This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401418.roa File: AS401418.roa (raw, json) Hash identifier: 7S6ZpDmVABEDwGvR8N5sS1Qj9hII+UzjTPTbvfITYT0= Subject key identifier: 95:E7:A4:F0:AB:20:CB:69:7C:A5:1A:C3:2C:98:3F:5E:FD:B3:7C:87 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 74A13568DD74EB8F2EE7AA351A4DA97A62ACDAC0 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401418.roa Signing time: Wed 31 Dec 2025 05:55:33 +0000 ROA not before: Wed 31 Dec 2025 05:50:33 +0000 ROA not after: Wed 30 Dec 2026 05:55:33 +0000 asID: 401418 IP address blocks: 82.21.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a1:35:68:dd:74:eb:8f:2e:e7:aa:35:1a:4d:a9:7a:62:ac:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 31 05:50:33 2025 GMT Not After : Dec 30 05:55:33 2026 GMT Subject: CN=95E7A4F0AB20CB697CA51AC32C983F5EFDB37C87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a7:87:cc:c2:0a:c6:69:f6:5a:a6:bf:ea:fb: 7c:39:a8:35:e1:94:79:83:56:4f:bc:f5:da:36:09: af:96:ba:4a:71:14:69:20:9b:0f:6b:bc:95:40:48: 28:52:25:57:dc:ad:e6:ee:8f:09:50:34:c2:36:59: b3:54:77:63:14:02:b1:c3:0c:4f:d1:c2:2b:f6:65: 61:ab:35:12:7a:ef:65:16:47:87:43:ac:05:3a:66: 88:e3:31:09:98:ec:c1:f7:27:40:28:b8:01:5e:c4: 95:9f:ce:b6:24:1d:ca:2c:63:b9:27:42:00:ee:7b: 01:65:45:3f:6a:3b:de:2b:5d:13:40:bd:1f:b8:cc: b5:0c:cd:31:40:ed:42:a6:e8:d1:b8:ac:1f:60:47: 5a:6a:75:bf:6f:f1:c6:4b:11:3c:ae:fe:b4:84:97: a7:82:49:98:4a:07:b4:38:9c:7b:45:a9:57:1c:75: 0c:bb:e7:92:8b:d3:26:d7:94:43:05:2a:d0:10:3e: a7:8e:28:d9:ea:8b:84:eb:9a:b2:12:bb:ba:71:09: 34:cc:23:89:d2:c7:f6:17:3c:2a:35:17:3c:fa:1f: 98:06:34:6c:b0:4c:59:71:26:49:51:c3:e7:f4:dd: 59:7c:73:37:98:d0:a0:19:99:ee:e3:2f:28:ff:2b: 04:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E7:A4:F0:AB:20:CB:69:7C:A5:1A:C3:2C:98:3F:5E:FD:B3:7C:87 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401418.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.20.0/23 Signature Algorithm: sha256WithRSAEncryption 46:b1:a0:73:c2:ba:d6:aa:33:4b:40:68:27:e1:77:d9:43:dc: 93:10:c0:24:c3:a2:72:22:0e:a9:1e:5c:1d:d9:bf:54:3d:42: 96:01:a0:56:e4:72:46:3c:4f:9f:3b:60:56:2b:c0:b9:16:cb: 43:43:57:c1:7d:4d:70:c5:71:b5:a3:9d:e7:30:11:9e:1d:af: b3:e2:b4:75:69:d5:b9:e4:99:5b:7e:07:50:ae:d1:21:e3:d0: 6e:ab:11:d9:78:9d:1d:c2:77:d9:4d:45:d3:e3:b8:27:cb:57: e8:08:ba:fa:95:3f:5c:1b:6a:f5:f5:6f:73:63:08:d7:f8:93: 75:3a:9a:94:9d:3f:17:6a:a9:25:99:24:94:9f:93:45:ac:1d: 3e:4d:67:8e:26:77:2e:f1:2b:da:1a:44:1a:d0:01:83:dd:8c: b3:f2:af:7f:33:5f:c6:6c:c9:ea:f9:eb:c6:1d:23:89:cd:83: 58:e9:3b:1c:19:cb:9e:e3:e7:18:f6:d1:e6:85:77:22:86:94: e3:a4:3a:37:9d:1c:da:eb:c6:e0:8c:0b:3f:52:c8:cb:e4:88: f4:47:3b:91:0e:1e:14:dd:f7:31:6b:8c:ea:38:14:c0:6c:31: 57:90:6a:80:6e:4d:4a:65:31:b7:5b:05:ae:d0:e1:ff:0a:ec: 3e:a5:b3:9b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUdKE1aN10648u56o1Gk2pemKs2sAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMzEwNTUwMzNaFw0yNjEyMzAwNTU1MzNaMDMxMTAvBgNV BAMTKDk1RTdBNEYwQUIyMENCNjk3Q0E1MUFDMzJDOTgzRjVFRkRCMzdDODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZp4fMwgrGafZapr/q+3w5qDXh lHmDVk+89do2Ca+WukpxFGkgmw9rvJVASChSJVfcrebujwlQNMI2WbNUd2MUArHD DE/Rwiv2ZWGrNRJ672UWR4dDrAU6ZojjMQmY7MH3J0AouAFexJWfzrYkHcosY7kn QgDuewFlRT9qO94rXRNAvR+4zLUMzTFA7UKm6NG4rB9gR1pqdb9v8cZLETyu/rSE l6eCSZhKB7Q4nHtFqVccdQy755KL0ybXlEMFKtAQPqeOKNnqi4TrmrISu7pxCTTM I4nSx/YXPCo1Fzz6H5gGNGywTFlxJklRw+f03Vl8czeY0KAZme7jLyj/KwRRAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUleek8Ksgy2l8pRrDLJg/Xv2zfIcwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAxNDE4LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUhUU MA0GCSqGSIb3DQEBCwUAA4IBAQBGsaBzwrrWqjNLQGgn4XfZQ9yTEMAkw6JyIg6p Hlwd2b9UPUKWAaBW5HJGPE+fO2BWK8C5FstDQ1fBfU1wxXG1o53nMBGeHa+z4rR1 adW55JlbfgdQrtEh49BuqxHZeJ0dwnfZTUXT47gny1foCLr6lT9cG2r19W9zYwjX +JN1OpqUnT8XaqklmSSUn5NFrB0+TWeOJncu8SvaGkQa0AGD3Yyz8q9/M1/GbMnq +evGHSOJzYNY6TscGcue4+cY9tHmhXcihpTjpDo3nRza68bgjAs/UsjL5Ij0RzuR Dh4U3fcxa4zqOBTAbDFXkGqAbk1KZTG3WwWu0OH/Cuw+pbOb -----END CERTIFICATE-----Generated at Sun Jan 18 08:56:35 2026 by rpki-client