8:c6:d2:a4:ea:61:5f:59:88:ff:18:de:0a:
f9:4f:74:90:76:d8:26:7c:3b:1a:de:99:2d:87:fd:
be:6e:87:c5:3a:23:36:41:c1:0d:3f:d8:a9:75:58:
f7:da:bb:1c:f4:34:19:db:2d:f7:d5:d9:77:14:ce:
7b:8e:c5:67:57:5c:10:a5:e2:0a:f4:33:01:86:eb:
34:28:75:1d:d8:42:51:68:40:11:0d:8d:ad:b7:82:
b2:90:c6:be:38:8a:89:a0:d4:5e:78:ca:30:44:fa:
60:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0B:B6:E6:05:B3:FB:A3:96:9B:FB:20:EF:B6:92:93:EC:3A:69:FE
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS215727.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.169.0/24
82.22.175.0/24
82.23.134.0/24
82.24.8.0/24
82.24.105.0/24
82.24.175.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:c5:cf:ec:b8:0d:6f:93:27:ff:57:cc:1a:e2:1e:73:a5:35:
f3:dd:3b:ae:58:51:77:22:fc:9d:84:dc:b2:03:cc:24:ad:7f:
fe:f4:98:2b:1d:bf:16:dd:c7:2e:91:66:36:55:a4:07:ec:0a:
0b:bf:82:b7:36:85:f6:4b:e6:67:99:cb:e1:2d:e1:b8:c0:b5:
5d:2a:7b:7d:77:54:36:70:60:2a:35:f9:de:ef:2c:ef:3f:21:
0b:36:7a:a9:fc:25:7c:b9:6d:4f:f4:13:5c:92:5e:62:af:78:
69:76:a2:e2:45:75:61:b2:df:e1:a2:49:4c:de:15:89:ac:5b:
62:cb:4e:c7:fe:26:40:d0:eb:28:34:10:ba:96:86:3b:bc:bf:
1d:ef:19:49:d6:f0:5a:d9:41:91:bb:a0:af:aa:ce:7e:fd:ec:
1b:b1:82:2b:c3:bd:eb:d5:16:71:d7:d9:9a:67:21:f8:7b:11:
41:11:c6:9f:e3:5c:d0:1d:0a:d4:8c:b6:f6:0c:c9:99:9b:b2:
a0:38:ca:a4:b4:5b:9d:d7:aa:00:2a:fd:c3:02:22:cb:28:6a:
cb:60:9b:63:f3:9f:2d:07:bf:0b:ff:b5:41:56:ca:e3:e3:a1:
0b:7b:ef:7d:93:94:a4:22:be:66:ae:3a:be:1c:77:20:61:36:
d7:64:27:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:55:46 2026 by rpki-client