This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS47377.roa File: AS47377.roa (raw, json) Hash identifier: 7aoyp7lg8aDCRyGQcqBnfegAZ248/ZXeBCR+GlRGsow= Subject key identifier: 0A:85:7C:EE:73:41:66:7C:7D:B8:10:AF:9F:24:37:73:C7:05:34:8F Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 2F6B50FCFC47C88681F826EDB6207F7EDA3D469A Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS47377.roa Signing time: Thu 08 Jan 2026 11:00:30 +0000 ROA not before: Thu 08 Jan 2026 10:55:30 +0000 ROA not after: Thu 07 Jan 2027 11:00:30 +0000 asID: 47377 IP address blocks: 82.21.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:6b:50:fc:fc:47:c8:86:81:f8:26:ed:b6:20:7f:7e:da:3d:46:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Jan 8 10:55:30 2026 GMT Not After : Jan 7 11:00:30 2027 GMT Subject: CN=0A857CEE7341667C7DB810AF9F243773C705348F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4a:95:f2:9a:ce:11:97:27:db:84:1a:07:3e: 7f:88:79:bb:14:6b:e1:b4:05:9d:ac:4a:5d:d7:84: 10:5f:36:ee:60:8f:a0:91:bb:be:27:6f:08:04:dc: c3:78:da:c3:b8:1d:b6:c7:94:6c:93:1f:37:4f:e6: a7:00:6d:2d:66:a1:d6:ee:81:1e:36:84:eb:6e:b1: 73:58:cd:56:75:42:42:84:c1:4f:73:66:ec:54:de: 88:af:cd:5f:10:39:fe:29:e4:ab:ad:31:bf:e1:af: 17:ea:ef:bc:15:80:0f:a5:df:40:66:51:cc:a2:c6: 13:f4:04:81:8c:e0:65:24:1b:2d:a6:e6:09:01:93: 90:85:84:59:47:ac:fe:f4:2d:a4:e5:16:78:4d:ec: 5f:ac:ab:e6:76:34:5b:d7:4b:56:bb:73:83:69:29: 5a:19:42:e9:c7:0a:63:2a:23:7c:be:0a:dc:d4:6f: d7:dd:a8:9a:ab:11:16:75:b0:a3:a0:e6:83:6b:44: 23:f9:58:29:dd:8d:6b:30:eb:c0:0e:af:d1:d5:6e: e9:9a:a9:cc:a4:e9:c4:0b:e7:81:fc:88:9e:3e:82: 53:c2:c1:9a:cc:3b:ac:5f:05:5f:d2:4a:e1:87:f0: 27:bb:31:a6:d9:be:09:04:92:cc:2f:1e:8a:91:f5: 89:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:85:7C:EE:73:41:66:7C:7D:B8:10:AF:9F:24:37:73:C7:05:34:8F X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS47377.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.5.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:0e:40:23:5c:82:6b:2d:1c:fe:a1:de:31:3c:82:73:e0:20: 5d:d0:d8:1c:47:ee:df:f7:90:5e:2b:e3:2e:6b:40:88:b8:a7: 06:9d:93:fd:46:5d:25:7a:44:85:79:73:49:e8:82:03:93:59: db:6a:58:b1:b7:c3:a7:2b:87:eb:46:48:13:a6:02:8b:54:ba: d1:c8:4d:b9:6c:61:58:7f:ad:f8:7d:a2:59:45:5b:03:ff:38: 3b:4b:c4:bc:e3:13:e9:26:8c:81:e5:39:9e:d0:eb:23:19:ae: dc:4f:0a:99:98:53:20:9f:39:62:3a:b6:d6:e0:76:df:90:e5: 4f:fc:f7:48:33:e2:cc:5d:e5:6e:08:69:ba:ea:56:db:df:5e: 84:d6:52:5c:94:74:a4:a9:76:3e:e4:1a:74:54:64:3e:a9:dc: af:10:15:7f:29:98:54:c1:94:36:99:bb:59:fd:02:71:9f:f5: 78:98:a7:e7:e2:39:11:f5:b3:9f:59:cf:7e:b1:b5:e9:13:2f: cf:d4:01:a2:7c:68:db:56:a7:9d:d0:2e:c1:5b:50:6b:5f:13: b5:ac:6a:d4:5d:28:54:a7:df:1e:e5:0f:0b:7f:11:a5:52:6b: 23:0e:c5:4a:82:55:74:6b:51:01:4a:aa:ad:eb:47:78:ba:ce: 86:21:63:a5 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUL2tQ/PxHyIaB+CbttiB/fto9RpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNjAxMDgxMDU1MzBaFw0yNzAxMDcxMTAwMzBaMDMxMTAvBgNV BAMTKDBBODU3Q0VFNzM0MTY2N0M3REI4MTBBRjlGMjQzNzczQzcwNTM0OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHSpXyms4RlyfbhBoHPn+IebsU a+G0BZ2sSl3XhBBfNu5gj6CRu74nbwgE3MN42sO4HbbHlGyTHzdP5qcAbS1modbu gR42hOtusXNYzVZ1QkKEwU9zZuxU3oivzV8QOf4p5KutMb/hrxfq77wVgA+l30Bm UcyixhP0BIGM4GUkGy2m5gkBk5CFhFlHrP70LaTlFnhN7F+sq+Z2NFvXS1a7c4Np KVoZQunHCmMqI3y+CtzUb9fdqJqrERZ1sKOg5oNrRCP5WCndjWsw68AOr9HVbuma qcyk6cQL54H8iJ4+glPCwZrMO6xfBV/SSuGH8Ce7MabZvgkEkswvHoqR9YlrAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUCoV87nNBZnx9uBCvnyQ3c8cFNI8wHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNDczNzcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSFQUw DQYJKoZIhvcNAQELBQADggEBAJ0OQCNcgmstHP6h3jE8gnPgIF3Q2BxH7t/3kF4r 4y5rQIi4pwadk/1GXSV6RIV5c0noggOTWdtqWLG3w6crh+tGSBOmAotUutHITbls YVh/rfh9ollFWwP/ODtLxLzjE+kmjIHlOZ7Q6yMZrtxPCpmYUyCfOWI6ttbgdt+Q 5U/890gz4sxd5W4IabrqVtvfXoTWUlyUdKSpdj7kGnRUZD6p3K8QFX8pmFTBlDaZ u1n9AnGf9XiYp+fiORH1s59Zz36xtekTL8/UAaJ8aNtWp53QLsFbUGtfE7WsatRd KFSn3x7lDwt/EaVSayMOxUqCVXRrUQFKqq3rR3i6zoYhY6U= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:22 2026 by rpki-client