This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397373.roa File: AS397373.roa (raw, json) Hash identifier: EZRPC/UvK3ujD2/VFV2wLJy97Teqa7LvfHcjFbZUT38= Subject key identifier: A0:40:F2:D5:E1:8D:59:EE:B8:A3:94:C7:1D:15:DB:F3:E0:EF:09:BD Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 5322655EB60C3C170CBB2ADBF3CA4469DFB53D54 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397373.roa Signing time: Thu 25 Dec 2025 17:55:32 +0000 ROA not before: Thu 25 Dec 2025 17:50:32 +0000 ROA not after: Thu 24 Dec 2026 17:55:32 +0000 asID: 397373 IP address blocks: 82.21.190.0/24 maxlen: 24 82.23.192.0/24 maxlen: 24 82.25.180.0/24 maxlen: 24 82.27.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:22:65:5e:b6:0c:3c:17:0c:bb:2a:db:f3:ca:44:69:df:b5:3d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 25 17:50:32 2025 GMT Not After : Dec 24 17:55:32 2026 GMT Subject: CN=A040F2D5E18D59EEB8A394C71D15DBF3E0EF09BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2c:dd:49:ac:f5:29:b0:51:8f:a4:ca:72:8c: 1d:07:02:5e:bf:43:40:f9:ca:cd:be:b9:ea:52:a7: d2:63:d4:e6:fa:09:45:36:cc:f2:c8:20:5a:e2:59: 85:a3:05:69:6b:83:06:8e:fd:af:7c:08:73:a9:08: 92:cc:75:4e:39:c5:83:19:65:75:62:2f:77:f5:3f: f3:2a:bd:09:ab:aa:cd:89:67:fc:4f:18:6f:75:7b: 4a:03:57:5f:0a:37:2a:86:a3:3e:e2:59:5e:d5:cc: 6d:1f:c2:88:37:78:81:33:1a:0e:03:64:e0:fb:51: 06:c8:11:98:9a:d7:3f:74:cb:0d:83:5f:90:1c:b0: 07:07:97:27:ea:b5:a3:be:26:18:5f:23:35:11:dd: 32:d8:49:28:e8:30:01:cd:2d:c2:7b:80:82:d1:5b: d0:5d:37:7d:93:82:fc:64:20:a2:18:f5:b7:7f:7d: 0e:a1:30:72:2b:a3:16:b4:0d:54:07:9a:5c:0c:c8: 05:ea:1c:11:c4:b4:13:89:fb:45:fc:b8:d1:46:ab: 11:38:c9:28:fe:95:d7:32:f8:8a:24:c6:eb:10:8c: b5:7b:b9:7c:bc:91:e8:85:d2:23:cf:b7:a5:d4:cc: ed:73:3e:04:13:c9:54:63:79:f9:89:5f:ab:87:57: 73:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:40:F2:D5:E1:8D:59:EE:B8:A3:94:C7:1D:15:DB:F3:E0:EF:09:BD X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS397373.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.190.0/24 82.23.192.0/24 82.25.180.0/24 82.27.201.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:d3:14:19:aa:2a:61:89:9e:5e:97:a6:0c:6c:3e:50:36:f7: 5a:df:60:78:e6:74:48:85:7b:c0:7d:77:da:43:75:90:8a:10: 19:72:ce:45:70:1f:66:5d:2c:b9:63:78:be:a1:02:bb:df:6e: 4c:9c:97:b6:75:9c:1c:d4:d5:8e:a2:1e:c2:b9:88:98:3a:0f: 00:7f:2f:9e:a2:cc:7b:5e:18:10:84:e0:bf:83:e1:c3:5f:4f: 53:a1:cf:9b:59:79:f3:f2:89:bc:36:f0:18:75:99:d2:a9:7f: da:d5:70:99:fb:68:5c:b1:fc:1a:f7:39:4b:5b:c6:b3:05:54: 6c:1f:59:6b:f4:8a:d8:32:eb:33:4e:3d:e4:d5:d4:4e:b4:cc: 66:55:83:8c:8f:37:b3:07:b0:28:12:c7:97:31:94:df:99:e7: 41:5e:d2:a7:2e:50:fb:a1:1a:da:90:c2:a9:05:7f:12:4c:98: e4:d8:5d:58:d9:3d:c2:ee:a0:63:92:9b:f1:59:ea:dd:c0:4c: 89:84:0a:53:4e:39:a4:8e:7d:1c:78:58:52:6f:9a:e9:05:d6: 7d:78:95:d4:d0:50:4b:42:50:cc:14:c5:81:c8:02:b3:7f:b8: 6d:12:1d:f1:38:4f:2e:26:77:5c:64:07:78:4e:2f:e5:38:1b: 1a:13:89:3b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUUyJlXrYMPBcMuyrb88pEad+1PVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMjUxNzUwMzJaFw0yNjEyMjQxNzU1MzJaMDMxMTAvBgNV BAMTKEEwNDBGMkQ1RTE4RDU5RUVCOEEzOTRDNzFEMTVEQkYzRTBFRjA5QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBLN1JrPUpsFGPpMpyjB0HAl6/ Q0D5ys2+uepSp9Jj1Ob6CUU2zPLIIFriWYWjBWlrgwaO/a98CHOpCJLMdU45xYMZ ZXViL3f1P/MqvQmrqs2JZ/xPGG91e0oDV18KNyqGoz7iWV7VzG0fwog3eIEzGg4D ZOD7UQbIEZia1z90yw2DX5AcsAcHlyfqtaO+JhhfIzUR3TLYSSjoMAHNLcJ7gILR W9BdN32TgvxkIKIY9bd/fQ6hMHIroxa0DVQHmlwMyAXqHBHEtBOJ+0X8uNFGqxE4 ySj+ldcy+IokxusQjLV7uXy8keiF0iPPt6XUzO1zPgQTyVRjefmJX6uHV3OlAgMB AAGjggIcMIICGDAdBgNVHQ4EFgQUoEDy1eGNWe64o5THHRXb8+DvCb0wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMzk3MzczLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUhW+ AwQAUhfAAwQAUhm0AwQAUhvJMA0GCSqGSIb3DQEBCwUAA4IBAQA90xQZqiphiZ5e l6YMbD5QNvda32B45nRIhXvAfXfaQ3WQihAZcs5FcB9mXSy5Y3i+oQK7325MnJe2 dZwc1NWOoh7CuYiYOg8Afy+eosx7XhgQhOC/g+HDX09Toc+bWXnz8om8NvAYdZnS qX/a1XCZ+2hcsfwa9zlLW8azBVRsH1lr9IrYMuszTj3k1dROtMxmVYOMjzezB7Ao EseXMZTfmedBXtKnLlD7oRrakMKpBX8STJjk2F1Y2T3C7qBjkpvxWerdwEyJhApT Tjmkjn0ceFhSb5rpBdZ9eJXU0FBLQlDMFMWByAKzf7htEh3xOE8uJndcZAd4Ti/l OBsaE4k7 -----END CERTIFICATE-----Generated at Sun Jan 18 08:56:47 2026 by rpki-client