This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395839.roa File: AS395839.roa (raw, json) Hash identifier: oNxlVjoNlbqWGfbdkoy5YX5YLgkDzdxTeRIB7UFAdTk= Subject key identifier: D0:35:20:FD:FA:D5:2A:9E:F8:E2:2B:4C:88:05:79:DC:58:28:0B:BD Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 6586552B4E51289BAF57F6190406CA6F6A0CB4B6 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395839.roa Signing time: Fri 09 Jan 2026 12:44:47 +0000 ROA not before: Fri 09 Jan 2026 12:39:47 +0000 ROA not after: Fri 08 Jan 2027 12:44:47 +0000 asID: 395839 IP address blocks: 82.21.72.0/24 maxlen: 24 82.21.92.0/24 maxlen: 24 82.26.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:86:55:2b:4e:51:28:9b:af:57:f6:19:04:06:ca:6f:6a:0c:b4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 9 12:39:47 2026 GMT Not After : Jan 8 12:44:47 2027 GMT Subject: CN=D03520FDFAD52A9EF8E22B4C880579DC58280BBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bc:d9:e4:e4:88:aa:22:41:d1:59:c6:0a:2c: 79:e1:4b:b6:8b:8d:91:b1:26:65:db:32:42:28:b0: 88:10:f6:fa:57:ce:2b:d1:27:3e:54:58:3c:95:e4: 29:81:0a:ff:4c:5f:22:ab:8e:8c:8f:bd:7b:0a:cf: 4e:03:22:d8:8d:8e:23:da:86:a2:fd:17:a6:c4:3e: 7e:40:e8:7c:92:f9:9e:6b:bc:6a:c1:d0:91:56:86: 90:d2:67:59:da:97:51:7e:66:d2:23:99:9d:ad:15: f3:af:ce:20:61:cb:f7:98:32:bd:89:30:2c:35:cd: ad:af:84:19:6c:a8:75:94:2a:5f:a6:10:7c:f8:33: 34:01:f5:61:b2:39:cd:66:b2:67:56:12:d0:b9:cf: 97:66:f1:90:cf:27:72:81:c1:86:2d:f7:7e:6e:51: 6b:c2:87:f2:88:53:10:ad:05:9b:db:04:f0:10:d3: 46:1c:6a:1d:77:39:3e:0b:17:ce:04:5c:76:67:44: 65:8f:81:83:21:79:0d:03:38:2b:ad:13:66:5f:17: 34:43:37:0c:74:8f:b4:f5:c3:45:09:23:fd:47:8e: 86:88:57:e8:37:35:22:0d:f2:eb:b2:75:67:13:de: 59:b0:87:8f:b1:86:07:36:8d:ca:77:3a:97:3d:f2: 64:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:35:20:FD:FA:D5:2A:9E:F8:E2:2B:4C:88:05:79:DC:58:28:0B:BD X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS395839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.72.0/24 82.21.92.0/24 82.26.93.0/24 Signature Algorithm: sha256WithRSAEncryption 60:91:b5:83:6d:b4:7d:2d:44:1f:cb:9a:d0:1f:80:3b:1b:c7: 37:cd:f7:f7:95:22:c7:92:07:27:ee:42:8a:49:e2:8c:e7:66: 59:6b:c4:03:e8:9c:ab:94:77:b6:1d:22:84:8b:80:1a:d1:93: 3e:bc:a3:5e:a7:fb:ec:89:d4:47:3b:3c:f2:16:79:56:2f:ee: 50:7e:e6:9b:86:b8:21:c8:f3:41:39:1b:9b:8b:7b:ca:7f:ed: 14:fa:89:07:d7:bf:be:7b:60:9c:55:b2:5e:c1:a3:fc:00:b1: 87:98:39:d1:89:a1:97:72:26:61:d5:f2:65:1a:95:3c:e3:a5: 53:47:68:54:e1:33:82:96:29:81:75:97:01:23:41:20:31:a6: be:bb:e5:cb:5c:d6:34:98:ff:9d:61:97:11:9f:13:51:39:32: 2c:bd:d3:7b:ff:9b:46:80:1a:a4:69:88:46:45:a0:0e:2f:3c: a3:8a:b1:47:80:26:f8:fc:fb:59:6f:25:a4:df:14:61:27:83: 00:3f:23:70:c9:af:d9:29:ca:b1:38:f1:85:93:f7:69:1b:83: c1:c4:e3:ee:da:48:d6:7b:4a:90:4d:5b:fd:6d:f2:04:d0:01: 1a:c0:85:b0:8d:52:ea:12:64:d2:ab:a3:5b:44:e1:f3:a0:d9: bf:cc:fc:6f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUZYZVK05RKJuvV/YZBAbKb2oMtLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMDkxMjM5NDdaFw0yNzAxMDgxMjQ0NDdaMDMxMTAvBgNV BAMTKEQwMzUyMEZERkFENTJBOUVGOEUyMkI0Qzg4MDU3OURDNTgyODBCQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfvNnk5IiqIkHRWcYKLHnhS7aL jZGxJmXbMkIosIgQ9vpXzivRJz5UWDyV5CmBCv9MXyKrjoyPvXsKz04DItiNjiPa hqL9F6bEPn5A6HyS+Z5rvGrB0JFWhpDSZ1nal1F+ZtIjmZ2tFfOvziBhy/eYMr2J MCw1za2vhBlsqHWUKl+mEHz4MzQB9WGyOc1msmdWEtC5z5dm8ZDPJ3KBwYYt935u UWvCh/KIUxCtBZvbBPAQ00Ycah13OT4LF84EXHZnRGWPgYMheQ0DOCutE2ZfFzRD Nwx0j7T1w0UJI/1HjoaIV+g3NSIN8uuydWcT3lmwh4+xhgc2jcp3Opc98mSjAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQU0DUg/frVKp744itMiAV53FgoC70wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzk1ODM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUhVI AwQAUhVcAwQAUhpdMA0GCSqGSIb3DQEBCwUAA4IBAQBgkbWDbbR9LUQfy5rQH4A7 G8c3zff3lSLHkgcn7kKKSeKM52ZZa8QD6JyrlHe2HSKEi4Aa0ZM+vKNep/vsidRH OzzyFnlWL+5QfuabhrghyPNBORubi3vKf+0U+okH17++e2CcVbJewaP8ALGHmDnR iaGXciZh1fJlGpU846VTR2hU4TOClimBdZcBI0EgMaa+u+XLXNY0mP+dYZcRnxNR OTIsvdN7/5tGgBqkaYhGRaAOLzyjirFHgCb4/PtZbyWk3xRhJ4MAPyNwya/ZKcqx OPGFk/dpG4PBxOPu2kjWe0qQTVv9bfIE0AEawIWwjVLqEmTSq6NbROHzoNm/zPxv -----END CERTIFICATE-----Generated at Sun Jan 18 08:56:59 2026 by rpki-client