This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401322.roa File: AS401322.roa (raw, json) Hash identifier: 3PDn83KhYXUD2TtB1wFEMnOnDdCz/F8kFNPhDhthl2Y= Subject key identifier: 3D:E2:0A:0E:32:30:9F:19:CE:D2:26:51:49:A1:B6:CA:B4:6F:42:F7 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 1D4AA900DF3AB20628FBA6F7F1F0B7C0A14CB27F Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401322.roa Signing time: Tue 13 Jan 2026 14:00:36 +0000 ROA not before: Tue 13 Jan 2026 13:55:36 +0000 ROA not after: Tue 12 Jan 2027 14:00:36 +0000 asID: 401322 IP address blocks: 82.21.84.0/24 maxlen: 24 82.23.248.0/24 maxlen: 24 82.24.16.0/24 maxlen: 24 82.27.117.0/24 maxlen: 24 82.38.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:4a:a9:00:df:3a:b2:06:28:fb:a6:f7:f1:f0:b7:c0:a1:4c:b2:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 13 13:55:36 2026 GMT Not After : Jan 12 14:00:36 2027 GMT Subject: CN=3DE20A0E32309F19CED2265149A1B6CAB46F42F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6e:a4:22:66:80:44:5b:17:c3:fa:5c:13:b9: 9b:39:0d:4e:19:59:28:54:08:85:ca:95:3f:28:f1: f1:27:2e:b0:cc:1c:4e:71:cb:4b:31:12:c9:f5:2f: 2d:0d:96:1c:a1:91:1f:4a:4e:c1:d3:e6:1f:05:95: 79:fd:ad:c5:6c:c4:63:fc:f6:26:4d:eb:66:79:03: c6:a6:90:a0:a0:62:a7:44:1b:9e:50:a4:5a:50:4f: d8:da:88:38:8b:e8:1d:88:89:9a:19:39:0a:e6:28: 1e:02:1e:b2:f3:7c:47:7e:0f:ba:b0:a5:16:29:3c: c7:e8:0e:86:cc:8d:1d:b2:9d:7e:22:a7:e4:14:44: b5:94:47:bd:eb:8a:0b:75:6f:ff:b1:9e:31:1f:48: eb:98:6b:22:57:ae:6d:89:23:50:13:f9:88:50:a7: 7e:20:5b:93:bb:47:e2:30:18:2d:c5:e4:b3:0f:a3: d9:91:3f:ef:e9:a6:16:d8:52:62:a1:a3:63:19:73: 4c:58:ae:4f:b0:b7:4b:30:4c:b4:20:3a:af:c3:5d: a4:87:5e:48:5f:5b:06:04:19:34:41:4c:8f:7f:41: 3b:aa:b5:65:cc:41:d6:d0:61:e8:78:98:85:d0:d5: ea:1d:a4:d1:6f:be:42:d8:30:86:5b:b5:a0:38:7f: c1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E2:0A:0E:32:30:9F:19:CE:D2:26:51:49:A1:B6:CA:B4:6F:42:F7 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401322.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.84.0/24 82.23.248.0/24 82.24.16.0/24 82.27.117.0/24 82.38.44.0/24 Signature Algorithm: sha256WithRSAEncryption 72:27:ff:1a:37:39:e5:a8:08:41:53:83:4c:eb:e0:bc:2f:78: f2:24:3b:04:ba:8d:aa:ec:27:2c:e3:03:7f:3d:c8:12:a6:53: 28:a3:d2:cf:f2:e9:ca:bb:3c:06:c2:6e:e4:80:7a:29:24:2c: ac:f2:70:4b:1e:6b:18:43:b9:3f:98:5e:31:ce:22:e9:50:aa: 65:51:3e:80:a0:8c:4a:f7:c5:ca:83:9a:2b:02:f8:1b:d0:50: fc:df:18:95:ba:39:04:02:1a:52:0b:6b:2c:9b:7e:19:d7:92: 48:9b:ff:7a:cc:06:99:e9:25:a2:5a:b8:09:7d:fd:47:84:a6: 5e:10:be:dc:a5:ad:5a:dd:f2:0a:b9:95:9f:2a:6f:c0:8c:c1: 08:d8:5f:9d:f4:d0:e0:07:0f:41:fe:2d:12:86:cf:48:d6:05: 4e:cf:ba:83:3c:db:04:2a:c2:9e:86:5c:95:1d:40:b2:08:c9: 8c:a1:66:d6:90:2b:af:04:6e:b5:0a:a7:96:cf:48:03:90:60: 0d:ea:11:3b:eb:08:de:d2:cf:47:f6:b8:82:49:a0:07:75:6e: 42:fa:50:af:05:39:44:7d:77:6e:be:ba:c8:5b:ad:25:af:0e: 0f:e4:6d:09:0f:38:5c:c2:b9:2c:c0:52:c9:f3:aa:a5:76:f3: d3:9a:33:90 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUHUqpAN86sgYo+6b38fC3wKFMsn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMTMxMzU1MzZaFw0yNzAxMTIxNDAwMzZaMDMxMTAvBgNV BAMTKDNERTIwQTBFMzIzMDlGMTlDRUQyMjY1MTQ5QTFCNkNBQjQ2RjQyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbqQiZoBEWxfD+lwTuZs5DU4Z WShUCIXKlT8o8fEnLrDMHE5xy0sxEsn1Ly0NlhyhkR9KTsHT5h8FlXn9rcVsxGP8 9iZN62Z5A8amkKCgYqdEG55QpFpQT9jaiDiL6B2IiZoZOQrmKB4CHrLzfEd+D7qw pRYpPMfoDobMjR2ynX4ip+QURLWUR73rigt1b/+xnjEfSOuYayJXrm2JI1AT+YhQ p34gW5O7R+IwGC3F5LMPo9mRP+/pphbYUmKho2MZc0xYrk+wt0swTLQgOq/DXaSH XkhfWwYEGTRBTI9/QTuqtWXMQdbQYeh4mIXQ1eodpNFvvkLYMIZbtaA4f8ExAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUPeIKDjIwnxnO0iZRSaG2yrRvQvcwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAxMzIyLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUhVU AwQAUhf4AwQAUhgQAwQAUht1AwQAUiYsMA0GCSqGSIb3DQEBCwUAA4IBAQByJ/8a NznlqAhBU4NM6+C8L3jyJDsEuo2q7Ccs4wN/PcgSplMoo9LP8unKuzwGwm7kgHop JCys8nBLHmsYQ7k/mF4xziLpUKplUT6AoIxK98XKg5orAvgb0FD83xiVujkEAhpS C2ssm34Z15JIm/96zAaZ6SWiWrgJff1HhKZeEL7cpa1a3fIKuZWfKm/AjMEI2F+d 9NDgBw9B/i0Shs9I1gVOz7qDPNsEKsKehlyVHUCyCMmMoWbWkCuvBG61CqeWz0gD kGAN6hE76wje0s9H9riCSaAHdW5C+lCvBTlEfXduvrrIW60lrw4P5G0JDzhcwrks wFLJ86qldvPTmjOQ -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:18 2026 by rpki-client