This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29066.roa File: AS29066.roa (raw, json) Hash identifier: 55rsUdZNR9/7nGG6WJJpD8U4AJRof/KXhP3ddMdbtA8= Subject key identifier: 70:0B:87:37:F6:10:DC:41:A2:E3:74:5E:44:B8:5C:C6:82:85:B3:95 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 140388AEC3F23F0E89B1C2C7EC94579146E28E7F Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29066.roa Signing time: Tue 13 Jan 2026 22:17:13 +0000 ROA not before: Tue 13 Jan 2026 22:12:13 +0000 ROA not after: Tue 12 Jan 2027 22:17:13 +0000 asID: 29066 IP address blocks: 82.39.93.0/24 maxlen: 24 82.39.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:03:88:ae:c3:f2:3f:0e:89:b1:c2:c7:ec:94:57:91:46:e2:8e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 13 22:12:13 2026 GMT Not After : Jan 12 22:17:13 2027 GMT Subject: CN=700B8737F610DC41A2E3745E44B85CC68285B395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ce:e0:e8:47:2c:da:01:99:45:05:1c:0a:bb: 41:09:26:72:72:89:af:2c:77:d5:18:98:78:4c:ca: 01:da:22:cd:f0:ba:9f:29:cb:56:f9:1a:89:e3:88: 54:ad:f4:e0:b6:a9:32:78:5b:6c:bc:7b:c2:fa:58: fb:3e:96:6c:2e:34:7e:4a:37:3b:d4:94:9a:ea:2f: 04:81:47:55:cf:2e:72:01:f3:18:dd:68:01:a8:23: d4:98:34:84:27:23:31:e4:02:a8:be:47:43:64:68: 42:41:41:30:61:d4:90:fb:b5:0f:9e:ba:36:5d:53: 64:57:7c:51:05:8a:7d:68:19:5b:a3:6f:e3:88:cf: bb:69:c8:26:0a:8d:ea:53:e3:d2:ec:a2:56:b4:24: c9:0c:48:02:1f:57:cf:15:ca:48:81:2f:65:97:6a: 0f:cd:fa:92:36:1c:10:9e:44:c9:b1:16:bb:4b:5a: 34:f0:54:b3:9c:58:10:9a:5a:f2:4f:1f:8b:62:b4: 8c:48:2a:fc:e3:7b:e4:40:37:4c:b1:48:07:cd:3f: bb:39:3a:44:25:91:a9:f4:75:56:85:6d:4a:1c:7d: 8a:50:fd:7c:7b:ce:b7:1b:09:c1:f4:a0:96:53:04: ea:ad:af:b8:92:6e:4f:43:11:ec:65:45:8a:70:fb: 95:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0B:87:37:F6:10:DC:41:A2:E3:74:5E:44:B8:5C:C6:82:85:B3:95 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS29066.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.39.93.0/24 82.39.206.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:02:32:b3:2e:77:7a:89:a6:37:e5:d9:34:6d:1a:e5:3b:42: 04:d8:0d:92:37:29:52:cb:84:54:60:05:8e:0c:da:4a:60:b8: a8:2f:41:cc:c1:e0:08:bf:78:c2:64:f0:bb:d9:df:2f:1e:81: 6f:c5:bd:34:cb:33:5d:2f:62:41:11:b4:2d:3a:b2:e4:6f:ba: 8e:7e:f0:a6:78:9c:a8:8d:92:f0:db:a7:78:c0:c6:48:ef:ed: e3:f5:db:79:a9:77:99:2c:c1:b8:6f:5c:df:71:23:5b:e4:71: 64:b9:4f:0e:ee:7b:dd:c8:ba:4e:f4:75:b1:91:48:f9:54:fe: 03:8a:b5:c8:27:33:9a:f7:f7:db:61:8b:46:35:83:ef:7b:46: 83:ed:61:ad:5c:f5:12:39:f8:34:43:21:69:42:96:ff:fe:db: 44:4b:7f:55:11:43:a0:59:e1:18:77:4e:fb:f6:4f:bd:20:e5: 17:31:ce:2b:a9:b3:40:81:2a:fe:3c:60:aa:ba:f3:31:4d:21: 2b:52:57:a4:46:6c:20:d3:c2:2f:3a:25:65:3b:2e:22:86:0f: 56:9d:ac:24:27:2a:b9:0a:7d:75:53:df:63:36:1c:28:c7:fa: 57:c3:0e:63:27:18:bd:7a:e9:18:01:d5:c0:4c:c7:b8:57:96: 9f:6d:0f:36 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUFAOIrsPyPw6JscLH7JRXkUbijn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMTMyMjEyMTNaFw0yNzAxMTIyMjE3MTNaMDMxMTAvBgNV BAMTKDcwMEI4NzM3RjYxMERDNDFBMkUzNzQ1RTQ0Qjg1Q0M2ODI4NUIzOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRzuDoRyzaAZlFBRwKu0EJJnJy ia8sd9UYmHhMygHaIs3wup8py1b5GonjiFSt9OC2qTJ4W2y8e8L6WPs+lmwuNH5K NzvUlJrqLwSBR1XPLnIB8xjdaAGoI9SYNIQnIzHkAqi+R0NkaEJBQTBh1JD7tQ+e ujZdU2RXfFEFin1oGVujb+OIz7tpyCYKjepT49Lsola0JMkMSAIfV88VykiBL2WX ag/N+pI2HBCeRMmxFrtLWjTwVLOcWBCaWvJPH4titIxIKvzje+RAN0yxSAfNP7s5 OkQlkan0dVaFbUocfYpQ/Xx7zrcbCcH0oJZTBOqtr7iSbk9DEexlRYpw+5UdAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUcAuHN/YQ3EGi43ReRLhcxoKFs5UwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMjkwNjYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABSJ10D BAFSJ84wDQYJKoZIhvcNAQELBQADggEBAJ0CMrMud3qJpjfl2TRtGuU7QgTYDZI3 KVLLhFRgBY4M2kpguKgvQczB4Ai/eMJk8LvZ3y8egW/FvTTLM10vYkERtC06suRv uo5+8KZ4nKiNkvDbp3jAxkjv7eP123mpd5kswbhvXN9xI1vkcWS5Tw7ue93Iuk70 dbGRSPlU/gOKtcgnM5r399thi0Y1g+97RoPtYa1c9RI5+DRDIWlClv/+20RLf1UR Q6BZ4Rh3Tvv2T70g5Rcxziups0CBKv48YKq68zFNIStSV6RGbCDTwi86JWU7LiKG D1adrCQnKrkKfXVT32M2HCjH+lfDDmMnGL166RgB1cBMx7hXlp9tDzY= -----END CERTIFICATE-----Generated at Sun Jan 18 08:56:41 2026 by rpki-client