This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS54004.roa File: AS54004.roa (raw, json) Hash identifier: mU2JfulXdNMyQj43S0hhKNg2LMcF71p81ELDV6AHIVw= Subject key identifier: 11:57:16:C8:7C:E3:AA:8D:A8:42:DE:07:63:AC:42:9D:F7:A4:27:95 Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Certificate serial: 0794F0184632B915B1C5C45D4B5A2ECE01BE056F Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS54004.roa Signing time: Wed 24 Dec 2025 19:55:32 +0000 ROA not before: Wed 24 Dec 2025 19:50:32 +0000 ROA not after: Wed 23 Dec 2026 19:55:32 +0000 asID: 54004 IP address blocks: 82.21.88.0/22 maxlen: 22 82.22.206.0/24 maxlen: 24 82.22.207.0/24 maxlen: 24 82.25.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:94:f0:18:46:32:b9:15:b1:c5:c4:5d:4b:5a:2e:ce:01:be:05:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01 Validity Not Before: Dec 24 19:50:32 2025 GMT Not After : Dec 23 19:55:32 2026 GMT Subject: CN=115716C87CE3AA8DA842DE0763AC429DF7A42795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b5:10:78:f4:df:4f:f3:67:84:34:bd:34:2c: 29:b0:b9:68:b8:7f:05:8e:7d:6b:51:2f:76:f6:60: bd:e3:04:04:65:77:99:1e:de:69:00:55:65:ce:ac: 30:f9:ea:f2:59:b9:db:df:28:68:6e:d7:37:df:99: f7:39:8e:a2:0f:de:51:84:56:af:d8:a9:b4:ea:4c: bc:66:0f:ea:73:8e:c8:b7:25:fc:95:61:09:c3:3f: b4:15:23:74:0a:3c:12:b8:46:85:ef:6c:5b:87:c3: ec:4a:20:de:16:da:d9:e2:50:8c:22:6c:5c:85:e5: 1b:9a:4c:ed:77:d0:7c:ba:24:90:cf:f2:27:be:fe: ae:5f:1d:e4:48:24:32:b3:1f:c1:61:69:6f:58:fc: b5:ec:dd:e3:aa:e9:5e:3c:f8:1a:98:97:5d:de:2d: d5:e0:2b:e2:77:e4:b7:3c:b5:ab:24:da:1c:ed:f7: 58:2a:84:91:54:44:77:3a:77:3b:4d:1c:2f:0c:13: b7:9a:79:61:dd:d2:bb:50:9c:f2:b5:f3:18:0c:74: 43:38:1f:cf:41:c8:5e:f7:d8:61:fd:a0:14:c6:c4: 2e:90:71:36:aa:d4:20:d9:92:95:96:7f:06:4d:02: 3b:e5:3f:8e:79:2f:c3:b0:c6:91:6a:f9:a2:d5:50: 29:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:57:16:C8:7C:E3:AA:8D:A8:42:DE:07:63:AC:42:9D:F7:A4:27:95 X509v3 Authority Key Identifier: keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS54004.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.21.88.0/22 82.22.206.0/23 82.25.192.0/22 Signature Algorithm: sha256WithRSAEncryption 68:03:98:d8:2e:2e:16:94:23:f2:c2:ff:25:62:9f:cb:ad:50: b8:f7:ef:5d:1c:8a:fd:47:a9:15:a1:49:e0:98:fa:76:af:47: b5:19:54:ae:d5:fd:a0:94:8a:5b:07:36:eb:27:77:ac:54:05: 55:27:22:fe:e6:b3:a3:4d:66:fe:9c:f1:5b:cd:65:44:b2:4c: 28:17:45:6a:6a:56:03:ec:2f:5a:d3:86:5b:6e:94:e4:6f:ca: 4e:08:78:b2:f1:41:c0:24:b9:ab:a2:00:03:96:1e:7e:83:1d: 4b:30:61:15:07:f9:7c:b2:05:61:15:d3:c4:dd:02:63:24:fa: 8b:15:68:0e:69:b8:0c:67:2f:e0:07:c2:bd:2a:7f:a1:0c:35: d1:08:b9:ac:5f:e9:aa:a0:eb:81:8c:ba:ed:ff:9c:3c:73:68: 1d:22:31:69:41:4a:ab:b7:ac:2b:da:61:04:5d:85:5b:5e:1f: e1:99:87:b6:c0:f1:b0:d8:63:d5:0a:0d:79:12:b2:8a:46:2c: 70:d5:8e:a8:2b:88:64:ec:fe:ce:a8:35:dc:62:ed:24:53:ea: a3:9c:3d:d3:94:fa:d8:d2:8e:a7:8d:24:37:de:8a:74:5b:b2: b0:67:75:a0:0f:91:cb:5f:11:bf:e0:71:2b:12:c7:af:b8:4b: 22:16:6c:44 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUB5TwGEYyuRWxxcRdS1ouzgG+BW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni M2NmZGQwMTAeFw0yNTEyMjQxOTUwMzJaFw0yNjEyMjMxOTU1MzJaMDMxMTAvBgNV BAMTKDExNTcxNkM4N0NFM0FBOERBODQyREUwNzYzQUM0MjlERjdBNDI3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9tRB49N9P82eENL00LCmwuWi4 fwWOfWtRL3b2YL3jBARld5ke3mkAVWXOrDD56vJZudvfKGhu1zffmfc5jqIP3lGE Vq/YqbTqTLxmD+pzjsi3JfyVYQnDP7QVI3QKPBK4RoXvbFuHw+xKIN4W2tniUIwi bFyF5RuaTO130Hy6JJDP8ie+/q5fHeRIJDKzH8FhaW9Y/LXs3eOq6V48+BqYl13e LdXgK+J35Lc8task2hzt91gqhJFURHc6dztNHC8ME7eaeWHd0rtQnPK18xgMdEM4 H89ByF732GH9oBTGxC6QcTaq1CDZkpWWfwZNAjvlP455L8OwxpFq+aLVUCklAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUEVcWyHzjqo2oQt4HY6xCnfekJ5UwHwYDVR0j BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTNTQwMDQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAJSFVgD BAFSFs4DBAJSGcAwDQYJKoZIhvcNAQELBQADggEBAGgDmNguLhaUI/LC/yVin8ut ULj3710civ1HqRWhSeCY+navR7UZVK7V/aCUilsHNusnd6xUBVUnIv7ms6NNZv6c 8VvNZUSyTCgXRWpqVgPsL1rThltulORvyk4IeLLxQcAkuauiAAOWHn6DHUswYRUH +XyyBWEV08TdAmMk+osVaA5puAxnL+AHwr0qf6EMNdEIuaxf6aqg64GMuu3/nDxz aB0iMWlBSqu3rCvaYQRdhVteH+GZh7bA8bDYY9UKDXkSsopGLHDVjqgriGTs/s6o Ndxi7SRT6qOcPdOU+tjSjqeNJDfeinRbsrBndaAPkctfEb/gcSsSx6+4SyIWbEQ= -----END CERTIFICATE-----Generated at Sun Jan 18 08:56:40 2026 by rpki-client