This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216211.roa File: AS216211.roa (raw, json) Hash identifier: iahezSVJCYkbBJEf65w+9+yKjAmKPpLNWDeWe8AubWc= Subject key identifier: 39:83:09:40:CB:E4:D6:E8:9C:C8:F5:3F:96:FA:E5:A6:E6:25:B1:3A Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 700E4CC8C33F55EEAD62D5E5B040E99CE7DC13F7 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216211.roa Signing time: Thu 11 Dec 2025 12:37:02 +0000 ROA not before: Thu 11 Dec 2025 12:32:02 +0000 ROA not after: Thu 10 Dec 2026 12:37:02 +0000 asID: 216211 IP address blocks: 82.40.40.0/21 maxlen: 24 2a13:9500:116::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:0e:4c:c8:c3:3f:55:ee:ad:62:d5:e5:b0:40:e9:9c:e7:dc:13:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 11 12:32:02 2025 GMT Not After : Dec 10 12:37:02 2026 GMT Subject: CN=39830940CBE4D6E89CC8F53F96FAE5A6E625B13A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8d:d1:4d:e9:c1:98:44:6d:6a:38:96:67:8b: 82:d3:b5:e5:3e:5a:b4:cc:41:33:50:a1:29:35:89: 0b:cf:5b:f2:15:bb:8c:48:ea:c2:33:a9:0f:4d:de: 43:0d:07:3a:75:ea:d8:5b:ac:35:eb:00:ff:f0:44: 64:0f:64:37:6d:3c:53:12:25:14:57:b3:a1:7a:3b: 60:fc:c7:2e:c2:08:46:62:e9:3a:f9:e7:72:ce:94: 7c:c2:d1:a4:85:80:83:a8:90:3a:6a:46:2c:1d:86: 0a:ca:7c:b7:59:e6:60:15:0b:15:56:55:f0:f3:71: b7:f3:2b:5f:7f:02:ca:d7:23:89:a8:e5:79:7e:a8: f4:4b:96:45:e1:c4:00:df:03:b6:ae:60:12:b1:2d: a5:e9:9a:df:a3:ef:20:43:0f:a1:b5:6a:2a:5c:fe: 6b:99:fa:c9:8e:d1:a7:42:f8:32:04:51:5f:cd:4b: 62:7f:e6:5d:bd:d6:7c:71:01:84:01:4e:1a:ab:c7: 34:1d:ef:27:27:49:1e:4d:c0:d0:d7:45:f1:11:1c: a6:58:b3:c4:92:87:21:e3:80:f4:8a:eb:b5:27:be: eb:eb:7a:3e:19:cc:cb:fd:4e:d2:51:37:ab:bd:e1: 3c:20:03:47:83:93:52:1e:41:5f:7a:b6:ff:4c:b2: 26:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:83:09:40:CB:E4:D6:E8:9C:C8:F5:3F:96:FA:E5:A6:E6:25:B1:3A X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS216211.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.40.40.0/21 IPv6: 2a13:9500:116::/48 Signature Algorithm: sha256WithRSAEncryption 00:0b:0d:9a:f5:c3:75:93:03:19:96:2a:87:f0:df:15:1f:7c: 92:23:3b:e3:eb:be:4c:c2:da:f0:e6:01:a1:7b:f3:87:52:b3: 4b:4d:a6:23:9d:32:31:41:64:37:73:03:0d:c2:aa:bb:96:8c: 4d:63:ce:bc:7b:f3:4d:fc:9a:76:a1:ee:c4:c7:b4:d0:db:cd: 06:b9:4f:f2:fa:73:d8:61:64:16:40:5c:70:88:61:6a:de:89: df:43:5c:49:b4:6d:2b:bb:56:6e:1f:b1:c8:6e:ec:7c:84:fb: 15:cc:a6:7a:55:9d:e6:ea:a2:ad:c8:88:11:70:05:59:80:37: b5:31:57:23:9f:cb:c6:ad:3d:4d:2c:2a:ae:ed:b9:34:e7:4d: d6:ad:13:00:94:7e:a5:de:24:55:7d:57:10:b2:f2:62:40:37: 98:9b:aa:ea:96:3d:fe:03:7b:c5:44:26:5a:b7:68:45:e4:4c: 46:e7:4f:44:18:06:f1:f7:81:d0:aa:d3:02:9a:17:d9:6a:84: 1a:e7:8b:74:c8:e0:f9:fb:81:d7:d9:0e:69:9f:21:0c:ef:ce: 70:2a:52:30:d3:b5:d7:db:f2:9c:05:db:99:ec:21:89:58:70: b5:b2:de:71:90:c9:5d:75:68:5e:67:f3:97:60:96:4a:0a:87: 67:b6:67:60 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgIUcA5MyMM/Ve6tYtXlsEDpnOfcE/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMTExMjMyMDJaFw0yNjEyMTAxMjM3MDJaMDMxMTAvBgNV BAMTKDM5ODMwOTQwQ0JFNEQ2RTg5Q0M4RjUzRjk2RkFFNUE2RTYyNUIxM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUjdFN6cGYRG1qOJZni4LTteU+ WrTMQTNQoSk1iQvPW/IVu4xI6sIzqQ9N3kMNBzp16thbrDXrAP/wRGQPZDdtPFMS JRRXs6F6O2D8xy7CCEZi6Tr553LOlHzC0aSFgIOokDpqRiwdhgrKfLdZ5mAVCxVW VfDzcbfzK19/AsrXI4mo5Xl+qPRLlkXhxADfA7auYBKxLaXpmt+j7yBDD6G1aipc /muZ+smO0adC+DIEUV/NS2J/5l291nxxAYQBThqrxzQd7ycnSR5NwNDXRfERHKZY s8SShyHjgPSK67Unvuvrej4ZzMv9TtJRN6u94TwgA0eDk1IeQV96tv9MsiYvAgMB AAGjggIbMIICFzAdBgNVHQ4EFgQUOYMJQMvk1uicyPU/lvrlpuYlsTowHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjE2MjExLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDUigo MA8EAgACMAkDBwAqE5UAARYwDQYJKoZIhvcNAQELBQADggEBAAALDZr1w3WTAxmW Kofw3xUffJIjO+PrvkzC2vDmAaF784dSs0tNpiOdMjFBZDdzAw3CqruWjE1jzrx7 8038mnah7sTHtNDbzQa5T/L6c9hhZBZAXHCIYWreid9DXEm0bSu7Vm4fschu7HyE +xXMpnpVnebqoq3IiBFwBVmAN7UxVyOfy8atPU0sKq7tuTTnTdatEwCUfqXeJFV9 VxCy8mJAN5ibquqWPf4De8VEJlq3aEXkTEbnT0QYBvH3gdCq0wKaF9lqhBrni3TI 4Pn7gdfZDmmfIQzvznAqUjDTtdfb8pwF25nsIYlYcLWy3nGQyV11aF5n85dglkoK h2e2Z2A= -----END CERTIFICATE-----Generated at Fri Dec 12 07:58:53 2025 by rpki-client