This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51852.roa
File: AS51852.roa (raw, json)
Hash identifier: VpkFHEvvyWM/G+dQE+2BBtPGdZ5j2g+yUmcIp10wZjg=
Subject key identifier: C6:D2:EC:AE:A2:81:F2:AD:19:35:A3:B3:33:82:15:AD:86:AF:9E:57
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4EFAFB414FBD000DE0840CB40A51D81D342547F6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51852.roa
Signing time: Fri 28 Nov 2025 13:21:37 +0000
ROA not before: Fri 28 Nov 2025 13:16:37 +0000
ROA not after: Fri 27 Nov 2026 13:21:37 +0000
asID: 51852
IP address blocks: 82.22.22.0/24 maxlen: 24
82.39.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Dec 2025 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:fa:fb:41:4f:bd:00:0d:e0:84:0c:b4:0a:51:d8:1d:34:25:47:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Nov 28 13:16:37 2025 GMT
Not After : Nov 27 13:21:37 2026 GMT
Subject: CN=C6D2ECAEA281F2AD1935A3B3338215AD86AF9E57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c5:d9:0e:ce:4b:20:b7:99:f1:8d:11:83:73:
d8:4d:5e:9a:26:a9:61:e1:84:40:46:83:77:f1:63:
4c:37:2e:4f:ee:94:9f:0a:12:84:b9:94:a8:4d:41:
52:62:09:ad:86:ec:2e:97:7a:49:ad:0a:61:ee:33:
87:db:3e:40:3f:8f:3a:03:39:8b:51:a8:6f:fb:73:
33:1d:45:7e:d3:b4:36:4e:b8:91:aa:01:c0:23:a9:
19:c5:49:d2:da:22:99:f8:47:96:00:30:60:dc:bf:
3a:62:27:6f:b5:cb:95:8a:cd:3a:d2:a6:7b:9e:d3:
52:c9:6f:6a:a6:e0:4e:4c:02:d2:13:d1:14:90:56:
8b:44:3f:d6:dc:d0:47:ca:5b:d4:fc:0b:20:6b:05:
d4:06:69:04:7c:f9:bd:22:d3:61:0b:91:08:84:69:
93:54:71:6d:45:1f:cd:94:34:8e:41:eb:63:8e:25:
c8:6a:f4:59:9b:3b:1a:97:2a:2c:d9:f0:1b:c1:9a:
b6:ba:98:b2:43:98:cb:d7:a3:02:db:38:34:c5:2d:
cb:0f:9a:6b:3d:b9:98:25:8b:7b:c1:63:5a:ca:54:
89:74:98:d1:3e:f7:0d:4d:9b:ef:01:2e:1a:49:fa:
26:c2:e5:5e:75:d3:23:14:ed:a3:77:4c:e2:89:22:
65:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D2:EC:AE:A2:81:F2:AD:19:35:A3:B3:33:82:15:AD:86:AF:9E:57
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS51852.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.22.22.0/24
82.39.101.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:97:96:7e:5a:48:0c:61:00:5d:a1:35:73:b8:0a:39:f6:22:
f3:82:5c:26:00:ec:6b:a4:08:b6:2c:33:c2:48:9a:b6:14:49:
47:9d:0a:5d:d7:fd:07:1c:59:d8:9a:a6:c4:38:ba:e4:99:d2:
58:02:2a:1e:cc:d4:c0:20:ec:b3:be:ed:7f:3a:03:0a:60:10:
21:7c:21:51:49:91:15:0b:39:dc:dc:23:15:1d:09:de:8e:e5:
96:fc:08:c9:e9:41:e8:2a:13:d2:82:b2:6b:f9:ae:c7:36:71:
a2:43:78:e8:4b:22:4d:65:09:93:4d:9b:9b:20:08:af:01:44:
0f:bc:fd:2b:c8:2c:ad:83:a8:cd:e5:cd:a6:75:a7:23:78:5b:
dc:fe:6e:2e:e7:18:cd:0d:b9:53:08:61:f3:40:17:a6:e4:55:
76:36:e6:93:43:0d:5c:5b:14:27:36:9d:75:97:47:84:bb:64:
5b:57:40:c6:38:2f:7f:1a:69:d6:de:12:75:3c:83:1d:40:45:
16:29:58:6d:f9:da:d0:fa:95:9c:27:33:2e:eb:09:94:e9:90:
f3:c2:15:7d:b8:f7:f2:0d:5e:5a:94:a9:1e:56:e8:dd:e4:04:
e7:9b:1d:ae:27:56:da:72:59:c9:1c:c6:dc:36:21:f1:60:0a:
40:8b:95:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 05:58:58 2025 by rpki-client