This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401776.roa File: AS401776.roa (raw, json) Hash identifier: Mq6s/Ia642Os6RjLXicUKUASrrCsfXQw800O+nJgkV4= Subject key identifier: 3A:19:DE:47:FC:61:69:08:CC:11:75:2A:77:D0:B2:FC:4A:4C:6D:E6 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 0E1D7A1A23AA7E82F7057463AE7BFD5F1807FF35 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401776.roa Signing time: Sat 03 Jan 2026 16:55:17 +0000 ROA not before: Sat 03 Jan 2026 16:50:17 +0000 ROA not after: Sat 02 Jan 2027 16:55:17 +0000 asID: 401776 IP address blocks: 82.21.199.0/24 maxlen: 24 82.22.61.0/24 maxlen: 24 82.24.144.0/24 maxlen: 24 82.27.3.0/24 maxlen: 24 82.29.103.0/24 maxlen: 24 82.38.169.0/24 maxlen: 24 82.38.181.0/24 maxlen: 24 82.39.170.0/24 maxlen: 24 82.41.20.0/24 maxlen: 24 82.41.21.0/24 maxlen: 24 82.41.72.0/24 maxlen: 24 82.41.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:1d:7a:1a:23:aa:7e:82:f7:05:74:63:ae:7b:fd:5f:18:07:ff:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 3 16:50:17 2026 GMT Not After : Jan 2 16:55:17 2027 GMT Subject: CN=3A19DE47FC616908CC11752A77D0B2FC4A4C6DE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:91:eb:10:b5:fa:8b:5b:88:8e:e3:0f:8a:20: 91:ee:06:a0:d9:b9:fa:a1:f2:a9:87:c2:10:ee:11: 73:e2:c4:56:c3:a4:c6:91:12:e4:7e:3c:9b:ab:9a: ed:60:c8:0b:b5:9e:e6:18:95:ea:35:b9:7f:72:0d: d9:f7:18:95:f8:41:cc:43:ac:ab:67:d4:9d:5e:3d: 0c:31:9f:38:fc:00:01:a8:a6:3e:fc:27:0f:6f:be: d5:d6:88:14:b9:a9:33:58:b6:1b:08:a7:7e:2d:af: cb:9d:dd:21:e3:b5:25:1c:9c:e7:4b:7d:09:4a:d6: b1:8b:59:7a:a1:5c:df:17:c9:53:60:d0:eb:78:40: c3:31:41:2d:c4:47:32:08:44:99:9c:16:d9:35:aa: 97:b0:45:86:16:b6:ba:f6:81:7f:91:45:7c:49:65: 27:cf:04:ce:b8:7b:b1:80:17:de:f5:c9:ea:bd:9d: ca:73:82:44:b4:2f:83:61:d2:d8:5c:f2:81:31:d0: 16:3d:92:40:92:cb:e4:ba:9c:fc:3a:56:cf:84:06: a9:be:9d:ec:69:25:9e:e2:c3:b8:4b:54:14:09:35: 06:64:04:e5:b7:4c:49:1b:b5:d8:17:34:2c:16:34: ed:4e:1c:c7:37:f5:6e:7f:37:3a:e5:a4:a5:35:ae: f2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:19:DE:47:FC:61:69:08:CC:11:75:2A:77:D0:B2:FC:4A:4C:6D:E6 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS401776.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.199.0/24 82.22.61.0/24 82.24.144.0/24 82.27.3.0/24 82.29.103.0/24 82.38.169.0/24 82.38.181.0/24 82.39.170.0/24 82.41.20.0/23 82.41.72.0/24 82.41.98.0/24 Signature Algorithm: sha256WithRSAEncryption 73:08:97:d3:bf:df:e1:95:7b:01:09:8e:00:ed:bc:0e:66:3c: de:de:af:a8:44:36:9e:c2:70:50:fc:9d:ce:69:b7:09:9d:18: cf:8d:c5:bf:58:10:1d:5b:92:82:b6:3a:68:bf:6c:1a:4e:91: 40:fd:ba:e0:6b:7c:2b:16:77:7d:ff:c7:7d:60:e8:45:2b:ee: 69:c7:ef:b9:43:4b:84:21:d8:e7:64:fb:61:e6:4c:dc:88:c1: a1:b2:d0:4f:8c:f5:71:1b:3f:04:04:6f:ca:2b:a4:30:eb:51: 90:28:eb:5d:04:96:85:f2:e2:db:e8:b0:87:03:56:29:54:2e: 8f:54:ca:bb:1f:b9:82:3c:e7:97:41:d6:1f:03:ab:3a:10:5d: 4e:28:b3:e7:d7:90:11:98:59:e3:7f:78:5f:7c:c2:e8:f8:8e: d4:ff:ac:09:42:c3:12:6c:8d:ef:cf:71:f8:d0:33:a0:26:a0: 5c:c0:5f:07:69:80:8e:eb:60:82:ed:20:65:33:30:79:53:7b: 91:1e:7f:e4:89:ec:42:8c:60:50:97:28:23:de:14:4b:5a:19: 37:d3:1a:78:89:cc:14:10:f2:0b:0c:eb:39:95:70:0a:e6:7d: dc:ad:ee:58:d4:a0:e7:14:74:54:16:08:56:ea:63:58:df:c4: dc:b7:75:23 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUDh16GiOqfoL3BXRjrnv9XxgH/zUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMDMxNjUwMTdaFw0yNzAxMDIxNjU1MTdaMDMxMTAvBgNV BAMTKDNBMTlERTQ3RkM2MTY5MDhDQzExNzUyQTc3RDBCMkZDNEE0QzZERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfkesQtfqLW4iO4w+KIJHuBqDZ ufqh8qmHwhDuEXPixFbDpMaREuR+PJurmu1gyAu1nuYYleo1uX9yDdn3GJX4QcxD rKtn1J1ePQwxnzj8AAGopj78Jw9vvtXWiBS5qTNYthsIp34tr8ud3SHjtSUcnOdL fQlK1rGLWXqhXN8XyVNg0Ot4QMMxQS3ERzIIRJmcFtk1qpewRYYWtrr2gX+RRXxJ ZSfPBM64e7GAF971yeq9ncpzgkS0L4Nh0thc8oEx0BY9kkCSy+S6nPw6Vs+EBqm+ nexpJZ7iw7hLVBQJNQZkBOW3TEkbtdgXNCwWNO1OHMc39W5/NzrlpKU1rvIvAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUOhneR/xhaQjMEXUqd9Cy/EpMbeYwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDAxNzc2LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAUhXH AwQAUhY9AwQAUhiQAwQAUhsDAwQAUh1nAwQAUiapAwQAUia1AwQAUieqAwQBUikU AwQAUilIAwQAUiliMA0GCSqGSIb3DQEBCwUAA4IBAQBzCJfTv9/hlXsBCY4A7bwO Zjze3q+oRDaewnBQ/J3OabcJnRjPjcW/WBAdW5KCtjpov2waTpFA/brga3wrFnd9 /8d9YOhFK+5px++5Q0uEIdjnZPth5kzciMGhstBPjPVxGz8EBG/KK6Qw61GQKOtd BJaF8uLb6LCHA1YpVC6PVMq7H7mCPOeXQdYfA6s6EF1OKLPn15ARmFnjf3hffMLo +I7U/6wJQsMSbI3vz3H40DOgJqBcwF8HaYCO62CC7SBlMzB5U3uRHn/kiexCjGBQ lygj3hRLWhk30xp4icwUEPILDOs5lXAK5n3cre5Y1KDnFHRUFghW6mNY38Tct3Uj -----END CERTIFICATE-----Generated at Sun Jan 18 08:56:45 2026 by rpki-client