This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30058.roa File: AS30058.roa (raw, json) Hash identifier: 77sUm421jiVH+Bgs7B/Ft02/EjUg9HNUo3FGAuV7FaA= Subject key identifier: 12:C0:4E:9E:50:8C:EC:65:BD:EB:5D:21:1B:3B:F1:9A:F8:B7:E3:F3 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 1B3EA910E9115060DE3E1C85C9FE1B4D82483FF6 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30058.roa Signing time: Tue 30 Dec 2025 09:05:32 +0000 ROA not before: Tue 30 Dec 2025 09:00:32 +0000 ROA not after: Tue 29 Dec 2026 09:05:32 +0000 asID: 30058 IP address blocks: 82.21.1.0/24 maxlen: 24 82.21.253.0/24 maxlen: 24 82.21.254.0/24 maxlen: 24 82.22.254.0/24 maxlen: 24 82.23.244.0/24 maxlen: 24 82.24.254.0/24 maxlen: 24 82.25.254.0/24 maxlen: 24 82.26.78.0/23 maxlen: 24 82.26.169.0/24 maxlen: 24 82.26.254.0/24 maxlen: 24 82.26.255.0/24 maxlen: 24 82.27.254.0/24 maxlen: 24 82.27.255.0/24 maxlen: 24 82.29.253.0/24 maxlen: 24 82.29.254.0/24 maxlen: 24 2a13:9500:10a::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:3e:a9:10:e9:11:50:60:de:3e:1c:85:c9:fe:1b:4d:82:48:3f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 30 09:00:32 2025 GMT Not After : Dec 29 09:05:32 2026 GMT Subject: CN=12C04E9E508CEC65BDEB5D211B3BF19AF8B7E3F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d1:9e:d9:a0:1b:92:3f:5a:89:83:2b:52:bc: c9:e4:52:45:ab:b6:0f:7b:ca:63:37:c7:b9:0d:3e: 7e:45:75:34:f5:6c:ef:f9:20:58:fe:ae:86:e2:03: e7:9b:f9:b7:fb:b4:16:13:b2:d3:df:4c:40:79:2f: 31:a9:c2:1f:c5:fc:f2:f5:55:07:7d:7c:1b:64:a9: 39:b7:03:4f:90:e1:50:ea:09:c7:44:b5:2f:51:26: 31:57:b2:af:04:92:bc:e9:36:48:1b:16:3a:51:e0: 75:74:ce:f2:e6:af:f7:e2:9b:63:25:bb:f2:4c:6d: ab:56:44:ca:a6:3f:6a:cf:80:3a:d2:26:4d:d5:40: d2:83:f3:68:81:60:ad:1d:82:64:07:cc:2b:e6:86: 6d:bb:40:76:ba:40:41:fb:db:a7:29:1a:cd:e8:4b: da:8a:72:3b:c6:6a:3d:fa:53:5a:fe:82:2e:39:32: 0a:de:0d:ca:58:e5:0c:4b:ba:12:4f:96:c1:13:80: d7:27:e0:d8:9e:94:06:62:f0:8e:0c:d7:49:f3:42: 56:02:cb:d4:84:99:41:cb:df:34:cb:2a:de:33:29: c9:e1:81:27:e3:b5:47:83:e1:bc:9f:4d:5f:e6:d4: 2a:cd:11:3e:49:fb:1b:8d:da:c2:89:48:1c:2b:79: a5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C0:4E:9E:50:8C:EC:65:BD:EB:5D:21:1B:3B:F1:9A:F8:B7:E3:F3 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30058.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.1.0/24 82.21.253.0-82.21.254.255 82.22.254.0/24 82.23.244.0/24 82.24.254.0/24 82.25.254.0/24 82.26.78.0/23 82.26.169.0/24 82.26.254.0/23 82.27.254.0/23 82.29.253.0-82.29.254.255 IPv6: 2a13:9500:10a::/48 Signature Algorithm: sha256WithRSAEncryption a8:07:16:50:da:e3:fa:75:2b:34:e4:1b:aa:d9:d2:99:66:47: 18:36:d9:12:b1:d4:1e:3c:0a:29:88:e8:2a:6e:64:f2:90:54: bf:31:b7:1d:40:dc:96:aa:07:ad:c2:10:06:fd:49:40:ea:bd: 05:65:29:b4:2a:1f:9f:1b:86:a7:1a:55:a2:45:55:da:f2:3a: 6e:3d:88:e3:d2:ac:9f:d9:dc:5e:7f:ce:c4:5b:12:09:44:35: be:f6:70:2c:1c:9c:05:3e:33:1e:a3:c7:2f:b4:da:9b:68:9e: f3:6d:13:1c:1f:ce:04:f1:a7:0b:6d:02:09:9c:2d:9b:92:d6: 65:10:95:02:aa:ee:2e:98:e0:d9:50:df:ce:2d:15:2b:74:57: 6a:e1:c9:7f:2a:14:30:de:69:67:5f:e5:09:d4:45:0c:3e:ba: 96:21:a2:92:52:fb:0d:9c:40:87:f5:ca:6a:99:8e:36:d4:91: 9f:13:a1:d5:fd:91:c8:dc:80:4e:0c:02:b6:5e:3a:d3:5b:07: 50:b8:a6:2e:65:32:f0:c2:41:32:ef:8b:09:c8:c5:dd:17:c2: 24:73:55:f8:b9:4d:99:10:01:3c:21:75:6d:4d:f1:42:a7:37: 02:60:ac:5b:77:51:3b:d3:28:21:13:6b:fd:90:a5:f5:d5:ae: 79:88:3a:89 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUGz6pEOkRUGDePhyFyf4bTYJIP/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMzAwOTAwMzJaFw0yNjEyMjkwOTA1MzJaMDMxMTAvBgNV BAMTKDEyQzA0RTlFNTA4Q0VDNjVCREVCNUQyMTFCM0JGMTlBRjhCN0UzRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC60Z7ZoBuSP1qJgytSvMnkUkWr tg97ymM3x7kNPn5FdTT1bO/5IFj+robiA+eb+bf7tBYTstPfTEB5LzGpwh/F/PL1 VQd9fBtkqTm3A0+Q4VDqCcdEtS9RJjFXsq8EkrzpNkgbFjpR4HV0zvLmr/fim2Ml u/JMbatWRMqmP2rPgDrSJk3VQNKD82iBYK0dgmQHzCvmhm27QHa6QEH726cpGs3o S9qKcjvGaj36U1r+gi45MgreDcpY5QxLuhJPlsETgNcn4NielAZi8I4M10nzQlYC y9SEmUHL3zTLKt4zKcnhgSfjtUeD4byfTV/m1CrNET5J+xuN2sKJSBwreaUVAgMB AAGjggJmMIICYjAdBgNVHQ4EFgQUEsBOnlCM7GW9610hGzvxmvi34/MwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzAwNTgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwfAYIKwYBBQUHAQcBAf8EbTBrMFgEAgABMFIDBABSFQEw DAMEAFIV/QMEAFIV/gMEAFIW/gMEAFIX9AMEAFIY/gMEAFIZ/gMEAVIaTgMEAFIa qQMEAVIa/gMEAVIb/jAMAwQAUh39AwQAUh3+MA8EAgACMAkDBwAqE5UAAQowDQYJ KoZIhvcNAQELBQADggEBAKgHFlDa4/p1KzTkG6rZ0plmRxg22RKx1B48CimI6Cpu ZPKQVL8xtx1A3JaqB63CEAb9SUDqvQVlKbQqH58bhqcaVaJFVdryOm49iOPSrJ/Z 3F5/zsRbEglENb72cCwcnAU+Mx6jxy+02ptonvNtExwfzgTxpwttAgmcLZuS1mUQ lQKq7i6Y4NlQ384tFSt0V2rhyX8qFDDeaWdf5QnURQw+upYhopJS+w2cQIf1ymqZ jjbUkZ8TodX9kcjcgE4MArZeOtNbB1C4pi5lMvDCQTLviwnIxd0XwiRzVfi5TZkQ ATwhdW1N8UKnNwJgrFt3UTvTKCETa/2QpfXVrnmIOok= -----END CERTIFICATE-----Generated at Sun Jan 18 08:56:45 2026 by rpki-client