This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216050.roa File: AS216050.roa (raw, json) Hash identifier: V47B4pcFgfABVfzMCf2h8OEqym1YktNm8PQepGD2ndU= Subject key identifier: CF:5D:0D:6A:54:A1:26:E7:23:7B:3F:9F:FD:D8:1C:5C:E7:89:B3:E7 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 1CFCAECD06C5C5EDB0466138449C99326702BAF5 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216050.roa Signing time: Thu 06 Nov 2025 15:47:36 +0000 ROA not before: Thu 06 Nov 2025 15:42:36 +0000 ROA not after: Thu 05 Nov 2026 15:47:36 +0000 asID: 216050 IP address blocks: 82.25.41.0/24 maxlen: 24 82.25.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:fc:ae:cd:06:c5:c5:ed:b0:46:61:38:44:9c:99:32:67:02:ba:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 6 15:42:36 2025 GMT Not After : Nov 5 15:47:36 2026 GMT Subject: CN=CF5D0D6A54A126E7237B3F9FFDD81C5CE789B3E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5d:20:d0:10:e3:64:97:c7:4b:2b:c1:c4:16: c0:6a:7b:1f:71:b5:8e:b5:5c:60:c6:7c:61:8e:80: 48:11:55:fb:53:3b:06:b6:38:3a:08:38:70:9d:21: 13:56:5d:74:d5:7e:a6:f4:7d:fb:f6:8c:ce:78:7b: 59:11:61:e1:5a:dd:e9:b7:c5:dc:69:21:46:c1:c3: b5:b5:52:5c:59:b4:87:09:49:0c:89:17:05:09:59: b2:54:dc:94:69:bf:ca:a4:13:31:4a:51:30:a7:c0: 39:4c:d9:50:ad:aa:39:26:2f:ff:26:b2:5c:b0:b9: 6d:02:c4:64:75:1b:10:9f:c3:35:9b:90:cd:7d:47: f2:ca:3e:10:5e:31:08:93:02:dd:3b:1f:54:db:37: 9c:ea:58:ba:6c:7e:89:8f:37:eb:97:ab:c8:2f:cc: a4:28:67:d1:af:16:76:57:8f:d0:56:9e:52:8c:c9: 0b:98:87:e1:36:53:e0:16:38:50:c8:8a:54:30:ad: 87:65:2d:5e:fc:b7:ef:61:4f:38:03:9c:13:63:06: a9:e2:69:35:0e:7c:b7:06:ed:d5:58:82:f6:a8:57: ad:6f:8a:fc:86:5b:02:66:7a:fd:a3:a1:e0:d6:10: b9:81:95:05:c8:74:64:66:52:6b:e6:93:d4:f4:8a: 16:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5D:0D:6A:54:A1:26:E7:23:7B:3F:9F:FD:D8:1C:5C:E7:89:B3:E7 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216050.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.25.41.0/24 82.25.59.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:bf:21:f4:e2:6e:6b:a0:18:4f:1a:e8:f6:d1:20:23:43:f5: eb:0e:a0:44:a9:ce:fe:35:4a:72:e1:52:91:40:b7:2d:42:4b: 7b:63:69:96:12:05:e6:3a:ce:c3:67:f9:65:49:bd:2e:71:35: 37:65:0f:cd:99:8c:f6:c6:28:79:f4:9e:b8:f1:4f:e1:06:99: 22:87:06:75:fe:c2:fa:cf:ae:cc:70:4e:9b:d2:14:f5:49:a2: e8:66:20:37:21:b2:89:fd:47:05:82:c1:cf:8d:5b:e3:af:ee: 6a:06:ed:91:16:1c:81:08:90:61:c0:08:e6:51:e8:00:e4:03: 2b:9d:3b:01:58:74:1d:f4:0d:ae:9b:14:f0:97:1b:e3:40:bf: b1:99:9e:91:c5:75:0c:b1:27:c4:08:08:df:37:44:e5:61:15: d4:b4:b8:f8:2c:79:fd:c6:f9:69:35:f9:0a:6e:38:fe:2a:04: ec:ef:cf:04:cf:af:89:ec:3c:a3:b0:f4:3e:ec:e7:5c:3b:e4: 9e:e1:28:f8:92:f4:06:11:c2:00:d1:c9:f9:73:36:a2:e5:cf: 22:79:93:53:44:4a:ad:e3:66:a6:33:58:d8:11:fe:66:31:f3: 47:0a:3f:43:83:3c:81:df:df:2e:e7:0e:2e:27:3e:48:e9:b6: fa:c9:9f:a8 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUHPyuzQbFxe2wRmE4RJyZMmcCuvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMDYxNTQyMzZaFw0yNjExMDUxNTQ3MzZaMDMxMTAvBgNV BAMTKENGNUQwRDZBNTRBMTI2RTcyMzdCM0Y5RkZERDgxQzVDRTc4OUIzRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XSDQEONkl8dLK8HEFsBqex9x tY61XGDGfGGOgEgRVftTOwa2ODoIOHCdIRNWXXTVfqb0ffv2jM54e1kRYeFa3em3 xdxpIUbBw7W1UlxZtIcJSQyJFwUJWbJU3JRpv8qkEzFKUTCnwDlM2VCtqjkmL/8m slywuW0CxGR1GxCfwzWbkM19R/LKPhBeMQiTAt07H1TbN5zqWLpsfomPN+uXq8gv zKQoZ9GvFnZXj9BWnlKMyQuYh+E2U+AWOFDIilQwrYdlLV78t+9hTzgDnBNjBqni aTUOfLcG7dVYgvaoV61vivyGWwJmev2joeDWELmBlQXIdGRmUmvmk9T0ihYBAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUz10NalShJucjez+f/dgcXOeJs+cwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE2MDUwLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUhkp AwQAUhk7MA0GCSqGSIb3DQEBCwUAA4IBAQBMvyH04m5roBhPGuj20SAjQ/XrDqBE qc7+NUpy4VKRQLctQkt7Y2mWEgXmOs7DZ/llSb0ucTU3ZQ/NmYz2xih59J648U/h BpkihwZ1/sL6z67McE6b0hT1SaLoZiA3IbKJ/UcFgsHPjVvjr+5qBu2RFhyBCJBh wAjmUegA5AMrnTsBWHQd9A2umxTwlxvjQL+xmZ6RxXUMsSfECAjfN0TlYRXUtLj4 LHn9xvlpNfkKbjj+KgTs788Ez6+J7DyjsPQ+7OdcO+Se4Sj4kvQGEcIA0cn5czai 5c8ieZNTREqt42amM1jYEf5mMfNHCj9DgzyB398u5w4uJz5I6bb6yZ+o -----END CERTIFICATE-----Generated at Thu Dec 4 05:59:19 2025 by rpki-client