This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51847.roa File: AS51847.roa (raw, json) Hash identifier: CPXc85BbKLNxqFF3Wgo31NzeG47x3xZytf8jW6e9qwc= Subject key identifier: AF:CB:A0:15:4E:87:A0:E0:C7:40:20:5B:B2:B7:9F:17:A3:F7:15:CB Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 32CB067D46DD3C61416F1DD5CE7C52EA064FC3E6 Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51847.roa Signing time: Sat 29 Nov 2025 00:57:55 +0000 ROA not before: Sat 29 Nov 2025 00:52:55 +0000 ROA not after: Sat 28 Nov 2026 00:57:55 +0000 asID: 51847 IP address blocks: 82.21.206.0/24 maxlen: 24 82.22.78.0/24 maxlen: 24 82.38.12.0/24 maxlen: 24 2a13:9500:f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 15:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:cb:06:7d:46:dd:3c:61:41:6f:1d:d5:ce:7c:52:ea:06:4f:c3:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Nov 29 00:52:55 2025 GMT Not After : Nov 28 00:57:55 2026 GMT Subject: CN=AFCBA0154E87A0E0C740205BB2B79F17A3F715CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:1b:ea:68:fb:c0:27:b4:95:b3:46:b2:a7: b6:2d:20:3e:cc:c9:c0:c9:74:f5:3d:a1:e9:e7:52: 7f:39:57:07:a0:4e:01:a4:4e:08:57:3a:b8:9d:2f: 7b:d7:0e:84:95:b6:ff:1d:71:da:2a:eb:b7:d5:35: 26:6e:78:ef:67:92:dc:80:34:da:c0:8c:3f:23:82: f0:e0:33:b3:c5:39:37:ed:76:13:a6:5c:24:18:7e: 15:79:19:ba:28:82:f1:d9:9a:e5:c5:80:54:af:d1: 98:67:50:8f:dd:80:dc:8f:7c:31:0b:06:16:45:c2: 91:78:62:d7:ff:cd:f6:7b:2d:8b:a6:62:08:85:22: 8e:07:c7:4c:86:ab:da:59:6e:29:7d:7d:2a:bf:94: fc:20:a9:74:95:bf:b5:1d:52:f6:79:15:69:d8:10: ab:c0:ae:32:39:e1:c8:bf:cb:b5:0a:70:bb:0e:cd: 1e:21:cf:f1:b3:87:72:5b:2b:d8:8b:bb:02:4e:9e: 73:24:b6:40:e2:6d:bb:3b:cb:1e:7e:16:4d:3a:0f: 0f:79:ed:82:5c:fc:3d:ee:e4:d6:cc:09:21:4a:b3: 0f:44:08:cc:47:3a:4c:84:fb:81:1e:68:ff:dd:a6: 10:e4:43:81:0f:7c:10:b6:39:29:49:0c:57:d6:8e: 21:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CB:A0:15:4E:87:A0:E0:C7:40:20:5B:B2:B7:9F:17:A3:F7:15:CB X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51847.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.206.0/24 82.22.78.0/24 82.38.12.0/24 IPv6: 2a13:9500:f0::/48 Signature Algorithm: sha256WithRSAEncryption 31:90:ec:76:ed:68:ca:7c:aa:be:a1:6c:7d:41:75:6b:f7:63: dd:c1:73:e9:32:3e:c5:3c:a4:33:1c:52:ad:8b:87:2e:66:1d: 88:e2:de:5e:ca:cd:bf:a2:ae:37:eb:3b:2d:37:56:19:f9:bd: 9e:0b:27:ef:fa:f6:fb:c2:a5:59:df:cf:dc:39:00:21:a2:81: 99:1c:60:e6:ac:ac:33:27:d6:8a:de:46:ef:d5:f2:67:fb:8b: 14:6d:27:a9:fe:de:29:b2:2c:30:e3:87:4f:b9:2e:0c:8e:5e: 23:13:68:19:7d:dc:2f:67:30:76:32:35:a8:36:29:57:d6:91: 30:6b:04:40:1d:d5:aa:d0:4b:f1:75:93:54:07:99:d3:1f:88: 5d:d1:1c:61:81:df:1c:4b:dd:87:9e:58:36:bc:df:f6:c7:26: 2a:2d:46:9f:bc:84:36:01:e7:2a:fc:c7:35:a9:ac:2c:dc:af: d9:de:8c:4b:43:2f:53:6b:d5:ab:aa:b1:d5:5f:e2:59:e7:8f: 19:07:4b:34:e4:15:bf:48:a0:23:1d:39:43:d9:ad:68:05:61: 16:64:5c:30:b4:47:ae:04:be:0b:3a:56:58:81:61:07:53:ff: 5f:9b:df:22:78:26:55:73:de:89:13:65:ae:07:dc:11:80:7c: 57:e8:d5:e3 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUMssGfUbdPGFBbx3VznxS6gZPw+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTExMjkwMDUyNTVaFw0yNjExMjgwMDU3NTVaMDMxMTAvBgNV BAMTKEFGQ0JBMDE1NEU4N0EwRTBDNzQwMjA1QkIyQjc5RjE3QTNGNzE1Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhxvqaPvAJ7SVs0ayp7YtID7M ycDJdPU9oennUn85VwegTgGkTghXOridL3vXDoSVtv8dcdoq67fVNSZueO9nktyA NNrAjD8jgvDgM7PFOTftdhOmXCQYfhV5GboogvHZmuXFgFSv0ZhnUI/dgNyPfDEL BhZFwpF4Ytf/zfZ7LYumYgiFIo4Hx0yGq9pZbil9fSq/lPwgqXSVv7UdUvZ5FWnY EKvArjI54ci/y7UKcLsOzR4hz/Gzh3JbK9iLuwJOnnMktkDibbs7yx5+Fk06Dw95 7YJc/D3u5NbMCSFKsw9ECMxHOkyE+4EeaP/dphDkQ4EPfBC2OSlJDFfWjiG3AgMB AAGjggImMIICIjAdBgNVHQ4EFgQUr8ugFU6HoODHQCBbsrefF6P3FcswHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNTE4NDcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBIDBABSFc4D BABSFk4DBABSJgwwDwQCAAIwCQMHACoTlQAA8DANBgkqhkiG9w0BAQsFAAOCAQEA MZDsdu1oynyqvqFsfUF1a/dj3cFz6TI+xTykMxxSrYuHLmYdiOLeXsrNv6KuN+s7 LTdWGfm9ngsn7/r2+8KlWd/P3DkAIaKBmRxg5qysMyfWit5G79XyZ/uLFG0nqf7e KbIsMOOHT7kuDI5eIxNoGX3cL2cwdjI1qDYpV9aRMGsEQB3VqtBL8XWTVAeZ0x+I XdEcYYHfHEvdh55YNrzf9scmKi1Gn7yENgHnKvzHNamsLNyv2d6MS0MvU2vVq6qx 1V/iWeePGQdLNOQVv0igIx05Q9mtaAVhFmRcMLRHrgS+CzpWWIFhB1P/X5vfIngm VXPeiRNlrgfcEYB8V+jV4w== -----END CERTIFICATE-----Generated at Wed Dec 3 18:52:40 2025 by rpki-client